./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4183377928 <...> Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. execve("./syz-executor4183377928", ["./syz-executor4183377928"], 0x7ffde6aa1790 /* 10 vars */) = 0 brk(NULL) = 0x555556031000 brk(0x555556031d40) = 0x555556031d40 arch_prctl(ARCH_SET_FS, 0x5555560313c0) = 0 set_tid_address(0x555556031690) = 5066 set_robust_list(0x5555560316a0, 24) = 0 rseq(0x555556031ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4183377928", 4096) = 28 getrandom("\x7a\x44\xb8\xf8\xfb\xe5\x83\x25", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556031d40 brk(0x555556052d40) = 0x555556052d40 brk(0x555556053000) = 0x555556053000 mprotect(0x7ff63f398000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 5066 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 write(3, "100", 3) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 write(3, "7 4 1 3", 7) = 7 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 write(3, "5066", 4) = 4 close(3) = 0 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 [ 55.050828][ T5066] cgroup: Unknown subsys name 'net' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) [ 55.194566][ T5066] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 swapoff("./swap-file") = -1 ENOENT (No such file or directory) unlink("./swap-file") = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "./swap-file", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 3 fallocate(3, FALLOC_FL_ZERO_RANGE, 0, 128000000) = 0 close(3) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff63f2c5000 rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0 clone3({flags=CLONE_VM|CLONE_VFORK, exit_signal=SIGCHLD, stack=0x7ff63f2c5000, stack_size=0x9000}, 88./strace-static-x86_64: Process 5067 attached [pid 5067] rt_sigprocmask(SIG_BLOCK, NULL, ~[KILL STOP], 8) = 0 [pid 5067] rt_sigaction(SIGHUP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGHUP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, 8) = 0 [pid 5067] rt_sigaction(SIGILL, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGILL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGTRAP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGTRAP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGABRT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGABRT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGBUS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGBUS, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGFPE, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGFPE, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGUSR1, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGUSR1, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGSEGV, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGSEGV, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGUSR2, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGUSR2, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGPIPE, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGPIPE, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGALRM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGALRM, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGTERM, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGSTKFLT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGSTKFLT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGCHLD, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGCHLD, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGCONT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGCONT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGTSTP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGTSTP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGTTIN, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGTTIN, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGTTOU, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGTTOU, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGURG, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGURG, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGXCPU, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGXCPU, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGXFSZ, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGXFSZ, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGVTALRM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGVTALRM, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGPROF, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGPROF, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGWINCH, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGWINCH, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGIO, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGIO, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGPWR, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGPWR, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGSYS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGSYS, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_2, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_2, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_3, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_3, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_4, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_4, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_5, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_5, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_6, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_6, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_7, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_7, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_8, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_8, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_9, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_9, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_10, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_10, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_11, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_11, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_12, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_12, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_13, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_13, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_14, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_14, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_15, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_15, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_16, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_16, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_17, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_17, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_18, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_18, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_19, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_19, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_20, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_20, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_21, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_21, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_22, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_22, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_23, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_23, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_24, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_24, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_25, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_25, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_26, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_26, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_27, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_27, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_28, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_28, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_29, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_29, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_30, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_30, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_31, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_31, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGRT_32, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGRT_32, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 [pid 5067] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5067] execve("/bin/sh", ["sh", "-c", "mkswap ./swap-file"], 0x7fff7ff76a58 /* 10 vars */ [pid 5066] <... clone3 resumed>) = 5067 [pid 5066] munmap(0x7ff63f2c5000, 36864) = 0 [pid 5066] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0 [pid 5067] <... execve resumed>) = 0 [pid 5067] brk(NULL) = 0x5585d776f000 [pid 5067] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3b3ab74000 [pid 5067] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3", 0x7ffe05112360, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2", 0x7ffe05112360, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/tls/x86_64/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/tls/x86_64/x86_64", 0x7ffe05112360, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/tls/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/tls/x86_64", 0x7ffe05112360, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/tls/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/tls/x86_64", 0x7ffe05112360, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/tls/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/tls", 0x7ffe05112360, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/x86_64/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/x86_64/x86_64", 0x7ffe05112360, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/x86_64", 0x7ffe05112360, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/x86_64", 0x7ffe05112360, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5067] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x70\x08\x01\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x28\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\xed\x00\x00"..., 832) = 832 [pid 5067] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 778504) = 48 [pid 5067] newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=792936, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mmap(NULL, 796968, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3b3aab1000 [pid 5067] mmap(0x7f3b3aac0000, 557056, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7f3b3aac0000 [pid 5067] mmap(0x7f3b3ab48000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x97000) = 0x7f3b3ab48000 [pid 5067] mmap(0x7f3b3ab70000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f3b3ab70000 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 5067] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x8c\x87\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x28\x32\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3c\x00\x3b\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 5067] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 5067] pread64(3, "\x04\x00\x00\x00\x30\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x02\x80\x00\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x3b\x08\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00", 64, 848) = 64 [pid 5067] pread64(3, "\x04\x00\x00\x00\x10\x00\x00\x00\x01\x00\x00\x00\x47\x4e\x55\x00\x00\x00\x00\x00\x04\x00\x00\x00\x13\x00\x00\x00\x00\x00\x00\x00", 32, 912) = 32 [pid 5067] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1720616, ...}, AT_EMPTY_PATH) = 0 [pid 5067] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 5067] mmap(NULL, 1773008, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3b3a900000 [pid 5067] mmap(0x7f3b3a928000, 1191936, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f3b3a928000 [pid 5067] mmap(0x7f3b3aa4b000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14b000) = 0x7f3b3aa4b000 [pid 5067] mmap(0x7f3b3aa9e000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x19d000) = 0x7f3b3aa9e000 [pid 5067] mmap(0x7f3b3aaa4000, 52688, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f3b3aaa4000 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 5067] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x58\x33\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x90\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1c\x00\x1b\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x2e\x00\x00"..., 832) = 832 [pid 5067] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=51344, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mmap(NULL, 63624, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3b3a8f0000 [pid 5067] mmap(0x7f3b3a8f3000, 24576, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f3b3a8f3000 [pid 5067] mmap(0x7f3b3a8f9000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7f3b3a8f9000 [pid 5067] mmap(0x7f3b3a8fc000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f3b3a8fc000 [pid 5067] mmap(0x7f3b3a8fe000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f3b3a8fe000 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3", 0x7ffe05112300, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2", 0x7ffe05112300, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/tls/x86_64/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/tls/x86_64/x86_64", 0x7ffe05112300, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/tls/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/tls/x86_64", 0x7ffe05112300, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/tls/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/tls/x86_64", 0x7ffe05112300, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/tls/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/tls", 0x7ffe05112300, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/x86_64/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/x86_64/x86_64", 0x7ffe05112300, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/x86_64", 0x7ffe05112300, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/x86_64", 0x7ffe05112300, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 5067] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x88\x7f\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x70\x31\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1f\x00\x1e\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x68\x6f\x00\x00"..., 832) = 832 [pid 5067] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 138152) = 48 [pid 5067] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=145712, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mmap(NULL, 157200, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3b3a8c9000 [pid 5067] mprotect(0x7f3b3a8d0000, 114688, PROT_NONE) = 0 [pid 5067] mmap(0x7f3b3a8d0000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f3b3a8d0000 [pid 5067] mmap(0x7f3b3a8e4000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1b000) = 0x7f3b3a8e4000 [pid 5067] mmap(0x7f3b3a8ec000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7f3b3a8ec000 [pid 5067] mmap(0x7f3b3a8ee000, 5648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f3b3a8ee000 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5067] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf8\x21\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x50\x32\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x1f\x00\x00"..., 832) = 832 [pid 5067] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 336112) = 48 [pid 5067] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=342224, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mmap(NULL, 344456, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3b3a874000 [pid 5067] mmap(0x7f3b3a876000, 180224, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f3b3a876000 [pid 5067] mmap(0x7f3b3a8a2000, 151552, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2e000) = 0x7f3b3a8a2000 [pid 5067] mmap(0x7f3b3a8c7000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x52000) = 0x7f3b3a8c7000 [pid 5067] close(3) = 0 [pid 5067] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3b3a872000 [pid 5067] arch_prctl(ARCH_SET_FS, 0x7f3b3a873380) = 0 [pid 5067] set_tid_address(0x7f3b3a873650) = 5067 [pid 5067] set_robust_list(0x7f3b3a873660, 24) = 0 [pid 5067] rseq(0x7f3b3a873d20, 0x20, 0, 0x53053053) = 0 [pid 5067] mprotect(0x7f3b3aa9e000, 16384, PROT_READ) = 0 [pid 5067] mprotect(0x7f3b3a8c7000, 4096, PROT_READ) = 0 [pid 5067] mprotect(0x7f3b3a8ec000, 4096, PROT_READ) = 0 [pid 5067] mprotect(0x7f3b3a8fc000, 4096, PROT_READ) = 0 [pid 5067] mprotect(0x7f3b3ab70000, 12288, PROT_READ) = 0 [pid 5067] mprotect(0x5585d6bb8000, 4096, PROT_READ) = 0 [pid 5067] mprotect(0x7f3b3aba3000, 8192, PROT_READ) = 0 [pid 5067] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 5067] statfs("/sys/fs/selinux", 0x7ffe051130b0) = -1 ENOENT (No such file or directory) [pid 5067] statfs("/selinux", 0x7ffe051130b0) = -1 ENOENT (No such file or directory) [pid 5067] getrandom("\xb3\xa3\x03\x1f\x57\x5a\x66\x80", 8, GRND_NONBLOCK) = 8 [pid 5067] brk(NULL) = 0x5585d776f000 [pid 5067] brk(0x5585d7790000) = 0x5585d7790000 [pid 5067] openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5067] read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tbdev\nnodev\tproc\nnodev\tcgroup\nnodev\tcgroup2\nnodev\tcpuset\nnodev\tdevtmpfs"..., 1024) = 829 [pid 5067] read(3, "", 1024) = 0 [pid 5067] close(3) = 0 [pid 5067] access("/etc/selinux/config", F_OK) = 0 [pid 5067] getpid() = 5067 [pid 5067] rt_sigaction(SIGCHLD, {sa_handler=0x7f3b3aaf3c61, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f3b3a937ad0}, NULL, 8) = 0 [pid 5067] getppid() = 5066 [pid 5067] uname({sysname="Linux", nodename="syzkaller", ...}) = 0 [pid 5067] newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 5067] newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 5067] rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGINT, {sa_handler=0x7f3b3aaf3c61, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f3b3a937ad0}, NULL, 8) = 0 [pid 5067] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 5067] newfstatat(AT_FDCWD, "/bin/mkswap", 0x7ffe05112be8, 0) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/sbin/mkswap", {st_mode=S_IFREG|0755, st_size=14248, ...}, 0) = 0 [pid 5067] execve("/sbin/mkswap", ["mkswap", "./swap-file"], 0x5585d776fd40 /* 10 vars */) = 0 [pid 5067] brk(NULL) = 0x5640360d4000 [pid 5067] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fced0ab8000 [pid 5067] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3", 0x7fff9e5b25a0, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2", 0x7fff9e5b25a0, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/tls/x86_64/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/tls/x86_64/x86_64", 0x7fff9e5b25a0, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/tls/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/tls/x86_64", 0x7fff9e5b25a0, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/tls/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/tls/x86_64", 0x7fff9e5b25a0, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/tls/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/tls", 0x7fff9e5b25a0, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/x86_64/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/x86_64/x86_64", 0x7fff9e5b25a0, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/x86_64", 0x7fff9e5b25a0, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/lib64/x86_64", 0x7fff9e5b25a0, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/lib64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5067] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x70\x08\x01\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x28\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\xed\x00\x00"..., 832) = 832 [pid 5067] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 778504) = 48 [pid 5067] newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=792936, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mmap(NULL, 796968, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fced09f5000 [pid 5067] mmap(0x7fced0a04000, 557056, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7fced0a04000 [pid 5067] mmap(0x7fced0a8c000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x97000) = 0x7fced0a8c000 [pid 5067] mmap(0x7fced0ab4000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7fced0ab4000 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 5067] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x8c\x87\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x28\x32\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3c\x00\x3b\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 5067] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 5067] pread64(3, "\x04\x00\x00\x00\x30\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x02\x80\x00\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x3b\x08\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00", 64, 848) = 64 [pid 5067] pread64(3, "\x04\x00\x00\x00\x10\x00\x00\x00\x01\x00\x00\x00\x47\x4e\x55\x00\x00\x00\x00\x00\x04\x00\x00\x00\x13\x00\x00\x00\x00\x00\x00\x00", 32, 912) = 32 [pid 5067] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1720616, ...}, AT_EMPTY_PATH) = 0 [pid 5067] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 5067] mmap(NULL, 1773008, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fced0844000 [pid 5067] mmap(0x7fced086c000, 1191936, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7fced086c000 [pid 5067] mmap(0x7fced098f000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14b000) = 0x7fced098f000 [pid 5067] mmap(0x7fced09e2000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x19d000) = 0x7fced09e2000 [pid 5067] mmap(0x7fced09e8000, 52688, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fced09e8000 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 5067] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x58\x33\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x90\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1c\x00\x1b\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x2e\x00\x00"..., 832) = 832 [pid 5067] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=51344, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mmap(NULL, 63624, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fced0834000 [pid 5067] mmap(0x7fced0837000, 24576, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fced0837000 [pid 5067] mmap(0x7fced083d000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7fced083d000 [pid 5067] mmap(0x7fced0840000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7fced0840000 [pid 5067] mmap(0x7fced0842000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fced0842000 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3", 0x7fff9e5b2540, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2", 0x7fff9e5b2540, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/tls/x86_64/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/tls/x86_64/x86_64", 0x7fff9e5b2540, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/tls/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/tls/x86_64", 0x7fff9e5b2540, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/tls/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/tls/x86_64", 0x7fff9e5b2540, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/tls/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/tls", 0x7fff9e5b2540, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/x86_64/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/x86_64/x86_64", 0x7fff9e5b2540, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/x86_64", 0x7fff9e5b2540, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] newfstatat(AT_FDCWD, "/usr/lib64/x86_64", 0x7fff9e5b2540, 0) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 5067] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x88\x7f\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x70\x31\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1f\x00\x1e\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x68\x6f\x00\x00"..., 832) = 832 [pid 5067] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 138152) = 48 [pid 5067] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=145712, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mmap(NULL, 157200, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fced080d000 [pid 5067] mprotect(0x7fced0814000, 114688, PROT_NONE) = 0 [pid 5067] mmap(0x7fced0814000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7fced0814000 [pid 5067] mmap(0x7fced0828000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1b000) = 0x7fced0828000 [pid 5067] mmap(0x7fced0830000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7fced0830000 [pid 5067] mmap(0x7fced0832000, 5648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fced0832000 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 5067] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 5067] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf8\x21\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x50\x32\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x1f\x00\x00"..., 832) = 832 [pid 5067] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 336112) = 48 [pid 5067] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=342224, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mmap(NULL, 344456, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fced07b8000 [pid 5067] mmap(0x7fced07ba000, 180224, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fced07ba000 [pid 5067] mmap(0x7fced07e6000, 151552, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2e000) = 0x7fced07e6000 [pid 5067] mmap(0x7fced080b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x52000) = 0x7fced080b000 [pid 5067] close(3) = 0 [pid 5067] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fced07b6000 [pid 5067] arch_prctl(ARCH_SET_FS, 0x7fced07b7380) = 0 [pid 5067] set_tid_address(0x7fced07b7650) = 5067 [pid 5067] set_robust_list(0x7fced07b7660, 24) = 0 [pid 5067] rseq(0x7fced07b7d20, 0x20, 0, 0x53053053) = 0 [pid 5067] mprotect(0x7fced09e2000, 16384, PROT_READ) = 0 [pid 5067] mprotect(0x7fced080b000, 4096, PROT_READ) = 0 [pid 5067] mprotect(0x7fced0830000, 4096, PROT_READ) = 0 [pid 5067] mprotect(0x7fced0840000, 4096, PROT_READ) = 0 [pid 5067] mprotect(0x7fced0ab4000, 12288, PROT_READ) = 0 [pid 5067] mprotect(0x564034a25000, 4096, PROT_READ) = 0 [pid 5067] mprotect(0x7fced0ae7000, 8192, PROT_READ) = 0 [pid 5067] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 5067] statfs("/sys/fs/selinux", 0x7fff9e5b32f0) = -1 ENOENT (No such file or directory) [pid 5067] statfs("/selinux", 0x7fff9e5b32f0) = -1 ENOENT (No such file or directory) [pid 5067] getrandom("\xa3\x33\xd6\x1d\xcf\xe3\x27\x92", 8, GRND_NONBLOCK) = 8 [pid 5067] brk(NULL) = 0x5640360d4000 [pid 5067] brk(0x5640360f5000) = 0x5640360f5000 [pid 5067] openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5067] read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tbdev\nnodev\tproc\nnodev\tcgroup\nnodev\tcgroup2\nnodev\tcpuset\nnodev\tdevtmpfs"..., 1024) = 829 [pid 5067] read(3, "", 1024) = 0 [pid 5067] close(3) = 0 [pid 5067] access("/etc/selinux/config", F_OK) = 0 [pid 5067] openat(AT_FDCWD, "./swap-file", O_WRONLY) = 3 [pid 5067] lseek(3, 0, SEEK_END) = 128000000 [pid 5067] lseek(3, 0, SEEK_SET) = 0 [pid 5067] newfstatat(1, "", {st_mode=S_IFIFO|0600, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5067] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1024) = 1024 [pid 5067] write(3, "\x01\x00\x00\x00\x11\x7a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 516) = 516 [pid 5067] lseek(3, 4086, SEEK_SET) = 4086 [pid 5067] write(3, "SWAPSPACE2", 10) = 10 [pid 5067] fsync(3) = 0 [pid 5067] write(1, "Setting up swapspace version 1, size = 127995904 bytes\n", 55Setting up swapspace version 1, size = 127995904 bytes ) = 55 [pid 5067] exit_group(0) = ? [pid 5067] +++ exited with 0 +++ rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff63f335030}, NULL, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5067, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- swapon("./swap-file", SWAP_FLAG_PREFER|0) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5068 attached , child_tidptr=0x555556031690) = 5068 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] set_robust_list(0x5555560316a0, 24) = 0 ./strace-static-x86_64: Process 5069 attached [pid 5066] <... clone resumed>, child_tidptr=0x555556031690) = 5069 [pid 5069] set_robust_list(0x5555560316a0, 24 [pid 5068] mkdir("./syzkaller.p47fVk", 0700 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... set_robust_list resumed>) = 0 [pid 5069] mkdir("./syzkaller.tvsxpX", 0700 [pid 5068] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5070 attached [pid 5066] <... clone resumed>, child_tidptr=0x555556031690) = 5070 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] chmod("./syzkaller.p47fVk", 0777 [pid 5070] set_robust_list(0x5555560316a0, 24) = 0 [pid 5069] chmod("./syzkaller.tvsxpX", 0777 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] mkdir("./syzkaller.yTuF4i", 0700 [pid 5069] <... chmod resumed>) = 0 [pid 5068] <... chmod resumed>) = 0 [pid 5069] chdir("./syzkaller.tvsxpX" [pid 5068] chdir("./syzkaller.p47fVk"./strace-static-x86_64: Process 5071 attached [pid 5070] <... mkdir resumed>) = 0 [pid 5069] <... chdir resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555556031690) = 5071 [pid 5068] <... chdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] unshare(CLONE_NEWPID [pid 5071] set_robust_list(0x5555560316a0, 24 [pid 5070] chmod("./syzkaller.yTuF4i", 0777 [pid 5069] unshare(CLONE_NEWPID [pid 5071] <... set_robust_list resumed>) = 0 [pid 5070] <... chmod resumed>) = 0 [pid 5069] <... unshare resumed>) = 0 [pid 5068] <... unshare resumed>) = 0 [pid 5071] mkdir("./syzkaller.hT4DtY", 0700 [pid 5070] chdir("./syzkaller.yTuF4i" [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... chdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5072 attached [pid 5070] unshare(CLONE_NEWPID./strace-static-x86_64: Process 5073 attached ) = 0 [pid 5073] set_robust_list(0x5555560316a0, 24 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... set_robust_list resumed>) = 0 [pid 5072] set_robust_list(0x5555560316a0, 24 [pid 5073] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5072] <... set_robust_list resumed>) = 0 [pid 5071] chmod("./syzkaller.hT4DtY", 0777./strace-static-x86_64: Process 5075 attached ./strace-static-x86_64: Process 5074 attached [pid 5066] <... clone resumed>, child_tidptr=0x555556031690) = 5072 [pid 5073] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] mkdir("./syzkaller.RfCMU1", 0700 [pid 5071] <... chmod resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555556031690) = 5073 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] set_robust_list(0x5555560316a0, 24 [pid 5074] set_robust_list(0x5555560316a0, 24 [pid 5071] chdir("./syzkaller.hT4DtY" [pid 5074] <... set_robust_list resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555556031690) = 5074 [pid 5074] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL./strace-static-x86_64: Process 5076 attached [pid 5075] <... set_robust_list resumed>) = 0 [pid 5074] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 5071] <... chdir resumed>) = 0 [pid 5076] set_robust_list(0x5555560316a0, 24 [pid 5074] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 5073] <... socket resumed>) = 3 [pid 5072] <... mkdir resumed>) = 0 [pid 5076] <... set_robust_list resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555556031690) = 5076 [pid 5075] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5074] <... socket resumed>) = 3 [pid 5076] getrandom( [pid 5073] openat(AT_FDCWD, "/dev/vhci", O_RDWR [pid 5072] chmod("./syzkaller.RfCMU1", 0777 [pid 5071] unshare(CLONE_NEWPID [pid 5068] <... clone resumed>, child_tidptr=0x555556031690) = 5075 [pid 5076] <... getrandom resumed>"\x2b\xbf\xf9\x8a\xc9\xf9\x95\xc1", 8, GRND_NONBLOCK) = 8 [pid 5075] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] openat(AT_FDCWD, "/dev/vhci", O_RDWR [pid 5072] <... chmod resumed>) = 0 [pid 5071] <... unshare resumed>) = 0 [pid 5072] chdir("./syzkaller.RfCMU1" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 57.565795][ T5066] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [pid 5075] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 5072] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5077 attached [pid 5076] mkdir("./syzkaller.51vpeu", 0700 [pid 5075] <... socket resumed>) = 3 [pid 5074] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 4 [pid 5072] unshare(CLONE_NEWPID [pid 5077] set_robust_list(0x5555560316a0, 24 [pid 5075] openat(AT_FDCWD, "/dev/vhci", O_RDWR [pid 5074] dup2(4, 202 [pid 5073] dup2(4, 202 [pid 5072] <... unshare resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555556031690) = 5077 [pid 5077] <... set_robust_list resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] chmod("./syzkaller.51vpeu", 0777 [pid 5077] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5076] <... chmod resumed>) = 0 [pid 5076] chdir("./syzkaller.51vpeu"./strace-static-x86_64: Process 5078 attached [pid 5077] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] dup2(4, 202 [pid 5074] <... dup2 resumed>) = 202 [pid 5073] <... dup2 resumed>) = 202 [pid 5078] set_robust_list(0x5555560316a0, 24 [pid 5077] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 5076] <... chdir resumed>) = 0 [pid 5075] <... dup2 resumed>) = 202 [pid 5074] close(4 [pid 5073] close(4 [pid 5072] <... clone resumed>, child_tidptr=0x555556031690) = 5078 [pid 5078] <... set_robust_list resumed>) = 0 [pid 5076] unshare(CLONE_NEWPID [pid 5075] close(4 [pid 5078] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5074] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5078] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... socket resumed>) = 3 [pid 5076] <... unshare resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] write(202, "\xff\x00", 2 [pid 5073] write(202, "\xff\x00", 2 [pid 5077] openat(AT_FDCWD, "/dev/vhci", O_RDWR [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] write(202, "\xff\x00", 2 [pid 5078] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI./strace-static-x86_64: Process 5079 attached ) = 3 [pid 5077] <... openat resumed>) = 4 [pid 5075] <... write resumed>) = 2 [pid 5074] <... write resumed>) = 2 [pid 5073] <... write resumed>) = 2 [pid 5079] set_robust_list(0x5555560316a0, 24 [pid 5078] openat(AT_FDCWD, "/dev/vhci", O_RDWR [pid 5075] read(202, [pid 5074] read(202, [pid 5073] read(202, [pid 5079] <... set_robust_list resumed>) = 0 [pid 5078] <... openat resumed>) = 4 [pid 5074] <... read resumed>"\xff\x00\x02\x00", 4) = 4 [pid 5073] <... read resumed>"\xff\x00\x00\x00", 4) = 4 [pid 5078] dup2(4, 202 [pid 5079] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5078] <... dup2 resumed>) = 202 [pid 5077] dup2(4, 202 [pid 5076] <... clone resumed>, child_tidptr=0x555556031690) = 5079 [pid 5075] <... read resumed>"\xff\x00\x01\x00", 4) = 4 [pid 5074] rt_sigaction(SIGRT_1, {sa_handler=0x7ff63f3436f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7ff63f335030}, [pid 5073] rt_sigaction(SIGRT_1, {sa_handler=0x7ff63f3436f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7ff63f335030}, [pid 5078] close(4 [pid 5075] rt_sigaction(SIGRT_1, {sa_handler=0x7ff63f3436f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7ff63f335030}, [pid 5074] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5073] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5078] <... close resumed>) = 0 [pid 5074] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5073] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5078] write(202, "\xff\x00", 2 [pid 5075] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5074] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5077] <... dup2 resumed>) = 202 [pid 5077] close(4) = 0 [pid 5073] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] write(202, "\xff\x00", 2 [pid 5075] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5074] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... write resumed>) = 2 [pid 5075] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] <... mmap resumed>) = 0x7ff63eacd000 [pid 5074] <... mmap resumed>) = 0x7ff63eacd000 [pid 5075] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI [pid 5074] mprotect(0x7ff63eace000, 8388608, PROT_READ|PROT_WRITE [pid 5073] mprotect(0x7ff63eace000, 8388608, PROT_READ|PROT_WRITE [pid 5078] read(202, "\xff\x00\x03\x00", 4) = 4 [pid 5077] <... write resumed>) = 2 [pid 5075] <... mmap resumed>) = 0x7ff63eacd000 [pid 5074] <... mprotect resumed>) = 0 [pid 5073] <... mprotect resumed>) = 0 [pid 5079] <... socket resumed>) = 3 [pid 5078] rt_sigaction(SIGRT_1, {sa_handler=0x7ff63f3436f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7ff63f335030}, [pid 5077] read(202, "\xff\x00\x04\x00", 4) = 4 [pid 5079] openat(AT_FDCWD, "/dev/vhci", O_RDWR [pid 5078] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5075] mprotect(0x7ff63eace000, 8388608, PROT_READ|PROT_WRITE [pid 5074] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5079] <... openat resumed>) = 4 [pid 5078] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5077] rt_sigaction(SIGRT_1, {sa_handler=0x7ff63f3436f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7ff63f335030}, [pid 5075] <... mprotect resumed>) = 0 [pid 5074] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5079] dup2(4, 202 [pid 5078] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63f2cd990, parent_tid=0x7ff63f2cd990, exit_signal=0, stack=0x7ff63eacd000, stack_size=0x800300, tls=0x7ff63f2cd6c0} [pid 5073] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63f2cd990, parent_tid=0x7ff63f2cd990, exit_signal=0, stack=0x7ff63eacd000, stack_size=0x800300, tls=0x7ff63f2cd6c0} [pid 5078] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5088 attached ./strace-static-x86_64: Process 5087 attached [pid 5079] <... dup2 resumed>) = 202 [pid 5078] <... mmap resumed>) = 0x7ff63eacd000 [pid 5077] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5075] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5088] rseq(0x7ff63f2cdfe0, 0x20, 0, 0x53053053 [pid 5087] rseq(0x7ff63f2cdfe0, 0x20, 0, 0x53053053 [pid 5077] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5088] <... rseq resumed>) = 0 [pid 5087] <... rseq resumed>) = 0 [pid 5077] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5087] set_robust_list(0x7ff63f2cd9a0, 24 [pid 5077] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5088] set_robust_list(0x7ff63f2cd9a0, 24 [pid 5087] <... set_robust_list resumed>) = 0 [pid 5077] <... mmap resumed>) = 0x7ff63eacd000 [pid 5088] <... set_robust_list resumed>) = 0 [pid 5087] rt_sigprocmask(SIG_SETMASK, [], [pid 5077] mprotect(0x7ff63eace000, 8388608, PROT_READ|PROT_WRITE [pid 5088] rt_sigprocmask(SIG_SETMASK, [], [pid 5079] close(4 [pid 5078] mprotect(0x7ff63eace000, 8388608, PROT_READ|PROT_WRITE [pid 5077] <... mprotect resumed>) = 0 [pid 5075] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5074] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5073] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... mprotect resumed>) = 0 [pid 5075] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63f2cd990, parent_tid=0x7ff63f2cd990, exit_signal=0, stack=0x7ff63eacd000, stack_size=0x800300, tls=0x7ff63f2cd6c0} [pid 5074] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] rt_sigprocmask(SIG_SETMASK, [], [pid 5079] write(202, "\xff\x00", 2 [pid 5074] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5091 attached [pid 5088] read(202, [pid 5087] read(202, [pid 5077] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] ioctl(3, HCIDEVUP [pid 5073] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5091] rseq(0x7ff63f2cdfe0, 0x20, 0, 0x53053053 [pid 5088] <... read resumed>"\x01\x03\x0c\x00", 1024) = 4 [pid 5087] <... read resumed>"\x01\x03\x0c\x00", 1024) = 4 [pid 5078] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5091] <... rseq resumed>) = 0 [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5077] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5091] set_robust_list(0x7ff63f2cd9a0, 24 [pid 5088] <... writev resumed>) = 255 [pid 5087] <... writev resumed>) = 255 [pid 5073] ioctl(3, HCIDEVUP [pid 5091] <... set_robust_list resumed>) = 0 [pid 5088] read(202, [pid 5087] read(202, [pid 5077] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63f2cd990, parent_tid=0x7ff63f2cd990, exit_signal=0, stack=0x7ff63eacd000, stack_size=0x800300, tls=0x7ff63f2cd6c0} [pid 5091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5091] read(202, "\x01\x03\x0c\x00", 1024) = 4 ./strace-static-x86_64: Process 5092 attached [pid 5091] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5092] rseq(0x7ff63f2cdfe0, 0x20, 0, 0x53053053 [pid 5077] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5092] <... rseq resumed>) = 0 [pid 5091] <... writev resumed>) = 255 [pid 5077] rt_sigprocmask(SIG_SETMASK, [], [pid 5092] set_robust_list(0x7ff63f2cd9a0, 24 [pid 5091] read(202, [pid 5077] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5092] <... set_robust_list resumed>) = 0 [pid 5092] rt_sigprocmask(SIG_SETMASK, [], [pid 5077] ioctl(3, HCIDEVUP [pid 5092] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5092] read(202, "\x01\x03\x0c\x00", 1024) = 4 [pid 5092] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5092] read(202, [pid 5078] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5078] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63f2cd990, parent_tid=0x7ff63f2cd990, exit_signal=0, stack=0x7ff63eacd000, stack_size=0x800300, tls=0x7ff63f2cd6c0} [pid 5075] rt_sigprocmask(SIG_SETMASK, [], [pid 5079] <... write resumed>) = 2 [pid 5075] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5079] read(202, [pid 5078] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5075] ioctl(3, HCIDEVUP [pid 5079] <... read resumed>"\xff\x00\x05\x00", 4) = 4 [pid 5078] rt_sigprocmask(SIG_SETMASK, [], [pid 5079] rt_sigaction(SIGRT_1, {sa_handler=0x7ff63f3436f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7ff63f335030}, [pid 5078] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5079] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5078] ioctl(3, HCIDEVUP./strace-static-x86_64: Process 5096 attached [pid 5079] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5096] rseq(0x7ff63f2cdfe0, 0x20, 0, 0x53053053 [pid 5079] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5096] <... rseq resumed>) = 0 [pid 5079] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5096] set_robust_list(0x7ff63f2cd9a0, 24 [pid 5079] <... mmap resumed>) = 0x7ff63eacd000 [pid 5096] <... set_robust_list resumed>) = 0 [pid 5079] mprotect(0x7ff63eace000, 8388608, PROT_READ|PROT_WRITE [pid 5096] rt_sigprocmask(SIG_SETMASK, [], [pid 5088] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [pid 5079] <... mprotect resumed>) = 0 [pid 5096] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5092] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [pid 5091] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5087] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [ 57.693521][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.701643][ T5089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.708895][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.716696][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.730130][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.731893][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [pid 5079] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5096] read(202, [pid 5091] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5088] <... writev resumed>) = 255 [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5079] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5096] <... read resumed>"\x01\x03\x0c\x00", 1024) = 4 [pid 5092] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5091] <... writev resumed>) = 255 [pid 5088] read(202, [pid 5092] <... writev resumed>) = 255 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5092] read(202, [pid 5088] <... read resumed>"\x01\x01\x10\x00", 1024) = 4 [pid 5096] <... writev resumed>) = 255 [pid 5092] <... read resumed>"\x01\x01\x10\x00", 1024) = 4 [pid 5091] read(202, [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5087] <... writev resumed>) = 255 [pid 5079] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63f2cd990, parent_tid=0x7ff63f2cd990, exit_signal=0, stack=0x7ff63eacd000, stack_size=0x800300, tls=0x7ff63f2cd6c0} [pid 5092] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5091] <... read resumed>"\x01\x01\x10\x00", 1024) = 4 [pid 5087] read(202, [pid 5096] read(202, [pid 5092] <... writev resumed>) = 255 [pid 5088] <... writev resumed>) = 255 ./strace-static-x86_64: Process 5097 attached [pid 5092] read(202, [pid 5091] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5087] <... read resumed>"\x01\x01\x10\x00", 1024) = 4 [pid 5097] rseq(0x7ff63f2cdfe0, 0x20, 0, 0x53053053 [pid 5096] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [pid 5092] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5091] <... writev resumed>) = 255 [pid 5088] read(202, [pid 5079] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5097] <... rseq resumed>) = 0 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5088] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5097] set_robust_list(0x7ff63f2cd9a0, 24 [pid 5096] <... writev resumed>) = 255 [pid 5092] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4 [ 57.747983][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.751943][ T5089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.756463][ T5094] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.768420][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.770705][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.778115][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.785562][ T5094] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [pid 5091] read(202, [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5079] rt_sigprocmask(SIG_SETMASK, [], [pid 5092] <... writev resumed>) = 13 [pid 5097] <... set_robust_list resumed>) = 0 [pid 5096] read(202, [pid 5092] read(202, [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4 [pid 5097] rt_sigprocmask(SIG_SETMASK, [], [pid 5088] <... writev resumed>) = 13 [pid 5097] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5088] read(202, [pid 5097] read(202, [pid 5088] <... read resumed>"\x01\x05\x10\x00", 1024) = 4 [pid 5097] <... read resumed>"\x01\x03\x0c\x00", 1024) = 4 [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4 [pid 5097] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5088] <... writev resumed>) = 14 [pid 5092] <... read resumed>"\x01\x05\x10\x00", 1024) = 4 [pid 5091] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5087] <... writev resumed>) = 255 [pid 5079] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5092] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4 [pid 5091] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4 [pid 5087] read(202, [pid 5079] ioctl(3, HCIDEVUP [pid 5092] <... writev resumed>) = 14 [pid 5092] read(202, [pid 5091] <... writev resumed>) = 13 [pid 5087] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5092] <... read resumed>"\x01\x23\x0c\x00", 1024) = 4 [pid 5092] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5091] read(202, [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4 [pid 5097] <... writev resumed>) = 255 [pid 5096] <... read resumed>"\x01\x01\x10\x00", 1024) = 4 [pid 5092] <... writev resumed>) = 255 [pid 5088] read(202, [pid 5097] read(202, [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5088] <... read resumed>"\x01\x23\x0c\x00", 1024) = 4 [pid 5096] <... writev resumed>) = 255 [pid 5092] read(202, [pid 5091] <... read resumed>"\x01\x05\x10\x00", 1024) = 4 [pid 5087] <... writev resumed>) = 13 [pid 5092] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5091] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4 [pid 5087] read(202, [pid 5092] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5091] <... writev resumed>) = 14 [pid 5087] <... read resumed>"\x01\x05\x10\x00", 1024) = 4 [pid 5092] <... writev resumed>) = 255 [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4 [pid 5092] read(202, [pid 5091] read(202, [pid 5087] <... writev resumed>) = 14 [pid 5092] <... read resumed>"\x01\x25\x0c\x00", 1024) = 4 [pid 5091] <... read resumed>"\x01\x23\x0c\x00", 1024) = 4 [pid 5087] read(202, [pid 5092] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5091] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5087] <... read resumed>"\x01\x23\x0c\x00", 1024) = 4 [pid 5097] <... read resumed>"\x01\x03\x10\x00", 1024) = 4 [pid 5096] read(202, [ 57.792364][ T5089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.800430][ T5094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 57.808195][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.812406][ T5094] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.823899][ T5098] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.825656][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.832360][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5097] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5096] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5092] <... writev resumed>) = 255 [pid 5091] <... writev resumed>) = 255 [pid 5088] <... writev resumed>) = 255 [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4 [pid 5091] read(202, [pid 5096] <... writev resumed>) = 13 [pid 5091] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5096] read(202, [pid 5091] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5096] <... read resumed>"\x01\x05\x10\x00", 1024) = 4 [pid 5091] <... writev resumed>) = 255 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4 [pid 5091] read(202, [pid 5096] <... writev resumed>) = 14 [pid 5091] <... read resumed>"\x01\x25\x0c\x00", 1024) = 4 [pid 5096] read(202, [pid 5091] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5097] <... writev resumed>) = 255 [pid 5096] <... read resumed>"\x01\x23\x0c\x00", 1024) = 4 [pid 5092] read(202, [pid 5088] read(202, [pid 5087] <... writev resumed>) = 255 [pid 5088] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5097] read(202, [pid 5092] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5092] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5088] <... writev resumed>) = 255 [pid 5087] read(202, [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5092] <... writev resumed>) = 255 [pid 5091] <... writev resumed>) = 255 [pid 5097] <... read resumed>"\x01\x01\x10\x00", 1024) = 4 [pid 5096] <... writev resumed>) = 255 [pid 5088] read(202, [pid 5087] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5097] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5088] <... read resumed>"\x01\x25\x0c\x00", 1024) = 4 [pid 5097] <... writev resumed>) = 255 [pid 5096] read(202, [pid 5092] read(202, [pid 5091] read(202, [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5096] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5097] read(202, [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5092] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5091] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [pid 5088] <... writev resumed>) = 255 [pid 5087] <... writev resumed>) = 255 [pid 5087] read(202, [pid 5097] <... read resumed>"\x01\x09\x10\x00", 1024) = 4 [pid 5096] <... writev resumed>) = 255 [pid 5092] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5091] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [ 57.845630][ T5094] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 57.848963][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.859964][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.862054][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.868123][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.876104][ T5094] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 57.883533][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [pid 5088] read(202, [pid 5097] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4 [pid 5096] read(202, [pid 5092] <... writev resumed>) = 255 [pid 5091] <... writev resumed>) = 255 [pid 5088] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [pid 5087] <... read resumed>"\x01\x25\x0c\x00", 1024) = 4 [pid 5097] <... writev resumed>) = 13 [pid 5096] <... read resumed>"\x01\x25\x0c\x00", 1024) = 4 [pid 5092] read(202, [pid 5091] read(202, [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5097] read(202, [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5092] <... read resumed>"\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5091] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5088] <... writev resumed>) = 255 [pid 5091] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5091] read(202, "\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5091] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5075] <... ioctl resumed>, 0x1) = -1 EALREADY (Operation already in progress) [pid 5075] ioctl(3, HCISETSCAN [pid 5091] read(202, "\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5091] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4 [pid 5075] <... ioctl resumed>, 0x7fff7ff76640) = 0 [pid 5075] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3) = 13 [pid 5075] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5097] <... read resumed>"\x01\x05\x10\x00", 1024) = 4 [pid 5096] <... writev resumed>) = 255 [pid 5092] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5088] read(202, [pid 5087] <... writev resumed>) = 255 [pid 5075] <... writev resumed>) = 14 [pid 5097] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4 [pid 5091] <... writev resumed>) = 7 [pid 5097] <... writev resumed>) = 14 [pid 5091] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5075] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5097] read(202, [pid 5091] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5088] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5075] <... writev resumed>) = 14 [pid 5097] <... read resumed>"\x01\x23\x0c\x00", 1024) = 4 [pid 5096] read(202, [pid 5092] <... writev resumed>) = 255 [pid 5091] madvise(0x7ff63eacd000, 8372224, MADV_DONTNEED [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5087] read(202, [pid 5077] <... ioctl resumed>, 0x4) = -1 EALREADY (Operation already in progress) [pid 5075] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5097] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5096] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [ 57.900743][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.902111][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.915320][ T5080] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.915384][ T5094] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.934147][ T5094] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 57.942001][ T4464] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [pid 5092] read(202, [pid 5091] <... madvise resumed>) = 0 [pid 5088] <... writev resumed>) = 255 [pid 5087] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [pid 5077] ioctl(3, HCISETSCAN [pid 5097] <... writev resumed>) = 255 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5092] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5091] exit(0 [pid 5088] read(202, [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5075] <... writev resumed>) = 22 [pid 5097] read(202, [pid 5092] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4) = 7 [pid 5091] <... exit resumed>) = ? [pid 5088] <... read resumed>"\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5077] <... ioctl resumed>, 0x7fff7ff76640) = 0 [pid 5092] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5091] +++ exited with 0 +++ [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5077] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5075] close(3 [pid 5092] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5088] <... writev resumed>) = 255 [pid 5077] <... writev resumed>) = 13 [pid 5075] <... close resumed>) = 0 [pid 5092] madvise(0x7ff63eacd000, 8372224, MADV_DONTNEED [pid 5088] read(202, [pid 5077] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5092] <... madvise resumed>) = 0 [pid 5092] exit(0 [pid 5087] <... writev resumed>) = 255 [pid 5077] <... writev resumed>) = 14 [pid 5073] <... ioctl resumed>, 0) = -1 EALREADY (Operation already in progress) [pid 5092] <... exit resumed>) = ? [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5092] +++ exited with 0 +++ [pid 5077] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5075] <... prctl resumed>) = 0 [pid 5077] <... writev resumed>) = 14 [pid 5075] setsid( [pid 5077] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5075] <... setsid resumed>) = 1 [pid 5077] <... writev resumed>) = 22 [pid 5077] close(3) = 0 [pid 5075] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5077] setsid( [pid 5075] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5077] <... setsid resumed>) = 1 [pid 5075] <... prlimit64 resumed>NULL) = 0 [pid 5077] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5075] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5077] <... prlimit64 resumed>NULL) = 0 [pid 5075] <... prlimit64 resumed>NULL) = 0 [pid 5096] <... writev resumed>) = 255 [pid 5087] read(202, [pid 5077] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5073] ioctl(3, HCISETSCAN [pid 5077] <... prlimit64 resumed>NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5077] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5075] <... prlimit64 resumed>NULL) = 0 [pid 5077] <... prlimit64 resumed>NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5077] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5075] <... prlimit64 resumed>NULL) = 0 [pid 5077] <... prlimit64 resumed>NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5077] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5075] <... prlimit64 resumed>NULL) = 0 [pid 5077] <... prlimit64 resumed>NULL) = 0 [pid 5075] unshare(CLONE_NEWNS [pid 5077] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5075] <... unshare resumed>) = 0 [pid 5077] <... prlimit64 resumed>NULL) = 0 [pid 5077] unshare(CLONE_NEWNS) = 0 [pid 5097] <... read resumed>"\x01\x14\x0c\x00", 1024) = 4 [pid 5096] read(202, [pid 5088] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5087] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5075] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5097] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5096] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5088] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4 [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5077] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5075] <... mount resumed>) = 0 [pid 5097] <... writev resumed>) = 255 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5088] <... writev resumed>) = 7 [pid 5087] <... writev resumed>) = 255 [pid 5073] <... ioctl resumed>, 0x7fff7ff76640) = 0 [pid 5097] read(202, [pid 5073] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5097] <... read resumed>"\x01\x25\x0c\x00", 1024) = 4 [pid 5096] <... writev resumed>) = 255 [pid 5088] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5087] read(202, [pid 5077] <... mount resumed>) = 0 [pid 5075] unshare(CLONE_NEWIPC [pid 5073] <... writev resumed>) = 13 [pid 5097] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5096] read(202, [pid 5088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5087] <... read resumed>"\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5077] unshare(CLONE_NEWIPC [pid 5075] <... unshare resumed>) = 0 [pid 5073] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5097] read(202, [pid 5096] <... read resumed>"\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5088] madvise(0x7ff63eacd000, 8372224, MADV_DONTNEED [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5077] <... unshare resumed>) = 0 [pid 5088] <... madvise resumed>) = 0 [pid 5087] <... writev resumed>) = 255 [pid 5074] <... ioctl resumed>, 0x2) = -1 EALREADY (Operation already in progress) [pid 5074] ioctl(3, HCISETSCAN [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5088] exit(0 [pid 5087] read(202, [pid 5077] unshare(CLONE_NEWCGROUP [pid 5096] read(202, [pid 5088] <... exit resumed>) = ? [pid 5087] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5077] <... unshare resumed>) = 0 [pid 5075] unshare(CLONE_NEWCGROUP [pid 5088] +++ exited with 0 +++ [pid 5087] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4 [pid 5077] unshare(CLONE_NEWUTS [pid 5087] <... writev resumed>) = 7 [pid 5077] <... unshare resumed>) = 0 [pid 5075] <... unshare resumed>) = 0 [pid 5074] <... ioctl resumed>, 0x7fff7ff76640) = 0 [pid 5087] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5077] unshare(CLONE_SYSVSEM [pid 5075] unshare(CLONE_NEWUTS [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5077] <... unshare resumed>) = 0 [pid 5075] <... unshare resumed>) = 0 [pid 5074] <... writev resumed>) = 13 [pid 5087] madvise(0x7ff63eacd000, 8372224, MADV_DONTNEED [pid 5077] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5075] unshare(CLONE_SYSVSEM [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5097] <... read resumed>"\x01\x38\x0c\x00", 1024) = 4 [pid 5087] <... madvise resumed>) = 0 [pid 5078] <... ioctl resumed>, 0x3) = -1 EALREADY (Operation already in progress) [pid 5077] <... openat resumed>) = 3 [pid 5075] <... unshare resumed>) = 0 [pid 5074] <... writev resumed>) = 14 [pid 5097] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5087] exit(0 [pid 5078] ioctl(3, HCISETSCAN [pid 5077] write(3, "16777216", 8 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5096] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5073] <... writev resumed>) = 14 [pid 5096] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4 [pid 5073] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5096] <... writev resumed>) = 7 [pid 5087] <... exit resumed>) = ? [pid 5078] <... ioctl resumed>, 0x7fff7ff76640) = 0 [pid 5074] <... writev resumed>) = 14 [pid 5096] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5087] +++ exited with 0 +++ [pid 5078] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5077] <... write resumed>) = 8 [pid 5075] <... openat resumed>) = 3 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5073] <... writev resumed>) = 14 [pid 5097] <... writev resumed>) = 255 [pid 5096] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5078] <... writev resumed>) = 13 [pid 5074] <... writev resumed>) = 22 [pid 5073] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5097] read(202, [pid 5096] madvise(0x7ff63eacd000, 8372224, MADV_DONTNEED [pid 5078] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5077] close(3 [pid 5075] write(3, "16777216", 8 [pid 5074] close(3 [pid 5097] <... read resumed>"\x01\x39\x0c\x00", 1024) = 4 [pid 5077] <... close resumed>) = 0 [pid 5075] <... write resumed>) = 8 [pid 5074] <... close resumed>) = 0 [pid 5097] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5078] <... writev resumed>) = 14 [pid 5077] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5075] close(3 [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5097] <... writev resumed>) = 255 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5074] <... prctl resumed>) = 0 [pid 5097] read(202, [pid 5077] write(3, "536870912", 9 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5074] setsid( [pid 5097] <... read resumed>"\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5096] <... madvise resumed>) = 0 [pid 5078] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5077] <... write resumed>) = 9 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... setsid resumed>) = 1 [pid 5073] <... writev resumed>) = 22 [pid 5097] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 [pid 5096] exit(0 [pid 5077] close(3 [pid 5073] close(3 [pid 5097] <... writev resumed>) = 255 [pid 5096] <... exit resumed>) = ? [pid 5078] <... writev resumed>) = 14 [pid 5075] write(3, "536870912", 9 [pid 5074] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5078] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5073] <... close resumed>) = 0 [pid 5096] +++ exited with 0 +++ [pid 5078] <... writev resumed>) = 22 [pid 5097] read(202, [pid 5079] <... ioctl resumed>, 0x5) = -1 EALREADY (Operation already in progress) [pid 5077] <... close resumed>) = 0 [pid 5075] <... write resumed>) = 9 [pid 5074] <... prlimit64 resumed>NULL) = 0 [pid 5079] ioctl(3, HCISETSCAN [pid 5077] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5075] close(3 [pid 5074] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5097] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5078] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5074] <... prlimit64 resumed>NULL) = 0 [pid 5097] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4 [pid 5077] write(3, "1024", 4 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5074] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5097] <... writev resumed>) = 7 [pid 5077] <... write resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... prlimit64 resumed>NULL) = 0 [pid 5097] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5077] close(3 [pid 5075] write(3, "1024", 4 [pid 5074] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5097] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... write resumed>) = 4 [pid 5074] <... prlimit64 resumed>NULL) = 0 [pid 5097] madvise(0x7ff63eacd000, 8372224, MADV_DONTNEED [pid 5078] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5075] close(3 [pid 5074] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5097] <... madvise resumed>) = 0 [pid 5079] <... ioctl resumed>, 0x7fff7ff76640) = 0 [pid 5078] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5074] <... prlimit64 resumed>NULL) = 0 [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5097] exit(0 [pid 5079] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5078] <... prctl resumed>) = 0 [pid 5097] <... exit resumed>) = ? [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5079] <... writev resumed>) = 13 [pid 5074] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5097] +++ exited with 0 +++ [pid 5078] setsid( [pid 5077] write(3, "8192", 4 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... prlimit64 resumed>NULL) = 0 [pid 5073] <... prctl resumed>) = 0 [pid 5078] <... setsid resumed>) = 1 [pid 5077] <... write resumed>) = 4 [pid 5073] setsid( [pid 5079] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5078] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5073] <... setsid resumed>) = 1 [pid 5078] <... prlimit64 resumed>NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5077] close(3 [pid 5075] write(3, "8192", 4 [pid 5074] unshare(CLONE_NEWNS [pid 5073] <... prlimit64 resumed>NULL) = 0 [pid 5079] <... writev resumed>) = 14 [pid 5077] <... close resumed>) = 0 [pid 5075] <... write resumed>) = 4 [pid 5074] <... unshare resumed>) = 0 [pid 5079] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5078] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5077] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5075] close(3 [pid 5073] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5079] <... writev resumed>) = 14 [pid 5078] <... prlimit64 resumed>NULL) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5078] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5074] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5073] <... prlimit64 resumed>NULL) = 0 [pid 5079] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3 [pid 5078] <... prlimit64 resumed>NULL) = 0 [pid 5077] write(3, "1024", 4 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... mount resumed>) = 0 [pid 5073] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5079] <... writev resumed>) = 22 [pid 5078] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5077] <... write resumed>) = 4 [pid 5078] <... prlimit64 resumed>NULL) = 0 [pid 5077] close(3 [pid 5075] write(3, "1024", 4 [pid 5074] unshare(CLONE_NEWIPC [pid 5077] <... close resumed>) = 0 [pid 5075] <... write resumed>) = 4 [pid 5078] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5074] <... unshare resumed>) = 0 [pid 5073] <... prlimit64 resumed>NULL) = 0 [pid 5079] close(3 [pid 5078] <... prlimit64 resumed>NULL) = 0 [pid 5077] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5075] close(3 [pid 5073] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5079] <... close resumed>) = 0 [pid 5078] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5077] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5073] <... prlimit64 resumed>NULL) = 0 [pid 5077] write(3, "1024", 4 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5074] unshare(CLONE_NEWCGROUP [pid 5077] <... write resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... unshare resumed>) = 0 [pid 5077] close(3 [pid 5075] write(3, "1024", 4 [pid 5074] unshare(CLONE_NEWUTS [pid 5077] <... close resumed>) = 0 [pid 5075] <... write resumed>) = 4 [pid 5074] <... unshare resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5075] close(3 [pid 5074] unshare(CLONE_SYSVSEM [pid 5077] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5074] <... unshare resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] <... prlimit64 resumed>NULL) = 0 [pid 5077] write(3, "1024 1048576 500 1024", 21 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5073] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5079] <... prctl resumed>) = 0 [pid 5078] unshare(CLONE_NEWNS [pid 5073] <... prlimit64 resumed>NULL) = 0 [pid 5079] setsid( [pid 5077] <... write resumed>) = 21 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5077] close(3 [pid 5075] write(3, "1024 1048576 500 1024", 21 [pid 5074] write(3, "16777216", 8 [pid 5079] <... setsid resumed>) = 1 [pid 5078] <... unshare resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... write resumed>) = 21 [pid 5074] <... write resumed>) = 8 [pid 5073] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5079] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5077] getpid( [pid 5075] close(3 [pid 5074] close(3 [pid 5079] <... prlimit64 resumed>NULL) = 0 [pid 5077] <... getpid resumed>) = 1 [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... prlimit64 resumed>NULL) = 0 [pid 5079] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5077] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5075] getpid( [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5079] <... prlimit64 resumed>NULL) = 0 [pid 5077] <... capget resumed>{effective=1< 2 [ 57.968787][ T5089] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 57.977461][ T5082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [pid 5073] unshare(CLONE_NEWNS [pid 5079] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5078] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5077] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5075] <... getpid resumed>) = 1 [pid 5074] <... openat resumed>) = 3 [pid 5077] <... capset resumed>) = 0 [pid 5075] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5077] unshare(CLONE_NEWNET [pid 5075] <... capget resumed>{effective=1< [pid 5079] <... prlimit64 resumed>NULL) = 0 [pid 5078] <... mount resumed>) = 0 [pid 5075] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5073] <... unshare resumed>) = 0 [pid 5079] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5078] unshare(CLONE_NEWIPC [pid 5075] <... capset resumed>) = 0 [pid 5074] <... write resumed>) = 9 [pid 5079] <... prlimit64 resumed>NULL) = 0 [pid 5078] <... unshare resumed>) = 0 [pid 5079] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5078] unshare(CLONE_NEWCGROUP [pid 5079] <... prlimit64 resumed>NULL) = 0 [pid 5078] <... unshare resumed>) = 0 [pid 5079] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5078] unshare(CLONE_NEWUTS [pid 5073] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5079] <... prlimit64 resumed>NULL) = 0 [pid 5078] <... unshare resumed>) = 0 [pid 5073] <... mount resumed>) = 0 [pid 5079] unshare(CLONE_NEWNS [pid 5078] unshare(CLONE_SYSVSEM [pid 5079] <... unshare resumed>) = 0 [pid 5078] <... unshare resumed>) = 0 [pid 5073] unshare(CLONE_NEWIPC [pid 5078] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5075] unshare(CLONE_NEWNET [pid 5074] close(3 [pid 5073] <... unshare resumed>) = 0 [pid 5079] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5078] <... openat resumed>) = 3 [pid 5073] unshare(CLONE_NEWCGROUP [pid 5079] <... mount resumed>) = 0 [pid 5073] <... unshare resumed>) = 0 [pid 5073] unshare(CLONE_NEWUTS [pid 5079] unshare(CLONE_NEWIPC [pid 5078] write(3, "16777216", 8 [pid 5074] <... close resumed>) = 0 [pid 5073] <... unshare resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5079] <... unshare resumed>) = 0 [pid 5078] <... write resumed>) = 8 [pid 5074] <... openat resumed>) = 3 [pid 5073] unshare(CLONE_SYSVSEM [pid 5074] write(3, "1024", 4 [pid 5073] <... unshare resumed>) = 0 [pid 5074] <... write resumed>) = 4 [pid 5078] close(3 [pid 5074] close(3 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5074] <... close resumed>) = 0 [pid 5079] unshare(CLONE_NEWCGROUP [pid 5078] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5073] <... openat resumed>) = 3 [pid 5079] <... unshare resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5079] unshare(CLONE_NEWUTS [pid 5078] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5079] <... unshare resumed>) = 0 [pid 5078] write(3, "536870912", 9 [pid 5074] write(3, "8192", 4 [pid 5073] write(3, "16777216", 8 [pid 5079] unshare(CLONE_SYSVSEM [pid 5074] <... write resumed>) = 4 [pid 5079] <... unshare resumed>) = 0 [pid 5078] <... write resumed>) = 9 [pid 5074] close(3 [pid 5073] <... write resumed>) = 8 [pid 5079] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5078] close(3 [pid 5074] <... close resumed>) = 0 [pid 5073] close(3 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5073] <... close resumed>) = 0 [pid 5079] write(3, "16777216", 8 [pid 5078] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5074] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5079] <... write resumed>) = 8 [pid 5078] <... openat resumed>) = 3 [pid 5074] write(3, "1024", 4 [pid 5073] <... openat resumed>) = 3 [pid 5079] close(3 [pid 5078] write(3, "1024", 4 [pid 5074] <... write resumed>) = 4 [pid 5079] <... close resumed>) = 0 [pid 5078] <... write resumed>) = 4 [pid 5074] close(3 [pid 5073] write(3, "536870912", 9 [pid 5079] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5078] close(3 [pid 5074] <... close resumed>) = 0 [pid 5073] <... write resumed>) = 9 [pid 5078] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5079] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5074] <... openat resumed>) = 3 [pid 5073] close(3 [pid 5079] write(3, "536870912", 9 [pid 5078] <... openat resumed>) = 3 [pid 5074] write(3, "1024", 4 [pid 5073] <... close resumed>) = 0 [pid 5079] <... write resumed>) = 9 [pid 5074] <... write resumed>) = 4 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5074] close(3 [pid 5079] close(3 [pid 5078] write(3, "8192", 4 [pid 5074] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5079] <... close resumed>) = 0 [pid 5078] <... write resumed>) = 4 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5079] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] close(3 [pid 5074] <... openat resumed>) = 3 [pid 5073] write(3, "1024", 4 [pid 5074] write(3, "1024 1048576 500 1024", 21 [pid 5079] write(3, "1024", 4 [pid 5078] <... close resumed>) = 0 [pid 5074] <... write resumed>) = 21 [pid 5073] <... write resumed>) = 4 [pid 5079] <... write resumed>) = 4 [pid 5078] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5074] close(3 [pid 5073] close(3 [pid 5074] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] getpid( [pid 5079] close(3 [pid 5078] <... openat resumed>) = 3 [pid 5074] <... getpid resumed>) = 1 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5074] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5079] <... close resumed>) = 0 [pid 5078] write(3, "1024", 4 [pid 5074] <... capget resumed>{effective=1<) = 3 [pid 5079] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5078] <... write resumed>) = 4 [pid 5074] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5073] write(3, "8192", 4 [pid 5079] <... openat resumed>) = 3 [pid 5078] close(3 [pid 5074] <... capset resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5074] unshare(CLONE_NEWNET [pid 5073] <... write resumed>) = 4 [pid 5079] write(3, "8192", 4 [pid 5078] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5073] close(3 [pid 5079] <... write resumed>) = 4 [pid 5078] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5079] close(3 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5079] <... close resumed>) = 0 [pid 5078] write(3, "1024", 4 [pid 5073] <... openat resumed>) = 3 [pid 5079] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5078] <... write resumed>) = 4 [pid 5079] <... openat resumed>) = 3 [pid 5078] close(3 [pid 5073] write(3, "1024", 4 [pid 5079] write(3, "1024", 4 [pid 5078] <... close resumed>) = 0 [pid 5073] <... write resumed>) = 4 [pid 5078] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5073] close(3 [pid 5079] <... write resumed>) = 4 [pid 5078] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5079] close(3 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5079] <... close resumed>) = 0 [pid 5078] write(3, "1024 1048576 500 1024", 21 [pid 5073] <... openat resumed>) = 3 [pid 5078] <... write resumed>) = 21 [pid 5078] close(3 [pid 5073] write(3, "1024", 4 [pid 5078] <... close resumed>) = 0 [pid 5078] getpid( [pid 5073] <... write resumed>) = 4 [pid 5078] <... getpid resumed>) = 1 [pid 5073] close(3 [pid 5078] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5078] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5073] <... openat resumed>) = 3 [pid 5078] <... capset resumed>) = 0 [pid 5078] unshare(CLONE_NEWNET [pid 5073] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5073] close(3) = 0 [pid 5073] getpid() = 1 [pid 5073] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5079] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5073] <... capset resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5073] unshare(CLONE_NEWNET [pid 5079] write(3, "1024", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5079] close(3) = 0 [pid 5079] getpid() = 1 [pid 5079] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5075] <... unshare resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "0 65535", 7) = 7 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK) = 3 [pid 5075] dup2(3, 200) = 200 [pid 5075] close(3) = 0 [pid 5075] ioctl(200, TUNSETIFF, 0x7fff7ff76710 [pid 5077] <... unshare resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... unshare resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5077] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5075] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 5074] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [pid 5075] write(3, "0", 1 [pid 5074] write(3, "0 65535", 7 [pid 5077] write(3, "0 65535", 7 [pid 5075] <... write resumed>) = 1 [pid 5074] <... write resumed>) = 7 [pid 5077] <... write resumed>) = 7 [pid 5075] close(3 [pid 5074] close(3 [pid 5077] close(3 [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 5074] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 5077] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 5075] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5077] dup2(3, 200 [pid 5075] write(3, "0", 1 [pid 5074] dup2(3, 200 [pid 5077] <... dup2 resumed>) = 200 [pid 5075] <... write resumed>) = 1 [pid 5074] <... dup2 resumed>) = 200 [pid 5077] close(3 [pid 5075] close(3 [pid 5074] close(3 [pid 5077] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5077] ioctl(200, TUNSETIFF, 0x7fff7ff76710 [pid 5075] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 5075] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 5075] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 5075] close(4) = 0 [pid 5074] ioctl(200, TUNSETIFF, 0x7fff7ff76710 [pid 5075] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5078] <... unshare resumed>) = 0 [pid 5077] <... ioctl resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5077] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 5078] write(3, "0 65535", 7) = 7 [pid 5078] close(3) = 0 [pid 5078] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 5077] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5077] write(3, "0", 1 [pid 5078] dup2(3, 200 [pid 5077] <... write resumed>) = 1 [pid 5077] close(3 [pid 5078] <... dup2 resumed>) = 200 [pid 5077] <... close resumed>) = 0 [pid 5078] close(3 [pid 5077] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 5078] <... close resumed>) = 0 [pid 5078] ioctl(200, TUNSETIFF, 0x7fff7ff76710 [pid 5077] <... openat resumed>) = 3 [pid 5077] write(3, "0", 1) = 1 [pid 5075] <... sendto resumed>) = 40 [pid 5075] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5075] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 5077] close(3 [pid 5075] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5077] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5077] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5075] close(4 [pid 5077] <... socket resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5077] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5075] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] <... socket resumed>) = 4 [pid 5074] <... ioctl resumed>) = 0 [pid 5077] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5074] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "0", 1 [pid 5077] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5074] <... write resumed>) = 1 [pid 5074] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 5077] close(4 [pid 5074] <... openat resumed>) = 3 [pid 5074] write(3, "0", 1) = 1 [pid 5074] close(3) = 0 [pid 5074] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 5074] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 5074] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5077] <... close resumed>) = 0 [pid 5075] <... sendto resumed>) = 64 [pid 5074] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5075] recvfrom(3, [pid 5074] close(4 [pid 5075] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5074] <... close resumed>) = 0 [pid 5079] <... unshare resumed>) = 0 [pid 5077] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5075] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5074] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5079] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5075] <... socket resumed>) = 4 [pid 5073] <... unshare resumed>) = 0 [pid 5075] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 5075] close(4 [pid 5079] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5079] write(3, "0 65535", 7 [pid 5075] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5079] <... write resumed>) = 7 [pid 5075] <... sendto resumed>) = 48 [pid 5073] <... openat resumed>) = 3 [pid 5075] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5079] close(3 [pid 5078] <... ioctl resumed>) = 0 [pid 5077] <... sendto resumed>) = 40 [pid 5074] <... sendto resumed>) = 40 [pid 5073] write(3, "0 65535", 7 [pid 5079] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 5077] recvfrom(3, [pid 5075] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5073] <... write resumed>) = 7 [pid 5079] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 5077] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5073] close(3 [pid 5079] <... openat resumed>) = 3 [pid 5077] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5073] <... close resumed>) = 0 [pid 5079] dup2(3, 200 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... socket resumed>) = 4 [pid 5075] <... socket resumed>) = 4 [pid 5073] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 5079] <... dup2 resumed>) = 200 [pid 5078] write(3, "0", 1 [pid 5077] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5075] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5074] recvfrom(3, [pid 5073] <... openat resumed>) = 3 [pid 5079] close(3 [pid 5078] <... write resumed>) = 1 [pid 5077] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] close(3 [pid 5077] close(4 [pid 5075] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5074] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5073] dup2(3, 200 [pid 5079] ioctl(200, TUNSETIFF, 0x7fff7ff76710 [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] close(4 [pid 5074] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5073] <... dup2 resumed>) = 200 [pid 5078] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 5077] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5075] <... close resumed>) = 0 [pid 5074] <... socket resumed>) = 4 [pid 5078] <... openat resumed>) = 3 [pid 5075] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5073] close(3 [pid 5079] <... ioctl resumed>) = 0 [pid 5078] write(3, "0", 1 [pid 5075] <... sendto resumed>) = 60 [pid 5074] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5073] <... close resumed>) = 0 [pid 5078] <... write resumed>) = 1 [pid 5075] recvfrom(3, [pid 5074] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5073] ioctl(200, TUNSETIFF, 0x7fff7ff76710 [pid 5078] close(3 [pid 5077] <... sendto resumed>) = 64 [pid 5079] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 5075] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5074] close(4 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... close resumed>) = 0 [pid 5075] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 5075] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5079] write(3, "0", 1 [pid 5078] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5077] recvfrom(3, [pid 5074] <... close resumed>) = 0 [pid 5079] <... write resumed>) = 1 [pid 5078] <... socket resumed>) = 3 [pid 5077] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5075] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5074] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5079] close(3 [pid 5078] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5077] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5075] close(4 [pid 5073] <... ioctl resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... socket resumed>) = 4 [pid 5079] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 5078] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5077] <... socket resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 5079] <... openat resumed>) = 3 [pid 5078] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5077] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5075] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5073] <... openat resumed>) = 3 [pid 5079] write(3, "0", 1 [pid 5078] close(4 [pid 5077] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5074] <... sendto resumed>) = 64 [pid 5079] <... write resumed>) = 1 [pid 5078] <... close resumed>) = 0 [pid 5077] close(4 [pid 5074] recvfrom(3, [pid 5073] write(3, "0", 1 [pid 5079] close(3 [pid 5078] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5077] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5074] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5073] <... write resumed>) = 1 [pid 5075] <... sendto resumed>) = 44 [pid 5079] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5078] <... sendto resumed>) = 40 [pid 5077] <... sendto resumed>) = 48 [pid 5074] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5073] close(3 [pid 5079] <... socket resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5079] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5078] recvfrom(3, [pid 5075] recvfrom(3, [pid 5074] <... socket resumed>) = 4 [pid 5079] <... socket resumed>) = 4 [pid 5078] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5077] recvfrom(3, [pid 5075] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5073] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 5079] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5078] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5077] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5075] close(3 [pid 5074] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5079] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5078] <... socket resumed>) = 4 [pid 5077] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5079] close(4 [pid 5078] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5077] <... socket resumed>) = 4 [pid 5075] mkdir("/dev/binderfs", 0777 [pid 5073] write(3, "0", 1 [pid 5079] <... close resumed>) = 0 [pid 5078] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5077] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5079] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5073] <... write resumed>) = 1 [pid 5078] close(4 [pid 5077] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5075] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5074] close(4 [pid 5073] close(3 [pid 5078] <... close resumed>) = 0 [pid 5079] <... sendto resumed>) = 40 [pid 5077] close(4 [pid 5078] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5079] recvfrom(3, [pid 5078] <... sendto resumed>) = 64 [pid 5077] <... close resumed>) = 0 [pid 5075] <... mount resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5078] recvfrom(3, [pid 5077] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5073] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5079] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5078] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5075] getpid( [pid 5074] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5079] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5078] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5077] <... sendto resumed>) = 60 [pid 5075] <... getpid resumed>) = 1 [pid 5073] <... socket resumed>) = 3 [pid 5078] <... socket resumed>) = 4 [pid 5074] <... sendto resumed>) = 48 [pid 5079] <... socket resumed>) = 4 [pid 5077] recvfrom(3, [pid 5073] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5077] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5075] mkdir("/syzcgroup/unified/syz0", 0777 [pid 5079] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5078] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5074] recvfrom(3, [pid 5073] <... socket resumed>) = 4 [pid 5079] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5078] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5077] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5074] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5079] close(4 [pid 5078] close(4 [pid 5077] <... socket resumed>) = 4 [pid 5074] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5079] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5074] <... socket resumed>) = 4 [pid 5079] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5078] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5074] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5079] <... sendto resumed>) = 64 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5078] <... sendto resumed>) = 48 [pid 5077] close(4 [pid 5074] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5078] recvfrom(3, [pid 5077] <... close resumed>) = 0 [pid 5074] close(4 [pid 5078] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5077] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5074] <... close resumed>) = 0 [pid 5079] recvfrom(3, [pid 5078] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5075] openat(AT_FDCWD, "/syzcgroup/unified/syz0/pids.max", O_WRONLY|O_CLOEXEC [pid 5073] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5079] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5078] <... socket resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 5074] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5073] close(4 [pid 5079] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5078] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5077] <... sendto resumed>) = 44 [pid 5073] <... close resumed>) = 0 [pid 5079] <... socket resumed>) = 4 [pid 5078] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5077] recvfrom(3, [pid 5075] write(3, "32", 2 [pid 5074] <... sendto resumed>) = 60 [pid 5079] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5075] <... write resumed>) = 2 [pid 5074] recvfrom(3, [pid 5079] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5078] close(4 [pid 5077] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5075] close(3 [pid 5074] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5073] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5079] close(4 [pid 5078] <... close resumed>) = 0 [pid 5077] close(3 [pid 5075] <... close resumed>) = 0 [pid 5074] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5079] <... close resumed>) = 0 [pid 5078] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5077] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/syzcgroup/unified/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5074] <... socket resumed>) = 4 [pid 5079] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5078] <... sendto resumed>) = 60 [pid 5077] mkdir("/dev/binderfs", 0777 [pid 5074] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5073] <... sendto resumed>) = 40 [pid 5075] <... openat resumed>) = 3 [pid 5079] <... sendto resumed>) = 48 [pid 5077] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5075] write(3, "1", 1 [pid 5074] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5079] recvfrom(3, [pid 5073] recvfrom(3, [pid 5079] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5078] recvfrom(3, [pid 5077] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5074] close(4 [pid 5073] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5079] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5078] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5075] <... write resumed>) = 1 [pid 5074] <... close resumed>) = 0 [pid 5073] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5079] <... socket resumed>) = 4 [pid 5078] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5077] <... mount resumed>) = 0 [pid 5079] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5078] <... socket resumed>) = 4 [pid 5075] close(3 [pid 5074] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5073] <... socket resumed>) = 4 [pid 5079] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5078] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5077] getpid( [pid 5075] <... close resumed>) = 0 [pid 5073] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5079] close(4 [pid 5078] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5077] <... getpid resumed>) = 1 [pid 5075] mkdir("/syzcgroup/cpu/syz0", 0777 [pid 5073] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] close(4 [pid 5077] mkdir("/syzcgroup/unified/syz3", 0777 [pid 5079] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5073] close(4 [pid 5078] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5079] <... sendto resumed>) = 60 [pid 5078] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5074] <... sendto resumed>) = 44 [pid 5075] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5079] recvfrom(3, [pid 5077] <... mkdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5074] close(3) = 0 [pid 5079] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5078] <... sendto resumed>) = 44 [pid 5077] openat(AT_FDCWD, "/syzcgroup/unified/syz3/pids.max", O_WRONLY|O_CLOEXEC [pid 5075] <... openat resumed>) = 3 [pid 5073] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5079] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5078] recvfrom(3, [pid 5077] <... openat resumed>) = 3 [pid 5075] write(3, "1", 1 [pid 5074] mkdir("/dev/binderfs", 0777 [pid 5079] <... socket resumed>) = 4 [pid 5078] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5077] write(3, "32", 2 [pid 5073] <... sendto resumed>) = 64 [pid 5079] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5078] close(3 [pid 5077] <... write resumed>) = 2 [pid 5075] <... write resumed>) = 1 [pid 5074] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5079] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] close(3 [pid 5074] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5073] recvfrom(3, [pid 5079] close(4 [pid 5078] mkdir("/dev/binderfs", 0777 [pid 5077] <... close resumed>) = 0 [pid 5075] close(3 [pid 5074] <... mount resumed>) = 0 [pid 5073] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5079] <... close resumed>) = 0 [pid 5078] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5077] openat(AT_FDCWD, "/syzcgroup/unified/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5075] <... close resumed>) = 0 [pid 5074] getpid( [pid 5079] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5078] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5077] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5074] <... getpid resumed>) = 1 [pid 5073] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5078] <... mount resumed>) = 0 [pid 5077] write(3, "1", 1 [pid 5074] mkdir("/syzcgroup/unified/syz2", 0777 [pid 5073] <... socket resumed>) = 4 [pid 5079] <... sendto resumed>) = 44 [pid 5078] getpid( [pid 5079] recvfrom(3, [pid 5077] <... write resumed>) = 1 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5079] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5078] <... getpid resumed>) = 1 [pid 5077] close(3 [pid 5079] close(3 [pid 5078] mkdir("/syzcgroup/unified/syz4", 0777 [pid 5077] <... close resumed>) = 0 [pid 5075] write(3, "313524224", 9 [pid 5074] openat(AT_FDCWD, "/syzcgroup/unified/syz2/pids.max", O_WRONLY|O_CLOEXEC [pid 5073] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5079] <... close resumed>) = 0 [pid 5077] mkdir("/syzcgroup/cpu/syz3", 0777 [pid 5075] <... write resumed>) = 9 [pid 5073] close(4 [pid 5079] mkdir("/dev/binderfs", 0777 [pid 5075] close(3) = 0 [pid 5073] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5079] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5078] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5079] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5073] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5075] write(3, "314572800", 9 [pid 5073] <... sendto resumed>) = 48 [pid 5075] <... write resumed>) = 9 [pid 5077] <... mkdir resumed>) = 0 [pid 5073] recvfrom(3, [pid 5075] close(3 [pid 5073] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5079] <... mount resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/syzcgroup/unified/syz4/pids.max", O_WRONLY|O_CLOEXEC [pid 5077] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5075] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5079] getpid( [pid 5078] <... openat resumed>) = 3 [pid 5075] mkdir("/syzcgroup/net/syz0", 0777 [pid 5074] write(3, "32", 2 [pid 5073] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 5079] <... getpid resumed>) = 1 [pid 5078] write(3, "32", 2 [pid 5077] <... openat resumed>) = 3 [pid 5074] <... write resumed>) = 2 [pid 5079] mkdir("/syzcgroup/unified/syz5", 0777 [pid 5074] close(3 [pid 5073] <... socket resumed>) = 4 [pid 5078] <... write resumed>) = 2 [pid 5077] write(3, "1", 1 [pid 5074] <... close resumed>) = 0 [pid 5073] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 5078] close(3 [pid 5077] <... write resumed>) = 1 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/syzcgroup/unified/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5073] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 5075] openat(AT_FDCWD, "/syzcgroup/net/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5073] close(4 [pid 5078] <... close resumed>) = 0 [pid 5077] close(3 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/syzcgroup/unified/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5077] <... close resumed>) = 0 [pid 5074] write(3, "1", 1 [pid 5073] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5075] write(3, "1", 1 [pid 5074] <... write resumed>) = 1 [pid 5073] <... sendto resumed>) = 60 [pid 5079] openat(AT_FDCWD, "/syzcgroup/unified/syz5/pids.max", O_WRONLY|O_CLOEXEC [pid 5078] write(3, "1", 1 [pid 5075] <... write resumed>) = 1 [pid 5074] close(3 [pid 5073] recvfrom(3, [pid 5077] <... openat resumed>) = 3 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... write resumed>) = 1 [pid 5077] write(3, "313524224", 9 [pid 5075] close(3 [pid 5074] <... close resumed>) = 0 [pid 5073] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5079] write(3, "32", 2 [pid 5078] close(3 [pid 5077] <... write resumed>) = 9 [pid 5075] <... close resumed>) = 0 [pid 5074] mkdir("/syzcgroup/cpu/syz2", 0777 [pid 5079] <... write resumed>) = 2 [pid 5078] <... close resumed>) = 0 [pid 5075] mkdir("./0", 0777 [pid 5073] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 5073] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 5073] close(4) = 0 [pid 5073] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 5079] close(3 [pid 5078] mkdir("/syzcgroup/cpu/syz4", 0777 [pid 5077] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5079] openat(AT_FDCWD, "/syzcgroup/unified/syz5/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5073] <... sendto resumed>) = 44 [pid 5079] <... openat resumed>) = 3 [pid 5078] <... mkdir resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5079] write(3, "1", 1) = 1 [pid 5078] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5077] write(3, "314572800", 9 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5073] recvfrom(3, [pid 5079] close(3 [pid 5077] <... write resumed>) = 9 [pid 5074] <... openat resumed>) = 3 [pid 5079] <... close resumed>) = 0 [pid 5077] close(3 [pid 5079] mkdir("/syzcgroup/cpu/syz5", 0777 [pid 5077] <... close resumed>) = 0 [pid 5073] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5078] <... openat resumed>) = 3 [pid 5077] mkdir("/syzcgroup/net/syz3", 0777 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] write(3, "1", 1 [pid 5073] close(3 [pid 5078] write(3, "1", 1 [pid 5075] close(3 [pid 5073] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] mkdir("/dev/binderfs", 0777 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5073] mount("binder", "/dev/binderfs", "binder", 0, NULL./strace-static-x86_64: Process 5105 attached [pid 5079] <... mkdir resumed>) = 0 [pid 5078] <... write resumed>) = 1 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556031690) = 3 [pid 5074] <... write resumed>) = 1 [pid 5073] <... mount resumed>) = 0 [pid 5105] set_robust_list(0x5555560316a0, 24 [pid 5074] close(3 [pid 5079] openat(AT_FDCWD, "/syzcgroup/cpu/syz5/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5074] <... close resumed>) = 0 [pid 5073] getpid( [pid 5105] <... set_robust_list resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/syzcgroup/net/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5074] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5105] chdir("./0" [pid 5079] <... openat resumed>) = 3 [pid 5078] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... getpid resumed>) = 1 [pid 5078] <... close resumed>) = 0 [pid 5074] write(3, "313524224", 9) = 9 [pid 5074] close(3 [pid 5078] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5074] <... close resumed>) = 0 [pid 5105] <... chdir resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5077] write(3, "1", 1 [pid 5074] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... write resumed>) = 1 [pid 5074] <... openat resumed>) = 3 [pid 5073] mkdir("/syzcgroup/unified/syz1", 0777 [pid 5079] write(3, "1", 1 [pid 5105] <... prctl resumed>) = 0 [pid 5078] write(3, "313524224", 9 [pid 5077] close(3 [pid 5074] write(3, "314572800", 9 [pid 5105] setpgid(0, 0 [pid 5079] <... write resumed>) = 1 [pid 5078] <... write resumed>) = 9 [pid 5074] <... write resumed>) = 9 [pid 5105] <... setpgid resumed>) = 0 [pid 5079] close(3 [pid 5078] close(3 [pid 5077] <... close resumed>) = 0 [pid 5074] close(3 [pid 5105] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5079] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5077] mkdir("./0", 0777 [pid 5074] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/syzcgroup/cpu/syz5/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5105] <... symlink resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5077] <... mkdir resumed>) = 0 [pid 5074] mkdir("/syzcgroup/net/syz2", 0777 [pid 5073] <... mkdir resumed>) = 0 [pid 5105] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5079] write(3, "313524224", 9 [pid 5078] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] openat(AT_FDCWD, "/syzcgroup/unified/syz1/pids.max", O_WRONLY|O_CLOEXEC [pid 5105] <... symlink resumed>) = 0 [pid 5079] <... write resumed>) = 9 [pid 5078] write(3, "314572800", 9 [pid 5077] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 5079] close(3 [pid 5105] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5079] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5078] <... write resumed>) = 9 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] write(3, "32", 2 [pid 5078] close(3 [pid 5079] openat(AT_FDCWD, "/syzcgroup/cpu/syz5/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5078] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] mkdir("/syzcgroup/net/syz4", 0777 [pid 5105] <... symlink resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5077] close(3 [pid 5074] openat(AT_FDCWD, "/syzcgroup/net/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5073] <... write resumed>) = 2 [pid 5079] write(3, "314572800", 9 [pid 5077] <... close resumed>) = 0 [pid 5073] close(3 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] <... write resumed>) = 9 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5105] <... openat resumed>) = 3 [pid 5079] close(3 [pid 5073] <... close resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5106 attached [pid 5078] openat(AT_FDCWD, "/syzcgroup/net/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5073] openat(AT_FDCWD, "/syzcgroup/unified/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5079] <... close resumed>) = 0 [pid 5079] mkdir("/syzcgroup/net/syz5", 0777 [pid 5073] <... openat resumed>) = 3 [pid 5105] write(3, "1000", 4 [pid 5078] <... openat resumed>) = 3 [pid 5073] write(3, "1", 1 [pid 5105] <... write resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 5078] write(3, "1", 1 [pid 5073] <... write resumed>) = 1 [pid 5106] set_robust_list(0x5555560316a0, 24) = 0 [pid 5105] close(3) = 0 [pid 5105] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5105] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5105] read(200, 0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5105] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff63eaac000 [pid 5105] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5105] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] close(3 [pid 5078] <... write resumed>) = 1 [pid 5106] chdir("./0" [pid 5105] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5078] close(3 [pid 5077] <... clone resumed>, child_tidptr=0x555556031690) = 3 [pid 5074] write(3, "1", 1 [pid 5073] <... close resumed>) = 0 [pid 5106] <... chdir resumed>) = 0 [pid 5105] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5079] openat(AT_FDCWD, "/syzcgroup/net/syz5/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5078] <... close resumed>) = 0 [pid 5074] <... write resumed>) = 1 [pid 5073] mkdir("/syzcgroup/cpu/syz1", 0777./strace-static-x86_64: Process 5107 attached [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... openat resumed>) = 3 [pid 5078] mkdir("./0", 0777 [pid 5074] close(3 [pid 5107] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5105] <... clone3 resumed> => {parent_tid=[4]}, 88) = 4 [pid 5107] <... rseq resumed>) = 0 [pid 5105] rt_sigprocmask(SIG_SETMASK, [], [pid 5078] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5107] set_robust_list(0x7ff63eacc9a0, 24 [pid 5105] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] mkdir("./0", 0777 [pid 5107] <... set_robust_list resumed>) = 0 [pid 5105] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5105] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5107] memfd_create("syzkaller", 0 [pid 5105] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... memfd_create resumed>) = 3 [pid 5105] <... futex resumed>) = 0 [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5106] <... prctl resumed>) = 0 [pid 5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] write(3, "1", 1 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] <... mkdir resumed>) = 0 [pid 5107] <... mmap resumed>) = 0x7ff6366ac000 [pid 5106] setpgid(0, 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5106] <... setpgid resumed>) = 0 [pid 5105] <... mmap resumed>) = 0x7ff63668b000 [pid 5079] <... write resumed>) = 1 [pid 5078] close(3 [pid 5074] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5106] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5079] close(3 [pid 5078] <... close resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... openat resumed>) = 3 [pid 5106] <... symlink resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5073] write(3, "1", 1 [pid 5105] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5079] mkdir("./0", 0777 [pid 5074] close(3 [pid 5073] <... write resumed>) = 1 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5108 attached [pid 5107] <... write resumed>) = 262144 [pid 5106] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5105] <... mprotect resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5109 attached [pid 5108] set_robust_list(0x5555560316a0, 24 [pid 5107] munmap(0x7ff6366ac000, 138412032 [pid 5106] <... symlink resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] close(3 [pid 5108] <... set_robust_list resumed>) = 0 [pid 5105] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5106] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5073] <... close resumed>) = 0 [pid 5108] chdir("./0" [pid 5107] <... munmap resumed>) = 0 [pid 5106] <... symlink resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5079] <... openat resumed>) = 3 [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5073] <... openat resumed>) = 3 [pid 5106] <... openat resumed>) = 3 [pid 5073] write(3, "313524224", 9) = 9 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 5106] write(3, "1000", 4 [pid 5073] <... openat resumed>) = 3 [pid 5109] set_robust_list(0x5555560316a0, 24 [pid 5108] <... chdir resumed>) = 0 [pid 5107] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5106] <... write resumed>) = 4 [pid 5105] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5078] <... clone resumed>, child_tidptr=0x555556031690) = 3 [pid 5109] <... set_robust_list resumed>) = 0 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5106] close(3 [pid 5105] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5079] close(3 [pid 5073] write(3, "314572800", 9 [pid 5107] <... openat resumed>) = 4 [pid 5106] <... close resumed>) = 0 [pid 5079] <... close resumed>) = 0 ./strace-static-x86_64: Process 5110 attached [pid 5108] <... prctl resumed>) = 0 [pid 5107] ioctl(4, LOOP_SET_FD, 3 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5110] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5109] chdir("./0" [pid 5108] setpgid(0, 0 [pid 5106] read(200, [pid 5073] <... write resumed>) = 9 [pid 5110] <... rseq resumed>) = 0 [pid 5106] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 ./strace-static-x86_64: Process 5111 attached [pid 5110] set_robust_list(0x7ff6366ab9a0, 24 [pid 5109] <... chdir resumed>) = 0 [pid 5106] read(200, [pid 5074] <... clone resumed>, child_tidptr=0x555556031690) = 3 [pid 5073] close(3 [pid 5111] set_robust_list(0x5555560316a0, 24 [pid 5110] <... set_robust_list resumed>) = 0 [pid 5106] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5111] <... set_robust_list resumed>) = 0 [pid 5110] rt_sigprocmask(SIG_SETMASK, [], [pid 5106] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... close resumed>) = 0 [pid 5111] chdir("./0" [pid 5110] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5106] <... symlink resumed>) = 0 [pid 5111] <... chdir resumed>) = 0 [pid 5110] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] mkdir("/syzcgroup/net/syz1", 0777 [pid 5111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5106] <... futex resumed>) = 0 [pid 5111] <... prctl resumed>) = 0 [pid 5106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5106] <... mmap resumed>) = 0x7ff63eaac000 [pid 5106] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5111] setpgid(0, 0 [pid 5109] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5108] <... setpgid resumed>) = 0 [pid 5111] <... setpgid resumed>) = 0 [pid 5106] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5111] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5109] <... prctl resumed>) = 0 [pid 5108] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5111] <... symlink resumed>) = 0 [pid 5106] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5111] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5109] setpgid(0, 0 [pid 5079] <... clone resumed>, child_tidptr=0x555556031690) = 3 ./strace-static-x86_64: Process 5112 attached [pid 5111] <... symlink resumed>) = 0 [pid 5108] <... symlink resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/syzcgroup/net/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 5112] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5109] <... setpgid resumed>) = 0 [pid 5108] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5106] <... clone3 resumed> => {parent_tid=[4]}, 88) = 4 [pid 5112] <... rseq resumed>) = 0 [pid 5111] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5106] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] <... openat resumed>) = 3 [pid 5112] set_robust_list(0x7ff63eacc9a0, 24 [pid 5106] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5112] <... set_robust_list resumed>) = 0 [pid 5111] <... symlink resumed>) = 0 [pid 5106] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] rt_sigprocmask(SIG_SETMASK, [], [pid 5106] <... futex resumed>) = 0 [pid 5073] write(3, "1", 1 [pid 5112] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5106] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... write resumed>) = 1 [pid 5112] memfd_create("syzkaller", 0 [pid 5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5112] <... memfd_create resumed>) = 3 [pid 5111] <... openat resumed>) = 3 [pid 5106] <... futex resumed>) = 0 [pid 5073] close(3 [pid 5108] <... symlink resumed>) = 0 [pid 5109] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5108] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] <... close resumed>) = 0 [pid 5112] <... mmap resumed>) = 0x7ff6366ac000 [pid 5106] <... mmap resumed>) = 0x7ff63668b000 [pid 5073] mkdir("./0", 0777 [pid 5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5111] write(3, "1000", 4 [pid 5073] <... mkdir resumed>) = 0 [pid 5111] <... write resumed>) = 4 [pid 5111] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5111] read(200, [pid 5073] <... openat resumed>) = 3 [pid 5108] <... symlink resumed>) = 0 [pid 5106] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5111] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5109] <... symlink resumed>) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5107] <... ioctl resumed>) = 0 [pid 5106] <... mprotect resumed>) = 0 [pid 5105] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 5112] <... write resumed>) = 262144 [pid 5111] read(200, [pid 5109] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5108] <... openat resumed>) = 3 [pid 5107] close(3 [pid 5106] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5108] write(3, "1000", 4 [pid 5109] <... symlink resumed>) = 0 [pid 5108] <... write resumed>) = 4 [pid 5107] <... close resumed>) = 0 [pid 5105] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5111] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5109] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5108] close(3 [pid 5107] mkdir("./file0", 0777 [pid 5105] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] close(3 [pid 5108] <... close resumed>) = 0 [pid 5105] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... close resumed>) = 0 [pid 5111] symlink("/dev/binderfs", "./binderfs" [pid 5110] <... futex resumed>) = 0 [pid 5108] read(200, [pid 5107] <... mkdir resumed>) = 0 [pid 5105] <... futex resumed>) = 1 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5112] munmap(0x7ff6366ac000, 138412032 [pid 5111] <... symlink resumed>) = 0 [pid 5110] creat("./bus", 000 [pid 5109] <... symlink resumed>) = 0 [pid 5108] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5107] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5106] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5105] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5112] <... munmap resumed>) = 0 [pid 5110] <... creat resumed>) = 3 [pid 5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5108] read(200, [pid 5106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0}./strace-static-x86_64: Process 5113 attached [pid 5111] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... openat resumed>) = 3 [pid 5108] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5113] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5112] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5111] <... futex resumed>) = 0 [pid 5110] <... futex resumed>) = 1 [pid 5108] read(200, [pid 5106] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 5105] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5114 attached [pid 5113] <... rseq resumed>) = 0 [pid 5112] <... openat resumed>) = 4 [pid 5111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5110] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] write(3, "1000", 4 [pid 5108] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [ 58.676871][ T5107] loop0: detected capacity change from 0 to 512 [pid 5106] rt_sigprocmask(SIG_SETMASK, [], [pid 5114] set_robust_list(0x5555560316a0, 24 [pid 5113] set_robust_list(0x7ff6366ab9a0, 24 [pid 5112] ioctl(4, LOOP_SET_FD, 3 [pid 5111] <... mmap resumed>) = 0x7ff63eaac000 [pid 5110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5108] symlink("/dev/binderfs", "./binderfs" [pid 5106] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5105] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... set_robust_list resumed>) = 0 [pid 5110] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5109] <... write resumed>) = 4 [pid 5108] <... symlink resumed>) = 0 [pid 5105] <... futex resumed>) = 0 [pid 5114] <... set_robust_list resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555556031690) = 3 [pid 5114] chdir("./0" [pid 5113] rt_sigprocmask(SIG_SETMASK, [], [pid 5112] <... ioctl resumed>) = 0 [pid 5111] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5110] <... mount resumed>) = 0 [pid 5109] close(3 [pid 5108] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5108] <... futex resumed>) = 0 [pid 5113] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] <... close resumed>) = 0 [pid 5108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5109] read(200, [pid 5111] <... mprotect resumed>) = 0 [pid 5109] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5108] <... mmap resumed>) = 0x7ff63eaac000 [pid 5109] read(200, [pid 5108] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5111] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5109] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5109] read(200, [pid 5114] <... chdir resumed>) = 0 [pid 5111] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5109] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5108] <... mprotect resumed>) = 0 [pid 5109] symlink("/dev/binderfs", "./binderfs" [pid 5114] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5111] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0}./strace-static-x86_64: Process 5117 attached [pid 5114] <... prctl resumed>) = 0 [pid 5110] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... symlink resumed>) = 0 [pid 5108] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5117] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5114] setpgid(0, 0 [pid 5110] <... futex resumed>) = 1 [pid 5109] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5105] <... futex resumed>) = 0 [pid 5117] <... rseq resumed>) = 0 [pid 5114] <... setpgid resumed>) = 0 [pid 5110] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] set_robust_list(0x7ff63eacc9a0, 24 [pid 5114] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5111] <... clone3 resumed> => {parent_tid=[4]}, 88) = 4 [pid 5117] <... set_robust_list resumed>) = 0 [pid 5114] <... symlink resumed>) = 0 [pid 5112] close(3 [pid 5111] rt_sigprocmask(SIG_SETMASK, [], [pid 5109] <... futex resumed>) = 0 [pid 5106] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5117] rt_sigprocmask(SIG_SETMASK, [], [pid 5114] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5113] <... futex resumed>) = 0 [pid 5112] <... close resumed>) = 0 [pid 5111] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5106] <... futex resumed>) = 1 [pid 5114] <... symlink resumed>) = 0 [pid 5111] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5114] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5113] creat("./bus", 000 [pid 5112] mkdir("./file0", 0777 [pid 5111] <... futex resumed>) = 0 [pid 5110] <... futex resumed>) = 0 [pid 5109] <... mmap resumed>) = 0x7ff63eaac000 [pid 5106] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5105] <... futex resumed>) = 1 ./strace-static-x86_64: Process 5118 attached [pid 5117] memfd_create("syzkaller", 0 [pid 5113] <... creat resumed>) = 3 [pid 5112] <... mkdir resumed>) = 0 [pid 5111] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5105] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... symlink resumed>) = 0 [pid 5111] <... futex resumed>) = 0 [pid 5117] <... memfd_create resumed>) = 3 [pid 5114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5113] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5110] <... open resumed>) = 5 [pid 5118] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5114] <... openat resumed>) = 3 [pid 5113] <... futex resumed>) = 1 [pid 5111] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5109] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5108] <... clone3 resumed> => {parent_tid=[4]}, 88) = 4 [pid 5106] <... futex resumed>) = 0 [pid 5118] <... rseq resumed>) = 0 [pid 5117] <... mmap resumed>) = 0x7ff63668b000 [pid 5114] write(3, "1000", 4 [pid 5113] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5111] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5109] <... mprotect resumed>) = 0 [pid 5108] rt_sigprocmask(SIG_SETMASK, [], [pid 5106] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] set_robust_list(0x7ff63eacc9a0, 24 [pid 5114] <... write resumed>) = 4 [pid 5111] <... mprotect resumed>) = 0 [pid 5109] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5108] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5118] <... set_robust_list resumed>) = 0 [pid 5117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5114] close(3 [pid 5111] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5110] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5108] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] rt_sigprocmask(SIG_SETMASK, [], [pid 5114] <... close resumed>) = 0 [pid 5111] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5109] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5108] <... futex resumed>) = 0 [pid 5118] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5114] read(200, [ 58.742170][ T5112] loop3: detected capacity change from 0 to 512 [pid 5111] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5108] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5121 attached ./strace-static-x86_64: Process 5120 attached [pid 5118] memfd_create("syzkaller", 0 [pid 5117] <... write resumed>) = 262144 [pid 5114] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5110] <... futex resumed>) = 1 [pid 5109] <... clone3 resumed> => {parent_tid=[4]}, 88) = 4 [pid 5108] <... futex resumed>) = 0 [pid 5107] <... mount resumed>) = 0 [pid 5106] <... futex resumed>) = 0 [pid 5105] <... futex resumed>) = 0 [pid 5118] <... memfd_create resumed>) = 3 [pid 5114] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5114] read(200, 0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5114] symlink("/dev/binderfs", "./binderfs" [pid 5113] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5114] <... symlink resumed>) = 0 [pid 5109] rt_sigprocmask(SIG_SETMASK, [], [pid 5108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5106] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] <... mmap resumed>) = 0x7ff6366ac000 [pid 5114] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... mount resumed>) = 0 [pid 5109] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5114] <... futex resumed>) = 0 [pid 5113] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... mmap resumed>) = 0x7ff63668b000 [pid 5107] <... openat resumed>) = 6 [pid 5114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5109] <... futex resumed>) = 0 [pid 5114] <... mmap resumed>) = 0x7ff63eaac000 [pid 5109] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] chdir("./file0" [pid 5117] munmap(0x7ff63668b000, 138412032 [pid 5114] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5113] <... futex resumed>) = 1 [pid 5111] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 5109] <... futex resumed>) = 0 [pid 5107] <... chdir resumed>) = 0 [pid 5106] <... futex resumed>) = 0 [pid 5117] <... munmap resumed>) = 0 [pid 5114] <... mprotect resumed>) = 0 [ 58.787342][ T5107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.794895][ T5112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.800224][ T5107] ext4 filesystem being mounted at /root/syzkaller.p47fVk/0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.813266][ T5112] ext4 filesystem being mounted at /root/syzkaller.hT4DtY/0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5113] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5111] rt_sigprocmask(SIG_SETMASK, [], [pid 5109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5107] ioctl(4, LOOP_CLR_FD [pid 5106] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5120] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5118] <... write resumed>) = 262144 [pid 5117] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5114] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5111] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5110] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5105] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... rseq resumed>) = 0 [pid 5120] <... rseq resumed>) = 0 [pid 5113] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5109] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5107] <... ioctl resumed>) = 0 [pid 5106] <... futex resumed>) = 0 [pid 5117] <... openat resumed>) = 4 [pid 5114] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5113] <... open resumed>) = 5 [pid 5111] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5107] close(4 [pid 5117] ioctl(4, LOOP_SET_FD, 3 [pid 5114] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5113] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] <... futex resumed>) = 0 [pid 5109] <... mprotect resumed>) = 0 [pid 5107] <... close resumed>) = 0 [pid 5106] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] set_robust_list(0x7ff63eaab9a0, 24 [pid 5120] set_robust_list(0x7ff63eacc9a0, 24 [pid 5118] munmap(0x7ff6366ac000, 138412032 [pid 5110] <... mmap resumed>) = 0x20000000 [pid 5108] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5105] <... futex resumed>) = 0 [pid 5120] <... set_robust_list resumed>) = 0 [pid 5118] <... munmap resumed>) = 0 [pid 5109] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5108] <... mprotect resumed>) = 0 [pid 5107] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5110] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5108] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5118] <... openat resumed>) = 4 [pid 5108] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5118] ioctl(4, LOOP_SET_FD, 3 [pid 5108] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0}./strace-static-x86_64: Process 5124 attached [pid 5121] <... set_robust_list resumed>) = 0 [pid 5120] rt_sigprocmask(SIG_SETMASK, [], [pid 5117] <... ioctl resumed>) = 0 [pid 5111] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5110] <... futex resumed>) = 0 [pid 5109] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5107] <... futex resumed>) = 0 [pid 5105] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5120] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5110] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5105] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5126 attached ./strace-static-x86_64: Process 5125 attached [pid 5124] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5121] rt_sigprocmask(SIG_SETMASK, [], [pid 5120] memfd_create("syzkaller", 0 [pid 5118] <... ioctl resumed>) = 0 [pid 5117] close(3 [pid 5114] <... clone3 resumed> => {parent_tid=[4]}, 88) = 4 [pid 5113] <... futex resumed>) = 0 [pid 5112] <... mount resumed>) = 0 [pid 5107] memfd_create("syzkaller", 0 [pid 5106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5126] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5124] <... rseq resumed>) = 0 [pid 5121] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5120] <... memfd_create resumed>) = 3 [pid 5118] close(3 [pid 5117] <... close resumed>) = 0 [pid 5114] rt_sigprocmask(SIG_SETMASK, [], [pid 5113] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5109] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 5108] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 5125] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5106] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... rseq resumed>) = 0 [pid 5124] set_robust_list(0x7ff63eacc9a0, 24 [pid 5121] creat("./bus", 000 [pid 5120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5118] <... close resumed>) = 0 [pid 5117] mkdir("./file0", 0777 [pid 5113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5112] <... openat resumed>) = 6 [pid 5109] rt_sigprocmask(SIG_SETMASK, [], [pid 5108] rt_sigprocmask(SIG_SETMASK, [], [pid 5107] <... memfd_create resumed>) = 4 [pid 5106] <... futex resumed>) = 0 [pid 5126] set_robust_list(0x7ff63eaab9a0, 24 [pid 5120] <... mmap resumed>) = 0x7ff63668b000 [pid 5118] mkdir("./file0", 0777 [pid 5114] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5113] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5112] chdir(0x20000000 [pid 5109] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5108] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5106] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5126] <... set_robust_list resumed>) = 0 [pid 5120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5118] <... mkdir resumed>) = 0 [pid 5114] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... mmap resumed>) = 0x20000000 [pid 5109] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 5109] <... futex resumed>) = 0 [pid 5126] rt_sigprocmask(SIG_SETMASK, [], [pid 5125] <... rseq resumed>) = 0 [pid 5124] <... set_robust_list resumed>) = 0 [pid 5121] <... creat resumed>) = 3 [pid 5120] <... write resumed>) = 262144 [pid 5118] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5117] <... mkdir resumed>) = 0 [pid 5114] <... futex resumed>) = 0 [pid 5113] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] ioctl(4, LOOP_CLR_FD [pid 5108] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5126] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5125] set_robust_list(0x7ff6366ab9a0, 24 [pid 5124] rt_sigprocmask(SIG_SETMASK, [], [pid 5120] munmap(0x7ff63668b000, 138412032 [pid 5114] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5124] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5121] <... futex resumed>) = 1 [pid 5114] <... futex resumed>) = 0 [pid 5113] <... futex resumed>) = 1 [pid 5112] <... ioctl resumed>) = 0 [pid 5106] <... futex resumed>) = 0 [pid 5124] memfd_create("syzkaller", 0 [pid 5121] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] <... munmap resumed>) = 0 [ 58.843316][ T5117] loop5: detected capacity change from 0 to 512 [ 58.854856][ T5118] loop4: detected capacity change from 0 to 512 [pid 5106] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... memfd_create resumed>) = 3 [pid 5114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5113] memfd_create("syzkaller", 0 [pid 5112] close(4 [pid 5106] <... futex resumed>) = 0 [pid 5126] creat("./bus", 000 [pid 5125] <... set_robust_list resumed>) = 0 [pid 5120] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5111] <... futex resumed>) = 0 [pid 5108] <... futex resumed>) = 0 [pid 5107] <... mmap resumed>) = 0x7ff6366ac000 [pid 5120] <... openat resumed>) = 4 [pid 5120] ioctl(4, LOOP_SET_FD, 3 [pid 5126] <... creat resumed>) = 5 [pid 5125] rt_sigprocmask(SIG_SETMASK, [], [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5114] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5113] <... memfd_create resumed>) = 7 [pid 5112] <... close resumed>) = 0 [pid 5111] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5125] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 58.905110][ T5118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.905460][ T5117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.920742][ T5118] ext4 filesystem being mounted at /root/syzkaller.RfCMU1/0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.944146][ T5120] loop2: detected capacity change from 0 to 512 [pid 5125] creat("./bus", 000) = 3 [pid 5126] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... mmap resumed>) = 0x7ff63668b000 [pid 5121] <... futex resumed>) = 0 [pid 5120] <... ioctl resumed>) = 0 [pid 5118] <... mount resumed>) = 0 [pid 5117] <... mount resumed>) = 0 [pid 5114] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5112] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] <... futex resumed>) = 1 [pid 5109] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5107] <... write resumed>) = 65536 [pid 5126] <... futex resumed>) = 0 [pid 5125] <... futex resumed>) = 1 [pid 5121] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5120] close(3 [pid 5118] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5114] <... mprotect resumed>) = 0 [pid 5113] <... mmap resumed>) = 0x7ff6366ac000 [pid 5112] <... futex resumed>) = 0 [pid 5111] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... futex resumed>) = 0 [pid 5107] munmap(0x7ff6366ac000, 138412032 [pid 5126] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5125] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5121] <... mount resumed>) = 0 [pid 5120] <... close resumed>) = 0 [pid 5118] <... openat resumed>) = 5 [pid 5109] <... futex resumed>) = 0 [pid 5125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5120] mkdir("./file0", 0777 [pid 5118] chdir("./file0" [pid 5113] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5112] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... mount resumed>) = 0 [pid 5126] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5124] <... write resumed>) = 262144 [pid 5121] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... mkdir resumed>) = 0 [pid 5117] <... openat resumed>) = 5 [pid 5114] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5113] <... write resumed>) = 65536 [pid 5108] <... futex resumed>) = 0 [pid 5107] <... munmap resumed>) = 0 [pid 5126] <... futex resumed>) = 0 [pid 5118] <... chdir resumed>) = 0 [pid 5109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5120] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5118] ioctl(4, LOOP_CLR_FD [pid 5109] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5126] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c) = 3 [pid 5125] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5124] munmap(0x7ff63668b000, 138412032 [pid 5121] <... futex resumed>) = 1 [pid 5118] <... ioctl resumed>) = 0 [pid 5117] chdir("./file0" [pid 5114] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5113] munmap(0x7ff6366ac000, 138412032 [pid 5111] <... futex resumed>) = 0 [pid 5108] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... openat resumed>) = 7 [pid 5126] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... munmap resumed>) = 0 [pid 5121] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] close(4 [pid 5117] <... chdir resumed>) = 0 [pid 5113] <... munmap resumed>) = 0 [pid 5109] <... futex resumed>) = 0 [pid 5108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5107] ioctl(7, LOOP_SET_FD, 4 [pid 5111] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... futex resumed>) = 0 [pid 5125] <... futex resumed>) = 0 [pid 5124] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] <... close resumed>) = 0 [pid 5117] ioctl(4, LOOP_CLR_FD [pid 5114] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5113] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5111] <... futex resumed>) = 0 [pid 5109] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5133 attached [pid 5126] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5125] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5124] <... openat resumed>) = 4 [pid 5121] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5118] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... ioctl resumed>) = 0 [pid 5113] <... openat resumed>) = 4 [pid 5111] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5108] <... futex resumed>) = 0 [pid 5107] ioctl(7, LOOP_CLR_FD [pid 5133] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5125] <... open resumed>) = -1 ENOENT (No such file or directory) [pid 5124] ioctl(4, LOOP_SET_FD, 3 [pid 5118] <... futex resumed>) = 0 [pid 5117] close(4 [pid 5114] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 5108] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... ioctl resumed>) = 0 [pid 5133] <... rseq resumed>) = 0 [pid 5125] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 58.947823][ T5117] ext4 filesystem being mounted at /root/syzkaller.51vpeu/0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.993221][ T5124] loop1: detected capacity change from 0 to 512 [pid 5109] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] ioctl(4, LOOP_SET_FD, 7 [pid 5126] <... futex resumed>) = 0 [pid 5125] <... futex resumed>) = 0 [pid 5121] <... open resumed>) = -1 ENOENT (No such file or directory) [pid 5117] <... close resumed>) = 0 [pid 5108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5113] ioctl(4, LOOP_CLR_FD) = 0 [pid 5113] ioctl(4, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5113] close(4 [pid 5133] set_robust_list(0x7ff63eaab9a0, 24 [pid 5126] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5125] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] <... ioctl resumed>) = 0 [pid 5121] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] rt_sigprocmask(SIG_SETMASK, [], [pid 5113] <... close resumed>) = 0 [pid 5108] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] close(7) = 0 [pid 5113] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] close(3 [pid 5113] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] <... close resumed>) = 0 [pid 5106] close(4) = -1 EBADF (Bad file descriptor) [pid 5106] close(5) = 0 [pid 5106] close(6) = 0 [pid 5106] close(7) = -1 EBADF (Bad file descriptor) [pid 5106] close(8 [pid 5133] <... set_robust_list resumed>) = 0 [pid 5124] close(3 [pid 5121] <... futex resumed>) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5117] <... futex resumed>) = 0 [pid 5114] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5111] <... futex resumed>) = 0 [pid 5108] <... futex resumed>) = 1 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] rt_sigprocmask(SIG_SETMASK, [], [pid 5124] <... close resumed>) = 0 [pid 5121] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, -1, 0 [pid 5117] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5114] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] futex(0x7ff63f39e6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] ioctl(7, LOOP_SET_FD, 4 [pid 5106] close(9 [pid 5133] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5124] mkdir("./file0", 0777 [pid 5118] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5114] <... futex resumed>) = 0 [pid 5111] <... futex resumed>) = 0 [pid 5107] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] creat("./bus", 000 [pid 5124] <... mkdir resumed>) = 0 [pid 5118] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, -1, 0 [pid 5114] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5111] futex(0x7ff63f39e6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] close(7 [pid 5106] close(10 [pid 5133] <... creat resumed>) = 3 [pid 5124] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5118] <... futex resumed>) = 1 [pid 5117] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... futex resumed>) = 0 [pid 5107] <... close resumed>) = 0 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] close(4 [pid 5106] close(11 [pid 5108] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] memfd_create("syzkaller", 0 [pid 5117] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... memfd_create resumed>) = 4 [pid 5117] <... futex resumed>) = 1 [pid 5111] <... futex resumed>) = 0 [pid 5109] futex(0x7ff63f39e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... futex resumed>) = 0 [pid 5107] <... close resumed>) = 0 [pid 5106] close(12 [pid 5133] <... futex resumed>) = 1 [pid 5118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5117] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5111] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = 0 [pid 5107] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(3 [pid 5133] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... mmap resumed>) = 0x7ff6366ac000 [ 59.000533][ T5120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.014184][ T5120] ext4 filesystem being mounted at /root/syzkaller.yTuF4i/0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5114] <... futex resumed>) = 0 [pid 5111] <... futex resumed>) = 0 [pid 5109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5107] <... futex resumed>) = 0 [pid 5106] close(13 [pid 5105] <... close resumed>) = 0 [pid 5117] memfd_create("syzkaller", 0) = 4 [pid 5107] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] close(4 [pid 5117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] <... mmap resumed>) = 0x7ff63668b000 [pid 5105] close(5 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] close(14) = -1 EBADF (Bad file descriptor) [pid 5117] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5105] <... close resumed>) = 0 [pid 5118] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5106] close(15) = -1 EBADF (Bad file descriptor) [pid 5106] close(16) = -1 EBADF (Bad file descriptor) [pid 5117] <... write resumed>) = 65536 [pid 5106] close(17 [pid 5105] close(6 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] <... close resumed>) = 0 [pid 5106] close(18 [pid 5105] close(7 [pid 5118] <... write resumed>) = 65536 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5117] munmap(0x7ff63668b000, 138412032 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] close(19 [pid 5105] close(8 [pid 5117] <... munmap resumed>) = 0 [pid 5118] munmap(0x7ff6366ac000, 138412032 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5106] close(20 [pid 5117] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] <... munmap resumed>) = 0 [pid 5117] <... openat resumed>) = 6 [pid 5106] close(21 [pid 5105] close(9 [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5117] ioctl(6, LOOP_SET_FD, 4 [pid 5114] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... mmap resumed>) = 0x7ff63ea6a000 [pid 5106] close(22 [pid 5105] close(10 [pid 5117] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5118] <... openat resumed>) = 6 [pid 5109] mprotect(0x7ff63ea6b000, 131072, PROT_READ|PROT_WRITE [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5118] ioctl(6, LOOP_SET_FD, 4 [pid 5117] ioctl(6, LOOP_CLR_FD [pid 5114] <... futex resumed>) = 0 [pid 5109] <... mprotect resumed>) = 0 [pid 5106] close(23 [pid 5105] close(11 [pid 5118] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5117] <... ioctl resumed>) = 0 [pid 5114] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5118] ioctl(6, LOOP_CLR_FD [pid 5109] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5106] close(24 [pid 5105] close(12 [pid 5118] <... ioctl resumed>) = 0 [pid 5109] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63ea8a990, parent_tid=0x7ff63ea8a990, exit_signal=0, stack=0x7ff63ea6a000, stack_size=0x20300, tls=0x7ff63ea8a6c0} [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5134 attached [pid 5133] <... mount resumed>) = 0 [pid 5106] close(25 [pid 5105] close(13 [pid 5134] rseq(0x7ff63ea8afe0, 0x20, 0, 0x53053053 [pid 5117] ioctl(6, LOOP_SET_FD, 4 [pid 5109] <... clone3 resumed> => {parent_tid=[6]}, 88) = 6 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] <... rseq resumed>) = 0 [pid 5117] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5109] rt_sigprocmask(SIG_SETMASK, [], [pid 5106] close(26 [pid 5105] close(14 [pid 5134] set_robust_list(0x7ff63ea8a9a0, 24 [pid 5117] close(6 [pid 5109] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] <... set_robust_list resumed>) = 0 [pid 5133] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] ioctl(6, LOOP_SET_FD, 4 [pid 5117] <... close resumed>) = 0 [pid 5109] futex(0x7ff63f39e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] close(27 [pid 5105] close(15 [pid 5134] rt_sigprocmask(SIG_SETMASK, [], [pid 5118] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5117] close(4 [pid 5109] <... futex resumed>) = 0 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] <... futex resumed>) = 0 [pid 5133] <... futex resumed>) = 1 [pid 5134] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5133] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5120] <... mount resumed>) = 0 [pid 5118] close(6 [pid 5117] <... close resumed>) = 0 [pid 5114] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] close(28 [pid 5105] close(16 [pid 5134] memfd_create("syzkaller", 0 [pid 5133] <... open resumed>) = 5 [pid 5120] openat(AT_FDCWD, "ext4", O_RDONLY|O_DIRECTORY [pid 5118] <... close resumed>) = 0 [pid 5117] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = 0 [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] <... memfd_create resumed>) = 6 [pid 5120] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5118] close(4 [pid 5106] close(29 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5120] ioctl(4, LOOP_CLR_FD [pid 5106] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5134] <... mmap resumed>) = 0x7ff63666a000 [pid 5120] <... ioctl resumed>) = 0 [pid 5106] exit_group(0 [pid 5113] <... futex resumed>) = ? [pid 5112] <... futex resumed>) = ? [pid 5106] <... exit_group resumed>) = ? [pid 5134] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5113] +++ exited with 0 +++ [pid 5112] +++ exited with 0 +++ [pid 5106] +++ exited with 0 +++ [pid 5120] close(4) = 0 [pid 5120] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... write resumed>) = 65536 [pid 5133] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... mmap resumed>) = 0x20000000 [pid 5118] <... close resumed>) = 0 [pid 5117] <... futex resumed>) = 0 [pid 5114] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5105] close(17 [pid 5134] munmap(0x7ff63666a000, 138412032 [pid 5133] <... futex resumed>) = 0 [pid 5126] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 0 [pid 5118] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5111] close(3 [pid 5108] close(3 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5134] <... munmap resumed>) = 0 [pid 5126] <... futex resumed>) = 0 [pid 5120] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5126] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5134] <... openat resumed>) = 4 [pid 5077] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5134] ioctl(4, LOOP_SET_FD, 6 [pid 5077] <... openat resumed>) = 3 [pid 5134] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] newfstatat(3, "", [pid 5134] ioctl(4, LOOP_CLR_FD) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, [pid 5134] ioctl(4, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5134] close(4 [pid 5133] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... futex resumed>) = 0 [pid 5114] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] <... close resumed>) = 0 [pid 5108] <... close resumed>) = 0 [pid 5105] close(18 [pid 5077] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5134] <... close resumed>) = 0 [pid 5118] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5111] close(4 [pid 5108] close(4 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5114] <... futex resumed>) = 0 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(19 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5134] close(6 [pid 5133] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5124] <... mount resumed>) = 0 [pid 5114] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5111] close(5 [pid 5108] close(5 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5134] <... close resumed>) = 0 [pid 5133] <... mmap resumed>) = 0x20000000 [pid 5124] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5111] <... close resumed>) = 0 [pid 5108] <... close resumed>) = 0 [pid 5105] close(20 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5134] futex(0x7ff63f39e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5111] close(6 [pid 5109] close(3 [pid 5108] close(6 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./0/cgroup.cpu" [pid 5134] <... futex resumed>) = 0 [pid 5133] <... futex resumed>) = 1 [pid 5124] ioctl(4, LOOP_CLR_FD [pid 5114] <... futex resumed>) = 0 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... close resumed>) = 0 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(21 [pid 5077] <... unlink resumed>) = 0 [pid 5134] futex(0x7ff63f39e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] <... ioctl resumed>) = 0 [pid 5114] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] close(7 [pid 5109] close(4 [pid 5108] close(7 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5124] close(4 [pid 5114] <... futex resumed>) = 0 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(22 [pid 5077] <... umount2 resumed>) = 0 [pid 5133] memfd_create("syzkaller", 0 [pid 5124] <... close resumed>) = 0 [pid 5111] close(8 [pid 5109] close(5 [pid 5108] close(8 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5133] <... memfd_create resumed>) = 4 [pid 5124] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... close resumed>) = 0 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(23 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5124] <... futex resumed>) = 0 [pid 5111] close(9 [pid 5109] close(6 [pid 5108] close(9 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./0/bus", [pid 5133] <... mmap resumed>) = 0x7ff63668b000 [pid 5124] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(24 [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5111] close(10 [pid 5109] close(7 [pid 5108] close(10 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(8) = -1 EBADF (Bad file descriptor) [pid 5109] close(9 [pid 5077] unlink("./0/bus" [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... unlink resumed>) = 0 [pid 5109] close(10) = -1 EBADF (Bad file descriptor) [pid 5109] close(11) = -1 EBADF (Bad file descriptor) [pid 5109] close(12 [pid 5077] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(13 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(14 [pid 5077] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(25 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(15 [pid 5108] close(11 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5111] close(11 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(26 [pid 5133] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(16 [pid 5108] close(12 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 59.103884][ T5124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.116840][ T5124] ext4 filesystem being mounted at /root/syzkaller.tvsxpX/0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5077] unlink("./0/binderfs" [pid 5111] close(12 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(27 [pid 5077] <... unlink resumed>) = 0 [pid 5133] <... write resumed>) = 65536 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(17 [pid 5108] close(13 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] munmap(0x7ff63668b000, 138412032 [pid 5111] close(13 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(28 [pid 5077] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5133] <... munmap resumed>) = 0 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(18 [pid 5108] close(14 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5111] close(14 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] close(29 [pid 5133] <... openat resumed>) = 6 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(19 [pid 5108] close(15 [pid 5105] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] ioctl(6, LOOP_SET_FD, 4 [pid 5111] close(15 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5105] exit_group(0 [pid 5133] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5110] <... futex resumed>) = ? [pid 5108] close(16 [pid 5107] <... futex resumed>) = ? [pid 5105] <... exit_group resumed>) = ? [pid 5133] ioctl(6, LOOP_CLR_FD [pid 5111] close(16 [pid 5110] +++ exited with 0 +++ [pid 5109] close(20 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5107] +++ exited with 0 +++ [pid 5105] +++ exited with 0 +++ [pid 5133] <... ioctl resumed>) = 0 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(17 [pid 5111] close(17 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] close(18 [pid 5108] close(18 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] close(19 [pid 5108] close(19 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] ioctl(6, LOOP_SET_FD, 4 [pid 5111] close(20 [pid 5133] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] close(6 [pid 5111] close(21 [pid 5133] <... close resumed>) = 0 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] close(4 [pid 5111] close(22 [pid 5133] <... close resumed>) = 0 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] close(23 [pid 5108] close(20 [pid 5133] <... futex resumed>) = 0 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5133] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5111] close(24 [pid 5108] close(21 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(3 [pid 5111] close(25 [pid 5114] <... close resumed>) = 0 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(22 [pid 5114] close(4 [pid 5111] close(26 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(5 [pid 5111] close(27 [pid 5108] close(23 [pid 5114] <... close resumed>) = 0 [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(6 [pid 5111] close(28 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(7 [pid 5111] close(29 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5114] close(8 [pid 5111] exit_group(0 [pid 5108] close(24 [pid 5121] <... futex resumed>) = ? [pid 5117] <... futex resumed>) = ? [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5111] <... exit_group resumed>) = ? [pid 5109] close(21 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5121] +++ exited with 0 +++ [pid 5117] +++ exited with 0 +++ [pid 5114] close(9 [pid 5111] +++ exited with 0 +++ [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] close(25 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5114] close(10 [pid 5108] close(26 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(11 [pid 5108] close(27 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] restart_syscall(<... resuming interrupted clone ...> [pid 5075] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5114] close(12 [pid 5108] close(28 [pid 5079] <... restart_syscall resumed>) = 0 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(22 [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... openat resumed>) = 3 [pid 5114] close(13 [pid 5108] close(29 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(3, "", [pid 5114] close(14 [pid 5109] close(23 [pid 5108] exit_group(0 [pid 5079] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5125] <... futex resumed>) = ? [pid 5118] <... futex resumed>) = ? [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] <... exit_group resumed>) = ? [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5125] +++ exited with 0 +++ [pid 5118] +++ exited with 0 +++ [pid 5114] close(15 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5108] +++ exited with 0 +++ [pid 5079] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(24 [pid 5075] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5114] close(16 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... openat resumed>) = 3 [pid 5075] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(25 [pid 5079] newfstatat(3, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5114] close(17 [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] close(26 [pid 5114] close(18 [pid 5079] getdents64(3, [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] unlink("./0/cgroup.cpu" [pid 5109] close(27 [pid 5114] close(19 [pid 5079] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... unlink resumed>) = 0 [pid 5114] close(20 [pid 5109] close(28 [pid 5078] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5114] close(21 [pid 5109] close(29 [pid 5079] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = 0 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... openat resumed>) = 3 [pid 5114] close(22 [pid 5078] newfstatat(3, "", [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5114] close(23 [pid 5109] exit_group(0 [pid 5079] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5078] getdents64(3, [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5114] close(24 [pid 5078] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5114] close(25 [pid 5078] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5114] close(26 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./0/bus", [pid 5134] <... futex resumed>) = ? [pid 5126] <... futex resumed>) = ? [pid 5120] <... futex resumed>) = ? [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5109] <... exit_group resumed>) = ? [pid 5078] unlink("./0/cgroup.cpu" [pid 5114] close(27) = -1 EBADF (Bad file descriptor) [pid 5114] close(28 [pid 5078] <... unlink resumed>) = 0 [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] close(29 [pid 5078] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5114] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5114] exit_group(0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5133] <... futex resumed>) = ? [ 59.181755][ T5077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5124] <... futex resumed>) = ? [pid 5114] <... exit_group resumed>) = ? [pid 5078] newfstatat(AT_FDCWD, "./0/bus", [pid 5134] +++ exited with 0 +++ [pid 5133] +++ exited with 0 +++ [pid 5126] +++ exited with 0 +++ [pid 5124] +++ exited with 0 +++ [pid 5120] +++ exited with 0 +++ [pid 5109] +++ exited with 0 +++ [pid 5079] unlink("./0/cgroup.cpu" [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5075] unlink("./0/bus" [pid 5079] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5075] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./0/binderfs") = 0 [pid 5075] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... umount2 resumed>) = 0 [pid 5079] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] newfstatat(AT_FDCWD, "./0/bus", [pid 5078] unlink("./0/bus" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5114] +++ exited with 0 +++ [pid 5074] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5079] unlink("./0/bus" [pid 5074] newfstatat(3, "", [pid 5078] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... unlink resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5077] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5079] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5073] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] unlink("./0/binderfs" [pid 5079] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5077] newfstatat(AT_FDCWD, "./0/file0", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] unlink("./0/binderfs" [pid 5078] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5079] <... unlink resumed>) = 0 [pid 5077] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(3, "", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] newfstatat(4, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(3, [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5077] getdents64(4, 0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./0/file0") = 0 [pid 5077] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5073] umount2("./0/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./0/cgroup.cpu" [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./0/cgroup") = 0 [pid 5077] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./0/cgroup.net") = 0 [pid 5077] getdents64(3, 0x555556032850 /* 0 entries */, 32768) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5077] close(3 [pid 5074] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./0/cgroup.cpu", [pid 5077] rmdir("./0") = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] mkdir("./1", 0777 [pid 5073] unlink("./0/cgroup.cpu" [pid 5074] <... umount2 resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./0/bus", [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5074] unlink("./0/bus" [pid 5073] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./0/bus", [pid 5077] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5073] unlink("./0/bus" [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./0/binderfs" [pid 5073] <... unlink resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./0/binderfs", ./strace-static-x86_64: Process 5137 attached [pid 5074] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5137] set_robust_list(0x5555560316a0, 24 [pid 5077] <... clone resumed>, child_tidptr=0x555556031690) = 6 [pid 5073] unlink("./0/binderfs" [pid 5137] <... set_robust_list resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5073] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5137] chdir("./1") = 0 [pid 5137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5137] setpgid(0, 0) = 0 [pid 5137] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [ 59.268277][ T5075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.269537][ T5079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.280986][ T5078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5137] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 5137] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 5137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5137] write(3, "1000", 4) = 4 [pid 5137] close(3) = 0 [pid 5137] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5137] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5137] read(200, 0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5075] <... umount2 resumed>) = 0 [pid 5137] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5137] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff63eaac000 [pid 5137] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5137] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5075] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5137] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5078] <... umount2 resumed>) = 0 [pid 5078] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5138 attached [pid 5075] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5078] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5138] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5078] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] close(4 [pid 5074] <... umount2 resumed>) = 0 [pid 5137] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 5078] <... openat resumed>) = 4 [pid 5137] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5078] newfstatat(4, "", [pid 5137] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... rseq resumed>) = 0 [pid 5137] <... futex resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5138] set_robust_list(0x7ff63eacc9a0, 24 [ 59.323403][ T5073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.336847][ T5074] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5078] getdents64(4, 0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5138] <... set_robust_list resumed>) = 0 [pid 5137] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./0/file0" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = 0 [pid 5137] <... futex resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./0/file0", [pid 5078] getdents64(4, 0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5138] rt_sigprocmask(SIG_SETMASK, [], [pid 5137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5138] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5079] newfstatat(AT_FDCWD, "./0/file0", [pid 5074] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5138] memfd_create("syzkaller", 0 [pid 5137] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5078] rmdir("./0/file0" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./0/file0", [pid 5138] <... memfd_create resumed>) = 3 [pid 5137] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5137] <... mprotect resumed>) = 0 [pid 5137] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5137] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0}./strace-static-x86_64: Process 5140 attached [pid 5140] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5137] <... clone3 resumed> => {parent_tid=[8]}, 88) = 8 [pid 5078] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5140] <... rseq resumed>) = 0 [pid 5137] rt_sigprocmask(SIG_SETMASK, [], [pid 5140] set_robust_list(0x7ff63eaab9a0, 24 [pid 5137] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5140] <... set_robust_list resumed>) = 0 [pid 5137] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5140] rt_sigprocmask(SIG_SETMASK, [], [pid 5137] <... futex resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5140] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5137] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] creat("./bus", 000 [pid 5078] unlink("./0/cgroup" [pid 5140] <... creat resumed>) = 4 [pid 5138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5140] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... mmap resumed>) = 0x7ff63668b000 [pid 5079] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./0/cgroup" [pid 5140] <... futex resumed>) = 1 [pid 5137] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 4 [pid 5140] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] <... futex resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5140] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5137] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] unlink("./0/cgroup.net" [pid 5140] <... mount resumed>) = 0 [pid 5138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5074] newfstatat(4, "", [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... openat resumed>) = 4 [pid 5078] <... unlink resumed>) = 0 [pid 5075] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5140] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(3, [pid 5074] getdents64(4, [pid 5140] <... futex resumed>) = 1 [pid 5137] <... futex resumed>) = 0 [pid 5079] newfstatat(4, "", [pid 5078] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5140] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] close(3 [pid 5075] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5073] newfstatat(4, "", [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] <... futex resumed>) = 0 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5140] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5140] <... open resumed>) = 5 [pid 5137] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] rmdir("./0" [pid 5140] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(4, [pid 5078] <... rmdir resumed>) = 0 [pid 5075] unlink("./0/cgroup.net" [pid 5074] getdents64(4, [pid 5073] getdents64(4, [pid 5079] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5140] <... futex resumed>) = 0 [pid 5137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5075] <... unlink resumed>) = 0 [pid 5140] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] getdents64(4, [pid 5075] getdents64(3, [pid 5074] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5079] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5073] getdents64(4, [pid 5079] close(4 [pid 5075] close(3 [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5079] <... close resumed>) = 0 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] <... futex resumed>) = 0 [pid 5079] rmdir("./0/file0" [pid 5078] mkdir("./1", 0777 [pid 5075] <... close resumed>) = 0 [pid 5074] rmdir("./0/file0" [pid 5073] close(4 [pid 5140] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5137] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... rmdir resumed>) = 0 [pid 5140] <... mmap resumed>) = 0x20000000 [pid 5078] <... mkdir resumed>) = 0 [pid 5079] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5140] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... write resumed>) = 262144 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] rmdir("./0" [pid 5074] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] rmdir("./0/file0" [pid 5079] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5140] <... futex resumed>) = 1 [pid 5137] <... futex resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5140] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5073] <... rmdir resumed>) = 0 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] <... futex resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5140] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000144} --- [pid 5079] unlink("./0/cgroup" [pid 5078] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./0/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] mkdir("./1", 0777 [pid 5074] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./0/cgroup", [pid 5079] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... mkdir resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./0/cgroup" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5074] <... unlink resumed>) = 0 [pid 5073] unlink("./0/cgroup" [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5142 attached [pid 5079] unlink("./0/cgroup.net" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5073] umount2("./0/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] set_robust_list(0x5555560316a0, 24 [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x555556031690) = 6 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5142] <... set_robust_list resumed>) = 0 [pid 5142] chdir("./1") = 0 [pid 5142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5142] setpgid(0, 0) = 0 [pid 5142] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 5142] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 5079] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] unlink("./0/cgroup.net" [pid 5073] newfstatat(AT_FDCWD, "./0/cgroup.net", [pid 5142] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] close(3 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] close(3 [pid 5073] unlink("./0/cgroup.net" [pid 5079] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5142] <... openat resumed>) = 3 [pid 5079] rmdir("./0" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] getdents64(3, [pid 5073] <... unlink resumed>) = 0 [pid 5142] write(3, "1000", 4) = 4 [pid 5142] close(3) = 0 [pid 5142] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5079] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, [pid 5142] read(200, [pid 5079] mkdir("./1", 0777 [pid 5074] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5142] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5074] close(3 [pid 5073] close(3 [pid 5142] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... close resumed>) = 0 ./strace-static-x86_64: Process 5143 attached [pid 5142] <... symlink resumed>) = 0 [pid 5074] rmdir("./0" [pid 5073] <... close resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5143] set_robust_list(0x5555560316a0, 24 [pid 5142] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... set_robust_list resumed>) = 0 [pid 5142] <... futex resumed>) = 0 [pid 5143] chdir("./1" [pid 5142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... clone resumed>, child_tidptr=0x555556031690) = 6 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] rmdir("./0" [pid 5142] <... mmap resumed>) = 0x7ff63eaac000 [pid 5143] <... chdir resumed>) = 0 [pid 5142] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5142] <... mprotect resumed>) = 0 [pid 5143] <... prctl resumed>) = 0 [pid 5142] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5079] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 5143] setpgid(0, 0 [pid 5142] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5143] <... setpgid resumed>) = 0 [pid 5142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5073] mkdir("./1", 0777./strace-static-x86_64: Process 5144 attached [pid 5143] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5144] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5143] <... symlink resumed>) = 0 [pid 5142] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 5073] <... mkdir resumed>) = 0 [pid 5144] <... rseq resumed>) = 0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] mkdir("./1", 0777 [pid 5144] set_robust_list(0x7ff63eacc9a0, 24 [pid 5142] rt_sigprocmask(SIG_SETMASK, [], [pid 5144] <... set_robust_list resumed>) = 0 [pid 5142] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5079] close(3 [pid 5073] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5079] <... close resumed>) = 0 [pid 5144] rt_sigprocmask(SIG_SETMASK, [], [pid 5142] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 3 [pid 5144] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5142] <... futex resumed>) = 0 [pid 5144] memfd_create("syzkaller", 0 [pid 5142] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... memfd_create resumed>) = 3 [pid 5142] <... futex resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5144] <... mmap resumed>) = 0x7ff63668b000 [pid 5142] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5143] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5142] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5143] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5143] write(3, "1000", 4) = 4 [pid 5143] close(3) = 0 [pid 5142] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 5145 attached [pid 5144] <... write resumed>) = 262144 [pid 5143] read(200, [pid 5142] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] <... openat resumed>) = 3 [pid 5073] close(3 [pid 5144] munmap(0x7ff63668b000, 138412032 [pid 5143] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5142] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... close resumed>) = 0 [pid 5144] <... munmap resumed>) = 0 [pid 5143] read(200, [pid 5142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0}./strace-static-x86_64: Process 5146 attached [pid 5144] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5143] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5143] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff63eaac000 [pid 5143] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5146] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5145] set_robust_list(0x5555560316a0, 24 [pid 5144] <... openat resumed>) = 4 [pid 5143] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5142] <... clone3 resumed> => {parent_tid=[8]}, 88) = 8 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5146] <... rseq resumed>) = 0 [pid 5145] <... set_robust_list resumed>) = 0 [pid 5144] ioctl(4, LOOP_SET_FD, 3 [pid 5143] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5074] close(3 [pid 5146] set_robust_list(0x7ff63eaab9a0, 24 [pid 5145] chdir("./1" [pid 5142] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5147 attached [pid 5146] <... set_robust_list resumed>) = 0 [pid 5145] <... chdir resumed>) = 0 [pid 5144] <... ioctl resumed>) = 0 [pid 5143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5079] <... clone resumed>, child_tidptr=0x555556031690) = 6 [pid 5074] <... close resumed>) = 0 [pid 5146] rt_sigprocmask(SIG_SETMASK, [], [pid 5145] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5142] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5148 attached [pid 5146] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5145] <... prctl resumed>) = 0 [pid 5144] close(3 [pid 5148] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5146] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5145] setpgid(0, 0 [pid 5142] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... rseq resumed>) = 0 [pid 5145] <... setpgid resumed>) = 0 [pid 5143] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 5148] set_robust_list(0x7ff63eacc9a0, 24 [pid 5146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5144] <... close resumed>) = 0 [pid 5142] <... futex resumed>) = 0 [pid 5148] <... set_robust_list resumed>) = 0 [pid 5145] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5143] rt_sigprocmask(SIG_SETMASK, [], [pid 5148] rt_sigprocmask(SIG_SETMASK, [], [pid 5146] creat("./bus", 000 [pid 5145] <... symlink resumed>) = 0 [pid 5144] mkdir("./file0", 0777 [pid 5142] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5148] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5146] <... creat resumed>) = 3 [pid 5143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5148] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5145] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5144] <... mkdir resumed>) = 0 [pid 5148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5146] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... symlink resumed>) = 0 [pid 5143] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] memfd_create("syzkaller", 0 [pid 5146] <... futex resumed>) = 1 [pid 5145] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5144] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5142] <... futex resumed>) = 0 [pid 5148] <... memfd_create resumed>) = 3 [pid 5147] set_robust_list(0x5555560316a0, 24 [pid 5146] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5145] <... symlink resumed>) = 0 [pid 5143] <... futex resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555556031690) = 6 ./strace-static-x86_64: Process 5149 attached [pid 5148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5147] <... set_robust_list resumed>) = 0 [pid 5146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5143] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] set_robust_list(0x5555560316a0, 24 [pid 5148] <... mmap resumed>) = 0x7ff6366ac000 [pid 5147] chdir("./1" [pid 5146] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5145] <... openat resumed>) = 3 [pid 5143] <... futex resumed>) = 0 [pid 5142] <... futex resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556031690) = 7 [pid 5149] <... set_robust_list resumed>) = 0 [pid 5148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5147] <... chdir resumed>) = 0 [pid 5146] <... mount resumed>) = 0 [pid 5145] write(3, "1000", 4 [pid 5142] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] chdir("./1" [pid 5147] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5146] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... write resumed>) = 4 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] <... chdir resumed>) = 0 [pid 5147] <... prctl resumed>) = 0 [pid 5146] <... futex resumed>) = 0 [pid 5145] close(3 [pid 5142] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5147] setpgid(0, 0 [pid 5146] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5145] <... close resumed>) = 0 [pid 5142] <... futex resumed>) = 0 [pid 5149] <... prctl resumed>) = 0 [pid 5148] <... write resumed>) = 262144 [pid 5147] <... setpgid resumed>) = 0 [pid 5146] <... open resumed>) = 5 [pid 5145] read(200, [pid 5143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5142] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5146] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] setpgid(0, 0 [pid 5147] <... symlink resumed>) = 0 [pid 5146] <... futex resumed>) = 0 [pid 5149] <... setpgid resumed>) = 0 [pid 5145] read(200, [pid 5142] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5146] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5145] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5142] <... futex resumed>) = 0 [pid 5149] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5147] <... symlink resumed>) = 0 [pid 5146] <... mmap resumed>) = 0x20000000 [pid 5145] read(200, [pid 5142] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] <... symlink resumed>) = 0 [pid 5148] munmap(0x7ff6366ac000, 138412032 [pid 5147] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5146] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] <... mmap resumed>) = 0x7ff63668b000 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5148] <... munmap resumed>) = 0 [pid 5146] <... futex resumed>) = 0 [pid 5145] symlink("/dev/binderfs", "./binderfs" [pid 5142] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... symlink resumed>) = 0 [ 59.533121][ T5144] loop4: detected capacity change from 0 to 512 [pid 5148] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5147] <... symlink resumed>) = 0 [pid 5146] memfd_create("syzkaller", 0 [pid 5145] <... symlink resumed>) = 0 [pid 5143] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5142] <... futex resumed>) = 0 [pid 5149] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5148] <... openat resumed>) = 4 [pid 5147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5149] <... symlink resumed>) = 0 [pid 5147] <... openat resumed>) = 3 [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5147] write(3, "1000", 4 [pid 5149] <... openat resumed>) = 3 [pid 5148] ioctl(4, LOOP_SET_FD, 3 [pid 5147] <... write resumed>) = 4 [pid 5145] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... mprotect resumed>) = 0 [pid 5149] write(3, "1000", 4 [pid 5147] close(3 [pid 5149] <... write resumed>) = 4 [pid 5147] <... close resumed>) = 0 [pid 5149] close(3 [pid 5147] read(200, [pid 5149] <... close resumed>) = 0 [pid 5147] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5145] <... futex resumed>) = 0 [pid 5145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5147] read(200, [pid 5149] read(200, [pid 5147] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 5149] read(200, [pid 5147] symlink("/dev/binderfs", "./binderfs" [pid 5145] <... mmap resumed>) = 0x7ff63eaac000 [pid 5146] <... memfd_create resumed>) = 6 [pid 5145] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5145] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5145] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0}./strace-static-x86_64: Process 5152 attached [pid 5149] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5147] <... symlink resumed>) = 0 [pid 5152] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5145] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 5152] <... rseq resumed>) = 0 [pid 5145] rt_sigprocmask(SIG_SETMASK, [], [pid 5152] set_robust_list(0x7ff63eacc9a0, 24) = 0 [pid 5145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5152] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5147] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... mmap resumed>) = 0x7ff63668b000 [pid 5145] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] symlink("/dev/binderfs", "./binderfs" [pid 5147] <... futex resumed>) = 0 [pid 5152] memfd_create("syzkaller", 0 [pid 5149] <... symlink resumed>) = 0 [pid 5147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5146] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5145] <... futex resumed>) = 0 [pid 5147] <... mmap resumed>) = 0x7ff63eaac000 [pid 5143] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5149] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5152] <... memfd_create resumed>) = 3 [pid 5149] <... futex resumed>) = 0 [pid 5148] <... ioctl resumed>) = 0 [pid 5147] <... mprotect resumed>) = 0 [pid 5146] <... write resumed>) = 65536 [pid 5145] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5145] <... futex resumed>) = 0 [pid 5152] <... mmap resumed>) = 0x7ff6366ac000 [pid 5145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5148] close(3 [pid 5147] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5146] munmap(0x7ff63668b000, 138412032 [pid 5143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5149] <... mmap resumed>) = 0x7ff63eaac000 [pid 5148] <... close resumed>) = 0 [pid 5147] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5153 attached [pid 5149] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5146] <... munmap resumed>) = 0 [pid 5148] mkdir("./file0", 0777 [pid 5147] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5146] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5149] <... mprotect resumed>) = 0 [pid 5153] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053./strace-static-x86_64: Process 5154 attached [pid 5146] <... openat resumed>) = 7 [pid 5145] <... mmap resumed>) = 0x7ff63668b000 [pid 5143] <... clone3 resumed> => {parent_tid=[8]}, 88) = 8 [pid 5154] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5153] <... rseq resumed>) = 0 [pid 5152] <... write resumed>) = 262144 [pid 5149] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5148] <... mkdir resumed>) = 0 [pid 5147] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 5147] rt_sigprocmask(SIG_SETMASK, [], [pid 5149] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5147] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5149] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5147] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... rseq resumed>) = 0 [pid 5146] ioctl(7, LOOP_SET_FD, 6./strace-static-x86_64: Process 5155 attached [pid 5154] set_robust_list(0x7ff63eacc9a0, 24 [pid 5147] <... futex resumed>) = 0 [pid 5146] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5155] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5154] <... set_robust_list resumed>) = 0 [pid 5153] set_robust_list(0x7ff6366ab9a0, 24 [pid 5152] munmap(0x7ff6366ac000, 138412032 [pid 5149] <... clone3 resumed> => {parent_tid=[8]}, 88) = 8 [pid 5148] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5147] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] ioctl(7, LOOP_CLR_FD [pid 5145] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5143] rt_sigprocmask(SIG_SETMASK, [], [pid 5144] <... mount resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5155] <... rseq resumed>) = 0 [pid 5154] rt_sigprocmask(SIG_SETMASK, [], [pid 5153] <... set_robust_list resumed>) = 0 [pid 5152] <... munmap resumed>) = 0 [pid 5149] rt_sigprocmask(SIG_SETMASK, [], [pid 5147] <... futex resumed>) = 0 [pid 5146] <... ioctl resumed>) = 0 [pid 5143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5155] set_robust_list(0x7ff63eacc9a0, 24 [pid 5154] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5152] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5149] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5145] <... mprotect resumed>) = 0 [pid 5153] rt_sigprocmask(SIG_SETMASK, [], [pid 5144] ioctl(4, LOOP_CLR_FD [pid 5143] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... set_robust_list resumed>) = 0 [pid 5154] memfd_create("syzkaller", 0 [pid 5153] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5152] <... openat resumed>) = 4 [pid 5149] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5145] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5144] <... ioctl resumed>) = 0 [pid 5155] rt_sigprocmask(SIG_SETMASK, [], [pid 5154] <... memfd_create resumed>) = 3 [pid 5153] creat("./bus", 000 [ 59.588570][ T5144] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 59.607783][ T5148] loop0: detected capacity change from 0 to 512 [ 59.608223][ T5144] EXT4-fs (loop4): failed to initialize system zone (-117) [ 59.622992][ T5144] EXT4-fs (loop4): mount failed [pid 5152] ioctl(4, LOOP_SET_FD, 3 [pid 5149] <... futex resumed>) = 0 [pid 5147] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5145] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5144] close(4 [pid 5143] <... futex resumed>) = 0 [pid 5155] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5153] <... creat resumed>) = 3 [pid 5149] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... mprotect resumed>) = 0 [pid 5143] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5149] <... futex resumed>) = 0 [pid 5147] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5155] memfd_create("syzkaller", 0 [pid 5147] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5153] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5146] ioctl(7, LOOP_SET_FD, 6./strace-static-x86_64: Process 5156 attached [pid 5155] <... memfd_create resumed>) = 3 [pid 5154] <... mmap resumed>) = 0x7ff63668b000 [pid 5153] <... futex resumed>) = 0 [pid 5152] <... ioctl resumed>) = 0 [pid 5149] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5145] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5144] <... close resumed>) = 0 [pid 5143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5156] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5149] <... mprotect resumed>) = 0 [pid 5147] <... clone3 resumed> => {parent_tid=[8]}, 88) = 8 [pid 5156] <... rseq resumed>) = 0 [pid 5147] rt_sigprocmask(SIG_SETMASK, [], [pid 5144] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] set_robust_list(0x7ff63eaab9a0, 24 [pid 5147] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5144] <... futex resumed>) = 0 [pid 5156] <... set_robust_list resumed>) = 0 [pid 5147] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] rt_sigprocmask(SIG_SETMASK, [], [pid 5147] <... futex resumed>) = 0 [pid 5156] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5155] <... mmap resumed>) = 0x7ff63668b000 [pid 5154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5153] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5147] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5143] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] creat("./bus", 000 [pid 5153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5143] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5159 attached [pid 5156] <... creat resumed>) = 4 [pid 5153] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5152] close(3 [pid 5149] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5146] close(7 [pid 5143] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5156] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... mount resumed>) = 0 [pid 5152] <... close resumed>) = 0 [pid 5146] <... close resumed>) = 0 [pid 5159] <... rseq resumed>) = 0 [pid 5156] <... futex resumed>) = 1 [pid 5153] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] mkdir("./file0", 0777 [pid 5147] <... futex resumed>) = 0 [pid 5146] close(6 [pid 5145] <... clone3 resumed> => {parent_tid=[8]}, 88) = 8 [pid 5159] set_robust_list(0x7ff6366ab9a0, 24 [pid 5156] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5153] <... futex resumed>) = 1 [pid 5152] <... mkdir resumed>) = 0 [pid 5147] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... futex resumed>) = 0 [pid 5159] <... set_robust_list resumed>) = 0 [pid 5156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5153] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5152] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5147] <... futex resumed>) = 0 [pid 5146] <... close resumed>) = 0 [pid 5145] rt_sigprocmask(SIG_SETMASK, [], [pid 5143] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5160 attached [pid 5159] rt_sigprocmask(SIG_SETMASK, [], [pid 5156] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5154] <... write resumed>) = 262144 [pid 5153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] <... clone3 resumed> => {parent_tid=[9]}, 88) = 9 [pid 5147] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... futex resumed>) = 0 [pid 5160] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5156] <... mount resumed>) = 0 [pid 5153] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5149] rt_sigprocmask(SIG_SETMASK, [], [pid 5146] <... futex resumed>) = 0 [ 59.659504][ T5152] loop5: detected capacity change from 0 to 512 [pid 5145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5143] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... rseq resumed>) = 0 [pid 5159] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... write resumed>) = 262144 [pid 5153] <... open resumed>) = 5 [pid 5149] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5146] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] set_robust_list(0x7ff63eaab9a0, 24 [pid 5156] <... futex resumed>) = 1 [pid 5155] munmap(0x7ff63668b000, 138412032 [pid 5153] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... futex resumed>) = 0 [pid 5160] <... set_robust_list resumed>) = 0 [pid 5153] <... futex resumed>) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5160] rt_sigprocmask(SIG_SETMASK, [], [pid 5156] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... munmap resumed>) = 0 [pid 5154] munmap(0x7ff63668b000, 138412032 [pid 5153] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5149] <... futex resumed>) = 0 [pid 5147] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] close(3 [pid 5160] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5147] <... futex resumed>) = 0 [pid 5143] <... futex resumed>) = 0 [pid 5160] creat("./bus", 000 [pid 5153] <... mmap resumed>) = 0x20000000 [pid 5149] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5155] <... openat resumed>) = 4 [pid 5143] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5153] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... futex resumed>) = 0 [pid 5156] <... open resumed>) = 5 [pid 5154] <... munmap resumed>) = 0 [pid 5153] <... futex resumed>) = 0 [pid 5145] <... futex resumed>) = 1 [pid 5143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] ioctl(4, LOOP_SET_FD, 3 [pid 5142] <... close resumed>) = 0 [pid 5159] creat("./bus", 000 [pid 5156] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5143] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... futex resumed>) = 1 [pid 5153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] <... futex resumed>) = 0 [pid 5147] <... futex resumed>) = 0 [pid 5159] <... creat resumed>) = 3 [pid 5156] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... ioctl resumed>) = 0 [pid 5154] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5153] memfd_create("syzkaller", 0 [pid 5147] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5142] close(4 [pid 5154] <... openat resumed>) = 6 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5142] close(5 [pid 5154] ioctl(6, LOOP_SET_FD, 3 [pid 5142] <... close resumed>) = 0 [pid 5142] close(6 [pid 5159] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5147] <... futex resumed>) = 0 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5159] <... futex resumed>) = 1 [pid 5156] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5147] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5145] <... futex resumed>) = 0 [pid 5142] close(7 [pid 5159] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] <... mmap resumed>) = 0x20000000 [pid 5145] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5156] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... futex resumed>) = 0 [ 59.701820][ T5148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.730963][ T5148] ext4 filesystem being mounted at /root/syzkaller.p47fVk/1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.743528][ T5155] loop2: detected capacity change from 0 to 512 [pid 5159] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5156] <... futex resumed>) = 1 [pid 5147] <... futex resumed>) = 0 [pid 5145] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] <... mount resumed>) = 0 [pid 5156] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5147] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] close(8 [pid 5159] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5147] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5156] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000144} --- [pid 5145] <... futex resumed>) = 0 [pid 5159] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5145] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... open resumed>) = 5 [pid 5145] <... futex resumed>) = 0 [pid 5159] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] <... futex resumed>) = 0 [pid 5145] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5145] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5145] <... futex resumed>) = 0 [pid 5159] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5145] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] <... mmap resumed>) = 0x20000000 [pid 5159] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5142] close(9) = -1 EBADF (Bad file descriptor) [pid 5142] close(10 [pid 5160] <... creat resumed>) = 5 [pid 5159] <... futex resumed>) = 1 [pid 5155] close(3 [pid 5149] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5145] <... futex resumed>) = 0 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5142] close(11 [pid 5160] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... close resumed>) = 0 [pid 5153] <... memfd_create resumed>) = 6 [pid 5149] futex(0x7ff63f39e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... mount resumed>) = 0 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5148] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5142] close(12 [pid 5160] <... futex resumed>) = 0 [pid 5155] mkdir("./file0", 0777 [pid 5153] <... mmap resumed>) = 0x7ff6366ac000 [pid 5149] <... futex resumed>) = 0 [pid 5148] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5160] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... mkdir resumed>) = 0 [pid 5153] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5148] ioctl(4, LOOP_CLR_FD [pid 5142] close(13) = -1 EBADF (Bad file descriptor) [pid 5155] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5149] <... mmap resumed>) = 0x7ff63ea6a000 [pid 5148] <... ioctl resumed>) = 0 [pid 5142] close(14 [pid 5153] <... write resumed>) = 65536 [pid 5148] close(4 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5153] munmap(0x7ff6366ac000, 138412032 [pid 5148] <... close resumed>) = 0 [pid 5153] <... munmap resumed>) = 0 [pid 5149] mprotect(0x7ff63ea6b000, 131072, PROT_READ|PROT_WRITE [pid 5148] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] close(15 [pid 5153] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5148] <... futex resumed>) = 0 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5153] <... openat resumed>) = 4 [pid 5149] <... mprotect resumed>) = 0 [pid 5148] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] close(16 [pid 5153] ioctl(4, LOOP_SET_FD, 6 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5153] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5149] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5142] close(17 [pid 5153] ioctl(4, LOOP_CLR_FD [pid 5149] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5153] <... ioctl resumed>) = 0 [pid 5142] close(18) = -1 EBADF (Bad file descriptor) [pid 5149] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63ea8a990, parent_tid=0x7ff63ea8a990, exit_signal=0, stack=0x7ff63ea6a000, stack_size=0x20300, tls=0x7ff63ea8a6c0}./strace-static-x86_64: Process 5163 attached [pid 5153] ioctl(4, LOOP_SET_FD, 6 [pid 5163] rseq(0x7ff63ea8afe0, 0x20, 0, 0x53053053 [pid 5149] <... clone3 resumed> => {parent_tid=[10]}, 88) = 10 [pid 5163] <... rseq resumed>) = 0 [pid 5149] rt_sigprocmask(SIG_SETMASK, [], [pid 5153] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5163] set_robust_list(0x7ff63ea8a9a0, 24 [pid 5153] close(4 [pid 5149] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5142] close(19 [pid 5163] <... set_robust_list resumed>) = 0 [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5152] <... mount resumed>) = 0 [pid 5149] futex(0x7ff63f39e6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] rt_sigprocmask(SIG_SETMASK, [], [pid 5159] memfd_create("syzkaller", 0 [pid 5152] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5149] <... futex resumed>) = 0 [pid 5145] <... futex resumed>) = 0 [pid 5163] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5159] <... memfd_create resumed>) = 6 [pid 5152] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5149] futex(0x7ff63f39e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5163] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5152] ioctl(4, LOOP_CLR_FD [pid 5163] <... mount resumed>) = 0 [pid 5159] <... mmap resumed>) = 0x7ff6366ac000 [pid 5152] <... ioctl resumed>) = 0 [pid 5163] futex(0x7ff63f39e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [ 59.758946][ T5152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.780738][ T5152] ext4 filesystem being mounted at /root/syzkaller.51vpeu/1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5152] close(4 [pid 5163] <... futex resumed>) = 1 [pid 5159] <... write resumed>) = 65536 [pid 5153] <... close resumed>) = 0 [pid 5152] <... close resumed>) = 0 [pid 5149] <... futex resumed>) = 0 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5153] close(6 [pid 5142] close(20 [pid 5163] futex(0x7ff63f39e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] munmap(0x7ff6366ac000, 138412032 [pid 5153] <... close resumed>) = 0 [pid 5152] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5153] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] close(3 [pid 5142] close(21 [pid 5153] <... futex resumed>) = 0 [pid 5143] <... close resumed>) = 0 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5153] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5143] close(4 [pid 5142] close(22 [pid 5143] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5143] close(5 [pid 5142] close(23 [pid 5143] <... close resumed>) = 0 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5143] close(6 [pid 5142] close(24) = -1 EBADF (Bad file descriptor) [pid 5160] <... futex resumed>) = 0 [pid 5159] <... munmap resumed>) = 0 [pid 5152] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 1 [pid 5143] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5142] close(25 [pid 5143] close(7 [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5143] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5143] close(8) = -1 EBADF (Bad file descriptor) [pid 5160] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5159] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5152] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] close(9 [pid 5142] close(26 [pid 5143] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5143] close(10 [pid 5142] close(27 [pid 5143] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5143] close(11 [pid 5142] close(28 [pid 5159] <... openat resumed>) = 4 [pid 5143] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5143] close(12 [pid 5142] close(29 [pid 5143] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5142] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5143] close(13) = -1 EBADF (Bad file descriptor) [pid 5142] exit_group(0 [pid 5143] close(14 [pid 5146] <... futex resumed>) = ? [pid 5143] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5142] <... exit_group resumed>) = ? [pid 5143] close(15) = -1 EBADF (Bad file descriptor) [pid 5146] +++ exited with 0 +++ [pid 5143] close(16 [pid 5159] ioctl(4, LOOP_SET_FD, 6 [pid 5143] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5143] close(17) = -1 EBADF (Bad file descriptor) [pid 5143] close(18) = -1 EBADF (Bad file descriptor) [pid 5159] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5144] <... futex resumed>) = ? [pid 5143] close(19) = -1 EBADF (Bad file descriptor) [pid 5143] close(20) = -1 EBADF (Bad file descriptor) [pid 5143] close(21) = -1 EBADF (Bad file descriptor) [pid 5143] close(22) = -1 EBADF (Bad file descriptor) [pid 5143] close(23) = -1 EBADF (Bad file descriptor) [pid 5143] close(24) = -1 EBADF (Bad file descriptor) [pid 5159] ioctl(4, LOOP_CLR_FD [pid 5143] close(25 [pid 5159] <... ioctl resumed>) = 0 [pid 5143] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5143] close(26) = -1 EBADF (Bad file descriptor) [pid 5143] close(27) = -1 EBADF (Bad file descriptor) [pid 5143] close(28) = -1 EBADF (Bad file descriptor) [pid 5143] close(29) = -1 EBADF (Bad file descriptor) [pid 5143] exit_group(0) = ? [pid 5148] <... futex resumed>) = ? [pid 5153] <... futex resumed>) = ? [pid 5159] ioctl(4, LOOP_SET_FD, 6 [pid 5148] +++ exited with 0 +++ [pid 5144] +++ exited with 0 +++ [pid 5142] +++ exited with 0 +++ [pid 5159] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5159] close(4) = 0 [pid 5159] close(6 [pid 5153] +++ exited with 0 +++ [pid 5143] +++ exited with 0 +++ [pid 5159] <... close resumed>) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5159] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] close(3 [pid 5078] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5159] <... futex resumed>) = 0 [ 59.861947][ T5155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [pid 5145] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5159] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5145] close(4 [pid 5078] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5145] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5160] <... open resumed>) = 3 [pid 5145] close(5 [pid 5078] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] newfstatat(3, "", [pid 5145] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(3, "", [pid 5078] getdents64(3, [pid 5155] <... mount resumed>) = 0 [pid 5154] <... ioctl resumed>) = ? [pid 5145] close(6 [pid 5078] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5078] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5075] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5155] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5154] +++ killed by SIGBUS (core dumped) +++ [pid 5145] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5145] close(7) = -1 EBADF (Bad file descriptor) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5145] close(8 [pid 5075] unlink("./1/cgroup.cpu" [pid 5078] unlink("./1/cgroup.cpu" [pid 5145] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... unlink resumed>) = 0 [pid 5145] close(9 [pid 5078] <... unlink resumed>) = 0 [pid 5075] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5145] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5145] close(10) = -1 EBADF (Bad file descriptor) [pid 5145] close(11) = -1 EBADF (Bad file descriptor) [pid 5145] close(12) = -1 EBADF (Bad file descriptor) [pid 5145] close(13) = -1 EBADF (Bad file descriptor) [pid 5145] close(14) = -1 EBADF (Bad file descriptor) [ 59.926803][ T5155] ext4 filesystem being mounted at /root/syzkaller.yTuF4i/1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5145] close(15) = -1 EBADF (Bad file descriptor) [pid 5160] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... openat resumed>) = 6 [pid 5145] close(16 [pid 5075] <... umount2 resumed>) = 0 [pid 5145] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5145] close(17) = -1 EBADF (Bad file descriptor) [pid 5145] close(18) = -1 EBADF (Bad file descriptor) [pid 5145] close(19) = -1 EBADF (Bad file descriptor) [pid 5145] close(20) = -1 EBADF (Bad file descriptor) [pid 5145] close(21) = -1 EBADF (Bad file descriptor) [pid 5145] close(22) = -1 EBADF (Bad file descriptor) [pid 5145] close(23) = -1 EBADF (Bad file descriptor) [pid 5145] close(24) = -1 EBADF (Bad file descriptor) [pid 5145] close(25) = -1 EBADF (Bad file descriptor) [pid 5145] close(26) = -1 EBADF (Bad file descriptor) [pid 5145] close(27) = -1 EBADF (Bad file descriptor) [pid 5145] close(28) = -1 EBADF (Bad file descriptor) [pid 5145] close(29) = -1 EBADF (Bad file descriptor) [pid 5145] exit_group(0 [pid 5159] <... futex resumed>) = ? [pid 5152] <... futex resumed>) = ? [pid 5145] <... exit_group resumed>) = ? [pid 5159] +++ exited with 0 +++ [pid 5152] +++ exited with 0 +++ [pid 5145] +++ exited with 0 +++ [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5160] <... futex resumed>) = 0 [pid 5155] chdir("./file0" [pid 5149] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = 0 [pid 5156] +++ killed by SIGBUS (core dumped) +++ [pid 5147] +++ killed by SIGBUS (core dumped) +++ [pid 5078] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./1/bus", [pid 5075] newfstatat(AT_FDCWD, "./1/bus", [pid 5078] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] unlink("./1/bus" [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./1/bus") = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5078] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5078] unlink("./1/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5160] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... chdir resumed>) = 0 [pid 5149] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] unlink("./1/binderfs" [pid 5160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] ioctl(4, LOOP_CLR_FD [pid 5149] <... futex resumed>) = 0 [pid 5079] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5078] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5155] <... ioctl resumed>) = 0 [pid 5149] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] <... mmap resumed>) = 0x20000000 [pid 5155] close(4 [ 59.975885][ T5082] Bluetooth: hci0: command 0x0409 tx timeout [ 59.982184][ T5089] Bluetooth: hci4: command 0x0409 tx timeout [ 59.982314][ T5089] Bluetooth: hci1: command 0x0409 tx timeout [ 59.982491][ T5086] Bluetooth: hci2: command 0x0409 tx timeout [pid 5079] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] newfstatat(AT_FDCWD, "./1/file0", [pid 5155] <... close resumed>) = 0 [pid 5160] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5079] <... openat resumed>) = 3 [pid 5160] <... futex resumed>) = 1 [pid 5155] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 0 [pid 5079] newfstatat(3, "", [pid 5160] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] memfd_create("syzkaller", 0 [pid 5149] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] <... memfd_create resumed>) = 4 [pid 5149] <... futex resumed>) = 0 [pid 5079] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x555556032850 /* 8 entries */, 32768) = 224 [pid 5073] umount2("./1/core", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./1/core", {st_mode=S_IFREG|0600, st_size=26624000, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5073] unlink("./1/core" [pid 5079] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] unlink("./1/cgroup.cpu") = 0 [pid 5079] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff63666a000 [pid 5155] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] munmap(0x7ff63666a000, 138412032 [pid 5079] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] <... munmap resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5155] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5079] newfstatat(AT_FDCWD, "./1/bus", [pid 5078] <... openat resumed>) = 4 [pid 5155] <... openat resumed>) = 7 [pid 5079] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] newfstatat(4, "", [pid 5155] ioctl(7, LOOP_SET_FD, 4 [pid 5079] unlink("./1/bus" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5155] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5079] <... unlink resumed>) = 0 [pid 5078] getdents64(4, [pid 5155] ioctl(7, LOOP_CLR_FD [pid 5079] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] <... ioctl resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5079] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5078] getdents64(4, [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] unlink("./1/binderfs") = 0 [pid 5079] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] ioctl(7, LOOP_SET_FD, 4 [pid 5075] <... umount2 resumed>) = 0 [pid 5155] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] close(4 [pid 5155] close(7 [pid 5078] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./1/file0", [pid 5078] rmdir("./1/file0" [pid 5155] <... close resumed>) = 0 [pid 5155] close(4) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5155] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5155] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... openat resumed>) = 4 [ 60.027594][ T5075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.050366][ T5086] Bluetooth: hci5: command 0x0409 tx timeout [ 60.056565][ T5086] Bluetooth: hci3: command 0x0409 tx timeout [ 60.062788][ T5119] EXT4-fs error (device loop5): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(4, "", [pid 5149] close(3 [pid 5078] unlink("./1/cgroup" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5149] <... close resumed>) = 0 [pid 5149] close(4 [pid 5078] <... unlink resumed>) = 0 [pid 5075] getdents64(4, [pid 5078] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5073] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5075] getdents64(4, [pid 5149] close(5 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5078] unlink("./1/cgroup.net" [pid 5075] close(4 [pid 5149] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5078] getdents64(3, [pid 5075] rmdir("./1/file0" [pid 5078] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5149] close(6 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5149] <... close resumed>) = 0 [pid 5073] unlink("./1/cgroup.cpu" [pid 5078] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 5149] close(7 [pid 5078] <... close resumed>) = 0 [pid 5075] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5078] rmdir("./1" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... rmdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5073] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] mkdir("./2", 0777 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./1/cgroup" [pid 5149] close(8 [pid 5073] <... umount2 resumed>) = 0 [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] close(9 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] newfstatat(AT_FDCWD, "./1/bus", [pid 5149] close(10 [pid 5078] <... mkdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... unlink resumed>) = 0 [pid 5073] unlink("./1/bus" [pid 5149] close(11 [pid 5078] <... openat resumed>) = 3 [pid 5075] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] close(12 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5138] +++ killed by SIGBUS (core dumped) +++ [pid 5078] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 60.107942][ T5079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5073] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5149] close(13 [pid 5078] <... close resumed>) = 0 [pid 5075] unlink("./1/cgroup.net" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5140] +++ killed by SIGBUS (core dumped) +++ [pid 5137] +++ killed by SIGBUS (core dumped) +++ [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... unlink resumed>) = 0 [pid 5073] unlink("./1/binderfs" [pid 5149] close(14 [pid 5075] getdents64(3, [pid 5078] <... clone resumed>, child_tidptr=0x555556031690) = 9 [pid 5075] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./1") = 0 [pid 5075] mkdir("./2", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5167 attached ./strace-static-x86_64: Process 5166 attached [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5073] <... unlink resumed>) = 0 [pid 5167] set_robust_list(0x5555560316a0, 24 [pid 5149] close(15 [pid 5075] <... clone resumed>, child_tidptr=0x555556031690) = 9 [pid 5166] set_robust_list(0x5555560316a0, 24 [pid 5073] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5166] <... set_robust_list resumed>) = 0 [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5167] <... set_robust_list resumed>) = 0 [pid 5166] chdir("./2" [pid 5149] close(16 [pid 5079] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5166] <... chdir resumed>) = 0 [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5166] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5149] close(17 [pid 5079] newfstatat(AT_FDCWD, "./1/file0", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5167] chdir("./2" [pid 5166] <... prctl resumed>) = 0 [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./1/cgroup" [pid 5167] <... chdir resumed>) = 0 [pid 5166] setpgid(0, 0 [pid 5149] close(18 [pid 5079] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5166] <... setpgid resumed>) = 0 [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... unlink resumed>) = 0 [pid 5167] <... prctl resumed>) = 0 [pid 5166] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5149] close(19 [pid 5079] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5167] setpgid(0, 0 [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... openat resumed>) = 4 [pid 5167] <... setpgid resumed>) = 0 [pid 5149] close(20 [pid 5079] newfstatat(4, "", [pid 5077] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5167] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5166] <... symlink resumed>) = 0 [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] newfstatat(3, "", [pid 5167] <... symlink resumed>) = 0 [pid 5149] close(21 [pid 5079] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5167] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5149] close(22 [pid 5079] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(3, [pid 5167] <... symlink resumed>) = 0 [pid 5166] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5073] unlink("./1/cgroup.net" [pid 5167] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5149] close(23 [pid 5077] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 224 [pid 5167] <... symlink resumed>) = 0 [pid 5166] <... symlink resumed>) = 0 [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(4 [pid 5077] umount2("./1/core", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5149] close(24 [pid 5079] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5166] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5167] <... openat resumed>) = 3 [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] rmdir("./1/file0" [pid 5077] newfstatat(AT_FDCWD, "./1/core", [pid 5073] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5167] write(3, "1000", 4 [pid 5149] close(25 [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|0600, st_size=17014784, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(3 [pid 5167] <... write resumed>) = 4 [pid 5166] <... symlink resumed>) = 0 [pid 5167] close(3 [pid 5077] unlink("./1/core" [pid 5073] <... close resumed>) = 0 [pid 5166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] rmdir("./1" [pid 5167] <... close resumed>) = 0 [pid 5167] read(200, 0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5167] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff63eaac000 [pid 5167] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... unlink resumed>) = 0 [pid 5166] <... openat resumed>) = 3 [pid 5149] close(26 [pid 5079] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5167] <... mprotect resumed>) = 0 [pid 5166] write(3, "1000", 4 [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] mkdir("./2", 0777 [pid 5166] <... write resumed>) = 4 [pid 5149] close(27 [pid 5079] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... mkdir resumed>) = 0 [pid 5166] close(3 [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5167] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5166] <... close resumed>) = 0 [pid 5149] close(28 [pid 5079] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5073] <... openat resumed>) = 3 [pid 5167] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5166] read(200, [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5167] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5166] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] close(29 [pid 5079] unlink("./1/cgroup" [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5168 attached [pid 5166] symlink("/dev/binderfs", "./binderfs" [pid 5149] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... unlink resumed>) = 0 [pid 5077] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 5168] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5167] <... clone3 resumed> => {parent_tid=[10]}, 88) = 10 [pid 5166] <... symlink resumed>) = 0 [pid 5149] exit_group(0 [pid 5079] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5168] <... rseq resumed>) = 0 [pid 5167] rt_sigprocmask(SIG_SETMASK, [], [pid 5166] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] <... futex resumed>) = ? [pid 5160] <... futex resumed>) = ? [pid 5155] <... futex resumed>) = ? [pid 5149] <... exit_group resumed>) = ? [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5168] set_robust_list(0x7ff63eacc9a0, 24 [pid 5167] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5168] <... set_robust_list resumed>) = 0 [pid 5168] rt_sigprocmask(SIG_SETMASK, [], [pid 5167] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... futex resumed>) = 0 [pid 5163] +++ exited with 0 +++ [pid 5160] +++ exited with 0 +++ [pid 5079] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5077] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5168] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5167] <... futex resumed>) = 0 [pid 5166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5155] +++ exited with 0 +++ [pid 5149] +++ exited with 0 +++ ./strace-static-x86_64: Process 5169 attached [pid 5168] memfd_create("syzkaller", 0 [pid 5167] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... mmap resumed>) = 0x7ff63eaac000 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5169] set_robust_list(0x5555560316a0, 24 [pid 5168] <... memfd_create resumed>) = 3 [pid 5167] <... futex resumed>) = 0 [pid 5166] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] <... set_robust_list resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5169] chdir("./2" [pid 5079] unlink("./1/cgroup.net" [pid 5074] <... openat resumed>) = 3 [pid 5073] <... clone resumed>, child_tidptr=0x555556031690) = 9 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] unlink("./1/cgroup.cpu" [pid 5074] newfstatat(3, "", [pid 5169] <... chdir resumed>) = 0 [pid 5168] <... mmap resumed>) = 0x7ff6366ac000 [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5166] <... mprotect resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5166] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5079] <... unlink resumed>) = 0 [pid 5077] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5169] <... prctl resumed>) = 0 [pid 5169] setpgid(0, 0 [pid 5167] <... mmap resumed>) = 0x7ff63668b000 [pid 5166] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5074] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5169] <... setpgid resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5167] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5074] umount2("./1/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5170 attached [pid 5169] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5167] <... mprotect resumed>) = 0 [pid 5079] getdents64(3, [pid 5077] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5170] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5169] <... symlink resumed>) = 0 [pid 5168] <... write resumed>) = 262144 [pid 5167] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5166] <... clone3 resumed> => {parent_tid=[10]}, 88) = 10 [pid 5079] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./1/cgroup.cpu", [pid 5170] <... rseq resumed>) = 0 [pid 5169] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5167] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5166] rt_sigprocmask(SIG_SETMASK, [], [pid 5079] close(3 [pid 5077] newfstatat(AT_FDCWD, "./1/bus", [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5170] set_robust_list(0x7ff63eacc9a0, 24 [pid 5169] <... symlink resumed>) = 0 [pid 5168] munmap(0x7ff6366ac000, 138412032 [pid 5167] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5079] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./1/cgroup.cpu" [pid 5170] <... set_robust_list resumed>) = 0 [pid 5169] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5079] rmdir("./1" [pid 5077] unlink("./1/bus" [pid 5170] rt_sigprocmask(SIG_SETMASK, [], [pid 5169] <... symlink resumed>) = 0 [pid 5166] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... rmdir resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5170] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5166] <... futex resumed>) = 0 [pid 5077] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5170] memfd_create("syzkaller", 0 [pid 5169] <... openat resumed>) = 3 [pid 5166] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] mkdir("./2", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5171 attached [pid 5170] <... memfd_create resumed>) = 3 [pid 5169] write(3, "1000", 4 [pid 5166] <... futex resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5074] <... umount2 resumed>) = 0 [pid 5171] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5169] <... write resumed>) = 4 [pid 5167] <... clone3 resumed> => {parent_tid=[11]}, 88) = 11 [pid 5166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] <... rseq resumed>) = 0 [pid 5170] <... mmap resumed>) = 0x7ff6366ac000 [pid 5169] close(3 [pid 5166] <... mmap resumed>) = 0x7ff63668b000 [pid 5079] <... openat resumed>) = 3 [pid 5077] unlink("./1/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5171] set_robust_list(0x7ff6366ab9a0, 24 [pid 5169] <... close resumed>) = 0 [pid 5167] rt_sigprocmask(SIG_SETMASK, [], [pid 5077] <... unlink resumed>) = 0 [pid 5171] <... set_robust_list resumed>) = 0 [pid 5169] read(200, [pid 5168] <... munmap resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5077] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] rt_sigprocmask(SIG_SETMASK, [], [pid 5169] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5168] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5167] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5166] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./1/bus", [pid 5171] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5169] symlink("/dev/binderfs", "./binderfs" [pid 5168] <... openat resumed>) = 4 [pid 5167] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] close(3 [pid 5077] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5169] <... symlink resumed>) = 0 [pid 5167] <... futex resumed>) = 0 [pid 5166] <... mprotect resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5171] creat("./bus", 000 [pid 5170] <... write resumed>) = 262144 [pid 5169] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] ioctl(4, LOOP_SET_FD, 3 [pid 5167] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./1/bus" [pid 5169] <... futex resumed>) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] unlink("./1/cgroup" [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./1/binderfs") = 0 [pid 5074] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5166] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5170] munmap(0x7ff6366ac000, 138412032 [pid 5166] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5170] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5172 attached [pid 5171] <... creat resumed>) = 5 [pid 5170] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5168] <... ioctl resumed>) = 0 [pid 5166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5077] <... unlink resumed>) = 0 [pid 5172] set_robust_list(0x5555560316a0, 24 [pid 5169] <... mmap resumed>) = 0x7ff63eaac000 [pid 5079] <... clone resumed>, child_tidptr=0x555556031690) = 9 [pid 5077] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] <... set_robust_list resumed>) = 0 [pid 5169] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5172] chdir("./2" [pid 5169] <... mprotect resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5170] <... openat resumed>) = 4 [pid 5169] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5077] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5172] <... chdir resumed>) = 0 [pid 5169] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5169] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5174 attached ./strace-static-x86_64: Process 5173 attached [pid 5172] <... prctl resumed>) = 0 [pid 5171] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] ioctl(4, LOOP_SET_FD, 3 [pid 5168] close(3 [pid 5077] unlink("./1/cgroup.net" [pid 5173] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5172] setpgid(0, 0 [pid 5171] <... futex resumed>) = 1 [pid 5169] <... clone3 resumed> => {parent_tid=[10]}, 88) = 10 [pid 5168] <... close resumed>) = 0 [pid 5167] <... futex resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5173] <... rseq resumed>) = 0 [pid 5172] <... setpgid resumed>) = 0 [pid 5171] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] rt_sigprocmask(SIG_SETMASK, [], [pid 5168] mkdir("./file0", 0777 [pid 5167] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] getdents64(3, [pid 5174] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5173] set_robust_list(0x7ff63eacc9a0, 24 [pid 5172] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5168] <... mkdir resumed>) = 0 [pid 5167] <... futex resumed>) = 0 [pid 5166] <... clone3 resumed> => {parent_tid=[11]}, 88) = 11 [pid 5077] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5174] <... rseq resumed>) = 0 [pid 5173] <... set_robust_list resumed>) = 0 [pid 5172] <... symlink resumed>) = 0 [pid 5171] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5169] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5167] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5166] rt_sigprocmask(SIG_SETMASK, [], [pid 5077] close(3 [pid 5174] set_robust_list(0x7ff6366ab9a0, 24 [pid 5173] rt_sigprocmask(SIG_SETMASK, [], [pid 5172] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5171] <... mount resumed>) = 0 [pid 5170] <... ioctl resumed>) = 0 [pid 5169] <... futex resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5174] <... set_robust_list resumed>) = 0 [pid 5173] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5172] <... symlink resumed>) = 0 [pid 5171] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] close(3 [pid 5169] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5077] rmdir("./1" [pid 5174] rt_sigprocmask(SIG_SETMASK, [], [pid 5173] memfd_create("syzkaller", 0 [pid 5170] <... close resumed>) = 0 [pid 5169] <... futex resumed>) = 0 [pid 5166] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5174] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5173] <... memfd_create resumed>) = 3 [pid 5172] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5171] <... futex resumed>) = 1 [pid 5170] mkdir("./file0", 0777 [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5167] <... futex resumed>) = 0 [pid 5166] <... futex resumed>) = 0 [pid 5077] mkdir("./2", 0777 [pid 5074] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5169] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5174] creat("./bus", 000 [pid 5173] <... mmap resumed>) = 0x7ff63668b000 [pid 5171] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] <... mkdir resumed>) = 0 [pid 5169] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5167] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] newfstatat(AT_FDCWD, "./1/file0", [pid 5173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5172] <... symlink resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] <... creat resumed>) = 3 [pid 5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5170] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5167] <... futex resumed>) = 0 [pid 5166] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5172] <... openat resumed>) = 3 [pid 5171] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5172] write(3, "1000", 4 [pid 5171] <... open resumed>) = 3 [pid 5167] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 60.299461][ T5168] loop0: detected capacity change from 0 to 512 [ 60.308499][ T5074] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.325004][ T5170] loop4: detected capacity change from 0 to 512 [pid 5077] close(3 [pid 5174] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... write resumed>) = 4 [pid 5171] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... mprotect resumed>) = 0 [pid 5167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5174] <... futex resumed>) = 1 [pid 5166] <... futex resumed>) = 0 [pid 5174] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5166] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... mount resumed>) = 0 [pid 5166] <... futex resumed>) = 0 [pid 5174] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... futex resumed>) = 0 [pid 5166] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5174] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5166] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... open resumed>) = 5 [pid 5166] <... futex resumed>) = 0 [pid 5174] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... futex resumed>) = 0 [pid 5166] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5174] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5166] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... mmap resumed>) = 0x20000000 [pid 5166] <... futex resumed>) = 0 [pid 5174] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] <... futex resumed>) = 0 [pid 5166] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5174] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] close(3 [pid 5171] <... futex resumed>) = 0 [pid 5166] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... close resumed>) = 0 [pid 5167] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... futex resumed>) = 0 [pid 5172] read(200, [pid 5171] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5167] <... futex resumed>) = 0 [pid 5174] memfd_create("syzkaller", 0 [pid 5173] <... write resumed>) = 262144 [pid 5172] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5171] <... mmap resumed>) = 0x20000000 [pid 5169] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5167] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5177 attached [pid 5174] <... memfd_create resumed>) = 6 [pid 5172] symlink("/dev/binderfs", "./binderfs" [pid 5171] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5172] <... symlink resumed>) = 0 [pid 5171] <... futex resumed>) = 0 [pid 5167] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] set_robust_list(0x5555560316a0, 24 [pid 5174] <... mmap resumed>) = 0x7ff6366ac000 [pid 5171] memfd_create("syzkaller", 0 [pid 5167] <... futex resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556031690) = 9 [pid 5177] <... set_robust_list resumed>) = 0 [pid 5174] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5172] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... memfd_create resumed>) = 6 [pid 5177] chdir("./2" [pid 5174] <... write resumed>) = 65536 [pid 5172] <... futex resumed>) = 0 [pid 5171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5177] <... chdir resumed>) = 0 [pid 5172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5177] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5174] munmap(0x7ff6366ac000, 138412032 [pid 5173] munmap(0x7ff63668b000, 138412032 [pid 5172] <... mmap resumed>) = 0x7ff63eaac000 [pid 5171] <... mmap resumed>) = 0x7ff6366ac000 [pid 5169] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5168] <... mount resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5173] <... munmap resumed>) = 0 [pid 5171] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5169] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5173] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] getdents64(4, ./strace-static-x86_64: Process 5178 attached [pid 5177] <... prctl resumed>) = 0 [pid 5174] <... munmap resumed>) = 0 [pid 5173] <... openat resumed>) = 4 [pid 5172] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5171] <... write resumed>) = 65536 [pid 5168] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5178] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5177] setpgid(0, 0 [pid 5174] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5170] <... mount resumed>) = -1 EBADMSG (Bad message) [pid 5169] <... clone3 resumed> => {parent_tid=[11]}, 88) = 11 [pid 5074] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5171] munmap(0x7ff6366ac000, 138412032 [pid 5178] <... rseq resumed>) = 0 [pid 5177] <... setpgid resumed>) = 0 [pid 5174] <... openat resumed>) = 7 [pid 5173] ioctl(4, LOOP_SET_FD, 3 [pid 5172] <... mprotect resumed>) = 0 [pid 5170] ioctl(4, LOOP_CLR_FD [pid 5169] rt_sigprocmask(SIG_SETMASK, [], [pid 5168] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5074] getdents64(4, [pid 5178] set_robust_list(0x7ff63eaab9a0, 24 [ 60.364693][ T5168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.380082][ T5168] ext4 filesystem being mounted at /root/syzkaller.p47fVk/2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.392464][ T5170] EXT4-fs warning (device loop4): read_mmp_block:114: Error -74 while reading MMP block 12 [pid 5177] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5174] ioctl(7, LOOP_SET_FD, 6 [pid 5172] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5171] <... munmap resumed>) = 0 [pid 5169] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5168] ioctl(4, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5178] <... set_robust_list resumed>) = 0 [pid 5177] <... symlink resumed>) = 0 [pid 5174] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5172] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5171] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5170] <... ioctl resumed>) = 0 [pid 5169] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] <... ioctl resumed>) = 0 [pid 5074] close(4 [pid 5178] rt_sigprocmask(SIG_SETMASK, [], [pid 5177] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5174] ioctl(7, LOOP_CLR_FD [pid 5172] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5074] <... close resumed>) = 0 ./strace-static-x86_64: Process 5179 attached [pid 5178] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5177] <... symlink resumed>) = 0 [pid 5174] <... ioctl resumed>) = 0 [pid 5074] rmdir("./1/file0" [pid 5179] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5178] creat("./bus", 000 [pid 5177] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5172] <... clone3 resumed> => {parent_tid=[10]}, 88) = 10 [pid 5074] <... rmdir resumed>) = 0 [pid 5179] <... rseq resumed>) = 0 [pid 5178] <... creat resumed>) = 5 [pid 5177] <... symlink resumed>) = 0 [pid 5172] rt_sigprocmask(SIG_SETMASK, [], [pid 5171] <... openat resumed>) = 7 [pid 5168] close(4 [pid 5074] umount2("./1/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5179] set_robust_list(0x7ff63eacc9a0, 24 [pid 5177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5179] <... set_robust_list resumed>) = 0 [pid 5177] <... openat resumed>) = 3 [pid 5174] ioctl(7, LOOP_SET_FD, 6 [pid 5172] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] ioctl(7, LOOP_SET_FD, 6 [pid 5170] close(4 [pid 5168] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./1/cgroup", [pid 5179] rt_sigprocmask(SIG_SETMASK, [], [pid 5178] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] write(3, "1000", 4 [pid 5174] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5172] <... futex resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5179] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5178] <... futex resumed>) = 0 [pid 5177] <... write resumed>) = 4 [pid 5174] close(7 [pid 5172] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] unlink("./1/cgroup" [pid 5179] memfd_create("syzkaller", 0 [pid 5178] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] close(3 [pid 5174] <... close resumed>) = 0 [pid 5172] <... futex resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5170] <... close resumed>) = 0 [pid 5179] <... memfd_create resumed>) = 3 [pid 5177] <... close resumed>) = 0 [pid 5174] close(6 [pid 5172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5171] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5168] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./1/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5177] read(200, [pid 5174] <... close resumed>) = 0 [pid 5172] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5171] ioctl(7, LOOP_CLR_FD [pid 5168] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5179] <... mmap resumed>) = 0x7ff63668b000 [pid 5177] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5174] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5171] <... ioctl resumed>) = 0 [pid 5170] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] newfstatat(AT_FDCWD, "./1/cgroup.net", [pid 5179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5178] <... futex resumed>) = 0 [pid 5177] symlink("/dev/binderfs", "./binderfs" [pid 5174] <... futex resumed>) = 0 [pid 5173] <... ioctl resumed>) = 0 [pid 5172] <... mprotect resumed>) = 0 [pid 5170] <... futex resumed>) = 0 [pid 5169] <... futex resumed>) = 1 [pid 5166] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5179] <... write resumed>) = 262144 [pid 5178] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] <... symlink resumed>) = 0 [pid 5174] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] close(3 [pid 5169] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5166] <... close resumed>) = 0 [pid 5074] unlink("./1/cgroup.net" [pid 5177] <... futex resumed>) = 0 [pid 5173] <... close resumed>) = 0 [pid 5171] ioctl(7, LOOP_SET_FD, 6 [pid 5169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5166] close(4 [pid 5074] <... unlink resumed>) = 0 [pid 5179] munmap(0x7ff63668b000, 138412032 [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5173] mkdir("./file0", 0777 [pid 5172] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5171] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5169] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] getdents64(3, [pid 5179] <... munmap resumed>) = 0 [pid 5177] <... mmap resumed>) = 0x7ff63eaac000 [pid 5173] <... mkdir resumed>) = 0 [pid 5171] close(7 [pid 5166] close(5 [pid 5074] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5178] <... futex resumed>) = 0 [pid 5177] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5173] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5172] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5171] <... close resumed>) = 0 [pid 5169] <... futex resumed>) = 1 [pid 5166] <... close resumed>) = 0 [pid 5074] close(3 [pid 5178] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5177] <... mprotect resumed>) = 0 [pid 5171] close(6 [pid 5177] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5179] <... openat resumed>) = 4 [pid 5177] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5172] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5171] <... close resumed>) = 0 [ 60.430194][ T5173] loop1: detected capacity change from 0 to 512 [pid 5179] ioctl(4, LOOP_SET_FD, 3 [pid 5177] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5166] close(6 [pid 5074] <... close resumed>) = 0 ./strace-static-x86_64: Process 5180 attached [pid 5178] <... mount resumed>) = 0 [pid 5171] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5180] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5171] <... futex resumed>) = 0 [pid 5167] close(3 [pid 5180] <... rseq resumed>) = 0 [pid 5171] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] <... close resumed>) = 0 [pid 5167] close(4 [pid 5180] set_robust_list(0x7ff63eaab9a0, 24 [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5181 attached [pid 5180] <... set_robust_list resumed>) = 0 [pid 5179] <... ioctl resumed>) = 0 [pid 5178] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... clone3 resumed> => {parent_tid=[11]}, 88) = 11 [pid 5167] close(5 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] rmdir("./1" [pid 5181] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5180] rt_sigprocmask(SIG_SETMASK, [], [pid 5179] close(3 [pid 5172] rt_sigprocmask(SIG_SETMASK, [], [pid 5167] <... close resumed>) = 0 [pid 5181] <... rseq resumed>) = 0 [pid 5181] set_robust_list(0x7ff63eacc9a0, 24 [pid 5177] <... clone3 resumed> => {parent_tid=[10]}, 88) = 10 [pid 5167] close(6 [pid 5166] close(7 [pid 5180] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5179] <... close resumed>) = 0 [pid 5172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5181] <... set_robust_list resumed>) = 0 [pid 5180] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] mkdir("./file0", 0777 [pid 5178] <... futex resumed>) = 1 [pid 5177] rt_sigprocmask(SIG_SETMASK, [], [pid 5172] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] mkdir("./2", 0777 [pid 5181] rt_sigprocmask(SIG_SETMASK, [], [pid 5180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5179] <... mkdir resumed>) = 0 [pid 5178] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5172] <... futex resumed>) = 0 [pid 5169] <... futex resumed>) = 0 [pid 5167] close(7 [pid 5166] close(8 [pid 5074] <... mkdir resumed>) = 0 [pid 5177] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5177] <... futex resumed>) = 0 [pid 5166] close(9 [pid 5177] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... futex resumed>) = 0 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5177] <... futex resumed>) = 0 [pid 5169] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5166] close(10 [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5177] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5166] close(11 [pid 5074] <... openat resumed>) = 3 [pid 5177] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5177] <... mprotect resumed>) = 0 [pid 5166] close(12 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5177] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5177] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5166] close(13 [pid 5177] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] close(3./strace-static-x86_64: Process 5184 attached [pid 5166] close(14 [pid 5184] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5177] <... clone3 resumed> => {parent_tid=[11]}, 88) = 11 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... close resumed>) = 0 [pid 5184] <... rseq resumed>) = 0 [pid 5177] rt_sigprocmask(SIG_SETMASK, [], [pid 5166] close(15 [pid 5184] set_robust_list(0x7ff63eaab9a0, 24 [pid 5177] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5184] <... set_robust_list resumed>) = 0 [pid 5177] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] close(16 [pid 5184] rt_sigprocmask(SIG_SETMASK, [], [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5177] <... futex resumed>) = 0 [pid 5166] close(17 [pid 5184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5180] creat("./bus", 000 [pid 5179] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5177] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5184] creat("./bus", 000 [pid 5166] close(18 [ 60.474156][ T5179] loop5: detected capacity change from 0 to 512 [ 60.503596][ T5173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [pid 5184] <... creat resumed>) = 3 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5166] close(19./strace-static-x86_64: Process 5185 attached [pid 5181] memfd_create("syzkaller", 0 [pid 5180] <... creat resumed>) = 3 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] close(8 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5184] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5184] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5184] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5177] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5184] <... mount resumed>) = 0 [pid 5166] close(20 [pid 5184] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5184] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5166] close(21 [pid 5184] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5166] close(22 [pid 5184] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5177] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5184] <... open resumed>) = 4 [pid 5166] close(23 [pid 5185] set_robust_list(0x5555560316a0, 24 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... clone resumed>, child_tidptr=0x555556031690) = 11 [pid 5185] <... set_robust_list resumed>) = 0 [pid 5166] close(24 [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5185] chdir("./2" [pid 5184] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] <... memfd_create resumed>) = 5 [pid 5167] close(9 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5184] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5167] close(10 [pid 5166] close(25 [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5185] <... chdir resumed>) = 0 [pid 5184] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5181] <... mmap resumed>) = 0x7ff63668b000 [pid 5177] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] close(11 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5167] close(12) = -1 EBADF (Bad file descriptor) [pid 5167] close(13 [pid 5185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5166] close(26 [pid 5167] close(14 [pid 5185] <... prctl resumed>) = 0 [pid 5184] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 4, 0 [pid 5177] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5167] close(15) = -1 EBADF (Bad file descriptor) [pid 5167] close(16) = -1 EBADF (Bad file descriptor) [pid 5167] close(17) = -1 EBADF (Bad file descriptor) [pid 5185] setpgid(0, 0 [pid 5184] <... mmap resumed>) = 0x20000000 [pid 5181] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20001094} --- [pid 5167] close(18 [pid 5166] close(27 [pid 5185] <... setpgid resumed>) = 0 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5185] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5166] close(28 [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5185] <... symlink resumed>) = 0 [pid 5167] close(19 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5167] close(20) = -1 EBADF (Bad file descriptor) [pid 5185] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5166] close(29 [pid 5185] <... symlink resumed>) = 0 [pid 5180] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5173] <... mount resumed>) = 0 [pid 5167] close(21 [pid 5166] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5180] <... futex resumed>) = 1 [pid 5178] <... open resumed>) = 3 [pid 5172] <... futex resumed>) = 0 [pid 5166] exit_group(0 [pid 5185] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5180] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5172] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5178] <... futex resumed>) = 1 [pid 5174] <... futex resumed>) = ? [pid 5173] <... openat resumed>) = 6 [pid 5172] <... futex resumed>) = 0 [pid 5170] <... futex resumed>) = ? [pid 5167] close(22 [pid 5166] <... exit_group resumed>) = ? [pid 5185] <... symlink resumed>) = 0 [pid 5180] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5178] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] +++ exited with 0 +++ [pid 5173] chdir("./file0" [pid 5172] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] +++ exited with 0 +++ [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5180] <... mount resumed>) = 0 [pid 5173] <... chdir resumed>) = 0 [pid 5167] close(23 [pid 5180] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] ioctl(4, LOOP_CLR_FD [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5180] <... futex resumed>) = 1 [pid 5173] <... ioctl resumed>) = 0 [pid 5172] <... futex resumed>) = 0 [pid 5167] close(24 [pid 5185] <... openat resumed>) = 3 [pid 5180] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5166] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5173] close(4) = 0 [pid 5185] write(3, "1000", 4) = 4 [pid 5180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5185] close(3 [pid 5078] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] <... close resumed>) = 0 [pid 5167] close(25 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5185] read(200, [pid 5173] <... futex resumed>) = 0 [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5185] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] <... futex resumed>) = 0 [pid 5169] <... futex resumed>) = 0 [pid 5167] close(26 [pid 5078] <... openat resumed>) = 3 [pid 5185] symlink("/dev/binderfs", "./binderfs" [pid 5180] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5172] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] newfstatat(3, "", [pid 5185] <... symlink resumed>) = 0 [pid 5180] <... open resumed>) = 5 [pid 5169] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] close(27 [pid 5185] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [pid 5169] <... futex resumed>) = 1 [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5185] <... futex resumed>) = 0 [pid 5173] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5169] futex(0x7ff63f39e6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 60.520917][ T5173] ext4 filesystem being mounted at /root/syzkaller.tvsxpX/2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5167] close(28 [pid 5078] getdents64(3, [pid 5185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5173] <... mmap resumed>) = 0x20000000 [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5185] <... mmap resumed>) = 0x7ff63eaac000 [pid 5180] <... futex resumed>) = 1 [pid 5173] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = 0 [pid 5167] close(29 [pid 5078] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5180] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] <... futex resumed>) = 1 [pid 5172] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... futex resumed>) = 0 [pid 5167] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5185] <... mprotect resumed>) = 0 [pid 5180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] <... futex resumed>) = 0 [pid 5169] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] exit_group(0 [pid 5078] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 5185] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5180] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5173] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... futex resumed>) = 0 [pid 5185] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5173] memfd_create("syzkaller", 0 [pid 5185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5173] <... memfd_create resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5188 attached [pid 5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5171] <... futex resumed>) = ? [pid 5168] <... futex resumed>) = ? [pid 5167] <... exit_group resumed>) = ? [pid 5078] unlink("./2/cgroup.cpu" [pid 5185] <... clone3 resumed> => {parent_tid=[12]}, 88) = 12 [pid 5188] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5185] rt_sigprocmask(SIG_SETMASK, [], [pid 5173] <... mmap resumed>) = 0x7ff63668b000 [pid 5171] +++ exited with 0 +++ [pid 5168] +++ exited with 0 +++ [pid 5167] +++ exited with 0 +++ [pid 5078] <... unlink resumed>) = 0 [pid 5185] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5185] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5188] <... rseq resumed>) = 0 [pid 5185] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5078] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5185] <... futex resumed>) = 0 [pid 5185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5188] set_robust_list(0x7ff63eacc9a0, 24 [pid 5185] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5173] <... write resumed>) = 65536 [pid 5078] <... umount2 resumed>) = 0 [pid 5188] <... set_robust_list resumed>) = 0 [pid 5185] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5173] munmap(0x7ff63668b000, 138412032 [pid 5078] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5188] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5185] <... mprotect resumed>) = 0 [pid 5173] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5188] memfd_create("syzkaller", 0) = 3 [pid 5185] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5173] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5078] newfstatat(AT_FDCWD, "./2/bus", [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5185] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5173] <... openat resumed>) = 7 [pid 5078] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5188] <... mmap resumed>) = 0x7ff63668b000 [pid 5185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5173] ioctl(7, LOOP_SET_FD, 4 [pid 5078] unlink("./2/bus"./strace-static-x86_64: Process 5189 attached [pid 5188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5173] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... unlink resumed>) = 0 [pid 5075] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5189] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5188] <... write resumed>) = 262144 [pid 5185] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13 [pid 5173] ioctl(7, LOOP_CLR_FD [pid 5185] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5189] <... rseq resumed>) = 0 [pid 5188] munmap(0x7ff63668b000, 138412032 [pid 5185] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... ioctl resumed>) = 0 [pid 5078] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5189] set_robust_list(0x7ff63eaab9a0, 24 [pid 5188] <... munmap resumed>) = 0 [pid 5185] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5189] <... set_robust_list resumed>) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5185] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5075] <... openat resumed>) = 3 [pid 5189] rt_sigprocmask(SIG_SETMASK, [], [ 60.589111][ T5179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [pid 5188] <... openat resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(3, "", [pid 5189] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5188] ioctl(4, LOOP_SET_FD, 3 [pid 5173] ioctl(7, LOOP_SET_FD, 4 [pid 5078] unlink("./2/binderfs" [pid 5189] creat("./bus", 000 [pid 5173] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5173] close(7 [pid 5078] <... unlink resumed>) = 0 [pid 5075] getdents64(3, [pid 5173] <... close resumed>) = 0 [pid 5078] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5173] close(4) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./2/cgroup.cpu") = 0 [pid 5078] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5173] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5173] <... futex resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./2/bus", [pid 5173] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5169] close(3 [pid 5078] <... openat resumed>) = 4 [pid 5075] unlink("./2/bus" [pid 5185] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5169] <... close resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 5075] <... unlink resumed>) = 0 [pid 5185] futex(0x7ff63f39e6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5169] close(4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] <... mmap resumed>) = 0x7ff63ea6a000 [pid 5189] <... creat resumed>) = 5 [pid 5188] <... ioctl resumed>) = 0 [pid 5185] mprotect(0x7ff63ea6b000, 131072, PROT_READ|PROT_WRITE [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5189] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] close(3 [pid 5185] <... mprotect resumed>) = 0 [pid 5169] close(5 [pid 5078] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5075] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5189] <... futex resumed>) = 0 [pid 5188] <... close resumed>) = 0 [pid 5185] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5169] <... close resumed>) = 0 [pid 5078] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5189] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5188] mkdir("./file0", 0777 [pid 5185] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5169] close(6 [pid 5078] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5075] unlink("./2/binderfs" [pid 5188] <... mkdir resumed>) = 0 [pid 5185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63ea8a990, parent_tid=0x7ff63ea8a990, exit_signal=0, stack=0x7ff63ea6a000, stack_size=0x20300, tls=0x7ff63ea8a6c0} [pid 5169] <... close resumed>) = 0 [pid 5078] close(4 [pid 5188] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5075] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5190 attached [pid 5169] close(7 [pid 5078] <... close resumed>) = 0 [pid 5075] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] rseq(0x7ff63ea8afe0, 0x20, 0, 0x53053053 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 60.646179][ T5188] loop2: detected capacity change from 0 to 512 [ 60.656199][ T5179] ext4 filesystem being mounted at /root/syzkaller.51vpeu/2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5078] rmdir("./2/file0" [pid 5190] <... rseq resumed>) = 0 [pid 5185] <... clone3 resumed> => {parent_tid=[14]}, 88) = 14 [pid 5190] set_robust_list(0x7ff63ea8a9a0, 24 [pid 5185] rt_sigprocmask(SIG_SETMASK, [], [pid 5169] close(8 [pid 5078] <... rmdir resumed>) = 0 [pid 5185] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5185] futex(0x7ff63f39e6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] <... set_robust_list resumed>) = 0 [pid 5185] futex(0x7ff63f39e6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] rt_sigprocmask(SIG_SETMASK, [], [pid 5169] close(9 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5190] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] newfstatat(AT_FDCWD, "./2/cgroup", [pid 5190] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5169] close(10 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5190] <... mount resumed>) = 0 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] unlink("./2/cgroup" [pid 5190] futex(0x7ff63f39e6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] close(11 [pid 5190] <... futex resumed>) = 1 [pid 5185] <... futex resumed>) = 0 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... unlink resumed>) = 0 [pid 5190] futex(0x7ff63f39e6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5185] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... mmap resumed>) = 0x20000000 [pid 5179] <... mount resumed>) = 0 [pid 5169] close(12 [pid 5189] <... futex resumed>) = 0 [pid 5185] <... futex resumed>) = 1 [pid 5180] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5189] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5185] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5180] <... futex resumed>) = 1 [pid 5179] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5172] <... futex resumed>) = 0 [pid 5169] close(13 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5189] <... open resumed>) = 3 [pid 5180] memfd_create("syzkaller", 0 [pid 5179] ioctl(4, LOOP_CLR_FD [pid 5172] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5189] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... memfd_create resumed>) = 6 [pid 5179] <... ioctl resumed>) = 0 [pid 5172] <... futex resumed>) = 0 [pid 5169] close(14 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5189] <... futex resumed>) = 1 [pid 5185] <... futex resumed>) = 0 [pid 5180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5189] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5185] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... mmap resumed>) = 0x7ff63668b000 [pid 5179] close(4 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] unlink("./2/cgroup.net" [pid 5189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5185] <... futex resumed>) = 0 [pid 5180] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5078] <... unlink resumed>) = 0 [pid 5078] getdents64(3, 0x555556032850 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 5169] close(15 [pid 5078] <... close resumed>) = 0 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5169] close(16) = -1 EBADF (Bad file descriptor) [pid 5078] rmdir("./2" [pid 5169] close(17 [pid 5078] <... rmdir resumed>) = 0 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5180] <... write resumed>) = 65536 [pid 5179] <... close resumed>) = 0 [pid 5169] close(18 [ 60.707387][ T5075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.740920][ T5188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [pid 5078] mkdir("./3", 0777 [pid 5185] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5180] munmap(0x7ff63668b000, 138412032 [pid 5179] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... mkdir resumed>) = 0 [pid 5180] <... munmap resumed>) = 0 [pid 5179] <... futex resumed>) = 0 [pid 5169] close(19 [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... openat resumed>) = 3 [pid 5180] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5179] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] close(20 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5180] <... openat resumed>) = 4 [pid 5169] close(21 [pid 5078] close(3 [pid 5180] ioctl(4, LOOP_SET_FD, 6 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... close resumed>) = 0 [pid 5180] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5169] close(22 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5193 attached [pid 5180] ioctl(4, LOOP_CLR_FD [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5180] <... ioctl resumed>) = 0 [pid 5169] close(23) = -1 EBADF (Bad file descriptor) [pid 5169] close(24) = -1 EBADF (Bad file descriptor) [pid 5169] close(25 [pid 5193] set_robust_list(0x5555560316a0, 24 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... clone resumed>, child_tidptr=0x555556031690) = 12 [pid 5193] <... set_robust_list resumed>) = 0 [pid 5169] close(26 [pid 5180] ioctl(4, LOOP_SET_FD, 6 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5193] chdir("./3") = 0 [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5180] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5169] close(27 [pid 5193] <... prctl resumed>) = 0 [pid 5193] setpgid(0, 0 [pid 5180] close(4 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5193] <... setpgid resumed>) = 0 [pid 5180] <... close resumed>) = 0 [pid 5169] close(28 [pid 5193] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5180] close(6 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5193] <... symlink resumed>) = 0 [pid 5180] <... close resumed>) = 0 [pid 5169] close(29 [pid 5193] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5180] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5180] <... futex resumed>) = 0 [pid 5169] exit_group(0 [pid 5193] <... symlink resumed>) = 0 [pid 5180] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] <... futex resumed>) = ? [pid 5173] <... futex resumed>) = ? [pid 5169] <... exit_group resumed>) = ? [pid 5193] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5178] +++ exited with 0 +++ [pid 5173] +++ exited with 0 +++ [pid 5169] +++ exited with 0 +++ [pid 5193] <... symlink resumed>) = 0 [pid 5189] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5188] <... mount resumed>) = 0 [pid 5172] close(3 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5188] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5193] <... openat resumed>) = 3 [pid 5189] <... mmap resumed>) = 0x20000000 [pid 5172] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5193] write(3, "1000", 4 [pid 5189] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5193] <... write resumed>) = 4 [pid 5189] <... futex resumed>) = 1 [pid 5188] ioctl(4, LOOP_CLR_FD [pid 5185] <... futex resumed>) = 0 [pid 5193] close(3 [pid 5185] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... ioctl resumed>) = 0 [pid 5185] <... futex resumed>) = 0 [pid 5193] <... close resumed>) = 0 [ 60.770458][ T5188] ext4 filesystem being mounted at /root/syzkaller.yTuF4i/2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5189] memfd_create("syzkaller", 0 [pid 5188] close(4 [pid 5172] close(4 [pid 5075] <... umount2 resumed>) = 0 [pid 5193] read(200, [pid 5189] <... memfd_create resumed>) = 6 [pid 5188] <... close resumed>) = 0 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5193] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5188] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] symlink("/dev/binderfs", "./binderfs" [pid 5189] <... mmap resumed>) = 0x7ff63666a000 [pid 5188] <... futex resumed>) = 0 [pid 5193] <... symlink resumed>) = 0 [pid 5172] close(5 [pid 5075] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] close(6 [pid 5075] newfstatat(AT_FDCWD, "./2/file0", [pid 5193] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5188] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5193] <... futex resumed>) = 0 [pid 5172] close(7 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5193] <... mmap resumed>) = 0x7ff63eaac000 [pid 5189] <... write resumed>) = 65536 [pid 5172] close(8 [pid 5075] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5193] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5189] munmap(0x7ff63666a000, 138412032 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... openat resumed>) = 3 [pid 5193] <... mprotect resumed>) = 0 [pid 5172] close(9 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(3, "", [pid 5193] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5193] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5189] <... munmap resumed>) = 0 [pid 5172] close(10 [pid 5075] <... openat resumed>) = 4 [pid 5073] getdents64(3, [pid 5193] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5189] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 ./strace-static-x86_64: Process 5194 attached [pid 5189] <... openat resumed>) = 4 [pid 5172] close(11 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5194] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5193] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13 [pid 5189] ioctl(4, LOOP_SET_FD, 6 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] close(12 [pid 5194] <... rseq resumed>) = 0 [pid 5193] rt_sigprocmask(SIG_SETMASK, [], [pid 5189] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5194] set_robust_list(0x7ff63eacc9a0, 24 [pid 5193] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5189] ioctl(4, LOOP_CLR_FD [pid 5194] <... set_robust_list resumed>) = 0 [pid 5193] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] <... ioctl resumed>) = 0 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 5194] rt_sigprocmask(SIG_SETMASK, [], [pid 5193] <... futex resumed>) = 0 [pid 5172] close(13 [pid 5075] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5194] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5193] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5172] close(14 [pid 5075] close(4 [pid 5073] unlink("./2/cgroup.cpu" [pid 5194] memfd_create("syzkaller", 0 [pid 5193] <... futex resumed>) = 0 [pid 5177] <... futex resumed>) = ? [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... close resumed>) = 0 [pid 5194] <... memfd_create resumed>) = 3 [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5189] ioctl(4, LOOP_SET_FD, 6 [pid 5172] close(15 [pid 5075] rmdir("./2/file0" [pid 5073] <... unlink resumed>) = 0 [pid 5194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5193] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5189] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5184] +++ killed by SIGBUS (core dumped) +++ [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... rmdir resumed>) = 0 [pid 5073] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5194] <... mmap resumed>) = 0x7ff63668b000 [pid 5193] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5189] close(4 [pid 5172] close(16 [pid 5075] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 5189] <... close resumed>) = 0 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5189] close(6 [pid 5172] close(17 [pid 5075] newfstatat(AT_FDCWD, "./2/cgroup", [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5172] close(18 [pid 5075] unlink("./2/cgroup" [pid 5073] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5193] <... mprotect resumed>) = 0 [pid 5189] <... close resumed>) = 0 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5189] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] close(3 [pid 5172] close(19 [pid 5075] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5193] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5189] <... futex resumed>) = 0 [pid 5185] <... close resumed>) = 0 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./2/bus", [pid 5189] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5185] close(4 [pid 5172] close(20 [pid 5075] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5073] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./2/bus" [pid 5172] close(21 [pid 5075] unlink("./2/cgroup.net" [pid 5185] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5193] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5185] close(5 [pid 5172] close(22 [pid 5193] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5185] <... close resumed>) = 0 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] getdents64(3, [pid 5073] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5172] close(23 [pid 5075] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5185] close(6 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5185] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5172] close(24 [pid 5075] <... close resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5185] close(7 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] rmdir("./2" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5185] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5172] close(25./strace-static-x86_64: Process 5195 attached [pid 5185] close(8 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] unlink("./2/binderfs" [pid 5195] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5193] <... clone3 resumed> => {parent_tid=[14]}, 88) = 14 [pid 5185] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5181] +++ killed by SIGBUS (core dumped) +++ [pid 5177] +++ killed by SIGBUS (core dumped) +++ [pid 5172] close(26 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5195] <... rseq resumed>) = 0 [pid 5185] close(9 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5195] set_robust_list(0x7ff63eaab9a0, 24 [pid 5193] rt_sigprocmask(SIG_SETMASK, [], [pid 5185] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5172] close(27 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=9, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5195] <... set_robust_list resumed>) = 0 [pid 5193] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5185] close(10 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5075] mkdir("./3", 0777 [pid 5073] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] rt_sigprocmask(SIG_SETMASK, [], [pid 5185] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5172] close(28 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5195] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5194] <... write resumed>) = 262144 [pid 5193] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] close(11 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5195] creat("./bus", 000 [pid 5185] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5172] close(29 [pid 5195] <... creat resumed>) = 4 [pid 5194] munmap(0x7ff63668b000, 138412032 [pid 5193] <... futex resumed>) = 0 [pid 5185] close(12 [pid 5172] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... munmap resumed>) = 0 [pid 5193] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5185] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... openat resumed>) = 3 [pid 5185] close(13 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5185] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5194] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5185] close(14 [pid 5077] <... openat resumed>) = 3 [pid 5194] <... openat resumed>) = 5 [pid 5185] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5193] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] close(15 [pid 5077] newfstatat(3, "", [pid 5194] ioctl(5, LOOP_SET_FD, 3 [pid 5193] <... futex resumed>) = 0 [pid 5185] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5193] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5185] close(16 [pid 5172] exit_group(0 [pid 5077] getdents64(3, [pid 5185] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5185] close(17) = -1 EBADF (Bad file descriptor) [pid 5185] close(18) = -1 EBADF (Bad file descriptor) [pid 5185] close(19) = -1 EBADF (Bad file descriptor) [pid 5185] close(20) = -1 EBADF (Bad file descriptor) [pid 5185] close(21) = -1 EBADF (Bad file descriptor) [pid 5185] close(22) = -1 EBADF (Bad file descriptor) [pid 5185] close(23) = -1 EBADF (Bad file descriptor) [pid 5185] close(24) = -1 EBADF (Bad file descriptor) [pid 5185] close(25) = -1 EBADF (Bad file descriptor) [pid 5185] close(26) = -1 EBADF (Bad file descriptor) [pid 5185] close(27) = -1 EBADF (Bad file descriptor) [pid 5185] close(28) = -1 EBADF (Bad file descriptor) [pid 5185] close(29) = -1 EBADF (Bad file descriptor) [pid 5185] exit_group(0 [pid 5190] <... futex resumed>) = ? [pid 5189] <... futex resumed>) = ? [pid 5188] <... futex resumed>) = ? [pid 5185] <... exit_group resumed>) = ? [pid 5190] +++ exited with 0 +++ [pid 5188] +++ exited with 0 +++ [pid 5195] <... futex resumed>) = 0 [pid 5189] +++ exited with 0 +++ [pid 5185] +++ exited with 0 +++ [pid 5180] <... futex resumed>) = ? [pid 5179] <... futex resumed>) = ? [pid 5172] <... exit_group resumed>) = ? [pid 5077] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 224 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5195] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5179] +++ exited with 0 +++ [pid 5077] umount2("./2/core", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./2/core", {st_mode=S_IFREG|0600, st_size=16953344, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./2/core" [pid 5195] <... mount resumed>) = 0 [pid 5180] +++ exited with 0 +++ [pid 5172] +++ exited with 0 +++ [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5195] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] close(3 [pid 5195] <... futex resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5195] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5077] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(3, [pid 5077] unlink("./2/cgroup.cpu" [pid 5074] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556031690) = 12 [pid 5074] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] unlink("./2/cgroup.cpu" [pid 5079] <... openat resumed>) = 3 [pid 5074] <... unlink resumed>) = 0 [pid 5079] newfstatat(3, "", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5196 attached [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] newfstatat(AT_FDCWD, "./2/bus", [pid 5196] set_robust_list(0x5555560316a0, 24 [pid 5079] getdents64(3, [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5196] <... set_robust_list resumed>) = 0 [pid 5079] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5077] unlink("./2/bus" [pid 5074] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] chdir("./3" [pid 5079] umount2("./2/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5196] <... chdir resumed>) = 0 [pid 5077] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./2/bus", [pid 5196] <... prctl resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5196] setpgid(0, 0 [pid 5079] newfstatat(AT_FDCWD, "./2/cgroup.cpu", [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5196] <... setpgid resumed>) = 0 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./2/binderfs" [pid 5074] unlink("./2/bus" [pid 5196] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5079] unlink("./2/cgroup.cpu" [pid 5077] <... unlink resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5196] <... symlink resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5077] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 5196] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5079] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5196] <... symlink resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./2/cgroup", [pid 5074] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5073] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5196] <... symlink resumed>) = 0 [pid 5194] <... ioctl resumed>) = 0 [pid 5193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] unlink("./2/cgroup" [pid 5074] unlink("./2/binderfs" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5194] close(3 [pid 5193] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... unlink resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./2/file0", [pid 5196] <... openat resumed>) = 3 [pid 5195] <... futex resumed>) = 0 [pid 5194] <... close resumed>) = 0 [pid 5193] <... futex resumed>) = 1 [pid 5079] <... umount2 resumed>) = 0 [pid 5077] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] write(3, "1000", 4 [pid 5195] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5194] mkdir("./file0", 0777 [pid 5193] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 60.898200][ T5073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.903656][ T5194] loop4: detected capacity change from 0 to 512 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5196] <... write resumed>) = 4 [pid 5195] <... open resumed>) = 3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5073] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] close(3 [pid 5195] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... mkdir resumed>) = 0 [pid 5079] newfstatat(AT_FDCWD, "./2/bus", [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5196] <... close resumed>) = 0 [pid 5195] <... futex resumed>) = 1 [pid 5194] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5193] <... futex resumed>) = 0 [pid 5079] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./2/cgroup.net" [pid 5073] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5196] read(200, [pid 5195] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] unlink("./2/bus" [pid 5073] <... openat resumed>) = 4 [pid 5196] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... unlink resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5079] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5079] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5073] getdents64(4, [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5079] unlink("./2/binderfs" [pid 5073] getdents64(4, [pid 5079] <... unlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5079] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(4) = 0 [pid 5073] rmdir("./2/file0") = 0 [pid 5073] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5196] symlink("/dev/binderfs", "./binderfs" [pid 5195] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5193] <... futex resumed>) = 0 [pid 5077] getdents64(3, [pid 5073] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5193] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] <... mmap resumed>) = 0x20000000 [pid 5077] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5073] unlink("./2/cgroup") = 0 [pid 5196] <... symlink resumed>) = 0 [pid 5073] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] close(3 [pid 5196] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5195] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5196] <... futex resumed>) = 0 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5077] rmdir("./2" [pid 5073] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5195] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./2/cgroup.net") = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, [pid 5195] <... memfd_create resumed>) = 6 [pid 5196] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] mkdir("./3", 0777 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5073] rmdir("./2") = 0 [pid 5073] mkdir("./3", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] <... openat resumed>) = 3 [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5073] close(3 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] close(3./strace-static-x86_64: Process 5197 attached ) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555556031690) = 12 [pid 5197] set_robust_list(0x5555560316a0, 24 [pid 5196] <... mmap resumed>) = 0x7ff63eaac000 [pid 5195] <... mmap resumed>) = 0x7ff63668b000 [pid 5194] <... mount resumed>) = -1 EBADMSG (Bad message) [pid 5079] <... umount2 resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... umount2 resumed>) = 0 [pid 5196] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5194] ioctl(5, LOOP_CLR_FD./strace-static-x86_64: Process 5198 attached [pid 5198] set_robust_list(0x5555560316a0, 24 [pid 5196] <... mprotect resumed>) = 0 [pid 5198] <... set_robust_list resumed>) = 0 [pid 5198] chdir("./3" [pid 5196] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5079] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] <... set_robust_list resumed>) = 0 [pid 5196] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5077] <... clone resumed>, child_tidptr=0x555556031690) = 12 ./strace-static-x86_64: Process 5199 attached [pid 5199] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5196] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13 [pid 5199] <... rseq resumed>) = 0 [pid 5196] rt_sigprocmask(SIG_SETMASK, [], [pid 5199] set_robust_list(0x7ff63eacc9a0, 24 [pid 5196] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5199] <... set_robust_list resumed>) = 0 [pid 5198] <... chdir resumed>) = 0 [pid 5197] chdir("./3" [pid 5196] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... ioctl resumed>) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5194] close(5 [pid 5199] rt_sigprocmask(SIG_SETMASK, [], [pid 5197] <... chdir resumed>) = 0 [pid 5196] <... futex resumed>) = 0 [pid 5195] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5194] <... close resumed>) = 0 [pid 5079] newfstatat(AT_FDCWD, "./2/file0", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5198] <... prctl resumed>) = 0 [pid 5194] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] setpgid(0, 0 [pid 5194] <... futex resumed>) = 0 [pid 5198] <... setpgid resumed>) = 0 [pid 5194] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(AT_FDCWD, "./2/file0", [pid 5199] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5198] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5197] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5196] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] memfd_create("syzkaller", 0 [pid 5198] <... symlink resumed>) = 0 [pid 5197] <... prctl resumed>) = 0 [ 60.965415][ T5074] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.978408][ T5079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.994528][ T5194] EXT4-fs warning (device loop4): read_mmp_block:114: Error -74 while reading MMP block 12 [pid 5196] <... futex resumed>) = 0 [pid 5079] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5197] setpgid(0, 0 [pid 5198] <... symlink resumed>) = 0 [pid 5195] <... write resumed>) = 65536 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5198] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5197] <... setpgid resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5199] <... memfd_create resumed>) = 3 [pid 5198] <... symlink resumed>) = 0 [pid 5197] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5196] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5079] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5196] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5199] <... mmap resumed>) = 0x7ff63668b000 [pid 5198] <... openat resumed>) = 3 [pid 5079] newfstatat(4, "", [pid 5074] <... openat resumed>) = 4 [pid 5198] write(3, "1000", 4 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(4, "", [pid 5198] <... write resumed>) = 4 [pid 5198] close(3) = 0 [pid 5198] read(200, 0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5198] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5197] <... symlink resumed>) = 0 [pid 5196] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5195] munmap(0x7ff63668b000, 138412032 [pid 5079] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5198] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5198] <... futex resumed>) = 0 [pid 5197] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5196] <... mprotect resumed>) = 0 [pid 5195] <... munmap resumed>) = 0 [pid 5079] getdents64(4, [pid 5074] getdents64(4, [pid 5199] <... write resumed>) = 262144 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5197] <... symlink resumed>) = 0 [pid 5196] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5195] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5199] munmap(0x7ff63668b000, 138412032 [pid 5198] <... mmap resumed>) = 0x7ff63eaac000 [pid 5079] close(4 [pid 5199] <... munmap resumed>) = 0 [pid 5195] <... openat resumed>) = 5 [pid 5074] getdents64(4, [pid 5079] <... close resumed>) = 0 [pid 5198] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5197] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5195] ioctl(5, LOOP_SET_FD, 6 [pid 5079] rmdir("./2/file0" [pid 5196] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5074] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5199] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5198] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5199] <... openat resumed>) = 4 [pid 5198] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5199] ioctl(4, LOOP_SET_FD, 3 [pid 5198] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5074] close(4 [pid 5197] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5200 attached [pid 5199] <... ioctl resumed>) = 0 [pid 5198] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13 [pid 5196] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5195] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5079] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 ./strace-static-x86_64: Process 5201 attached [pid 5200] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5198] rt_sigprocmask(SIG_SETMASK, [], [pid 5195] ioctl(5, LOOP_CLR_FD [pid 5074] rmdir("./2/file0" [pid 5201] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5200] <... rseq resumed>) = 0 [pid 5198] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5196] <... clone3 resumed> => {parent_tid=[14]}, 88) = 14 [pid 5195] <... ioctl resumed>) = 0 [pid 5201] <... rseq resumed>) = 0 [pid 5196] rt_sigprocmask(SIG_SETMASK, [], [pid 5079] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5201] set_robust_list(0x7ff63eaab9a0, 24 [pid 5197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5196] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5201] <... set_robust_list resumed>) = 0 [pid 5200] set_robust_list(0x7ff63eacc9a0, 24 [pid 5198] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] <... openat resumed>) = 3 [pid 5196] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] newfstatat(AT_FDCWD, "./2/cgroup", [pid 5074] umount2("./2/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5201] rt_sigprocmask(SIG_SETMASK, [], [pid 5197] write(3, "1000", 4 [pid 5196] <... futex resumed>) = 0 [pid 5195] ioctl(5, LOOP_SET_FD, 6 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5198] <... futex resumed>) = 0 [pid 5201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5200] <... set_robust_list resumed>) = 0 [pid 5197] <... write resumed>) = 4 [pid 5196] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5079] unlink("./2/cgroup" [pid 5198] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] newfstatat(AT_FDCWD, "./2/cgroup", [pid 5201] creat("./bus", 000 [pid 5200] rt_sigprocmask(SIG_SETMASK, [], [pid 5199] close(3 [pid 5198] <... futex resumed>) = 0 [pid 5197] close(3 [pid 5195] close(5 [pid 5079] <... unlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5201] <... creat resumed>) = 5 [pid 5200] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5199] <... close resumed>) = 0 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5197] <... close resumed>) = 0 [pid 5195] <... close resumed>) = 0 [pid 5079] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./2/cgroup" [pid 5201] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] memfd_create("syzkaller", 0 [pid 5199] mkdir("./file0", 0777 [pid 5198] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5197] read(200, [pid 5195] close(6 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [pid 5201] <... futex resumed>) = 1 [pid 5199] <... mkdir resumed>) = 0 [pid 5197] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5196] <... futex resumed>) = 0 [pid 5195] <... close resumed>) = 0 [pid 5079] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5201] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] symlink("/dev/binderfs", "./binderfs" [pid 5196] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] close(3 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./2/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5197] <... symlink resumed>) = 0 [pid 5196] <... futex resumed>) = 0 [pid 5195] <... futex resumed>) = 0 [pid 5193] <... close resumed>) = 0 [pid 5079] unlink("./2/cgroup.net" [pid 5201] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5200] <... memfd_create resumed>) = 3 [pid 5198] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5197] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] close(4 [pid 5079] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5201] <... mount resumed>) = 0 [pid 5197] <... futex resumed>) = 0 [pid 5193] <... close resumed>) = 0 [pid 5197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] newfstatat(AT_FDCWD, "./2/cgroup.net", [pid 5193] close(5 [pid 5079] getdents64(3, [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5197] <... mmap resumed>) = 0x7ff63eaac000 [pid 5193] close(6 [pid 5079] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5197] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = 0 [pid 5074] unlink("./2/cgroup.net" [pid 5193] close(7 [pid 5079] rmdir("./2" [pid 5074] <... unlink resumed>) = 0 [pid 5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5198] <... mprotect resumed>) = 0 [pid 5197] <... mprotect resumed>) = 0 [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5201] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... mmap resumed>) = 0x7ff63668b000 [pid 5199] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5198] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5197] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5193] close(8 [pid 5201] <... futex resumed>) = 1 [pid 5200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5197] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5196] <... futex resumed>) = 0 [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5197] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5193] close(9 [pid 5074] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5202 attached [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] mkdir("./3", 0777 [pid 5074] close(3 [pid 5193] close(10 [pid 5074] <... close resumed>) = 0 [pid 5202] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5197] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13 [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... mkdir resumed>) = 0 [pid 5202] <... rseq resumed>) = 0 [ 61.067985][ T5199] loop0: detected capacity change from 0 to 512 [pid 5201] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5197] rt_sigprocmask(SIG_SETMASK, [], [pid 5196] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] close(11 [pid 5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] rmdir("./2" [pid 5202] set_robust_list(0x7ff63eacc9a0, 24 [pid 5201] <... open resumed>) = 3 [pid 5197] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5196] <... futex resumed>) = 0 [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5202] <... set_robust_list resumed>) = 0 [pid 5201] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5193] close(12 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5202] rt_sigprocmask(SIG_SETMASK, [], [pid 5201] <... futex resumed>) = 0 [pid 5200] <... write resumed>) = 262144 [pid 5198] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5197] <... futex resumed>) = 0 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] mkdir("./3", 0777 [pid 5198] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5200] munmap(0x7ff63668b000, 138412032 [pid 5202] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5197] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5202] memfd_create("syzkaller", 0 [pid 5197] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5205 attached [pid 5200] <... munmap resumed>) = 0 [pid 5079] close(3) = 0 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5193] close(13) = -1 EBADF (Bad file descriptor) [pid 5193] close(14) = -1 EBADF (Bad file descriptor) [pid 5202] <... memfd_create resumed>) = 3 [pid 5197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5193] close(15 [pid 5074] <... mkdir resumed>) = 0 [pid 5202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5197] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5193] close(16 [pid 5074] <... openat resumed>) = 3 [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5193] close(17 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5206 attached [pid 5202] <... mmap resumed>) = 0x7ff63668b000 [pid 5197] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] close(3 [pid 5205] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5200] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5198] <... clone3 resumed> => {parent_tid=[14]}, 88) = 14 [pid 5193] close(18 [pid 5074] <... close resumed>) = 0 [pid 5205] <... rseq resumed>) = 0 [pid 5202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5200] <... openat resumed>) = 4 [pid 5198] rt_sigprocmask(SIG_SETMASK, [], [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 61.135940][ T5199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5206] set_robust_list(0x5555560316a0, 24 [pid 5205] set_robust_list(0x7ff63eaab9a0, 24 [pid 5200] ioctl(4, LOOP_SET_FD, 3 [pid 5198] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5193] close(19 [pid 5079] <... clone resumed>, child_tidptr=0x555556031690) = 12 ./strace-static-x86_64: Process 5207 attached [pid 5205] <... set_robust_list resumed>) = 0 [pid 5198] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... set_robust_list resumed>) = 0 [pid 5205] rt_sigprocmask(SIG_SETMASK, [], [pid 5198] <... futex resumed>) = 0 [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5206] chdir("./3" [pid 5193] close(20 [pid 5206] <... chdir resumed>) = 0 [pid 5202] <... write resumed>) = 262144 [pid 5197] <... mprotect resumed>) = 0 [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5193] close(21) = -1 EBADF (Bad file descriptor) [pid 5193] close(22 [pid 5206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5206] <... prctl resumed>) = 0 [pid 5193] close(23 [pid 5206] setpgid(0, 0 [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5206] <... setpgid resumed>) = 0 [pid 5193] close(24 [pid 5074] <... clone resumed>, child_tidptr=0x555556031690) = 15 [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5206] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5207] set_robust_list(0x5555560316a0, 24 [pid 5193] close(25) = -1 EBADF (Bad file descriptor) [pid 5207] <... set_robust_list resumed>) = 0 [pid 5206] <... symlink resumed>) = 0 [pid 5193] close(26 [pid 5206] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5202] munmap(0x7ff63668b000, 138412032 [pid 5197] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5193] close(27 [pid 5206] <... symlink resumed>) = 0 [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5202] <... munmap resumed>) = 0 [pid 5197] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5193] close(28 [pid 5202] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5197] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5208 attached [pid 5206] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5202] <... openat resumed>) = 4 [pid 5193] close(29 [pid 5206] <... symlink resumed>) = 0 [pid 5193] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5193] exit_group(0 [pid 5207] chdir("./3" [pid 5206] <... openat resumed>) = 3 [pid 5195] <... futex resumed>) = ? [pid 5194] <... futex resumed>) = ? [pid 5193] <... exit_group resumed>) = ? [pid 5208] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5206] write(3, "1000", 4 [pid 5202] ioctl(4, LOOP_SET_FD, 3 [pid 5197] <... clone3 resumed> => {parent_tid=[14]}, 88) = 14 [pid 5195] +++ exited with 0 +++ [pid 5208] <... rseq resumed>) = 0 [pid 5206] <... write resumed>) = 4 [pid 5197] rt_sigprocmask(SIG_SETMASK, [], [pid 5207] <... chdir resumed>) = 0 [pid 5206] close(3 [pid 5205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5200] <... ioctl resumed>) = 0 [pid 5198] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] +++ exited with 0 +++ [pid 5193] +++ exited with 0 +++ [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5205] creat("./bus", 000 [pid 5200] close(3 [pid 5205] <... creat resumed>) = 5 [pid 5200] <... close resumed>) = 0 [pid 5207] setpgid(0, 0) = 0 [pid 5205] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] mkdir("./file0", 0777 [pid 5207] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5078] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] <... futex resumed>) = 0 [pid 5205] <... futex resumed>) = 1 [pid 5198] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5205] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5200] <... mkdir resumed>) = 0 [pid 5207] <... symlink resumed>) = 0 [pid 5206] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5206] read(200, [pid 5207] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5078] <... openat resumed>) = 3 [pid 5206] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] newfstatat(3, "", [pid 5207] <... symlink resumed>) = 0 [pid 5206] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5206] <... symlink resumed>) = 0 [pid 5078] getdents64(3, [pid 5206] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5208] set_robust_list(0x7ff63eaab9a0, 24 [pid 5206] <... futex resumed>) = 0 [pid 5202] <... ioctl resumed>) = 0 [pid 5197] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5078] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] <... set_robust_list resumed>) = 0 [pid 5206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5202] close(3 [pid 5197] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5198] <... futex resumed>) = 0 [pid 5208] rt_sigprocmask(SIG_SETMASK, [], [pid 5207] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5206] <... mmap resumed>) = 0x7ff63eaac000 [pid 5205] <... mount resumed>) = 0 [pid 5202] <... close resumed>) = 0 [pid 5200] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5198] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5197] <... futex resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 5208] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5206] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5202] mkdir("./file0", 0777 [pid 5197] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5208] creat("./bus", 000 [pid 5207] <... symlink resumed>) = 0 [pid 5206] <... mprotect resumed>) = 0 [pid 5202] <... mkdir resumed>) = 0 [pid 5078] unlink("./3/cgroup.cpu" [pid 5208] <... creat resumed>) = 3 [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5206] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5205] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5078] <... unlink resumed>) = 0 [pid 5206] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5205] <... futex resumed>) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5078] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0}./strace-static-x86_64: Process 5209 attached [pid 5208] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... openat resumed>) = 3 [pid 5209] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5208] <... futex resumed>) = 1 [pid 5206] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13 [pid 5197] <... futex resumed>) = 0 [pid 5209] <... rseq resumed>) = 0 [pid 5208] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5206] rt_sigprocmask(SIG_SETMASK, [], [pid 5197] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] set_robust_list(0x7ff63eacc9a0, 24 [pid 5208] <... mount resumed>) = 0 [pid 5206] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5197] <... futex resumed>) = 0 [pid 5209] <... set_robust_list resumed>) = 0 [pid 5208] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] rt_sigprocmask(SIG_SETMASK, [], [pid 5208] <... futex resumed>) = 0 [pid 5206] <... futex resumed>) = 0 [pid 5197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5208] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] write(3, "1000", 4 [pid 5206] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... umount2 resumed>) = 0 [pid 5209] memfd_create("syzkaller", 0 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... write resumed>) = 4 [pid 5206] <... futex resumed>) = 0 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5198] <... futex resumed>) = 0 [pid 5197] <... futex resumed>) = 0 [ 61.192572][ T5200] loop3: detected capacity change from 0 to 512 [ 61.208782][ T5202] loop1: detected capacity change from 0 to 512 [ 61.218942][ T5199] ext4 filesystem being mounted at /root/syzkaller.p47fVk/3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5078] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5209] <... memfd_create resumed>) = 3 [pid 5208] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5207] close(3 [pid 5206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5205] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5198] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5197] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5208] <... open resumed>) = 5 [pid 5206] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5201] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5199] <... mount resumed>) = 0 [pid 5196] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] newfstatat(AT_FDCWD, "./3/bus", [pid 5209] <... mmap resumed>) = 0x7ff63668b000 [pid 5208] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5201] <... mmap resumed>) = 0x20000000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5208] <... futex resumed>) = 1 [pid 5201] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5197] <... futex resumed>) = 0 [pid 5196] <... futex resumed>) = 0 [pid 5078] unlink("./3/bus" [pid 5208] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5201] <... futex resumed>) = 0 [pid 5199] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5197] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... unlink resumed>) = 0 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... mprotect resumed>) = 0 [pid 5201] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5199] ioctl(4, LOOP_CLR_FD [pid 5197] <... futex resumed>) = 0 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5209] <... write resumed>) = 262144 [pid 5208] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5197] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5208] <... mmap resumed>) = 0x20000000 [pid 5078] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5207] <... close resumed>) = 0 [pid 5199] <... ioctl resumed>) = 0 [pid 5196] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5208] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] <... futex resumed>) = 0 [pid 5199] close(4 [pid 5196] <... futex resumed>) = 1 [pid 5078] unlink("./3/binderfs" [pid 5208] <... futex resumed>) = 1 [pid 5201] memfd_create("syzkaller", 0 [pid 5199] <... close resumed>) = 0 [pid 5197] <... futex resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5209] munmap(0x7ff63668b000, 138412032 [pid 5208] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5201] <... memfd_create resumed>) = 4 [pid 5199] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5209] <... munmap resumed>) = 0 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] read(200, [pid 5206] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5199] <... futex resumed>) = 0 [pid 5197] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5209] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5208] memfd_create("syzkaller", 0 [pid 5206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5201] <... mmap resumed>) = 0x7ff63668b000 [pid 5199] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] newfstatat(AT_FDCWD, "./3/file0", ./strace-static-x86_64: Process 5214 attached [pid 5209] <... openat resumed>) = 4 [pid 5207] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5205] <... open resumed>) = 3 [pid 5214] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5209] ioctl(4, LOOP_SET_FD, 3 [pid 5206] <... clone3 resumed> => {parent_tid=[14]}, 88) = 14 [ 61.266838][ T5200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.286767][ T5212] EXT4-fs warning (device loop1): kmmpd:167: kmmpd being stopped since MMP feature has been disabled. [ 61.298231][ T5200] ext4 filesystem being mounted at /root/syzkaller.hT4DtY/3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5208] <... memfd_create resumed>) = 6 [pid 5207] symlink("/dev/binderfs", "./binderfs" [pid 5206] rt_sigprocmask(SIG_SETMASK, [], [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff63668b000 [pid 5207] <... symlink resumed>) = 0 [pid 5208] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5207] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... write resumed>) = 65536 [pid 5207] <... futex resumed>) = 0 [pid 5208] munmap(0x7ff63668b000, 138412032 [pid 5207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5201] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5078] newfstatat(4, "", [pid 5201] <... write resumed>) = 65536 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(4, 0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, [pid 5214] <... rseq resumed>) = 0 [pid 5209] <... ioctl resumed>) = 0 [pid 5206] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5078] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5214] set_robust_list(0x7ff63eaab9a0, 24 [pid 5209] close(3 [pid 5206] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] munmap(0x7ff63668b000, 138412032 [pid 5078] close(4 [pid 5207] <... mmap resumed>) = 0x7ff63eaac000 [pid 5201] <... munmap resumed>) = 0 [pid 5207] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5078] <... close resumed>) = 0 [pid 5201] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5078] rmdir("./3/file0" [pid 5207] <... mprotect resumed>) = 0 [pid 5214] <... set_robust_list resumed>) = 0 [pid 5209] <... close resumed>) = 0 [pid 5207] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5206] <... futex resumed>) = 0 [pid 5201] <... openat resumed>) = 6 [pid 5078] <... rmdir resumed>) = 0 [pid 5207] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5214] rt_sigprocmask(SIG_SETMASK, [], [pid 5209] mkdir("./file0", 0777 [pid 5206] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5201] ioctl(6, LOOP_SET_FD, 4 [pid 5078] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5209] <... mkdir resumed>) = 0 [pid 5207] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5201] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5215 attached [pid 5214] creat("./bus", 000 [pid 5209] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5208] <... munmap resumed>) = 0 [pid 5201] ioctl(6, LOOP_CLR_FD [pid 5078] newfstatat(AT_FDCWD, "./3/cgroup", [pid 5215] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5214] <... creat resumed>) = 3 [pid 5208] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5207] <... clone3 resumed> => {parent_tid=[16]}, 88) = 16 [pid 5201] <... ioctl resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... openat resumed>) = 7 [pid 5207] rt_sigprocmask(SIG_SETMASK, [], [pid 5078] unlink("./3/cgroup" [pid 5215] <... rseq resumed>) = 0 [pid 5214] <... futex resumed>) = 1 [pid 5208] ioctl(7, LOOP_SET_FD, 6 [pid 5207] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5206] <... futex resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5215] set_robust_list(0x7ff63eacc9a0, 24 [pid 5214] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5208] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5207] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5215] <... set_robust_list resumed>) = 0 [pid 5214] <... mount resumed>) = 0 [pid 5208] ioctl(7, LOOP_CLR_FD [pid 5207] <... futex resumed>) = 0 [pid 5206] <... futex resumed>) = 0 [pid 5201] ioctl(6, LOOP_SET_FD, 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5215] rt_sigprocmask(SIG_SETMASK, [], [pid 5214] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... ioctl resumed>) = 0 [pid 5207] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5201] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 5215] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5207] <... futex resumed>) = 0 [pid 5201] close(6 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] memfd_create("syzkaller", 0 [pid 5214] <... futex resumed>) = 0 [pid 5206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5201] <... close resumed>) = 0 [pid 5215] <... memfd_create resumed>) = 3 [pid 5214] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5206] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] close(4 [pid 5078] unlink("./3/cgroup.net" [pid 5215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5214] <... open resumed>) = 5 [pid 5206] <... futex resumed>) = 0 [pid 5201] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5215] <... mmap resumed>) = 0x7ff6366ac000 [pid 5214] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] ioctl(7, LOOP_SET_FD, 6 [pid 5206] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5201] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] close(3 [pid 5078] getdents64(3, [pid 5215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5214] <... futex resumed>) = 0 [pid 5208] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5201] <... futex resumed>) = 0 [pid 5196] <... close resumed>) = 0 [pid 5078] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5215] <... write resumed>) = 262144 [pid 5214] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] close(7 [pid 5207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5206] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5196] close(4 [pid 5078] close(3 [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5208] <... close resumed>) = 0 [pid 5207] <... mmap resumed>) = 0x7ff63668b000 [pid 5206] <... futex resumed>) = 0 [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... close resumed>) = 0 [pid 5214] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5208] close(6 [pid 5206] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] close(5 [pid 5078] rmdir("./3" [ 61.313891][ T5209] loop5: detected capacity change from 0 to 512 [ 61.323861][ T5202] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 61.352908][ T5202] EXT4-fs (loop1): failed to initialize system zone (-117) [pid 5215] munmap(0x7ff6366ac000, 138412032 [pid 5214] <... mmap resumed>) = 0x20000000 [pid 5208] <... close resumed>) = 0 [pid 5207] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5196] <... close resumed>) = 0 [pid 5078] <... rmdir resumed>) = 0 [pid 5215] <... munmap resumed>) = 0 [pid 5205] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... mount resumed>) = 0 [pid 5198] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5198] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5205] <... futex resumed>) = 0 [pid 5200] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5198] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5205] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5200] <... openat resumed>) = 6 [pid 5078] mkdir("./4", 0777 [pid 5207] <... mprotect resumed>) = 0 [pid 5205] <... mmap resumed>) = 0x20000000 [pid 5200] chdir(0x20000000 [pid 5078] <... mkdir resumed>) = 0 [pid 5196] close(6) = -1 EBADF (Bad file descriptor) [pid 5196] close(7) = -1 EBADF (Bad file descriptor) [pid 5196] close(8) = -1 EBADF (Bad file descriptor) [pid 5196] close(9 [pid 5205] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5196] close(10 [pid 5205] <... futex resumed>) = 1 [pid 5200] ioctl(4, LOOP_CLR_FD [pid 5198] <... futex resumed>) = 0 [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5208] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] memfd_create("syzkaller", 0 [pid 5200] <... ioctl resumed>) = 0 [pid 5198] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] close(11 [pid 5215] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5208] <... futex resumed>) = 0 [pid 5205] <... memfd_create resumed>) = 7 [pid 5200] close(4 [pid 5198] <... futex resumed>) = 0 [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5215] <... openat resumed>) = 4 [pid 5208] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5200] <... close resumed>) = 0 [pid 5196] close(12 [pid 5078] <... openat resumed>) = 3 [pid 5215] ioctl(4, LOOP_SET_FD, 3 [pid 5205] <... mmap resumed>) = 0x7ff63668b000 [pid 5200] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5214] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... mount resumed>) = 0 [pid 5205] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5200] <... futex resumed>) = 0 [pid 5196] close(13 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5214] <... futex resumed>) = 1 [pid 5209] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5206] <... futex resumed>) = 0 [pid 5205] <... write resumed>) = 65536 [pid 5214] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5205] munmap(0x7ff63668b000, 138412032 [pid 5200] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] close(3 [pid 5214] memfd_create("syzkaller", 0 [pid 5206] <... futex resumed>) = 0 [pid 5196] close(14 [pid 5078] <... close resumed>) = 0 [pid 5214] <... memfd_create resumed>) = 6 [pid 5205] <... munmap resumed>) = 0 [pid 5214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5209] ioctl(4, LOOP_CLR_FD [pid 5214] <... mmap resumed>) = 0x7ff63668b000 [pid 5214] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5205] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5209] <... ioctl resumed>) = 0 [pid 5205] <... openat resumed>) = 4 [pid 5209] close(4 [pid 5202] <... mount resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5209] <... close resumed>) = 0 [pid 5205] ioctl(4, LOOP_SET_FD, 7 [pid 5202] ioctl(4, LOOP_CLR_FD [pid 5209] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] <... ioctl resumed>) = 0 [pid 5209] <... futex resumed>) = 0 [pid 5205] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5202] close(4 [pid 5214] <... write resumed>) = 65536 [pid 5209] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5202] <... close resumed>) = 0 [pid 5196] close(15 [pid 5205] ioctl(4, LOOP_CLR_FD) = 0 [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... clone resumed>, child_tidptr=0x555556031690) = 15 [pid 5214] munmap(0x7ff63668b000, 138412032 [pid 5196] close(16) = -1 EBADF (Bad file descriptor) [pid 5214] <... munmap resumed>) = 0 [pid 5202] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5202] <... futex resumed>) = 0 [pid 5196] close(17) = -1 EBADF (Bad file descriptor) [pid 5205] ioctl(4, LOOP_SET_FD, 7 [pid 5202] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5197] close(3 [pid 5196] close(18 [pid 5214] <... openat resumed>) = 4 [pid 5205] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5197] <... close resumed>) = 0 [pid 5214] ioctl(4, LOOP_SET_FD, 6 [pid 5205] close(4 [pid 5197] close(4 [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5196] close(19) = -1 EBADF (Bad file descriptor) [pid 5196] close(20) = -1 EBADF (Bad file descriptor) [pid 5214] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5205] <... close resumed>) = 0 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5196] close(21 [pid 5214] ioctl(4, LOOP_CLR_FD [pid 5205] close(7 [pid 5197] close(5 [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5214] <... ioctl resumed>) = 0 [pid 5205] <... close resumed>) = 0 [pid 5197] <... close resumed>) = 0 [pid 5197] close(6) = -1 EBADF (Bad file descriptor) [pid 5197] close(7 [pid 5205] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] close(3 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5196] close(22 [pid 5215] <... ioctl resumed>) = 0 [pid 5207] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5205] <... futex resumed>) = 0 [pid 5198] <... close resumed>) = 0 [pid 5197] close(8 [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5214] ioctl(4, LOOP_SET_FD, 6 [pid 5205] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] close(4 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5196] close(23./strace-static-x86_64: Process 5218 attached [pid 5214] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(9 [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5218] set_robust_list(0x5555560316a0, 24 [pid 5214] close(4 [pid 5198] close(5 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5196] close(24 [pid 5218] <... set_robust_list resumed>) = 0 [pid 5215] close(3 [pid 5214] <... close resumed>) = 0 [pid 5207] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5198] <... close resumed>) = 0 [pid 5197] close(10 [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5218] chdir("./4" [pid 5215] <... close resumed>) = 0 [ 61.376503][ T5209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.389295][ T5202] EXT4-fs (loop1): mount failed [ 61.398083][ T5209] ext4 filesystem being mounted at /root/syzkaller.51vpeu/3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.405383][ T5215] loop2: detected capacity change from 0 to 512 [pid 5214] close(6 [pid 5207] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5198] close(6 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5196] close(25 [pid 5218] <... chdir resumed>) = 0 [pid 5215] mkdir("./file0", 0777 [pid 5214] <... close resumed>) = 0 [pid 5198] <... close resumed>) = 0 [pid 5197] close(11 [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5219 attached [pid 5218] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5214] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] close(7 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5196] close(26 [pid 5219] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5218] <... prctl resumed>) = 0 [pid 5214] <... futex resumed>) = 0 [pid 5206] close(3 [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(12 [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5219] <... rseq resumed>) = 0 [pid 5218] setpgid(0, 0 [pid 5214] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] <... close resumed>) = 0 [pid 5198] close(8 [pid 5207] <... clone3 resumed> => {parent_tid=[17]}, 88) = 17 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5196] close(27 [pid 5219] set_robust_list(0x7ff6366ab9a0, 24 [pid 5218] <... setpgid resumed>) = 0 [pid 5207] rt_sigprocmask(SIG_SETMASK, [], [pid 5206] close(4 [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(13 [pid 5219] <... set_robust_list resumed>) = 0 [pid 5218] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] close(9 [pid 5207] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5219] rt_sigprocmask(SIG_SETMASK, [], [pid 5206] close(5 [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(14 [pid 5196] close(28 [pid 5219] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5218] <... symlink resumed>) = 0 [pid 5206] <... close resumed>) = 0 [pid 5198] close(10 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5219] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] close(6 [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(15 [pid 5218] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] close(11 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5218] <... symlink resumed>) = 0 [pid 5206] close(7 [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(16 [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] close(12 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5207] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(17 [pid 5218] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5215] <... mkdir resumed>) = 0 [pid 5196] close(29 [pid 5218] <... symlink resumed>) = 0 [pid 5206] close(8 [pid 5198] close(13 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5219] <... futex resumed>) = 0 [pid 5215] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5207] <... futex resumed>) = 1 [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(18 [pid 5196] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5219] creat("./bus", 000 [pid 5218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5206] close(9 [pid 5198] close(14 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5219] <... creat resumed>) = 3 [pid 5218] <... openat resumed>) = 3 [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(19 [pid 5196] exit_group(0 [pid 5219] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(20 [pid 5206] close(10 [pid 5198] close(15 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(21 [pid 5206] close(11 [pid 5198] close(16 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(22 [pid 5219] <... futex resumed>) = 0 [pid 5219] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] close(12 [pid 5201] <... futex resumed>) = ? [pid 5199] <... futex resumed>) = ? [pid 5198] close(17 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5196] <... exit_group resumed>) = ? [pid 5218] write(3, "1000", 4 [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5201] +++ exited with 0 +++ [pid 5199] +++ exited with 0 +++ [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(23 [pid 5218] <... write resumed>) = 4 [pid 5206] close(13 [pid 5198] close(18 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5218] close(3 [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(24 [pid 5218] <... close resumed>) = 0 [pid 5206] close(14 [pid 5198] close(19 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5218] read(200, [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(25 [pid 5218] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] close(15 [pid 5198] close(20 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5218] symlink("/dev/binderfs", "./binderfs" [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(26 [pid 5218] <... symlink resumed>) = 0 [pid 5206] close(16 [pid 5198] close(21 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(27 [pid 5206] close(17 [pid 5198] close(22 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5218] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(28 [pid 5218] <... futex resumed>) = 0 [pid 5207] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] close(18 [pid 5198] close(23 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] close(29 [pid 5218] <... mmap resumed>) = 0x7ff63eaac000 [pid 5206] close(19 [pid 5198] close(24 [pid 5197] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5197] exit_group(0 [pid 5218] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5208] <... futex resumed>) = ? [pid 5206] close(20 [pid 5202] <... futex resumed>) = ? [pid 5198] close(25 [pid 5197] <... exit_group resumed>) = ? [pid 5219] <... futex resumed>) = 0 [pid 5218] <... mprotect resumed>) = 0 [pid 5208] +++ exited with 0 +++ [pid 5207] <... futex resumed>) = 1 [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5202] +++ exited with 0 +++ [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5219] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5218] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5206] close(21 [pid 5198] close(26 [pid 5207] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5206] close(22 [pid 5198] close(27 [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5219] <... mount resumed>) = 0 [pid 5206] close(23 [pid 5198] close(28./strace-static-x86_64: Process 5222 attached [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5222] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5218] <... clone3 resumed> => {parent_tid=[16]}, 88) = 16 [pid 5206] close(24 [pid 5198] close(29 [pid 5196] +++ exited with 0 +++ [pid 5222] <... rseq resumed>) = 0 [pid 5218] rt_sigprocmask(SIG_SETMASK, [], [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5198] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5222] set_robust_list(0x7ff63eacc9a0, 24 [pid 5218] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5206] close(25 [pid 5198] exit_group(0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5222] <... set_robust_list resumed>) = 0 [pid 5218] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... restart_syscall resumed>) = 0 [pid 5222] rt_sigprocmask(SIG_SETMASK, [], [pid 5219] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = 0 [pid 5206] close(26 [pid 5205] <... futex resumed>) = ? [pid 5200] <... futex resumed>) = ? [pid 5198] <... exit_group resumed>) = ? [pid 5222] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5219] <... futex resumed>) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5206] close(27) = -1 EBADF (Bad file descriptor) [pid 5222] memfd_create("syzkaller", 0 [pid 5206] close(28 [pid 5207] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] <... memfd_create resumed>) = 3 [pid 5207] <... futex resumed>) = 0 [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5219] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5207] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 5219] <... open resumed>) = 5 [pid 5206] close(29 [pid 5205] +++ exited with 0 +++ [pid 5075] newfstatat(3, "", [pid 5219] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5219] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] getdents64(3, [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5218] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5219] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5218] <... futex resumed>) = 0 [pid 5207] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] exit_group(0 [pid 5075] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] <... mmap resumed>) = 0x7ff6366ac000 [pid 5219] <... mmap resumed>) = 0x20000000 [pid 5218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5214] <... futex resumed>) = ? [pid 5209] <... futex resumed>) = ? [pid 5206] <... exit_group resumed>) = ? [pid 5200] +++ exited with 0 +++ [pid 5198] +++ exited with 0 +++ [pid 5197] +++ exited with 0 +++ [pid 5214] +++ exited with 0 +++ [pid 5209] +++ exited with 0 +++ [pid 5206] +++ exited with 0 +++ [pid 5218] <... mmap resumed>) = 0x7ff63668b000 [pid 5218] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5218] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} => {parent_tid=[17]}, 88) = 17 [pid 5218] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5218] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5079] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5223 attached [pid 5222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5219] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5079] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5079] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5079] getdents64(3, 0x555556032850 /* 8 entries */, 32768) = 232 [pid 5079] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] unlink("./3/cgroup.cpu") = 0 [pid 5079] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5079] <... umount2 resumed>) = 0 [pid 5223] <... rseq resumed>) = 0 [pid 5079] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] set_robust_list(0x7ff6366ab9a0, 24) = 0 [pid 5223] rt_sigprocmask(SIG_SETMASK, [], [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5223] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5223] creat("./bus", 000 [pid 5079] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] unlink("./3/bus" [pid 5223] <... creat resumed>) = 4 [pid 5079] <... unlink resumed>) = 0 [pid 5222] <... write resumed>) = 262144 [pid 5075] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 5079] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] unlink("./3/binderfs") = 0 [pid 5079] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./3/cgroup.cpu" [pid 5077] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5223] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] munmap(0x7ff6366ac000, 138412032 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(3, "", [pid 5223] <... futex resumed>) = 1 [pid 5222] <... munmap resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [ 61.508908][ T5215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.524742][ T5215] ext4 filesystem being mounted at /root/syzkaller.yTuF4i/3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5223] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5222] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5219] <... futex resumed>) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5215] <... mount resumed>) = 0 [pid 5207] <... futex resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5075] newfstatat(AT_FDCWD, "./3/bus", [pid 5073] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5223] <... mount resumed>) = 0 [pid 5222] <... openat resumed>) = 5 [pid 5219] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5215] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5207] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] ioctl(5, LOOP_SET_FD, 3 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5215] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5077] getdents64(3, [pid 5075] unlink("./3/bus" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5223] <... futex resumed>) = 0 [pid 5207] <... futex resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5075] <... unlink resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 5077] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] unlink("./3/cgroup.cpu" [pid 5077] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 5075] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5073] <... unlink resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] unlink("./3/cgroup.cpu" [pid 5075] unlink("./3/binderfs" [pid 5073] <... umount2 resumed>) = 0 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5218] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./3/bus", [pid 5218] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5219] memfd_create("syzkaller", 0 [pid 5215] ioctl(4, LOOP_CLR_FD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5219] <... memfd_create resumed>) = 6 [pid 5215] <... ioctl resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./3/bus", [pid 5073] unlink("./3/bus" [pid 5219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5215] close(4 [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5219] <... mmap resumed>) = 0x7ff6366ac000 [pid 5215] <... close resumed>) = 0 [pid 5077] unlink("./3/bus" [pid 5073] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5219] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5215] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5219] <... write resumed>) = 65536 [pid 5215] <... futex resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5219] munmap(0x7ff6366ac000, 138412032 [pid 5215] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./3/binderfs" [pid 5219] <... munmap resumed>) = 0 [pid 5077] unlink("./3/binderfs" [pid 5073] <... unlink resumed>) = 0 [pid 5219] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] <... unlink resumed>) = 0 [pid 5219] <... openat resumed>) = 4 [pid 5073] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5219] ioctl(4, LOOP_SET_FD, 6 [pid 5077] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5219] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5219] ioctl(4, LOOP_CLR_FD [pid 5073] newfstatat(AT_FDCWD, "./3/file0", [pid 5219] <... ioctl resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5219] ioctl(4, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 5219] close(4 [pid 5073] getdents64(4, [pid 5219] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5219] close(6 [pid 5073] close(4 [pid 5219] <... close resumed>) = 0 [pid 5219] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... close resumed>) = 0 [pid 5219] <... futex resumed>) = 0 [pid 5073] rmdir("./3/file0" [pid 5219] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] <... rmdir resumed>) = 0 [pid 5207] close(3) = 0 [pid 5207] close(4 [pid 5222] <... ioctl resumed>) = 0 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5222] close(3 [pid 5207] close(5 [pid 5223] <... open resumed>) = 6 [pid 5207] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5207] close(6 [pid 5223] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... close resumed>) = 0 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 61.559997][ T5079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.565396][ T5222] loop4: detected capacity change from 0 to 512 [ 61.587396][ T5075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5073] newfstatat(AT_FDCWD, "./3/cgroup", [pid 5223] <... futex resumed>) = 1 [pid 5222] mkdir("./file0", 0777 [pid 5218] <... futex resumed>) = 0 [pid 5207] close(7 [pid 5223] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 5222] <... mkdir resumed>) = 0 [pid 5218] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5207] close(8) = -1 EBADF (Bad file descriptor) [pid 5207] close(9) = -1 EBADF (Bad file descriptor) [pid 5207] close(10 [pid 5073] unlink("./3/cgroup" [pid 5223] <... mmap resumed>) = 0x20000000 [pid 5218] <... futex resumed>) = 0 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... unlink resumed>) = 0 [pid 5207] close(11 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5207] close(12 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 5223] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] mount("/dev/loop4", 0x20000000, 0x200005c0, MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"... [pid 5218] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(AT_FDCWD, "./3/file0", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5222] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] close(13 [pid 5079] <... umount2 resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./3/cgroup.net" [pid 5223] memfd_create("syzkaller", 0 [pid 5222] ioctl(5, LOOP_CLR_FD [pid 5218] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5223] <... memfd_create resumed>) = 3 [pid 5222] <... ioctl resumed>) = 0 [pid 5218] <... futex resumed>) = 0 [pid 5207] close(14 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5079] newfstatat(AT_FDCWD, "./3/file0", [pid 5223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5222] close(5 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 61.614226][ T5077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5223] <... mmap resumed>) = 0x7ff6366ac000 [pid 5222] <... close resumed>) = 0 [pid 5207] close(15 [pid 5079] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 4 [pid 5073] close(3 [pid 5223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5222] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(4, "", [pid 5223] <... write resumed>) = 65536 [pid 5222] <... futex resumed>) = 0 [pid 5207] close(16 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... close resumed>) = 0 [pid 5223] munmap(0x7ff6366ac000, 138412032 [pid 5222] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] <... munmap resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5223] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... openat resumed>) = 4 [pid 5075] getdents64(4, [pid 5073] rmdir("./3" [pid 5079] newfstatat(4, "", [pid 5223] <... openat resumed>) = 5 [pid 5207] close(17 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5079] getdents64(4, [pid 5223] ioctl(5, LOOP_SET_FD, 3 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5073] <... rmdir resumed>) = 0 [pid 5079] getdents64(4, [pid 5223] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5207] close(18 [pid 5079] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5073] mkdir("./4", 0777 [pid 5223] ioctl(5, LOOP_CLR_FD [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(4 [pid 5075] close(4 [pid 5073] <... mkdir resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5223] <... ioctl resumed>) = 0 [pid 5207] close(19 [pid 5079] rmdir("./3/file0" [pid 5075] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] rmdir("./3/file0" [pid 5079] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5079] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] close(20 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(AT_FDCWD, "./3/cgroup", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5223] ioctl(5, LOOP_SET_FD, 3 [pid 5207] close(21 [pid 5075] newfstatat(AT_FDCWD, "./3/cgroup", [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5223] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(3 [pid 5223] close(5 [pid 5207] close(22 [pid 5079] unlink("./3/cgroup" [pid 5075] unlink("./3/cgroup" [pid 5073] <... close resumed>) = 0 [pid 5223] <... close resumed>) = 0 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... unlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5223] close(3 [pid 5207] close(23 [pid 5079] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] <... close resumed>) = 0 [pid 5077] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] newfstatat(AT_FDCWD, "./3/file0", [pid 5223] <... futex resumed>) = 0 [pid 5207] close(24 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5223] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 5207] close(25 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] close(3 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] unlink("./3/cgroup.net" [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5207] close(26 [pid 5077] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5218] close(4 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5218] <... close resumed>) = 0 [pid 5207] close(27 [pid 5079] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 5077] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5224 attached [pid 5218] close(5 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5075] close(3 [pid 5224] set_robust_list(0x5555560316a0, 24 [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5207] close(28 [pid 5079] unlink("./3/cgroup.net" [pid 5077] newfstatat(4, "", [pid 5075] <... close resumed>) = 0 [pid 5224] <... set_robust_list resumed>) = 0 [pid 5218] close(6 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] rmdir("./3" [pid 5073] <... clone resumed>, child_tidptr=0x555556031690) = 15 [pid 5224] chdir("./4" [pid 5218] <... close resumed>) = 0 [pid 5207] close(29 [pid 5079] <... unlink resumed>) = 0 [pid 5077] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 5224] <... chdir resumed>) = 0 [pid 5218] close(7 [pid 5207] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] getdents64(3, [pid 5077] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5075] mkdir("./4", 0777 [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5207] exit_group(0 [pid 5079] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(4, [pid 5075] <... mkdir resumed>) = 0 [pid 5224] <... prctl resumed>) = 0 [pid 5219] <... futex resumed>) = ? [pid 5218] close(8 [pid 5215] <... futex resumed>) = ? [pid 5207] <... exit_group resumed>) = ? [pid 5077] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5224] setpgid(0, 0 [pid 5219] +++ exited with 0 +++ [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5215] +++ exited with 0 +++ [pid 5207] +++ exited with 0 +++ [pid 5079] close(3 [pid 5077] close(4 [pid 5224] <... setpgid resumed>) = 0 [pid 5218] close(9 [pid 5075] <... openat resumed>) = 3 [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5218] close(10) = -1 EBADF (Bad file descriptor) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5224] <... symlink resumed>) = 0 [pid 5218] close(11 [pid 5079] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5079] rmdir("./3" [pid 5077] rmdir("./3/file0" [pid 5224] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] close(3 [pid 5224] <... symlink resumed>) = 0 [pid 5218] close(12 [pid 5079] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5224] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] mkdir("./4", 0777 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- ./strace-static-x86_64: Process 5225 attached [pid 5224] <... symlink resumed>) = 0 [pid 5218] close(13 [pid 5079] <... mkdir resumed>) = 0 [pid 5077] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5225] set_robust_list(0x5555560316a0, 24 [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5225] <... set_robust_list resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... openat resumed>) = 3 [pid 5077] newfstatat(AT_FDCWD, "./3/cgroup", [pid 5225] chdir("./4" [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5225] <... chdir resumed>) = 0 [pid 5224] <... openat resumed>) = 3 [pid 5218] close(14 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5225] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] close(3 [pid 5077] unlink("./3/cgroup" [pid 5225] <... prctl resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5225] setpgid(0, 0 [pid 5224] write(3, "1000", 4 [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... unlink resumed>) = 0 [pid 5074] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5225] <... setpgid resumed>) = 0 [pid 5224] <... write resumed>) = 4 [pid 5218] close(15 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5224] close(3 [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... clone resumed>, child_tidptr=0x555556031690) = 15 [pid 5074] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5224] <... close resumed>) = 0 [pid 5218] close(16 [pid 5074] <... openat resumed>) = 3 [pid 5225] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... clone resumed>, child_tidptr=0x555556031690) = 15 [pid 5077] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5225] <... symlink resumed>) = 0 [pid 5224] read(200, [pid 5218] close(17 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5225] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5225] <... symlink resumed>) = 0 [pid 5224] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5218] close(18 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(3, [pid 5225] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5224] symlink("/dev/binderfs", "./binderfs" [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./3/cgroup.net" [pid 5074] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 ./strace-static-x86_64: Process 5226 attached [pid 5224] <... symlink resumed>) = 0 [pid 5218] close(19 [pid 5077] <... unlink resumed>) = 0 [pid 5074] umount2("./3/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5226] set_robust_list(0x5555560316a0, 24 [pid 5224] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5226] <... set_robust_list resumed>) = 0 [pid 5224] <... futex resumed>) = 0 [pid 5218] close(20 [pid 5077] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5226] chdir("./4" [pid 5225] <... symlink resumed>) = 0 [pid 5224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(AT_FDCWD, "./3/cgroup.cpu", [pid 5224] <... mmap resumed>) = 0x7ff63eaac000 [pid 5218] close(21 [pid 5077] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5226] <... chdir resumed>) = 0 [pid 5225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5224] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... close resumed>) = 0 [pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5224] <... mprotect resumed>) = 0 [pid 5218] close(22 [pid 5077] rmdir("./3" [pid 5074] unlink("./3/cgroup.cpu" [pid 5226] <... prctl resumed>) = 0 [pid 5224] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5226] setpgid(0, 0 [pid 5225] <... openat resumed>) = 3 [pid 5224] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5218] close(23 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5226] <... setpgid resumed>) = 0 [pid 5225] write(3, "1000", 4 [pid 5224] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] mkdir("./4", 0777 [pid 5225] <... write resumed>) = 4 [pid 5218] close(24./strace-static-x86_64: Process 5227 attached [pid 5226] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5225] close(3 [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... mkdir resumed>) = 0 [pid 5074] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5227] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5226] <... symlink resumed>) = 0 [pid 5225] <... close resumed>) = 0 [pid 5224] <... clone3 resumed> => {parent_tid=[16]}, 88) = 16 [pid 5218] close(25 [pid 5227] <... rseq resumed>) = 0 [pid 5226] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5225] read(200, [pid 5224] rt_sigprocmask(SIG_SETMASK, [], [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5227] set_robust_list(0x7ff63eacc9a0, 24 [pid 5226] <... symlink resumed>) = 0 [pid 5225] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5218] close(26 [pid 5227] <... set_robust_list resumed>) = 0 [pid 5226] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5225] symlink("/dev/binderfs", "./binderfs" [pid 5224] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5227] rt_sigprocmask(SIG_SETMASK, [], [pid 5225] <... symlink resumed>) = 0 [pid 5224] <... futex resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5225] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5226] <... symlink resumed>) = 0 [pid 5225] <... futex resumed>) = 0 [pid 5224] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] close(27 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5227] memfd_create("syzkaller", 0 [pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... umount2 resumed>) = 0 [pid 5227] <... memfd_create resumed>) = 3 [pid 5226] <... openat resumed>) = 3 [pid 5224] <... futex resumed>) = 0 [pid 5218] close(28 [pid 5077] close(3 [pid 5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5226] write(3, "1000", 4 [pid 5225] <... mmap resumed>) = 0x7ff63eaac000 [pid 5224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... close resumed>) = 0 [pid 5074] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5227] <... mmap resumed>) = 0x7ff63668b000 [pid 5226] <... write resumed>) = 4 [pid 5224] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5226] close(3 [pid 5225] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5224] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5218] close(29 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5218] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] newfstatat(AT_FDCWD, "./3/bus", [pid 5218] exit_group(0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5226] <... close resumed>) = 0 [pid 5223] <... futex resumed>) = ? [pid 5222] <... futex resumed>) = ? [pid 5218] <... exit_group resumed>) = ? [pid 5074] unlink("./3/bus" [pid 5226] read(200, [pid 5223] +++ exited with 0 +++ [pid 5074] <... unlink resumed>) = 0 [pid 5226] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5227] <... write resumed>) = 262144 [pid 5226] symlink("/dev/binderfs", "./binderfs" [pid 5225] <... mprotect resumed>) = 0 [pid 5222] +++ exited with 0 +++ ./strace-static-x86_64: Process 5228 attached [pid 5225] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5228] set_robust_list(0x5555560316a0, 24 [pid 5225] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556031690) = 15 [pid 5228] <... set_robust_list resumed>) = 0 [pid 5225] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5228] chdir("./4" [pid 5226] <... symlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5229 attached [pid 5228] <... chdir resumed>) = 0 [pid 5229] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5229] <... rseq resumed>) = 0 [pid 5227] munmap(0x7ff63668b000, 138412032 [pid 5228] <... prctl resumed>) = 0 [pid 5226] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... clone3 resumed> => {parent_tid=[16]}, 88) = 16 [pid 5224] <... mprotect resumed>) = 0 [pid 5218] +++ exited with 0 +++ [pid 5074] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5229] set_robust_list(0x7ff63eacc9a0, 24 [pid 5228] setpgid(0, 0 [pid 5227] <... munmap resumed>) = 0 [pid 5226] <... futex resumed>) = 0 [pid 5225] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5229] <... set_robust_list resumed>) = 0 [pid 5228] <... setpgid resumed>) = 0 [pid 5227] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5225] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5224] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] unlink("./3/binderfs" [pid 5229] rt_sigprocmask(SIG_SETMASK, [], [pid 5228] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5227] <... openat resumed>) = 4 [pid 5226] <... mmap resumed>) = 0x7ff63eaac000 [pid 5224] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] <... unlink resumed>) = 0 [pid 5229] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5228] <... symlink resumed>) = 0 [pid 5227] ioctl(4, LOOP_SET_FD, 3 [pid 5226] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5225] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5078] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5229] memfd_create("syzkaller", 0 [pid 5228] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5226] <... mprotect resumed>) = 0 [pid 5225] <... futex resumed>) = 0 [pid 5228] <... symlink resumed>) = 0 [pid 5228] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5229] <... memfd_create resumed>) = 3 [pid 5225] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5228] <... symlink resumed>) = 0 [pid 5225] <... futex resumed>) = 0 [pid 5229] <... mmap resumed>) = 0x7ff6366ac000 [pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5225] <... mmap resumed>) = 0x7ff63668b000 [pid 5078] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5225] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5228] <... openat resumed>) = 3 [pid 5226] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5225] <... mprotect resumed>) = 0 [pid 5078] <... openat resumed>) = 3 [pid 5229] <... write resumed>) = 262144 [pid 5228] write(3, "1000", 4) = 4 [pid 5228] close(3 [pid 5229] munmap(0x7ff6366ac000, 138412032 [pid 5228] <... close resumed>) = 0 [pid 5226] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5225] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5228] read(200, 0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5078] newfstatat(3, "", ./strace-static-x86_64: Process 5230 attached [pid 5228] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5226] <... clone3 resumed> => {parent_tid=[16]}, 88) = 16 [pid 5078] getdents64(3, ./strace-static-x86_64: Process 5231 attached [pid 5227] <... ioctl resumed>) = 0 [pid 5226] rt_sigprocmask(SIG_SETMASK, [], [pid 5078] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5230] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5228] <... futex resumed>) = 0 [pid 5226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5225] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5078] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5230] <... rseq resumed>) = 0 [pid 5229] <... munmap resumed>) = 0 [pid 5228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5227] close(3 [pid 5226] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... clone3 resumed> => {parent_tid=[17]}, 88) = 17 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5231] <... rseq resumed>) = 0 [pid 5230] set_robust_list(0x7ff63eacc9a0, 24 [pid 5228] <... mmap resumed>) = 0x7ff63eaac000 [pid 5227] <... close resumed>) = 0 [pid 5226] <... futex resumed>) = 0 [pid 5224] rt_sigprocmask(SIG_SETMASK, [], [pid 5078] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 5231] set_robust_list(0x7ff63eaab9a0, 24 [pid 5230] <... set_robust_list resumed>) = 0 [pid 5229] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5228] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5227] mkdir("./file0", 0777 [pid 5226] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5231] <... set_robust_list resumed>) = 0 [pid 5230] rt_sigprocmask(SIG_SETMASK, [], [pid 5229] <... openat resumed>) = 4 [pid 5228] <... mprotect resumed>) = 0 [pid 5227] <... mkdir resumed>) = 0 [pid 5226] <... futex resumed>) = 0 [pid 5224] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] unlink("./4/cgroup.cpu"./strace-static-x86_64: Process 5232 attached [pid 5231] rt_sigprocmask(SIG_SETMASK, [], [pid 5230] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5229] ioctl(4, LOOP_SET_FD, 3 [pid 5228] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5227] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5224] <... futex resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5230] memfd_create("syzkaller", 0 [pid 5228] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5226] <... mmap resumed>) = 0x7ff63ea8b000 [ 61.839512][ T5227] loop1: detected capacity change from 0 to 512 [ 61.853749][ T5074] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5224] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] creat("./bus", 000 [pid 5226] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5231] <... creat resumed>) = 3 [pid 5226] <... mprotect resumed>) = 0 [pid 5231] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5231] <... futex resumed>) = 1 [pid 5226] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5224] <... futex resumed>) = 0 [pid 5231] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5224] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5233 attached [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] <... futex resumed>) = 0 [pid 5233] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5231] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5226] <... clone3 resumed> => {parent_tid=[17]}, 88) = 17 [pid 5224] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] <... rseq resumed>) = 0 [pid 5231] <... mount resumed>) = 0 [pid 5230] <... memfd_create resumed>) = 3 [pid 5228] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5226] rt_sigprocmask(SIG_SETMASK, [], [pid 5078] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5234 attached [pid 5233] set_robust_list(0x7ff63eaab9a0, 24 [pid 5231] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5078] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5234] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5233] <... set_robust_list resumed>) = 0 [pid 5231] <... futex resumed>) = 1 [pid 5226] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5234] <... rseq resumed>) = 0 [pid 5233] rt_sigprocmask(SIG_SETMASK, [], [pid 5231] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] <... futex resumed>) = 0 [pid 5224] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] newfstatat(AT_FDCWD, "./4/bus", [pid 5233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] <... mmap resumed>) = 0x7ff63668b000 [pid 5228] <... clone3 resumed> => {parent_tid=[16]}, 88) = 16 [pid 5226] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... futex resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5234] set_robust_list(0x7ff63eacc9a0, 24 [pid 5233] creat("./bus", 000 [pid 5231] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5228] rt_sigprocmask(SIG_SETMASK, [], [pid 5078] unlink("./4/bus" [pid 5234] <... set_robust_list resumed>) = 0 [pid 5233] <... creat resumed>) = 4 [pid 5231] <... open resumed>) = 5 [pid 5228] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5234] rt_sigprocmask(SIG_SETMASK, [], [pid 5233] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5233] <... futex resumed>) = 1 [pid 5231] <... futex resumed>) = 0 [pid 5228] <... futex resumed>) = 0 [pid 5226] <... futex resumed>) = 0 [pid 5224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5234] memfd_create("syzkaller", 0 [pid 5233] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5234] <... memfd_create resumed>) = 3 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5231] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5228] <... futex resumed>) = 0 [pid 5226] <... futex resumed>) = 0 [pid 5224] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5233] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5226] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... futex resumed>) = 0 [pid 5078] unlink("./4/binderfs" [pid 5234] <... mmap resumed>) = 0x7ff6366ac000 [pid 5233] <... mount resumed>) = 0 [pid 5232] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5231] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5230] <... write resumed>) = 262144 [pid 5229] <... ioctl resumed>) = 0 [pid 5228] <... mmap resumed>) = 0x7ff63668b000 [pid 5225] <... clone3 resumed> => {parent_tid=[17]}, 88) = 17 [pid 5224] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5232] <... rseq resumed>) = 0 [pid 5228] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5228] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5228] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5225] rt_sigprocmask(SIG_SETMASK, [], [pid 5232] set_robust_list(0x7ff6366ab9a0, 24 [pid 5074] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5232] <... set_robust_list resumed>) = 0 [pid 5229] close(3 [pid 5228] <... clone3 resumed> => {parent_tid=[17]}, 88) = 17 [pid 5225] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5232] rt_sigprocmask(SIG_SETMASK, [], [pid 5229] <... close resumed>) = 0 [pid 5228] rt_sigprocmask(SIG_SETMASK, [], [pid 5225] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5229] mkdir("./file0", 0777 [pid 5228] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5225] <... futex resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./3/file0", [pid 5232] creat("./bus", 000 [pid 5228] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5228] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5230] munmap(0x7ff63668b000, 138412032 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5233] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5225] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] <... futex resumed>) = 1 [pid 5230] <... munmap resumed>) = 0 [pid 5229] <... mkdir resumed>) = 0 [pid 5226] <... futex resumed>) = 0 [pid 5078] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5232] <... creat resumed>) = 3 [ 61.898725][ T5229] loop0: detected capacity change from 0 to 512 [ 61.929678][ T5227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [pid 5233] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5226] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5234] <... write resumed>) = 262144 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] <... openat resumed>) = 5 [pid 5226] <... futex resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./4/file0", [pid 5233] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5230] ioctl(5, LOOP_SET_FD, 3 [pid 5226] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5237 attached [pid 5234] munmap(0x7ff6366ac000, 138412032 [pid 5233] <... open resumed>) = 6 [pid 5232] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... mmap resumed>) = 0x20000000 [pid 5229] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5227] <... mount resumed>) = 0 [pid 5078] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(4, "", [pid 5237] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5234] <... munmap resumed>) = 0 [pid 5233] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... futex resumed>) = 1 [pid 5231] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... ioctl resumed>) = 0 [pid 5225] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5233] <... futex resumed>) = 1 [pid 5232] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5231] <... futex resumed>) = 1 [pid 5230] close(3 [pid 5227] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5226] <... futex resumed>) = 0 [pid 5225] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(4, [pid 5237] <... rseq resumed>) = 0 [pid 5234] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5233] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5231] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] <... close resumed>) = 0 [pid 5227] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5226] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... futex resumed>) = 0 [pid 5224] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... openat resumed>) = 4 [pid 5074] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5237] set_robust_list(0x7ff6366ab9a0, 24 [pid 5234] <... openat resumed>) = 4 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] mkdir("./file0", 0777 [pid 5227] ioctl(4, LOOP_CLR_FD [pid 5226] <... futex resumed>) = 0 [pid 5225] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... futex resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 5074] getdents64(4, [pid 5237] <... set_robust_list resumed>) = 0 [pid 5234] ioctl(4, LOOP_SET_FD, 3 [pid 5233] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 5232] <... mount resumed>) = 0 [pid 5231] memfd_create("syzkaller", 0 [pid 5230] <... mkdir resumed>) = 0 [pid 5227] <... ioctl resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5237] rt_sigprocmask(SIG_SETMASK, [], [pid 5233] <... mmap resumed>) = 0x20000000 [pid 5226] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] getdents64(4, 0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(4, 0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5078] close(4) = 0 [pid 5078] rmdir("./4/file0") = 0 [pid 5078] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5233] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] newfstatat(AT_FDCWD, "./4/cgroup", [pid 5233] <... futex resumed>) = 0 [pid 5226] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5226] <... futex resumed>) = 0 [pid 5078] unlink("./4/cgroup") = 0 [pid 5078] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 5231] <... memfd_create resumed>) = 6 [pid 5227] close(4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(4 [pid 5233] memfd_create("syzkaller", 0 [pid 5231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5227] <... close resumed>) = 0 [pid 5230] mount("/dev/loop5", 0x20000000, 0x200005c0, MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"... [pid 5078] unlink("./4/cgroup.net" [pid 5233] <... memfd_create resumed>) = 3 [pid 5231] <... mmap resumed>) = 0x7ff63668b000 [pid 5230] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5227] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... unlink resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5230] ioctl(5, LOOP_CLR_FD [pid 5078] getdents64(3, [pid 5233] <... mmap resumed>) = 0x7ff63668b000 [pid 5078] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5230] <... ioctl resumed>) = 0 [pid 5078] close(3) = 0 [pid 5078] rmdir("./4") = 0 [pid 5232] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] mkdir("./5", 0777 [pid 5074] rmdir("./3/file0" [pid 5237] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5233] <... write resumed>) = 65536 [pid 5232] <... futex resumed>) = 1 [pid 5230] close(5 [pid 5225] <... futex resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5237] creat("./bus", 000 [pid 5232] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] <... creat resumed>) = 5 [pid 5234] <... ioctl resumed>) = 0 [pid 5232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5225] <... futex resumed>) = 0 [pid 5232] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5225] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] <... open resumed>) = 5 [pid 5074] umount2("./3/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5232] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5232] <... futex resumed>) = 1 [ 61.951919][ T5227] ext4 filesystem being mounted at /root/syzkaller.tvsxpX/4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.957802][ T5230] loop5: detected capacity change from 0 to 512 [ 61.977560][ T5234] loop3: detected capacity change from 0 to 512 [pid 5225] <... futex resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5237] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] close(3 [pid 5233] munmap(0x7ff63668b000, 138412032 [pid 5232] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5231] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5228] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5227] <... futex resumed>) = 0 [pid 5237] <... futex resumed>) = 0 [pid 5234] <... close resumed>) = 0 [pid 5233] <... munmap resumed>) = 0 [pid 5231] <... write resumed>) = 65536 [pid 5228] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5237] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5234] mkdir("./file0", 0777 [pid 5228] <... futex resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./3/cgroup", [pid 5237] <... mount resumed>) = 0 [pid 5227] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5231] munmap(0x7ff63668b000, 138412032 [pid 5237] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] <... mkdir resumed>) = 0 [pid 5231] <... munmap resumed>) = 0 [pid 5228] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... openat resumed>) = 3 [pid 5074] unlink("./3/cgroup" [pid 5237] <... futex resumed>) = 0 [pid 5234] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] <... unlink resumed>) = 0 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] umount2("./3/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5228] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./3/cgroup.net", [pid 5228] <... futex resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5240 attached [pid 5237] <... open resumed>) = 3 [pid 5233] <... openat resumed>) = 5 [pid 5232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5231] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5230] <... close resumed>) = 0 [pid 5229] <... mount resumed>) = 0 [pid 5228] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5225] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] set_robust_list(0x5555560316a0, 24 [pid 5237] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... clone resumed>, child_tidptr=0x555556031690) = 18 [pid 5074] unlink("./3/cgroup.net" [pid 5240] <... set_robust_list resumed>) = 0 [pid 5237] <... futex resumed>) = 0 [pid 5228] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] ioctl(5, LOOP_SET_FD, 3 [pid 5230] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] chdir("./5" [pid 5237] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5228] <... futex resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5240] <... chdir resumed>) = 0 [pid 5074] getdents64(3, [ 62.003119][ T5229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.020653][ T5229] ext4 filesystem being mounted at /root/syzkaller.p47fVk/4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5228] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5237] <... mmap resumed>) = 0x20000000 [pid 5233] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5230] <... futex resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5240] <... prctl resumed>) = 0 [pid 5237] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] close(3 [pid 5240] setpgid(0, 0 [pid 5237] <... futex resumed>) = 1 [pid 5240] <... setpgid resumed>) = 0 [pid 5237] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5233] ioctl(5, LOOP_CLR_FD [pid 5230] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] <... futex resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5240] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5233] <... ioctl resumed>) = 0 [pid 5228] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] rmdir("./3" [pid 5233] ioctl(5, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 5233] close(5) = 0 [pid 5233] close(3) = 0 [pid 5233] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... symlink resumed>) = 0 [pid 5233] <... futex resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5240] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5233] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] close(3 [pid 5074] mkdir("./4", 0777 [pid 5240] <... symlink resumed>) = 0 [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... mkdir resumed>) = 0 [pid 5240] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5226] close(4 [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5240] <... symlink resumed>) = 0 [pid 5226] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5226] close(5 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5240] <... openat resumed>) = 3 [pid 5237] <... futex resumed>) = 0 [pid 5232] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5231] <... openat resumed>) = 4 [pid 5229] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5228] <... futex resumed>) = 1 [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5225] <... futex resumed>) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5240] write(3, "1000", 4 [pid 5231] ioctl(4, LOOP_SET_FD, 6 [pid 5226] close(6 [pid 5074] close(3 [pid 5240] <... write resumed>) = 4 [pid 5231] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5226] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5240] close(3 [pid 5231] ioctl(4, LOOP_CLR_FD [pid 5226] close(7 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5240] <... close resumed>) = 0 [pid 5231] <... ioctl resumed>) = 0 [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5240] read(200, [pid 5226] close(8 [pid 5074] <... clone resumed>, child_tidptr=0x555556031690) = 18 [pid 5240] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5240] symlink("/dev/binderfs", "./binderfs" [pid 5232] <... mmap resumed>) = 0x20000000 [pid 5229] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5226] close(9 [pid 5225] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... symlink resumed>) = 0 [pid 5232] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] ioctl(4, LOOP_CLR_FD [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5240] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] memfd_create("syzkaller", 0 [pid 5232] <... futex resumed>) = 0 [pid 5231] ioctl(4, LOOP_SET_FD, 6 [pid 5226] close(10 [pid 5240] <... futex resumed>) = 0 [pid 5231] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5225] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] memfd_create("syzkaller", 0 [pid 5240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5237] <... memfd_create resumed>) = 6 [pid 5229] <... ioctl resumed>) = 0 [pid 5226] close(11 [pid 5240] <... mmap resumed>) = 0x7ff63eaac000 [pid 5237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5232] <... memfd_create resumed>) = 6 [pid 5231] close(4 [pid 5229] close(4 [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5225] <... futex resumed>) = 0 [pid 5240] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5231] <... close resumed>) = 0 [pid 5226] close(12 [pid 5240] <... mprotect resumed>) = 0 [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5240] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5231] close(6 [pid 5226] close(13 [pid 5240] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5231] <... close resumed>) = 0 [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5240] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5226] close(14) = -1 EBADF (Bad file descriptor) [pid 5226] close(15) = -1 EBADF (Bad file descriptor) [pid 5226] close(16) = -1 EBADF (Bad file descriptor) [pid 5226] close(17 [pid 5232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5244 attached [pid 5240] <... clone3 resumed> => {parent_tid=[19]}, 88) = 19 [pid 5229] <... close resumed>) = 0 [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5244] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5240] rt_sigprocmask(SIG_SETMASK, [], [pid 5237] <... mmap resumed>) = 0x7ff6366ac000 [pid 5232] <... mmap resumed>) = 0x7ff6366ac000 [pid 5231] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] close(18 [pid 5244] <... rseq resumed>) = 0 [pid 5240] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5231] <... futex resumed>) = 0 [pid 5229] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5244] set_robust_list(0x7ff63eacc9a0, 24 [pid 5240] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5231] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] close(19 [pid 5229] <... futex resumed>) = 0 [pid 5244] <... set_robust_list resumed>) = 0 [pid 5240] <... futex resumed>) = 0 [pid 5232] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5229] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] rt_sigprocmask(SIG_SETMASK, [], [pid 5240] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [ 62.050529][ T5086] Bluetooth: hci2: command 0x041b tx timeout [ 62.056534][ T5086] Bluetooth: hci0: command 0x041b tx timeout [ 62.063034][ T5082] Bluetooth: hci1: command 0x041b tx timeout [ 62.069111][ T5082] Bluetooth: hci4: command 0x041b tx timeout [pid 5226] close(20 [pid 5244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5240] <... futex resumed>) = 0 [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5244] memfd_create("syzkaller", 0 [pid 5240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5226] close(21 [pid 5244] <... memfd_create resumed>) = 3 [pid 5240] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5240] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5226] close(22 [pid 5244] <... mmap resumed>) = 0x7ff63668b000 [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5226] close(23 [pid 5240] <... mprotect resumed>) = 0 [pid 5226] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5226] close(24) = -1 EBADF (Bad file descriptor) [pid 5226] close(25) = -1 EBADF (Bad file descriptor) [pid 5226] close(26) = -1 EBADF (Bad file descriptor) [pid 5226] close(27) = -1 EBADF (Bad file descriptor) [pid 5226] close(28) = -1 EBADF (Bad file descriptor) [pid 5226] close(29) = -1 EBADF (Bad file descriptor) [pid 5240] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5226] exit_group(0 [pid 5244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5240] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5230] <... futex resumed>) = ? [pid 5233] <... futex resumed>) = ? [pid 5230] +++ exited with 0 +++ [pid 5226] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5242 attached [pid 5244] <... write resumed>) = 262144 [pid 5240] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5233] +++ exited with 0 +++ [pid 5232] <... write resumed>) = 65536 [pid 5242] set_robust_list(0x5555560316a0, 24 [pid 5232] munmap(0x7ff6366ac000, 138412032 [pid 5242] <... set_robust_list resumed>) = 0 [pid 5232] <... munmap resumed>) = 0 [pid 5242] chdir("./4" [pid 5232] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5242] <... chdir resumed>) = 0 [pid 5232] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5245 attached [pid 5244] munmap(0x7ff63668b000, 138412032 [pid 5240] <... clone3 resumed> => {parent_tid=[20]}, 88) = 20 [pid 5245] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5232] ioctl(4, LOOP_SET_FD, 6 [pid 5242] <... prctl resumed>) = 0 [pid 5232] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5242] setpgid(0, 0 [pid 5232] ioctl(4, LOOP_CLR_FD [pid 5245] <... rseq resumed>) = 0 [pid 5244] <... munmap resumed>) = 0 [pid 5242] <... setpgid resumed>) = 0 [pid 5240] rt_sigprocmask(SIG_SETMASK, [], [pid 5237] <... write resumed>) = 65536 [pid 5232] <... ioctl resumed>) = 0 [pid 5226] +++ exited with 0 +++ [pid 5242] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 5245] set_robust_list(0x7ff63eaab9a0, 24 [pid 5244] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5242] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5240] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5237] munmap(0x7ff6366ac000, 138412032 [pid 5245] <... set_robust_list resumed>) = 0 [pid 5244] <... openat resumed>) = 4 [pid 5242] <... symlink resumed>) = 0 [pid 5240] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] <... munmap resumed>) = 0 [pid 5232] ioctl(4, LOOP_SET_FD, 6 [pid 5224] close(3 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [ 62.108346][ T5234] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 62.124155][ T5234] EXT4-fs (loop3): failed to initialize system zone (-117) [ 62.132028][ T5082] Bluetooth: hci3: command 0x041b tx timeout [ 62.132146][ T5234] EXT4-fs (loop3): mount failed [ 62.140886][ T5082] Bluetooth: hci5: command 0x041b tx timeout [pid 5245] rt_sigprocmask(SIG_SETMASK, [], [pid 5244] ioctl(4, LOOP_SET_FD, 3 [pid 5242] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5240] <... futex resumed>) = 0 [pid 5237] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5232] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5224] <... close resumed>) = 0 [pid 5245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] <... symlink resumed>) = 0 [pid 5232] close(4 [pid 5224] close(4) = -1 EBADF (Bad file descriptor) [pid 5242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5232] <... close resumed>) = 0 [pid 5245] creat("./bus", 000 [pid 5244] <... ioctl resumed>) = 0 [pid 5242] <... openat resumed>) = 3 [pid 5240] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] close(6 [pid 5224] close(5 [pid 5242] write(3, "1000", 4 [pid 5237] <... openat resumed>) = 7 [pid 5232] <... close resumed>) = 0 [pid 5245] <... creat resumed>) = 5 [pid 5244] close(3 [pid 5242] <... write resumed>) = 4 [pid 5232] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] ioctl(7, LOOP_SET_FD, 6 [pid 5224] <... close resumed>) = 0 [pid 5242] close(3 [pid 5224] close(6 [pid 5242] <... close resumed>) = 0 [pid 5237] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5232] <... futex resumed>) = 0 [pid 5225] close(3 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5242] read(200, [pid 5237] ioctl(7, LOOP_CLR_FD [pid 5232] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] <... close resumed>) = 0 [pid 5224] close(7 [pid 5245] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... close resumed>) = 0 [pid 5242] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5237] <... ioctl resumed>) = 0 [pid 5225] close(4 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] <... futex resumed>) = 1 [pid 5244] mkdir("./file0", 0777 [pid 5242] symlink("/dev/binderfs", "./binderfs" [pid 5240] <... futex resumed>) = 0 [pid 5234] <... mount resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(8 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5245] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] <... mkdir resumed>) = 0 [pid 5242] <... symlink resumed>) = 0 [pid 5240] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] ioctl(4, LOOP_CLR_FD [pid 5225] close(5 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5244] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5242] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... futex resumed>) = 0 [pid 5237] ioctl(7, LOOP_SET_FD, 6 [pid 5234] <... ioctl resumed>) = 0 [pid 5225] <... close resumed>) = 0 [pid 5224] close(9 [pid 5079] <... openat resumed>) = 3 [pid 5245] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5242] <... futex resumed>) = 0 [pid 5240] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5237] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5225] close(6 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(3, "", [pid 5242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5234] close(4 [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5242] <... mmap resumed>) = 0x7ff63eaac000 [pid 5234] <... close resumed>) = 0 [pid 5225] close(7 [pid 5224] close(10 [pid 5079] getdents64(3, [pid 5237] close(7 [pid 5234] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5234] <... futex resumed>) = 0 [pid 5225] close(8 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5237] <... close resumed>) = 0 [pid 5234] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(11 [pid 5225] close(9 [pid 5242] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] <... mount resumed>) = 0 [pid 5242] <... mprotect resumed>) = 0 [pid 5237] close(6 [pid 5225] close(10 [pid 5224] close(12 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5242] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5225] close(11 [pid 5079] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 5245] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5237] <... close resumed>) = 0 [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(13./strace-static-x86_64: Process 5246 attached [pid 5245] <... futex resumed>) = 1 [pid 5240] <... futex resumed>) = 0 [pid 5225] close(12 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5246] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5245] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5242] <... clone3 resumed> => {parent_tid=[19]}, 88) = 19 [pid 5240] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(14 [pid 5246] <... rseq resumed>) = 0 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5242] rt_sigprocmask(SIG_SETMASK, [], [pid 5240] <... futex resumed>) = 0 [pid 5237] <... futex resumed>) = 0 [pid 5225] close(13 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 62.153907][ T5244] loop4: detected capacity change from 0 to 512 [pid 5079] unlink("./4/cgroup.cpu" [pid 5246] set_robust_list(0x7ff63eacc9a0, 24 [pid 5245] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5242] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5240] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5237] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] close(3 [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(15 [pid 5079] <... unlink resumed>) = 0 [pid 5246] <... set_robust_list resumed>) = 0 [pid 5245] <... open resumed>) = 3 [pid 5242] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] close(14 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5246] rt_sigprocmask(SIG_SETMASK, [], [pid 5245] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... close resumed>) = 0 [pid 5224] close(16 [pid 5079] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5245] <... futex resumed>) = 1 [pid 5242] <... futex resumed>) = 0 [pid 5240] <... futex resumed>) = 0 [pid 5228] close(4 [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5246] memfd_create("syzkaller", 0 [pid 5245] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5242] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5225] close(15 [pid 5224] close(17 [pid 5079] <... umount2 resumed>) = 0 [pid 5246] <... memfd_create resumed>) = 3 [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5242] <... futex resumed>) = 0 [pid 5240] <... futex resumed>) = 0 [pid 5228] close(5 [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5245] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5240] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5225] close(16 [pid 5246] <... mmap resumed>) = 0x7ff6366ac000 [pid 5242] <... mmap resumed>) = 0x7ff63668b000 [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(18 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5228] <... close resumed>) = 0 [pid 5225] close(17) = -1 EBADF (Bad file descriptor) [pid 5225] close(18) = -1 EBADF (Bad file descriptor) [pid 5225] close(19 [pid 5242] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5225] close(20 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(AT_FDCWD, "./4/bus", [pid 5245] <... mmap resumed>) = 0x20000000 [pid 5228] close(6 [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(19 [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5225] close(21 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5246] <... write resumed>) = 262144 [pid 5245] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... mprotect resumed>) = 0 [pid 5228] close(7 [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5225] close(22) = -1 EBADF (Bad file descriptor) [pid 5225] close(23 [pid 5246] munmap(0x7ff6366ac000, 138412032 [pid 5242] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(20 [pid 5079] unlink("./4/bus" [pid 5246] <... munmap resumed>) = 0 [pid 5228] close(8 [pid 5225] close(24 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... unlink resumed>) = 0 [pid 5246] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5245] <... futex resumed>) = 1 [pid 5242] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5240] <... futex resumed>) = 0 [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(21 [pid 5245] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5246] <... openat resumed>) = 4 [pid 5079] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] ioctl(4, LOOP_SET_FD, 3 [pid 5242] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5228] close(9 [pid 5225] close(25 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5225] close(26./strace-static-x86_64: Process 5249 attached [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5244] <... mount resumed>) = 0 [pid 5240] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(22 [pid 5079] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5249] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5245] memfd_create("syzkaller", 0 [pid 5225] close(27 [pid 5249] <... rseq resumed>) = 0 [pid 5245] <... memfd_create resumed>) = 6 [pid 5244] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5240] <... futex resumed>) = 0 [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5249] set_robust_list(0x7ff6366ab9a0, 24 [pid 5245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5225] close(28 [pid 5249] <... set_robust_list resumed>) = 0 [pid 5245] <... mmap resumed>) = 0x7ff63668b000 [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5249] rt_sigprocmask(SIG_SETMASK, [], [pid 5244] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5225] close(29 [pid 5249] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5225] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5249] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] exit_group(0 [pid 5245] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5244] ioctl(4, LOOP_CLR_FD [pid 5232] <... futex resumed>) = ? [pid 5229] <... futex resumed>) = ? [pid 5225] <... exit_group resumed>) = ? [pid 5232] +++ exited with 0 +++ [pid 5229] +++ exited with 0 +++ [pid 5225] +++ exited with 0 +++ [pid 5242] <... clone3 resumed> => {parent_tid=[20]}, 88) = 20 [pid 5228] close(10 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5246] <... ioctl resumed>) = 0 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5246] close(3 [pid 5242] rt_sigprocmask(SIG_SETMASK, [], [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(23 [pid 5079] unlink("./4/binderfs" [pid 5246] <... close resumed>) = 0 [pid 5244] <... ioctl resumed>) = 0 [pid 5242] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5228] close(11 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... unlink resumed>) = 0 [pid 5244] close(4 [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(24 [pid 5244] <... close resumed>) = 0 [pid 5075] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5244] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5246] mkdir("./file0", 0777 [pid 5245] <... write resumed>) = 65536 [pid 5244] <... futex resumed>) = 0 [pid 5242] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] close(12 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5249] <... futex resumed>) = 0 [pid 5246] <... mkdir resumed>) = 0 [pid 5245] munmap(0x7ff63668b000, 138412032 [pid 5244] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5242] <... futex resumed>) = 1 [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(25 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5249] creat("./bus", 000 [pid 5246] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5245] <... munmap resumed>) = 0 [pid 5242] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] close(13 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(AT_FDCWD, "./4/file0", [pid 5075] newfstatat(3, "", [pid 5249] <... creat resumed>) = 3 [pid 5245] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(26 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5245] <... openat resumed>) = 4 [pid 5228] close(14 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(27 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5228] close(15 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 5245] ioctl(4, LOOP_SET_FD, 6 [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(28 [pid 5079] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5245] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5228] close(16 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(4, "", [pid 5245] ioctl(4, LOOP_CLR_FD [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] close(29 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] <... ioctl resumed>) = 0 [pid 5228] close(17 [pid 5224] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] getdents64(4, [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] exit_group(0 [pid 5079] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5231] <... futex resumed>) = ? [pid 5228] close(18 [pid 5227] <... futex resumed>) = ? [pid 5224] <... exit_group resumed>) = ? [pid 5079] getdents64(4, [pid 5075] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 5231] +++ exited with 0 +++ [pid 5227] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 62.226217][ T5244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.245047][ T5246] loop2: detected capacity change from 0 to 512 [ 62.251616][ T5244] ext4 filesystem being mounted at /root/syzkaller.RfCMU1/5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5075] unlink("./4/cgroup.cpu" [pid 5249] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5224] +++ exited with 0 +++ [pid 5079] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5249] <... futex resumed>) = 1 [pid 5245] ioctl(4, LOOP_SET_FD, 6 [pid 5242] <... futex resumed>) = 0 [pid 5228] close(19 [pid 5079] close(4 [pid 5245] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5242] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5245] close(4 [pid 5242] <... futex resumed>) = 0 [pid 5228] close(20 [pid 5079] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5249] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5245] <... close resumed>) = 0 [pid 5242] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] rmdir("./4/file0" [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5245] close(6 [pid 5228] close(21 [pid 5245] <... close resumed>) = 0 [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... rmdir resumed>) = 0 [pid 5075] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... restart_syscall resumed>) = 0 [pid 5245] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] close(22 [pid 5079] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5249] <... mount resumed>) = 0 [pid 5245] <... futex resumed>) = 0 [pid 5240] close(3 [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5249] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5240] <... close resumed>) = 0 [pid 5228] close(23 [pid 5079] newfstatat(AT_FDCWD, "./4/cgroup", [pid 5075] <... umount2 resumed>) = 0 [pid 5073] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5249] <... futex resumed>) = 1 [pid 5242] <... futex resumed>) = 0 [pid 5240] close(4 [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5249] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5242] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] close(24 [pid 5073] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... openat resumed>) = 3 [pid 5228] close(25 [pid 5073] newfstatat(3, "", [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5228] close(26 [pid 5073] getdents64(3, [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] unlink("./4/cgroup" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5228] close(27 [pid 5079] <... unlink resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./4/bus", [pid 5073] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5228] close(28 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./4/bus" [pid 5073] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5228] close(29 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] unlink("./4/cgroup.cpu" [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5228] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] unlink("./4/cgroup.net" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... unlink resumed>) = 0 [pid 5240] close(5 [pid 5228] exit_group(0 [pid 5079] <... unlink resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5240] <... close resumed>) = 0 [pid 5237] <... futex resumed>) = ? [pid 5228] <... exit_group resumed>) = ? [pid 5079] getdents64(3, [pid 5073] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5240] close(6 [pid 5237] +++ exited with 0 +++ [pid 5079] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(3 [pid 5240] close(7 [pid 5079] <... close resumed>) = 0 [pid 5075] unlink("./4/binderfs" [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] rmdir("./4" [pid 5240] close(8 [pid 5079] <... rmdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] mkdir("./5", 0777 [pid 5240] close(9 [pid 5079] <... mkdir resumed>) = 0 [pid 5075] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5249] <... open resumed>) = 5 [pid 5246] <... mount resumed>) = 0 [pid 5242] <... futex resumed>) = 0 [pid 5240] close(10 [pid 5234] <... futex resumed>) = ? [pid 5079] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = 0 [pid 5249] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5242] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5249] <... futex resumed>) = 0 [pid 5246] <... openat resumed>) = 6 [pid 5249] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5246] chdir("./file0" [pid 5242] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] close(11 [pid 5234] +++ exited with 0 +++ [pid 5228] +++ exited with 0 +++ [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = 0 [pid 5073] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5246] <... chdir resumed>) = 0 [pid 5242] <... futex resumed>) = 0 [pid 5240] close(12 [pid 5079] close(3 [pid 5075] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5249] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5246] ioctl(4, LOOP_CLR_FD [pid 5242] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] newfstatat(AT_FDCWD, "./4/bus", [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5240] close(13 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./4/file0", [pid 5073] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5252 attached [pid 5249] <... mmap resumed>) = 0x20000000 [pid 5246] <... ioctl resumed>) = 0 [pid 5240] close(14 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./4/bus" [pid 5252] set_robust_list(0x5555560316a0, 24 [pid 5249] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] close(4 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... clone resumed>, child_tidptr=0x555556031690) = 18 [pid 5077] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5252] <... set_robust_list resumed>) = 0 [pid 5249] <... futex resumed>) = 1 [pid 5246] <... close resumed>) = 0 [pid 5242] <... futex resumed>) = 0 [pid 5240] close(15 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5252] chdir("./5" [pid 5249] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5246] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(3, "", [pid 5075] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5252] <... chdir resumed>) = 0 [pid 5246] <... futex resumed>) = 0 [pid 5242] <... futex resumed>) = 0 [pid 5240] close(16 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5252] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5246] memfd_create("syzkaller", 0 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] getdents64(3, [pid 5075] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5252] <... prctl resumed>) = 0 [pid 5246] <... memfd_create resumed>) = 4 [pid 5240] close(17 [pid 5077] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] unlink("./4/binderfs" [pid 5252] setpgid(0, 0 [pid 5246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 5252] <... setpgid resumed>) = 0 [ 62.324881][ T5246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.342596][ T5246] ext4 filesystem being mounted at /root/syzkaller.yTuF4i/4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.357711][ T5075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5246] <... mmap resumed>) = 0x7ff6366ac000 [pid 5240] close(18 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5073] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5252] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5246] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 5075] getdents64(4, [pid 5252] <... symlink resumed>) = 0 [pid 5246] <... write resumed>) = 65536 [pid 5240] close(19 [pid 5252] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5246] munmap(0x7ff6366ac000, 138412032 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5252] <... symlink resumed>) = 0 [pid 5246] <... munmap resumed>) = 0 [pid 5240] close(20 [pid 5252] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5246] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] close(4 [pid 5252] <... symlink resumed>) = 0 [pid 5240] close(21 [pid 5077] unlink("./4/cgroup.cpu" [pid 5252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5246] <... openat resumed>) = 7 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... close resumed>) = 0 [pid 5252] <... openat resumed>) = 3 [pid 5246] ioctl(7, LOOP_SET_FD, 4 [pid 5240] close(22 [pid 5077] <... unlink resumed>) = 0 [pid 5252] write(3, "1000", 4 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] rmdir("./4/file0" [pid 5252] <... write resumed>) = 4 [pid 5246] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5240] close(23 [pid 5077] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5252] close(3 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5252] <... close resumed>) = 0 [pid 5240] close(24 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5252] read(200, [pid 5246] ioctl(7, LOOP_CLR_FD [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(AT_FDCWD, "./4/cgroup", [pid 5252] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5246] <... ioctl resumed>) = 0 [pid 5240] close(25 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5252] symlink("/dev/binderfs", "./binderfs" [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5252] <... symlink resumed>) = 0 [pid 5240] close(26 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5252] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./4/bus", [pid 5075] unlink("./4/cgroup" [pid 5252] <... futex resumed>) = 0 [pid 5246] ioctl(7, LOOP_SET_FD, 4 [pid 5240] close(27 [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5252] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5246] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./4/bus" [pid 5075] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5252] <... mmap resumed>) = 0x7ff63eaac000 [pid 5246] close(7 [pid 5240] close(28 [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5252] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5246] <... close resumed>) = 0 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 5252] <... mprotect resumed>) = 0 [pid 5246] close(4 [pid 5240] close(29 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5252] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5246] <... close resumed>) = 0 [pid 5240] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5075] unlink("./4/cgroup.net" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5252] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5246] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] exit_group(0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./4/file0", [pid 5252] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5246] <... futex resumed>) = 0 [pid 5245] <... futex resumed>) = ? [ 62.409310][ T5073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5244] <... futex resumed>) = ? [pid 5242] close(3 [pid 5240] <... exit_group resumed>) = ? [pid 5077] unlink("./4/binderfs" [pid 5075] getdents64(3, ./strace-static-x86_64: Process 5253 attached [pid 5246] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] +++ exited with 0 +++ [pid 5244] +++ exited with 0 +++ [pid 5242] <... close resumed>) = 0 [pid 5240] +++ exited with 0 +++ [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5253] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5252] <... clone3 resumed> => {parent_tid=[19]}, 88) = 19 [pid 5242] close(4 [pid 5077] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5253] <... rseq resumed>) = 0 [pid 5252] rt_sigprocmask(SIG_SETMASK, [], [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5073] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5253] set_robust_list(0x7ff63eacc9a0, 24 [pid 5252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] close(5 [pid 5078] restart_syscall(<... resuming interrupted clone ...> [pid 5077] newfstatat(AT_FDCWD, "./4/file0", [pid 5075] rmdir("./4" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5253] <... set_robust_list resumed>) = 0 [pid 5252] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... close resumed>) = 0 [pid 5078] <... restart_syscall resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5253] rt_sigprocmask(SIG_SETMASK, [], [pid 5252] <... futex resumed>) = 0 [pid 5242] close(6 [pid 5077] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5253] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5252] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... close resumed>) = 0 [pid 5253] memfd_create("syzkaller", 0 [pid 5252] <... futex resumed>) = 0 [pid 5242] close(7 [pid 5078] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] mkdir("./5", 0777 [pid 5073] <... openat resumed>) = 4 [pid 5253] <... memfd_create resumed>) = 3 [pid 5252] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... mkdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5252] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5242] close(8 [pid 5078] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 4 [pid 5253] <... mmap resumed>) = 0x7ff63668b000 [pid 5252] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... openat resumed>) = 3 [pid 5077] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5252] <... mprotect resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5253] <... write resumed>) = 262144 [pid 5242] close(9 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] getdents64(3, [pid 5242] close(10 [pid 5078] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5073] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, [pid 5073] getdents64(4, [pid 5242] close(11 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] newfstatat(AT_FDCWD, "./5/cgroup.cpu", [pid 5077] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5075] <... openat resumed>) = 3 [pid 5073] close(4 [pid 5252] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5242] close(12 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] getdents64(4, [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5253] munmap(0x7ff63668b000, 138412032 [pid 5252] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... close resumed>) = 0 [pid 5242] close(13 [pid 5078] unlink("./5/cgroup.cpu" [pid 5077] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5073] rmdir("./4/file0" [pid 5252] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... unlink resumed>) = 0 [pid 5077] close(4 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5073] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5254 attached [pid 5242] close(14 [pid 5078] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5254] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5252] <... clone3 resumed> => {parent_tid=[20]}, 88) = 20 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5254] <... rseq resumed>) = 0 [pid 5252] rt_sigprocmask(SIG_SETMASK, [], [pid 5242] close(15 [pid 5078] <... umount2 resumed>) = 0 [pid 5253] <... munmap resumed>) = 0 [pid 5077] rmdir("./4/file0" [pid 5075] close(3 [pid 5073] newfstatat(AT_FDCWD, "./4/cgroup", [pid 5254] set_robust_list(0x7ff63eaab9a0, 24 [pid 5253] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5254] <... set_robust_list resumed>) = 0 [pid 5253] <... openat resumed>) = 4 [pid 5252] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] close(16 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] unlink("./4/cgroup" [pid 5254] rt_sigprocmask(SIG_SETMASK, [], [pid 5253] ioctl(4, LOOP_SET_FD, 3 [pid 5252] <... futex resumed>) = 0 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] newfstatat(AT_FDCWD, "./5/bus", [pid 5077] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5254] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] close(17 [pid 5073] <... unlink resumed>) = 0 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5242] close(18 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] newfstatat(AT_FDCWD, "./4/cgroup.net", ./strace-static-x86_64: Process 5255 attached [pid 5254] creat("./bus", 000 [pid 5252] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] close(19 [pid 5078] unlink("./5/bus" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] unlink("./4/cgroup.net" [pid 5255] set_robust_list(0x5555560316a0, 24 [pid 5254] <... creat resumed>) = 5 [pid 5253] <... ioctl resumed>) = 0 [pid 5242] close(20 [pid 5078] <... unlink resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./4/cgroup", [pid 5075] <... clone resumed>, child_tidptr=0x555556031690) = 18 [pid 5255] <... set_robust_list resumed>) = 0 [pid 5254] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] close(3 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5255] chdir("./5" [pid 5252] <... futex resumed>) = 0 [pid 5253] <... close resumed>) = 0 [pid 5242] close(21 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] unlink("./4/cgroup" [pid 5254] <... futex resumed>) = 1 [pid 5073] getdents64(3, [pid 5255] <... chdir resumed>) = 0 [pid 5253] mkdir("./file0", 0777 [pid 5252] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5073] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5255] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5254] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5242] close(22 [pid 5077] <... unlink resumed>) = 0 [pid 5073] close(3 [pid 5255] <... prctl resumed>) = 0 [pid 5252] <... futex resumed>) = 0 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5253] <... mkdir resumed>) = 0 [pid 5252] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] close(23 [pid 5073] rmdir("./4" [pid 5255] setpgid(0, 0 [pid 5254] <... mount resumed>) = 0 [pid 5253] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] unlink("./5/binderfs" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5255] <... setpgid resumed>) = 0 [pid 5254] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] close(24 [pid 5073] <... rmdir resumed>) = 0 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... unlink resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 5242] close(25 [pid 5073] mkdir("./5", 0777 [pid 5255] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5255] <... symlink resumed>) = 0 [pid 5254] <... futex resumed>) = 1 [pid 5252] <... futex resumed>) = 0 [pid 5242] close(26 [pid 5073] <... mkdir resumed>) = 0 [pid 5255] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5254] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5252] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./4/cgroup.net" [pid 5255] <... symlink resumed>) = 0 [pid 5254] <... open resumed>) = 3 [pid 5252] <... futex resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5255] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5077] getdents64(3, [pid 5255] <... symlink resumed>) = 0 [pid 5252] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5254] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] close(3 [pid 5255] <... openat resumed>) = 3 [pid 5254] <... futex resumed>) = 0 [pid 5252] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... close resumed>) = 0 [pid 5255] write(3, "1000", 4 [pid 5254] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5252] <... futex resumed>) = 0 [pid 5077] rmdir("./4" [pid 5255] <... write resumed>) = 4 [pid 5254] <... mmap resumed>) = 0x20000000 [pid 5077] <... rmdir resumed>) = 0 [pid 5255] close(3 [pid 5077] mkdir("./5", 0777 [pid 5255] <... close resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5255] read(200, [pid 5252] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] close(27 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5255] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... openat resumed>) = 3 [pid 5255] symlink("/dev/binderfs", "./binderfs" [pid 5254] <... futex resumed>) = 0 [pid 5252] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] close(28 [pid 5073] <... openat resumed>) = 3 [pid 5255] <... symlink resumed>) = 0 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... umount2 resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5255] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] close(29 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 62.521846][ T5253] loop5: detected capacity change from 0 to 512 [ 62.544848][ T5078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5255] <... futex resumed>) = 0 [pid 5242] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5254] memfd_create("syzkaller", 0 [pid 5078] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5242] exit_group(0 [pid 5073] close(3 [pid 5246] <... futex resumed>) = ? [pid 5242] <... exit_group resumed>) = ? [pid 5249] <... futex resumed>) = ? [pid 5073] <... close resumed>) = 0 [pid 5254] <... memfd_create resumed>) = 6 [pid 5252] <... futex resumed>) = 0 [pid 5249] +++ exited with 0 +++ [pid 5246] +++ exited with 0 +++ [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5255] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5242] +++ exited with 0 +++ [pid 5255] <... mmap resumed>) = 0x7ff63eaac000 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5255] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff63668b000 [pid 5255] <... mprotect resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556031690) = 18 [pid 5255] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 5259 attached ./strace-static-x86_64: Process 5258 attached [], 8) = 0 [pid 5259] set_robust_list(0x5555560316a0, 24 [pid 5255] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5073] <... clone resumed>, child_tidptr=0x555556031690) = 18 [pid 5259] <... set_robust_list resumed>) = 0 [pid 5258] set_robust_list(0x5555560316a0, 24 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5255] <... clone3 resumed> => {parent_tid=[19]}, 88) = 19 [pid 5259] chdir("./5" [pid 5255] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5260 attached [pid 5259] <... chdir resumed>) = 0 [pid 5258] <... set_robust_list resumed>) = 0 [pid 5260] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5260] <... rseq resumed>) = 0 [pid 5259] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5258] chdir("./5" [pid 5255] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5255] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] set_robust_list(0x7ff63eacc9a0, 24 [pid 5259] <... prctl resumed>) = 0 [pid 5258] <... chdir resumed>) = 0 [pid 5255] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5255] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... set_robust_list resumed>) = 0 [pid 5259] setpgid(0, 0 [pid 5258] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5255] <... futex resumed>) = 0 [pid 5254] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5074] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5260] rt_sigprocmask(SIG_SETMASK, [], [pid 5259] <... setpgid resumed>) = 0 [pid 5255] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] newfstatat(AT_FDCWD, "./5/file0", [pid 5260] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5259] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5258] <... prctl resumed>) = 0 [pid 5255] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5254] <... write resumed>) = 65536 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5260] memfd_create("syzkaller", 0 [pid 5259] <... symlink resumed>) = 0 [pid 5258] setpgid(0, 0 [pid 5255] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5254] munmap(0x7ff63668b000, 138412032 [pid 5078] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(3, "", [pid 5260] <... memfd_create resumed>) = 3 [pid 5259] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5258] <... setpgid resumed>) = 0 [pid 5255] <... mprotect resumed>) = 0 [pid 5254] <... munmap resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5259] <... symlink resumed>) = 0 [pid 5258] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5255] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5254] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5078] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(3, [pid 5260] <... mmap resumed>) = 0x7ff63668b000 [pid 5259] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5258] <... symlink resumed>) = 0 [pid 5255] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5254] <... openat resumed>) = 7 [pid 5078] <... openat resumed>) = 4 [pid 5259] <... symlink resumed>) = 0 [pid 5258] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5255] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5254] ioctl(7, LOOP_SET_FD, 6 [pid 5074] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5258] <... symlink resumed>) = 0 [pid 5254] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./4/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] newfstatat(4, "", ./strace-static-x86_64: Process 5261 attached [pid 5259] <... openat resumed>) = 3 [pid 5258] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5255] <... clone3 resumed> => {parent_tid=[20]}, 88) = 20 [pid 5254] ioctl(7, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5261] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5259] write(3, "1000", 4 [pid 5258] <... symlink resumed>) = 0 [pid 5255] rt_sigprocmask(SIG_SETMASK, [], [pid 5254] <... ioctl resumed>) = 0 [pid 5078] getdents64(4, [pid 5074] newfstatat(AT_FDCWD, "./4/cgroup.cpu", [pid 5259] <... write resumed>) = 4 [pid 5258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5255] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5078] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5261] <... rseq resumed>) = 0 [pid 5259] close(3 [pid 5258] <... openat resumed>) = 3 [pid 5255] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5261] set_robust_list(0x7ff63eaab9a0, 24 [pid 5259] <... close resumed>) = 0 [pid 5258] write(3, "1000", 4 [pid 5255] <... futex resumed>) = 0 [ 62.563838][ T5256] EXT4-fs warning (device loop5): kmmpd:167: kmmpd being stopped since MMP feature has been disabled. [ 62.579381][ T5253] EXT4-fs (loop5): revision level too high, forcing read-only mode [pid 5078] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5074] unlink("./4/cgroup.cpu" [pid 5259] read(200, [pid 5258] <... write resumed>) = 4 [pid 5254] ioctl(7, LOOP_SET_FD, 6 [pid 5259] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5258] close(3 [pid 5074] <... unlink resumed>) = 0 [pid 5259] symlink("/dev/binderfs", "./binderfs" [pid 5258] <... close resumed>) = 0 [pid 5259] <... symlink resumed>) = 0 [pid 5258] read(200, [pid 5074] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] close(4 [pid 5259] <... futex resumed>) = 0 [pid 5258] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... close resumed>) = 0 [pid 5260] <... write resumed>) = 262144 [pid 5259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5258] <... symlink resumed>) = 0 [pid 5254] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] rmdir("./5/file0" [pid 5074] <... umount2 resumed>) = 0 [pid 5259] <... mmap resumed>) = 0x7ff63eaac000 [pid 5258] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5258] <... futex resumed>) = 0 [pid 5074] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] <... mprotect resumed>) = 0 [pid 5258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5259] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5258] <... mmap resumed>) = 0x7ff63eaac000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5259] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5258] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5078] <... rmdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./4/bus", [pid 5259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5258] <... mprotect resumed>) = 0 [pid 5078] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5262 attached [pid 5258] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5254] close(7 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./4/bus" [pid 5262] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5259] <... clone3 resumed> => {parent_tid=[19]}, 88) = 19 [pid 5258] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5078] newfstatat(AT_FDCWD, "./5/cgroup", [pid 5074] <... unlink resumed>) = 0 [pid 5262] <... rseq resumed>) = 0 [pid 5261] <... set_robust_list resumed>) = 0 [pid 5260] munmap(0x7ff63668b000, 138412032 [pid 5259] rt_sigprocmask(SIG_SETMASK, [], [pid 5258] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5255] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5263 attached [pid 5262] set_robust_list(0x7ff63eacc9a0, 24 [pid 5261] rt_sigprocmask(SIG_SETMASK, [], [pid 5260] <... munmap resumed>) = 0 [pid 5259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5254] <... close resumed>) = 0 [pid 5078] unlink("./5/cgroup" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5263] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5262] <... set_robust_list resumed>) = 0 [pid 5261] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5260] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5259] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... clone3 resumed> => {parent_tid=[19]}, 88) = 19 [pid 5263] <... rseq resumed>) = 0 [pid 5262] rt_sigprocmask(SIG_SETMASK, [], [pid 5261] creat("./bus", 000 [pid 5259] <... futex resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5263] set_robust_list(0x7ff63eacc9a0, 24 [pid 5262] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5260] <... openat resumed>) = 4 [pid 5259] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5263] <... set_robust_list resumed>) = 0 [pid 5262] memfd_create("syzkaller", 0 [pid 5261] <... creat resumed>) = 5 [pid 5260] ioctl(4, LOOP_SET_FD, 3 [pid 5259] <... futex resumed>) = 0 [pid 5258] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5254] close(6 [pid 5078] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./4/binderfs" [pid 5263] rt_sigprocmask(SIG_SETMASK, [], [pid 5262] <... memfd_create resumed>) = 3 [pid 5261] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5258] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5259] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5258] <... futex resumed>) = 0 [pid 5254] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [pid 5254] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... mount resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5254] <... futex resumed>) = 0 [pid 5253] ioctl(4, LOOP_CLR_FD [pid 5254] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] <... ioctl resumed>) = 0 [pid 5253] close(4) = 0 [pid 5253] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5253] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] close(3 [pid 5263] memfd_create("syzkaller", 0 [pid 5262] <... mmap resumed>) = 0x7ff63668b000 [pid 5261] <... futex resumed>) = 1 [pid 5260] <... ioctl resumed>) = 0 [pid 5259] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5258] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... futex resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./5/cgroup.net", [pid 5074] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5261] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5255] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... close resumed>) = 0 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5255] <... futex resumed>) = 0 [pid 5252] close(4 [pid 5262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5261] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5255] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5260] close(3) = 0 [pid 5259] <... mprotect resumed>) = 0 [pid 5078] unlink("./5/cgroup.net" [pid 5260] mkdir("./file0", 0777 [pid 5258] <... futex resumed>) = 0 [pid 5252] close(5) = 0 [pid 5252] close(6 [pid 5078] <... unlink resumed>) = 0 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5252] close(7) = -1 EBADF (Bad file descriptor) [pid 5263] <... memfd_create resumed>) = 3 [pid 5261] <... mount resumed>) = 0 [pid 5260] <... mkdir resumed>) = 0 [pid 5258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5252] close(8 [pid 5259] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5078] getdents64(3, [pid 5263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5260] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5261] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] close(9 [pid 5078] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5261] <... futex resumed>) = 1 [pid 5255] <... futex resumed>) = 0 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] close(3 [pid 5263] <... mmap resumed>) = 0x7ff63668b000 [ 62.620664][ T5253] EXT4-fs (loop5): failed to initialize system zone (-117) [ 62.629281][ T5253] EXT4-fs (loop5): mount failed [ 62.650460][ T5260] loop0: detected capacity change from 0 to 512 [pid 5261] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5258] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5255] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] close(10 [pid 5078] <... close resumed>) = 0 [pid 5263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5262] <... write resumed>) = 262144 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5255] <... futex resumed>) = 0 [pid 5258] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5078] rmdir("./5" [pid 5261] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5078] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5264 attached [pid 5262] munmap(0x7ff63668b000, 138412032 [pid 5078] mkdir("./6", 0777 [pid 5261] <... open resumed>) = 3 [pid 5258] <... mprotect resumed>) = 0 [pid 5255] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5259] <... clone3 resumed> => {parent_tid=[20]}, 88) = 20 [pid 5264] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5078] <... mkdir resumed>) = 0 [pid 5264] <... rseq resumed>) = 0 [pid 5259] rt_sigprocmask(SIG_SETMASK, [], [pid 5264] set_robust_list(0x7ff63eaab9a0, 24 [pid 5259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5264] <... set_robust_list resumed>) = 0 [pid 5259] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] rt_sigprocmask(SIG_SETMASK, [], [pid 5259] <... futex resumed>) = 0 [pid 5264] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5259] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] creat("./bus", 000 [pid 5261] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5261] <... futex resumed>) = 1 [pid 5255] <... futex resumed>) = 0 [pid 5252] close(11 [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5261] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5255] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5261] <... mmap resumed>) = 0x20000000 [pid 5255] <... futex resumed>) = 0 [pid 5252] close(12 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5261] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5261] <... futex resumed>) = 0 [pid 5255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] close(13 [pid 5078] close(3 [pid 5264] <... creat resumed>) = 4 [pid 5078] <... close resumed>) = 0 [pid 5261] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5255] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5255] <... futex resumed>) = 0 [pid 5252] close(14 [pid 5261] memfd_create("syzkaller", 0 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5264] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... memfd_create resumed>) = 6 [pid 5252] close(15 [pid 5264] <... futex resumed>) = 1 [pid 5262] <... munmap resumed>) = 0 [pid 5261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5259] <... futex resumed>) = 0 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5261] <... mmap resumed>) = 0x7ff63668b000 [pid 5252] close(16./strace-static-x86_64: Process 5266 attached [pid 5264] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5263] <... write resumed>) = 262144 [pid 5262] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5261] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5259] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5266] set_robust_list(0x5555560316a0, 24 [pid 5259] <... futex resumed>) = 0 [pid 5258] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5263] munmap(0x7ff63668b000, 138412032 [pid 5078] <... clone resumed>, child_tidptr=0x555556031690) = 21 [pid 5266] <... set_robust_list resumed>) = 0 [pid 5259] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5266] chdir("./6" [pid 5263] <... munmap resumed>) = 0 [pid 5258] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5252] close(17 [pid 5262] <... openat resumed>) = 5 ./strace-static-x86_64: Process 5268 attached [pid 5266] <... chdir resumed>) = 0 [pid 5263] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5266] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5263] <... openat resumed>) = 4 [pid 5258] <... clone3 resumed> => {parent_tid=[20]}, 88) = 20 [ 62.682802][ T5074] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.707920][ T5265] EXT4-fs warning (device loop0): kmmpd:167: kmmpd being stopped since MMP feature has been disabled. [ 62.719419][ T5260] EXT4-fs (loop0): revision level too high, forcing read-only mode [pid 5252] close(18 [pid 5266] <... prctl resumed>) = 0 [pid 5263] ioctl(4, LOOP_SET_FD, 3 [pid 5258] rt_sigprocmask(SIG_SETMASK, [], [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5268] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053) = 0 [pid 5266] setpgid(0, 0 [pid 5263] <... ioctl resumed>) = 0 [pid 5252] close(19 [pid 5266] <... setpgid resumed>) = 0 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5266] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5252] close(20 [pid 5266] <... symlink resumed>) = 0 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5266] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5252] close(21 [pid 5266] <... symlink resumed>) = 0 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5266] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5252] close(22 [pid 5266] <... symlink resumed>) = 0 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5268] set_robust_list(0x7ff63eaab9a0, 24 [pid 5266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5252] close(23 [pid 5266] <... openat resumed>) = 3 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5266] write(3, "1000", 4 [pid 5252] close(24 [pid 5268] <... set_robust_list resumed>) = 0 [pid 5266] <... write resumed>) = 4 [pid 5264] <... mount resumed>) = 0 [pid 5262] ioctl(5, LOOP_SET_FD, 3 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5268] rt_sigprocmask(SIG_SETMASK, [], [pid 5266] close(3 [pid 5264] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] close(3 [pid 5261] <... write resumed>) = 65536 [pid 5260] <... mount resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5258] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5268] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5263] <... close resumed>) = 0 [pid 5261] munmap(0x7ff63668b000, 138412032 [pid 5260] ioctl(4, LOOP_CLR_FD [pid 5258] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] creat("./bus", 000 [pid 5266] <... close resumed>) = 0 [pid 5264] <... futex resumed>) = 1 [pid 5263] mkdir("./file0", 0777 [pid 5262] <... ioctl resumed>) = 0 [pid 5259] <... futex resumed>) = 0 [pid 5252] close(25 [pid 5268] <... creat resumed>) = 3 [pid 5266] read(200, [pid 5261] <... munmap resumed>) = 0 [pid 5260] <... ioctl resumed>) = 0 [pid 5258] <... futex resumed>) = 0 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5259] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5268] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5261] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5260] close(4 [pid 5259] <... futex resumed>) = 0 [pid 5258] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] close(26 [pid 5268] <... futex resumed>) = 0 [pid 5266] symlink("/dev/binderfs", "./binderfs" [pid 5264] <... open resumed>) = 6 [pid 5263] <... mkdir resumed>) = 0 [pid 5262] close(3 [pid 5261] <... openat resumed>) = 7 [pid 5260] <... close resumed>) = 0 [pid 5259] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5266] <... symlink resumed>) = 0 [pid 5264] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... close resumed>) = 0 [pid 5261] ioctl(7, LOOP_SET_FD, 6 [pid 5260] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] close(27 [pid 5268] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... futex resumed>) = 0 [pid 5262] mkdir("./file0", 0777 [pid 5261] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5260] <... futex resumed>) = 0 [pid 5259] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5266] <... futex resumed>) = 0 [pid 5264] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 5263] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5262] <... mkdir resumed>) = 0 [pid 5261] ioctl(7, LOOP_CLR_FD [pid 5260] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] <... futex resumed>) = 0 [pid 5258] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] close(28 [pid 5074] <... umount2 resumed>) = 0 [pid 5268] <... futex resumed>) = 0 [pid 5266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5264] <... mmap resumed>) = 0x20000000 [pid 5262] mount("/dev/loop1", 0x20000000, 0x200005c0, MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"... [pid 5261] <... ioctl resumed>) = 0 [pid 5259] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] <... futex resumed>) = 1 [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5268] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5266] <... mmap resumed>) = 0x7ff63eaac000 [pid 5264] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] close(29 [pid 5074] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5266] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5264] <... futex resumed>) = 0 [pid 5262] ioctl(5, LOOP_CLR_FD [pid 5259] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5268] <... mount resumed>) = 0 [pid 5266] <... mprotect resumed>) = 0 [pid 5264] memfd_create("syzkaller", 0 [pid 5262] <... ioctl resumed>) = 0 [pid 5259] <... futex resumed>) = 0 [pid 5252] exit_group(0 [pid 5074] newfstatat(AT_FDCWD, "./4/file0", [pid 5268] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5264] <... memfd_create resumed>) = 3 [pid 5262] close(5 [pid 5261] ioctl(7, LOOP_SET_FD, 6 [pid 5254] <... futex resumed>) = ? [pid 5253] <... futex resumed>) = ? [pid 5252] <... exit_group resumed>) = ? [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5268] <... futex resumed>) = 1 [pid 5266] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5262] <... close resumed>) = 0 [pid 5261] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5258] <... futex resumed>) = 0 [pid 5254] +++ exited with 0 +++ [pid 5253] +++ exited with 0 +++ [pid 5252] +++ exited with 0 +++ [pid 5268] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5261] close(7 [pid 5258] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [ 62.740762][ T5263] loop3: detected capacity change from 0 to 512 [ 62.741678][ T5260] EXT4-fs (loop0): failed to initialize system zone (-117) [ 62.754579][ T5260] EXT4-fs (loop0): mount failed [ 62.764333][ T5262] loop1: detected capacity change from 0 to 512 [pid 5074] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5264] <... mmap resumed>) = 0x7ff63668b000 [pid 5262] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... close resumed>) = 0 [pid 5258] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5269 attached [pid 5268] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5266] <... clone3 resumed> => {parent_tid=[22]}, 88) = 22 [pid 5264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5262] <... futex resumed>) = 0 [pid 5261] close(6 [pid 5258] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5269] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5268] <... open resumed>) = 5 [pid 5266] rt_sigprocmask(SIG_SETMASK, [], [pid 5264] <... write resumed>) = 65536 [pid 5262] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5269] <... rseq resumed>) = 0 [pid 5268] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5264] munmap(0x7ff63668b000, 138412032 [pid 5261] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] newfstatat(4, "", [pid 5269] set_robust_list(0x7ff63eacc9a0, 24 [pid 5268] <... futex resumed>) = 1 [pid 5266] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = 0 [pid 5255] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5269] <... set_robust_list resumed>) = 0 [pid 5268] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5264] <... munmap resumed>) = 0 [pid 5261] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... close resumed>) = 0 [pid 5269] rt_sigprocmask(SIG_SETMASK, [], [pid 5268] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5258] <... futex resumed>) = 0 [pid 5255] close(4 [pid 5269] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5268] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5258] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5269] memfd_create("syzkaller", 0 [pid 5266] <... futex resumed>) = 0 [pid 5264] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5269] <... memfd_create resumed>) = 3 [pid 5266] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... openat resumed>) = 5 [pid 5269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5266] <... futex resumed>) = 0 [pid 5264] ioctl(5, LOOP_SET_FD, 3 [pid 5074] getdents64(4, [pid 5269] <... mmap resumed>) = 0x7ff6366ac000 [pid 5263] <... mount resumed>) = 0 [pid 5266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5264] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5079] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5266] <... mmap resumed>) = 0x7ff63668b000 [pid 5264] ioctl(5, LOOP_CLR_FD [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5266] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5264] <... ioctl resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5074] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5263] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5266] <... mprotect resumed>) = 0 [pid 5263] <... openat resumed>) = 6 [pid 5079] <... openat resumed>) = 3 [pid 5074] close(4 [pid 5263] chdir("./file0" [pid 5266] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5263] <... chdir resumed>) = 0 [pid 5255] close(5 [pid 5079] newfstatat(3, "", [pid 5074] <... close resumed>) = 0 [pid 5263] ioctl(4, LOOP_CLR_FD [pid 5269] <... write resumed>) = 262144 [pid 5268] <... mmap resumed>) = 0x20000000 [pid 5266] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5263] <... ioctl resumed>) = 0 [pid 5255] <... close resumed>) = 0 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] rmdir("./4/file0" [pid 5268] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5268] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] <... futex resumed>) = 0 [pid 5255] close(6 [pid 5079] getdents64(3, [pid 5074] <... rmdir resumed>) = 0 [pid 5266] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5264] ioctl(5, LOOP_SET_FD, 3 [pid 5263] close(4./strace-static-x86_64: Process 5272 attached [pid 5269] munmap(0x7ff6366ac000, 138412032 [pid 5264] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5263] <... close resumed>) = 0 [pid 5258] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5074] umount2("./4/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5272] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5269] <... munmap resumed>) = 0 [pid 5268] <... futex resumed>) = 0 [pid 5266] <... clone3 resumed> => {parent_tid=[23]}, 88) = 23 [pid 5264] close(5 [pid 5263] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... futex resumed>) = 1 [pid 5255] close(7 [pid 5079] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5272] <... rseq resumed>) = 0 [pid 5268] memfd_create("syzkaller", 0 [pid 5266] rt_sigprocmask(SIG_SETMASK, [], [pid 5264] <... close resumed>) = 0 [pid 5263] <... futex resumed>) = 0 [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./4/cgroup", [pid 5272] set_robust_list(0x7ff6366ab9a0, 24 [pid 5269] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5268] <... memfd_create resumed>) = 4 [pid 5266] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5264] close(3 [pid 5263] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5255] close(8 [pid 5079] newfstatat(AT_FDCWD, "./5/cgroup.cpu", [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5272] <... set_robust_list resumed>) = 0 [pid 5269] <... openat resumed>) = 4 [pid 5268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5266] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... close resumed>) = 0 [pid 5074] unlink("./4/cgroup" [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5272] rt_sigprocmask(SIG_SETMASK, [], [pid 5269] ioctl(4, LOOP_SET_FD, 3 [pid 5268] <... mmap resumed>) = 0x7ff63668b000 [pid 5266] <... futex resumed>) = 0 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 62.835330][ T5263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.850499][ T5263] ext4 filesystem being mounted at /root/syzkaller.hT4DtY/5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5272] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5268] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5074] <... unlink resumed>) = 0 [pid 5268] <... write resumed>) = 65536 [pid 5272] creat("./bus", 000 [pid 5269] <... ioctl resumed>) = 0 [pid 5268] munmap(0x7ff63668b000, 138412032 [pid 5266] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] close(3 [pid 5255] close(9 [pid 5079] unlink("./5/cgroup.cpu" [pid 5074] umount2("./4/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5272] <... creat resumed>) = 5 [pid 5269] close(3 [pid 5268] <... munmap resumed>) = 0 [pid 5264] <... futex resumed>) = 0 [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5272] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... close resumed>) = 0 [pid 5268] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5264] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5255] close(10 [pid 5079] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5272] <... futex resumed>) = 1 [pid 5269] mkdir("./file0", 0777 [pid 5268] <... openat resumed>) = 7 [pid 5266] <... futex resumed>) = 0 [pid 5259] close(4 [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./4/cgroup.net", [pid 5268] ioctl(7, LOOP_SET_FD, 4 [pid 5259] <... close resumed>) = 0 [pid 5255] close(11 [pid 5268] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5259] close(5 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5268] ioctl(7, LOOP_CLR_FD [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5268] <... ioctl resumed>) = 0 [pid 5259] close(6) = 0 [pid 5259] close(7) = -1 EBADF (Bad file descriptor) [pid 5259] close(8) = -1 EBADF (Bad file descriptor) [pid 5259] close(9 [pid 5268] ioctl(7, LOOP_SET_FD, 4 [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5268] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5259] close(10 [pid 5268] close(7 [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5268] <... close resumed>) = 0 [pid 5259] close(11 [pid 5268] close(4 [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5268] <... close resumed>) = 0 [pid 5259] close(12) = -1 EBADF (Bad file descriptor) [pid 5272] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5269] <... mkdir resumed>) = 0 [pid 5268] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] close(13 [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = 0 [pid 5074] unlink("./4/cgroup.net" [pid 5272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5269] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5268] <... futex resumed>) = 0 [pid 5266] <... futex resumed>) = 0 [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(3 [pid 5255] close(12 [pid 5079] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 5272] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5268] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5259] close(14 [pid 5258] <... close resumed>) = 0 [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(4 [pid 5255] close(13 [pid 5079] newfstatat(AT_FDCWD, "./5/bus", [pid 5272] <... mount resumed>) = 0 [pid 5259] close(15 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] getdents64(3, [pid 5272] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(5 [pid 5079] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5272] <... futex resumed>) = 1 [pid 5266] <... futex resumed>) = 0 [pid 5259] close(16 [pid 5258] <... close resumed>) = 0 [pid 5255] close(14 [pid 5079] unlink("./5/bus" [pid 5074] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5272] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5266] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(6 [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5272] <... open resumed>) = 3 [pid 5266] <... futex resumed>) = 0 [pid 5259] close(17 [pid 5258] <... close resumed>) = 0 [pid 5255] close(15 [pid 5079] <... unlink resumed>) = 0 [pid 5074] close(3 [pid 5272] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 62.892557][ T5269] loop4: detected capacity change from 0 to 512 [pid 5258] close(7 [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5272] <... futex resumed>) = 0 [pid 5266] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5259] close(18 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5255] close(16 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5272] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5074] rmdir("./4" [pid 5272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5266] <... futex resumed>) = 0 [pid 5255] close(17 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5272] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5266] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] unlink("./5/binderfs" [pid 5074] mkdir("./5", 0777 [pid 5272] <... mmap resumed>) = 0x20000000 [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(8 [pid 5074] <... mkdir resumed>) = 0 [pid 5255] close(18 [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... unlink resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5255] close(19 [pid 5079] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5255] close(20 [pid 5079] newfstatat(AT_FDCWD, "./5/file0", [pid 5074] close(3 [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... close resumed>) = 0 [pid 5259] close(19 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5255] close(21 [pid 5079] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5258] close(9) = -1 EBADF (Bad file descriptor) [pid 5258] close(10) = -1 EBADF (Bad file descriptor) [pid 5258] close(11) = -1 EBADF (Bad file descriptor) [pid 5258] close(12) = -1 EBADF (Bad file descriptor) [pid 5258] close(13) = -1 EBADF (Bad file descriptor) [pid 5258] close(14) = -1 EBADF (Bad file descriptor) [pid 5258] close(15) = -1 EBADF (Bad file descriptor) [pid 5258] close(16) = -1 EBADF (Bad file descriptor) [pid 5258] close(17 [pid 5079] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5255] close(22 [pid 5258] close(18 [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... openat resumed>) = 4 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(19 [pid 5259] close(20 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5255] close(23 [pid 5079] newfstatat(4, "", [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(20 [pid 5255] close(24 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... clone resumed>, child_tidptr=0x555556031690) = 21 [pid 5255] close(25 [pid 5079] getdents64(4, [pid 5259] close(21 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5255] close(26 [pid 5079] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(21 [pid 5255] close(27 [pid 5079] getdents64(4, [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5259] close(22 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(22 [pid 5255] close(28 [pid 5079] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(4 [pid 5255] close(29 [pid 5259] close(23 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5255] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = 0 [pid 5255] exit_group(0 [pid 5079] rmdir("./5/file0" [pid 5255] <... exit_group resumed>) = ? [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(23 [pid 5259] close(24 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(24 [pid 5079] <... rmdir resumed>) = 0 [pid 5079] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5261] <... futex resumed>) = ? [pid 5260] <... futex resumed>) = ? [pid 5259] close(25 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5261] +++ exited with 0 +++ [pid 5260] +++ exited with 0 +++ [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(25 [pid 5255] +++ exited with 0 +++ [pid 5079] newfstatat(AT_FDCWD, "./5/cgroup", ./strace-static-x86_64: Process 5275 attached [pid 5259] close(26 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] set_robust_list(0x5555560316a0, 24 [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(26 [pid 5275] <... set_robust_list resumed>) = 0 [pid 5259] close(27 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] chdir("./5" [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(27 [pid 5275] <... chdir resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5275] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5259] close(28 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] <... prctl resumed>) = 0 [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(28 [pid 5275] setpgid(0, 0 [pid 5259] close(29 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] <... setpgid resumed>) = 0 [pid 5275] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5259] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5258] close(29 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5275] <... symlink resumed>) = 0 [pid 5079] unlink("./5/cgroup" [pid 5075] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5275] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5259] exit_group(0 [pid 5258] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5275] <... symlink resumed>) = 0 [pid 5264] <... futex resumed>) = ? [pid 5262] <... futex resumed>) = ? [pid 5259] <... exit_group resumed>) = ? [pid 5258] exit_group(0 [pid 5079] <... unlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5275] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 5268] <... futex resumed>) = ? [pid 5264] +++ exited with 0 +++ [pid 5263] <... futex resumed>) = ? [pid 5258] <... exit_group resumed>) = ? [pid 5275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5268] +++ exited with 0 +++ [pid 5263] +++ exited with 0 +++ [pid 5258] +++ exited with 0 +++ [pid 5269] <... mount resumed>) = 0 [pid 5275] <... openat resumed>) = 3 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [ 62.944984][ T5269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.957745][ T5269] ext4 filesystem being mounted at /root/syzkaller.RfCMU1/6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5275] write(3, "1000", 4) = 4 [pid 5275] close(3 [pid 5079] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5275] <... close resumed>) = 0 [pid 5262] +++ exited with 0 +++ [pid 5269] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5259] +++ exited with 0 +++ [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5275] read(200, [pid 5269] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5079] newfstatat(AT_FDCWD, "./5/cgroup.net", [pid 5077] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5269] ioctl(4, LOOP_CLR_FD [pid 5275] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5269] <... ioctl resumed>) = 0 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5269] close(4 [pid 5275] symlink("/dev/binderfs", "./binderfs" [pid 5269] <... close resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5075] <... openat resumed>) = 3 [pid 5269] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... symlink resumed>) = 0 [pid 5269] <... futex resumed>) = 0 [pid 5079] unlink("./5/cgroup.net" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(3, "", [pid 5269] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... unlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5275] <... futex resumed>) = 0 [pid 5079] getdents64(3, [pid 5077] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5075] getdents64(3, [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5079] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5077] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5275] <... mmap resumed>) = 0x7ff63eaac000 [pid 5079] <... close resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./5/cgroup.cpu", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5275] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5079] rmdir("./5" [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./5/cgroup.cpu", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5275] <... mprotect resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5077] unlink("./5/cgroup.cpu" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] mkdir("./6", 0777 [pid 5077] <... unlink resumed>) = 0 [pid 5075] unlink("./5/cgroup.cpu" [pid 5073] <... openat resumed>) = 3 [pid 5079] <... mkdir resumed>) = 0 [pid 5077] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 5275] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... umount2 resumed>) = 0 [pid 5075] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5077] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5073] getdents64(3, [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] newfstatat(AT_FDCWD, "./5/bus", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5275] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5079] close(3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./5/bus", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5275] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5079] <... close resumed>) = 0 [pid 5077] unlink("./5/bus" [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./5/cgroup.cpu", ./strace-static-x86_64: Process 5276 attached [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... unlink resumed>) = 0 [pid 5075] unlink("./5/bus" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5277 attached [pid 5276] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5077] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5277] set_robust_list(0x5555560316a0, 24 [pid 5276] <... rseq resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] unlink("./5/cgroup.cpu" [pid 5277] <... set_robust_list resumed>) = 0 [pid 5276] set_robust_list(0x7ff63eacc9a0, 24 [pid 5077] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... unlink resumed>) = 0 [pid 5277] chdir("./6" [pid 5276] <... set_robust_list resumed>) = 0 [pid 5275] <... clone3 resumed> => {parent_tid=[22]}, 88) = 22 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5277] <... chdir resumed>) = 0 [pid 5276] rt_sigprocmask(SIG_SETMASK, [], [pid 5275] rt_sigprocmask(SIG_SETMASK, [], [pid 5077] unlink("./5/binderfs" [pid 5075] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5073] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5277] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5276] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5275] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5079] <... clone resumed>, child_tidptr=0x555556031690) = 21 [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5277] <... prctl resumed>) = 0 [pid 5276] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5277] setpgid(0, 0 [pid 5276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5272] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5276] memfd_create("syzkaller", 0 [pid 5277] <... setpgid resumed>) = 0 [pid 5276] <... memfd_create resumed>) = 3 [pid 5272] <... futex resumed>) = 0 [pid 5266] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5275] <... futex resumed>) = 0 [pid 5272] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] <... futex resumed>) = 1 [pid 5276] <... mmap resumed>) = 0x7ff6366ac000 [pid 5275] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... futex resumed>) = 0 [pid 5277] <... symlink resumed>) = 0 [pid 5276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5269] memfd_create("syzkaller", 0 [pid 5277] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu") = 0 [pid 5276] <... write resumed>) = 262144 [pid 5275] <... futex resumed>) = 0 [pid 5269] <... memfd_create resumed>) = 4 [pid 5075] unlink("./5/binderfs" [pid 5073] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5277] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... unlink resumed>) = 0 [pid 5277] <... symlink resumed>) = 0 [pid 5269] <... mmap resumed>) = 0x7ff6366ac000 [pid 5269] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5275] <... mmap resumed>) = 0x7ff63668b000 [pid 5075] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./5/bus", [pid 5277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5276] munmap(0x7ff6366ac000, 138412032 [pid 5275] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./5/bus" [pid 5277] <... openat resumed>) = 3 [pid 5276] <... munmap resumed>) = 0 [pid 5277] write(3, "1000", 4 [pid 5275] <... mprotect resumed>) = 0 [pid 5269] <... write resumed>) = 65536 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./5/file0", [pid 5073] <... unlink resumed>) = 0 [pid 5277] <... write resumed>) = 4 [pid 5275] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5277] close(3 [pid 5275] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5275] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5277] <... close resumed>) = 0 ./strace-static-x86_64: Process 5278 attached [pid 5277] read(200, [pid 5269] munmap(0x7ff6366ac000, 138412032 [pid 5077] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5278] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5277] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5276] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5275] <... clone3 resumed> => {parent_tid=[23]}, 88) = 23 [pid 5269] <... munmap resumed>) = 0 [pid 5278] <... rseq resumed>) = 0 [pid 5277] symlink("/dev/binderfs", "./binderfs" [pid 5275] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5278] set_robust_list(0x7ff6366ab9a0, 24) = 0 [pid 5277] <... symlink resumed>) = 0 [pid 5275] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5269] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] unlink("./5/binderfs" [pid 5278] rt_sigprocmask(SIG_SETMASK, [], [pid 5277] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... openat resumed>) = 4 [pid 5275] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... openat resumed>) = 6 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 63.053869][ T5077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5277] <... futex resumed>) = 0 [pid 5276] ioctl(4, LOOP_SET_FD, 3 [pid 5275] <... futex resumed>) = 0 [pid 5269] ioctl(6, LOOP_SET_FD, 4 [pid 5077] newfstatat(AT_FDCWD, "./5/file0", [pid 5075] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... unlink resumed>) = 0 [pid 5278] creat("./bus", 000 [pid 5277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5269] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5277] <... mmap resumed>) = 0x7ff63eaac000 [pid 5269] ioctl(6, LOOP_CLR_FD [pid 5077] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 5277] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5269] <... ioctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5277] <... mprotect resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(4, [pid 5077] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5077] newfstatat(4, "", [pid 5075] getdents64(4, [pid 5269] ioctl(6, LOOP_SET_FD, 4 [pid 5075] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5269] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] close(4 [pid 5269] close(6 [pid 5077] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 5269] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5269] close(4 [pid 5077] getdents64(4, [pid 5075] rmdir("./5/file0" [pid 5269] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5077] close(4 [pid 5269] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... close resumed>) = 0 [pid 5269] <... futex resumed>) = 0 [pid 5269] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] rmdir("./5/file0" [pid 5075] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5266] close(3 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5266] <... close resumed>) = 0 [pid 5277] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5277] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5277] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5073] newfstatat(AT_FDCWD, "./5/file0", [pid 5266] close(4 [pid 5077] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./5/cgroup", [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5266] close(5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./5/cgroup") = 0 [pid 5266] <... close resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./5/cgroup", [pid 5075] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5266] close(6 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./5/cgroup" [pid 5075] newfstatat(AT_FDCWD, "./5/cgroup.net", [pid 5266] close(7 [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] unlink("./5/cgroup.net" [pid 5266] close(8 [pid 5077] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5266] close(9 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./5/cgroup.net", [pid 5073] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5278] <... creat resumed>) = 5 [pid 5276] <... ioctl resumed>) = 0 [pid 5275] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5266] close(10 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./5/cgroup.net" [pid 5075] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5266] close(11 [pid 5077] <... unlink resumed>) = 0 [pid 5075] close(3 [pid 5278] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] close(3 [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5266] close(12 [pid 5077] getdents64(3, [pid 5073] newfstatat(4, "", ./strace-static-x86_64: Process 5279 attached [pid 5278] <... futex resumed>) = 1 [pid 5276] <... close resumed>) = 0 [pid 5275] <... futex resumed>) = 0 [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5075] rmdir("./5" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5278] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] <... clone3 resumed> => {parent_tid=[22]}, 88) = 22 [pid 5276] mkdir("./file0", 0777 [pid 5275] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] getdents64(4, [pid 5278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5277] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5073] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5277] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... futex resumed>) = 0 [pid 5073] getdents64(4, [pid 5277] <... futex resumed>) = 0 [pid 5278] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5275] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5277] <... futex resumed>) = 0 [pid 5073] close(4 [pid 5277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5279] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5278] <... mount resumed>) = 0 [pid 5277] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5266] close(13 [pid 5077] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5279] <... rseq resumed>) = 0 [pid 5277] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... close resumed>) = 0 [pid 5073] rmdir("./5/file0" [pid 5279] set_robust_list(0x7ff63eacc9a0, 24 [pid 5278] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... mprotect resumed>) = 0 [pid 5276] <... mkdir resumed>) = 0 [pid 5266] close(14 [pid 5077] rmdir("./5" [pid 5075] mkdir("./6", 0777 [pid 5279] <... set_robust_list resumed>) = 0 [pid 5278] <... futex resumed>) = 1 [pid 5277] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5276] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5275] <... futex resumed>) = 0 [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5279] rt_sigprocmask(SIG_SETMASK, [], [pid 5278] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5275] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5275] <... futex resumed>) = 0 [pid 5278] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5275] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5278] <... open resumed>) = 3 [pid 5266] close(15 [pid 5077] mkdir("./6", 0777 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] newfstatat(AT_FDCWD, "./5/cgroup", [pid 5279] memfd_create("syzkaller", 0 [pid 5278] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5280 attached [pid 5279] <... memfd_create resumed>) = 3 [pid 5278] <... futex resumed>) = 1 [pid 5275] <... futex resumed>) = 0 [pid 5266] close(16 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5278] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] unlink("./5/cgroup" [pid 5279] <... mmap resumed>) = 0x7ff63668b000 [pid 5278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5275] <... futex resumed>) = 0 [pid 5266] close(17 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5278] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5275] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... openat resumed>) = 3 [pid 5073] <... unlink resumed>) = 0 [pid 5278] <... mmap resumed>) = 0x20000000 [pid 5075] close(3 [pid 5073] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5278] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] close(18 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5280] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5279] <... write resumed>) = 262144 [pid 5278] <... futex resumed>) = 1 [pid 5275] <... futex resumed>) = 0 [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] newfstatat(AT_FDCWD, "./5/cgroup.net", [pid 5280] <... rseq resumed>) = 0 [pid 5278] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] close(19 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5280] set_robust_list(0x7ff63eaab9a0, 24 [pid 5278] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5277] <... clone3 resumed> => {parent_tid=[23]}, 88) = 23 [pid 5275] <... futex resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5280] <... set_robust_list resumed>) = 0 [pid 5280] rt_sigprocmask(SIG_SETMASK, [], [pid 5278] memfd_create("syzkaller", 0 [pid 5277] rt_sigprocmask(SIG_SETMASK, [], [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] close(3 [pid 5073] unlink("./5/cgroup.net" [pid 5280] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5278] <... memfd_create resumed>) = 6 [pid 5277] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 63.132285][ T5276] loop2: detected capacity change from 0 to 512 [pid 5266] close(20 [pid 5077] <... close resumed>) = 0 ./strace-static-x86_64: Process 5281 attached [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5281] set_robust_list(0x5555560316a0, 24 [pid 5266] close(21 [pid 5281] <... set_robust_list resumed>) = 0 [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... clone resumed>, child_tidptr=0x555556031690) = 21 [pid 5281] chdir("./6" [pid 5266] close(22 [pid 5281] <... chdir resumed>) = 0 [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5266] close(23 [pid 5281] <... prctl resumed>) = 0 [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] setpgid(0, 0 [pid 5266] close(24 [pid 5281] <... setpgid resumed>) = 0 [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5266] close(25) = -1 EBADF (Bad file descriptor) [pid 5266] close(26 [pid 5280] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... clone resumed>, child_tidptr=0x555556031690) = 21 [pid 5073] <... unlink resumed>) = 0 [pid 5281] <... symlink resumed>) = 0 [pid 5279] munmap(0x7ff63668b000, 138412032 [pid 5266] close(27 [pid 5280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5073] getdents64(3, [pid 5279] <... munmap resumed>) = 0 [pid 5277] <... futex resumed>) = 0 [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5280] creat("./bus", 000 [pid 5073] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5281] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5277] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5266] close(28 [pid 5073] close(3 [pid 5281] <... symlink resumed>) = 0 [pid 5281] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5266] close(29 [pid 5073] <... close resumed>) = 0 [pid 5281] <... symlink resumed>) = 0 [pid 5280] <... creat resumed>) = 4 [pid 5266] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] rmdir("./5" [pid 5281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5279] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5266] exit_group(0 [pid 5281] <... openat resumed>) = 3 [pid 5280] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... openat resumed>) = 5 [pid 5272] <... futex resumed>) = ? [pid 5269] <... futex resumed>) = ? [pid 5266] <... exit_group resumed>) = ? [pid 5073] <... rmdir resumed>) = 0 [pid 5280] <... futex resumed>) = 1 [pid 5277] <... futex resumed>) = 0 [pid 5073] mkdir("./6", 0777 [pid 5280] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5281] write(3, "1000", 4 [pid 5280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5279] ioctl(5, LOOP_SET_FD, 3 [pid 5277] <... futex resumed>) = 0 [pid 5272] +++ exited with 0 +++ [pid 5269] +++ exited with 0 +++ [pid 5266] +++ exited with 0 +++ [pid 5073] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5282 attached [pid 5281] <... write resumed>) = 4 [pid 5280] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5277] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5281] close(3) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5281] read(200, 0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5281] symlink("/dev/binderfs", "./binderfs" [pid 5282] set_robust_list(0x5555560316a0, 24 [pid 5281] <... symlink resumed>) = 0 [pid 5280] <... mount resumed>) = 0 [pid 5278] <... mmap resumed>) = 0x7ff6366ac000 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5282] <... set_robust_list resumed>) = 0 [pid 5280] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... mount resumed>) = -1 EBADMSG (Bad message) [pid 5281] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff63eaac000 [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5282] chdir("./6" [pid 5280] <... futex resumed>) = 1 [pid 5277] <... futex resumed>) = 0 [pid 5282] <... chdir resumed>) = 0 [pid 5073] close(3 [pid 5280] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] <... close resumed>) = 0 [pid 5280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5277] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5282] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5276] ioctl(4, LOOP_CLR_FD [pid 5281] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5278] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5281] <... mprotect resumed>) = 0 [pid 5281] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5282] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5284 attached [pid 5282] setpgid(0, 0 [pid 5280] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5278] <... write resumed>) = 65536 [pid 5277] <... futex resumed>) = 0 [pid 5276] <... ioctl resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555556031690) = 21 [pid 5282] <... setpgid resumed>) = 0 [pid 5280] <... open resumed>) = 6 [pid 5284] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5281] <... clone3 resumed> => {parent_tid=[22]}, 88) = 22 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5284] <... rseq resumed>) = 0 [pid 5282] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5281] rt_sigprocmask(SIG_SETMASK, [], [pid 5280] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] munmap(0x7ff6366ac000, 138412032 [pid 5277] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] close(4 [pid 5078] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5284] set_robust_list(0x7ff63eacc9a0, 24 [pid 5282] <... symlink resumed>) = 0 [pid 5281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5284] <... set_robust_list resumed>) = 0 [pid 5282] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5281] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] <... futex resumed>) = 0 [pid 5278] <... munmap resumed>) = 0 [pid 5277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5276] <... close resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5284] rt_sigprocmask(SIG_SETMASK, [], [pid 5282] <... symlink resumed>) = 0 [pid 5281] <... futex resumed>) = 0 [pid 5280] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 5278] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5277] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... openat resumed>) = 3 [pid 5284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5282] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5281] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] newfstatat(3, "", [pid 5278] <... openat resumed>) = 4 [pid 5284] memfd_create("syzkaller", 0 [pid 5281] <... futex resumed>) = 0 [pid 5280] <... mmap resumed>) = 0x20000000 [pid 5277] <... futex resumed>) = 0 [pid 5276] <... futex resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5284] <... memfd_create resumed>) = 3 [pid 5281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] getdents64(3, [pid 5284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5281] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5078] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 ./strace-static-x86_64: Process 5283 attached [pid 5284] <... mmap resumed>) = 0x7ff63668b000 [pid 5281] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5078] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5283] set_robust_list(0x5555560316a0, 24 [pid 5281] <... mprotect resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5283] <... set_robust_list resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 5283] chdir("./6" [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5284] <... write resumed>) = 262144 [pid 5282] <... symlink resumed>) = 0 [pid 5280] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] ioctl(4, LOOP_SET_FD, 6 [pid 5277] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] unlink("./6/cgroup.cpu" [pid 5283] <... chdir resumed>) = 0 [pid 5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5280] <... futex resumed>) = 0 [pid 5278] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... unlink resumed>) = 0 [pid 5283] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5280] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5278] ioctl(4, LOOP_CLR_FD [pid 5277] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5284] munmap(0x7ff63668b000, 138412032 [pid 5283] <... prctl resumed>) = 0 [pid 5282] <... openat resumed>) = 3 [pid 5281] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5278] <... ioctl resumed>) = 0 [pid 5277] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5284] <... munmap resumed>) = 0 [pid 5283] setpgid(0, 0 [pid 5282] write(3, "1000", 4 [pid 5078] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 63.180714][ T5276] EXT4-fs warning (device loop2): read_mmp_block:114: Error -74 while reading MMP block 12 [ 63.206917][ T5279] loop5: detected capacity change from 0 to 512 [pid 5284] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5283] <... setpgid resumed>) = 0 [pid 5281] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5284] <... openat resumed>) = 4 [pid 5283] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5279] <... ioctl resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./6/bus", ./strace-static-x86_64: Process 5285 attached [pid 5284] ioctl(4, LOOP_SET_FD, 3 [pid 5283] <... symlink resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5285] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5283] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5282] <... write resumed>) = 4 [pid 5279] close(3 [pid 5282] close(3) = 0 [pid 5282] read(200, 0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5283] <... symlink resumed>) = 0 [pid 5282] symlink("/dev/binderfs", "./binderfs" [pid 5280] memfd_create("syzkaller", 0 [pid 5078] unlink("./6/bus" [pid 5282] <... symlink resumed>) = 0 [pid 5280] <... memfd_create resumed>) = 7 [pid 5278] ioctl(4, LOOP_SET_FD, 6 [pid 5078] <... unlink resumed>) = 0 [pid 5280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5278] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5283] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5078] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5278] close(4 [pid 5283] <... symlink resumed>) = 0 [pid 5282] <... futex resumed>) = 0 [pid 5280] <... mmap resumed>) = 0x7ff63668b000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5278] <... close resumed>) = 0 [pid 5283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5282] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5280] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5078] unlink("./6/binderfs" [pid 5285] <... rseq resumed>) = 0 [pid 5284] <... ioctl resumed>) = 0 [pid 5283] <... openat resumed>) = 3 [pid 5282] <... mmap resumed>) = 0x7ff63eaac000 [pid 5281] <... clone3 resumed> => {parent_tid=[23]}, 88) = 23 [pid 5280] <... write resumed>) = 65536 [pid 5279] <... close resumed>) = 0 [pid 5278] close(6 [pid 5078] <... unlink resumed>) = 0 [pid 5285] set_robust_list(0x7ff63eaab9a0, 24 [pid 5284] close(3 [pid 5283] write(3, "1000", 4 [pid 5282] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5281] rt_sigprocmask(SIG_SETMASK, [], [pid 5285] <... set_robust_list resumed>) = 0 [pid 5284] <... close resumed>) = 0 [pid 5283] <... write resumed>) = 4 [pid 5280] munmap(0x7ff63668b000, 138412032 [pid 5279] mkdir(0x20000000, 0777 [pid 5278] <... close resumed>) = 0 [pid 5078] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5285] rt_sigprocmask(SIG_SETMASK, [], [pid 5284] mkdir("./file0", 0777 [pid 5283] close(3 [pid 5282] <... mprotect resumed>) = 0 [pid 5281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5280] <... munmap resumed>) = 0 [pid 5279] <... mkdir resumed>) = 0 [pid 5278] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5284] <... mkdir resumed>) = 0 [pid 5283] <... close resumed>) = 0 [pid 5281] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] mount("/dev/loop5", 0x20000000, 0x200005c0, MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"... [pid 5285] creat("./bus", 000 [pid 5284] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5283] read(200, [pid 5281] <... futex resumed>) = 0 [pid 5285] <... creat resumed>) = 3 [pid 5283] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5278] <... futex resumed>) = 0 [pid 5275] close(3 [pid 5280] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 63.251289][ T5280] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 63.256270][ T5284] loop0: detected capacity change from 0 to 512 [pid 5282] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5280] <... openat resumed>) = 3 [pid 5278] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] <... close resumed>) = 0 [pid 5283] symlink("/dev/binderfs", "./binderfs" [pid 5275] close(4) = -1 EBADF (Bad file descriptor) [pid 5280] ioctl(3, LOOP_SET_FD, 7 [pid 5275] close(5 [pid 5285] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... symlink resumed>) = 0 [pid 5281] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5280] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5275] <... close resumed>) = 0 [pid 5282] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5283] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff63eaac000 [pid 5283] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5283] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0}./strace-static-x86_64: Process 5287 attached [pid 5282] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5287] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5283] <... clone3 resumed> => {parent_tid=[22]}, 88) = 22 [pid 5287] <... rseq resumed>) = 0 [pid 5283] rt_sigprocmask(SIG_SETMASK, [], [pid 5287] set_robust_list(0x7ff63eacc9a0, 24 [pid 5283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5287] <... set_robust_list resumed>) = 0 [pid 5283] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] rt_sigprocmask(SIG_SETMASK, [], [pid 5283] <... futex resumed>) = 0 [pid 5287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5283] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] memfd_create("syzkaller", 0 [pid 5283] <... futex resumed>) = 0 [pid 5287] <... memfd_create resumed>) = 3 [pid 5283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5285] <... futex resumed>) = 0 [pid 5283] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5287] <... mmap resumed>) = 0x7ff63668b000 [pid 5285] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5283] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5281] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5288 attached [pid 5285] <... mount resumed>) = 0 [pid 5280] ioctl(3, LOOP_CLR_FD [pid 5275] close(6 [pid 5288] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5285] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... clone3 resumed> => {parent_tid=[22]}, 88) = 22 [pid 5281] <... futex resumed>) = 0 [pid 5280] <... ioctl resumed>) = 0 [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5288] <... rseq resumed>) = 0 [pid 5287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5283] <... mprotect resumed>) = 0 [pid 5282] rt_sigprocmask(SIG_SETMASK, [], [pid 5285] <... futex resumed>) = 0 [pid 5281] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] set_robust_list(0x7ff63eacc9a0, 24 [pid 5285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5282] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5281] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] close(7 [pid 5288] <... set_robust_list resumed>) = 0 [pid 5285] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5282] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5281] <... futex resumed>) = 0 [pid 5280] ioctl(3, LOOP_SET_FD, 7 [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5288] rt_sigprocmask(SIG_SETMASK, [], [pid 5285] <... open resumed>) = 5 [pid 5282] <... futex resumed>) = 0 [pid 5281] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5280] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5275] close(8 [pid 5288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5285] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5285] <... futex resumed>) = 0 [pid 5281] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 5281] <... futex resumed>) = 0 [pid 5287] <... write resumed>) = 262144 [pid 5285] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5281] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] munmap(0x7ff63668b000, 138412032 [pid 5285] <... futex resumed>) = 0 [pid 5283] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5287] <... munmap resumed>) = 0 [pid 5285] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5281] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5287] <... openat resumed>) = 4 [pid 5285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5281] <... futex resumed>) = 0 [ 63.314398][ T5078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. ./strace-static-x86_64: Process 5289 attached [pid 5287] ioctl(4, LOOP_SET_FD, 3 [pid 5285] memfd_create("syzkaller", 0 [pid 5289] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5288] memfd_create("syzkaller", 0 [pid 5282] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] close(3 [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... umount2 resumed>) = 0 [pid 5280] <... close resumed>) = 0 [pid 5275] close(9 [pid 5288] <... memfd_create resumed>) = 3 [pid 5282] <... futex resumed>) = 0 [pid 5280] close(7 [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] close(10 [pid 5288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5282] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5280] <... close resumed>) = 0 [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5287] <... ioctl resumed>) = 0 [pid 5289] <... rseq resumed>) = 0 [pid 5288] <... mmap resumed>) = 0x7ff6366ac000 [pid 5285] <... memfd_create resumed>) = 6 [pid 5284] <... mount resumed>) = -1 EBADMSG (Bad message) [pid 5283] <... clone3 resumed> => {parent_tid=[23]}, 88) = 23 [pid 5282] <... mmap resumed>) = 0x7ff63668b000 [pid 5280] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... mount resumed>) = -1 ENODEV (No such device) [pid 5275] close(11 [pid 5078] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5280] <... futex resumed>) = 0 [pid 5280] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./6/file0", [pid 5289] set_robust_list(0x7ff63eaab9a0, 24 [pid 5282] <... mprotect resumed>) = 0 [pid 5279] ioctl(5, LOOP_CLR_FD [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5289] <... set_robust_list resumed>) = 0 [pid 5282] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5279] <... ioctl resumed>) = 0 [pid 5275] close(12 [pid 5078] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5283] rt_sigprocmask(SIG_SETMASK, [], [pid 5282] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5279] close(5 [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5289] rt_sigprocmask(SIG_SETMASK, [], [pid 5288] <... write resumed>) = 262144 [pid 5287] close(3 [pid 5285] <... mmap resumed>) = 0x7ff63668b000 [pid 5284] ioctl(4, LOOP_CLR_FD [pid 5283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5279] <... close resumed>) = 0 [pid 5275] close(13 [pid 5078] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5288] munmap(0x7ff6366ac000, 138412032 [pid 5287] <... close resumed>) = 0 [pid 5285] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5284] <... ioctl resumed>) = 0 [pid 5283] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5279] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] close(3 [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... openat resumed>) = 4 [pid 5289] creat("./bus", 000 [pid 5287] mkdir("./file0", 0777 [pid 5285] <... write resumed>) = 65536 [pid 5284] close(4 [pid 5283] <... futex resumed>) = 0 [pid 5279] <... futex resumed>) = 0 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] newfstatat(4, "", ./strace-static-x86_64: Process 5290 attached [pid 5289] <... creat resumed>) = 3 [pid 5287] <... mkdir resumed>) = 0 [pid 5284] <... close resumed>) = 0 [pid 5283] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5279] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] close(4 [pid 5275] close(14 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 63.370182][ T5287] loop1: detected capacity change from 0 to 512 [ 63.377110][ T5284] EXT4-fs warning (device loop0): read_mmp_block:114: Error -74 while reading MMP block 12 [pid 5290] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5289] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... munmap resumed>) = 0 [pid 5287] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5285] munmap(0x7ff63668b000, 138412032 [pid 5284] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5282] <... clone3 resumed> => {parent_tid=[23]}, 88) = 23 [pid 5277] <... close resumed>) = 0 [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] getdents64(4, [pid 5290] <... rseq resumed>) = 0 [pid 5289] <... futex resumed>) = 0 [pid 5288] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5284] <... futex resumed>) = 0 [pid 5277] close(5 [pid 5289] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5284] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] close(15 [pid 5078] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5290] set_robust_list(0x7ff6366ab9a0, 24 [pid 5289] <... mount resumed>) = 0 [pid 5288] <... openat resumed>) = 4 [pid 5282] rt_sigprocmask(SIG_SETMASK, [], [pid 5277] close(6 [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] getdents64(4, [pid 5290] <... set_robust_list resumed>) = 0 [pid 5289] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] ioctl(4, LOOP_SET_FD, 3 [pid 5285] <... munmap resumed>) = 0 [pid 5283] <... futex resumed>) = 0 [pid 5282] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5277] <... close resumed>) = 0 [pid 5275] close(16 [pid 5078] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5290] rt_sigprocmask(SIG_SETMASK, [], [pid 5289] <... futex resumed>) = 0 [pid 5283] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5283] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... futex resumed>) = 0 [pid 5283] <... futex resumed>) = 1 [pid 5289] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5283] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] <... open resumed>) = 5 [pid 5289] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5283] <... futex resumed>) = 0 [pid 5289] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5289] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5283] <... futex resumed>) = 0 [pid 5277] close(7 [pid 5290] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5289] <... mmap resumed>) = 0x20000000 [pid 5288] <... ioctl resumed>) = 0 [pid 5285] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5282] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] close(4 [pid 5290] creat("./bus", 000 [pid 5289] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] close(3 [pid 5285] <... openat resumed>) = 4 [pid 5283] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] <... futex resumed>) = 0 [pid 5277] close(8 [pid 5275] close(17 [pid 5078] <... close resumed>) = 0 [pid 5290] <... creat resumed>) = 5 [pid 5289] <... futex resumed>) = 0 [pid 5288] <... close resumed>) = 0 [pid 5283] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5282] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] rmdir("./6/file0" [pid 5290] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] mkdir("./file0", 0777 [pid 5283] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5277] close(9 [pid 5275] close(18 [pid 5078] <... rmdir resumed>) = 0 [pid 5290] <... futex resumed>) = 0 [pid 5289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] <... mkdir resumed>) = 0 [pid 5282] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5285] ioctl(4, LOOP_SET_FD, 6 [pid 5078] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5290] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5289] memfd_create("syzkaller", 0 [pid 5288] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5283] <... futex resumed>) = 0 [pid 5282] <... futex resumed>) = 0 [pid 5277] close(10 [pid 5275] close(19 [pid 5285] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5285] ioctl(4, LOOP_CLR_FD [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] newfstatat(AT_FDCWD, "./6/cgroup", [pid 5282] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] close(11 [pid 5275] close(20 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5277] close(12 [pid 5275] close(21 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5277] close(13 [pid 5290] <... mount resumed>) = 0 [pid 5275] close(22 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5290] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... memfd_create resumed>) = 6 [pid 5285] <... ioctl resumed>) = 0 [pid 5277] close(14 [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] unlink("./6/cgroup" [pid 5290] <... futex resumed>) = 1 [pid 5282] <... futex resumed>) = 0 [ 63.443808][ T5288] loop3: detected capacity change from 0 to 512 [ 63.458833][ T5291] EXT4-fs warning (device loop1): kmmpd:167: kmmpd being stopped since MMP feature has been disabled. [ 63.481053][ T5287] EXT4-fs (loop1): revision level too high, forcing read-only mode [pid 5289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5290] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5282] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] close(23 [pid 5078] <... unlink resumed>) = 0 [pid 5290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5289] <... mmap resumed>) = 0x7ff63668b000 [pid 5277] close(15 [pid 5290] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5289] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5282] <... futex resumed>) = 0 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5290] <... open resumed>) = 3 [pid 5289] <... write resumed>) = 65536 [pid 5285] ioctl(4, LOOP_SET_FD, 6 [pid 5275] close(24 [pid 5277] close(16 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5285] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5282] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] close(4 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 5285] <... close resumed>) = 0 [pid 5277] close(17 [pid 5275] close(25) = -1 EBADF (Bad file descriptor) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5285] close(6 [pid 5275] close(26 [pid 5277] close(18 [pid 5290] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] munmap(0x7ff63668b000, 138412032 [pid 5285] <... close resumed>) = 0 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] unlink("./6/cgroup.net" [pid 5290] <... futex resumed>) = 1 [pid 5289] <... munmap resumed>) = 0 [pid 5287] <... mount resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5285] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... futex resumed>) = 0 [pid 5277] close(19 [pid 5275] close(27 [pid 5078] <... unlink resumed>) = 0 [pid 5290] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5287] ioctl(4, LOOP_CLR_FD [pid 5285] <... futex resumed>) = 0 [pid 5281] close(3 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] getdents64(3, [pid 5289] <... openat resumed>) = 7 [pid 5287] <... ioctl resumed>) = 0 [pid 5285] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5281] <... close resumed>) = 0 [pid 5277] close(20 [pid 5275] close(28 [pid 5078] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5289] ioctl(7, LOOP_SET_FD, 6 [pid 5287] close(4 [pid 5282] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] close(3 [pid 5290] <... futex resumed>) = 0 [pid 5289] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5287] <... close resumed>) = 0 [pid 5282] <... futex resumed>) = 1 [pid 5281] close(4 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... close resumed>) = 0 [pid 5078] rmdir("./6" [pid 5290] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5289] ioctl(7, LOOP_CLR_FD [pid 5288] <... mount resumed>) = 0 [pid 5287] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5277] close(21 [pid 5275] close(29 [pid 5078] <... rmdir resumed>) = 0 [pid 5078] mkdir("./7", 0777 [pid 5281] close(5) = 0 [pid 5275] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] close(6 [pid 5277] close(22 [pid 5275] exit_group(0 [pid 5078] <... mkdir resumed>) = 0 [pid 5289] <... ioctl resumed>) = 0 [pid 5287] <... futex resumed>) = 0 [pid 5288] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5287] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5275] <... exit_group resumed>) = ? [pid 5290] <... mmap resumed>) = 0x20000000 [pid 5281] close(7 [pid 5278] <... futex resumed>) = ? [pid 5277] close(23 [pid 5276] <... futex resumed>) = ? [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5290] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5278] +++ exited with 0 +++ [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... openat resumed>) = 3 [pid 5289] ioctl(7, LOOP_SET_FD, 6 [pid 5281] close(8 [pid 5277] close(24 [pid 5276] +++ exited with 0 +++ [pid 5275] +++ exited with 0 +++ [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5290] <... futex resumed>) = 1 [pid 5289] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5288] ioctl(4, LOOP_CLR_FD [pid 5282] <... futex resumed>) = 0 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 63.489182][ T5287] EXT4-fs (loop1): failed to initialize system zone (-117) [ 63.497347][ T5287] EXT4-fs (loop1): mount failed [ 63.518017][ T5288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.531832][ T5288] ext4 filesystem being mounted at /root/syzkaller.hT4DtY/6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5290] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] close(7 [pid 5288] <... ioctl resumed>) = 0 [pid 5282] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5281] close(9 [pid 5277] close(25 [pid 5078] close(3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5289] <... close resumed>) = 0 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5289] close(6 [pid 5281] close(10 [pid 5074] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5289] <... close resumed>) = 0 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5277] close(26 [pid 5289] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5281] close(11 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5289] <... futex resumed>) = 0 [pid 5283] close(3 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5277] close(27 [pid 5074] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5289] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] <... close resumed>) = 0 [pid 5281] close(12 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... openat resumed>) = 3 [pid 5283] close(4 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5277] close(28 [pid 5074] newfstatat(3, "", [pid 5290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] close(4 [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5282] <... futex resumed>) = 0 [pid 5281] close(13 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5290] memfd_create("syzkaller", 0 [pid 5288] <... close resumed>) = 0 [pid 5283] close(5 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5277] close(29 [pid 5078] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5290] <... memfd_create resumed>) = 4 [pid 5288] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... close resumed>) = 0 [pid 5281] close(14 [pid 5277] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5288] <... futex resumed>) = 0 [pid 5283] close(6 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5277] exit_group(0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./5/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5290] <... mmap resumed>) = 0x7ff6366ac000 [pid 5288] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] close(15 [pid 5280] <... futex resumed>) = ? [pid 5279] <... futex resumed>) = ? [pid 5277] <... exit_group resumed>) = ? [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5295 attached [pid 5290] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5283] close(7 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5280] +++ exited with 0 +++ [pid 5279] +++ exited with 0 +++ [pid 5277] +++ exited with 0 +++ [pid 5074] newfstatat(AT_FDCWD, "./5/cgroup.cpu", [pid 5295] set_robust_list(0x5555560316a0, 24 [pid 5290] <... write resumed>) = 65536 [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] close(16 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5295] <... set_robust_list resumed>) = 0 [pid 5290] munmap(0x7ff6366ac000, 138412032 [pid 5283] close(8 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... clone resumed>, child_tidptr=0x555556031690) = 24 [pid 5074] unlink("./5/cgroup.cpu" [pid 5295] chdir("./7" [pid 5290] <... munmap resumed>) = 0 [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] close(17 [pid 5074] <... unlink resumed>) = 0 [pid 5295] <... chdir resumed>) = 0 [pid 5290] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5283] close(9 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5295] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5290] <... openat resumed>) = 6 [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] close(18 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5283] close(10 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] close(19 [pid 5079] <... openat resumed>) = 3 [pid 5283] close(11 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(3, "", [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] close(20 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5283] close(12 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] close(21 [pid 5079] getdents64(3, [pid 5283] close(13 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 224 [pid 5283] close(14 [pid 5281] close(22 [pid 5079] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5295] <... prctl resumed>) = 0 [pid 5290] ioctl(6, LOOP_SET_FD, 4 [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5295] setpgid(0, 0) = 0 [pid 5295] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 5290] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5283] close(15 [pid 5281] close(23 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = 0 [pid 5290] ioctl(6, LOOP_CLR_FD [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 5283] close(16 [pid 5281] close(24 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5283] close(17 [pid 5074] newfstatat(AT_FDCWD, "./5/bus", [pid 5290] <... ioctl resumed>) = 0 [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] close(25 [pid 5079] unlink("./6/cgroup.cpu" [pid 5283] close(18 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5295] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] close(26 [pid 5079] <... unlink resumed>) = 0 [pid 5074] unlink("./5/bus" [pid 5295] <... symlink resumed>) = 0 [pid 5283] close(19 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5295] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] close(27 [pid 5295] <... symlink resumed>) = 0 [pid 5290] ioctl(6, LOOP_SET_FD, 4 [pid 5283] close(20 [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5295] write(3, "1000", 4 [pid 5290] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5283] close(21 [pid 5281] close(28 [pid 5079] <... umount2 resumed>) = 0 [pid 5074] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5295] <... write resumed>) = 4 [pid 5290] close(6 [pid 5295] close(3 [pid 5290] <... close resumed>) = 0 [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5295] <... close resumed>) = 0 [pid 5290] close(4 [pid 5283] close(22 [pid 5281] close(29 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5295] read(200, [pid 5290] <... close resumed>) = 0 [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(AT_FDCWD, "./6/bus", [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5295] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] close(23 [pid 5281] exit_group(0 [pid 5079] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./5/binderfs" [pid 5295] symlink("/dev/binderfs", "./binderfs" [pid 5290] <... futex resumed>) = 0 [pid 5285] <... futex resumed>) = ? [pid 5284] <... futex resumed>) = ? [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5281] <... exit_group resumed>) = ? [pid 5079] unlink("./6/bus" [pid 5074] <... unlink resumed>) = 0 [pid 5295] <... symlink resumed>) = 0 [pid 5290] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5285] +++ exited with 0 +++ [pid 5284] +++ exited with 0 +++ [pid 5283] close(24 [pid 5282] close(3 [pid 5281] +++ exited with 0 +++ [pid 5079] <... unlink resumed>) = 0 [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5283] close(25) = -1 EBADF (Bad file descriptor) [pid 5295] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] close(26 [pid 5282] <... close resumed>) = 0 [pid 5079] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5295] <... futex resumed>) = 0 [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5283] close(27 [pid 5282] close(4 [pid 5079] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5074] newfstatat(AT_FDCWD, "./5/file0", [pid 5295] <... mmap resumed>) = 0x7ff63eaac000 [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5295] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5283] close(28 [pid 5282] close(5 [pid 5079] unlink("./6/binderfs" [pid 5074] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5295] <... mprotect resumed>) = 0 [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5282] <... close resumed>) = 0 [pid 5079] <... unlink resumed>) = 0 [pid 5075] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5295] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5283] close(29 [pid 5282] close(6 [pid 5079] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5295] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5283] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5283] exit_group(0 [pid 5079] newfstatat(AT_FDCWD, "./6/cgroup", [pid 5074] <... openat resumed>) = 4 [pid 5295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5289] <... futex resumed>) = ? [pid 5287] <... futex resumed>) = ? [pid 5283] <... exit_group resumed>) = ? [pid 5282] close(7 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] newfstatat(4, "", ./strace-static-x86_64: Process 5296 attached [pid 5289] +++ exited with 0 +++ [pid 5287] +++ exited with 0 +++ [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] unlink("./6/cgroup" [pid 5296] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5295] <... clone3 resumed> => {parent_tid=[25]}, 88) = 25 [pid 5283] +++ exited with 0 +++ [pid 5282] close(8 [pid 5075] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5296] <... rseq resumed>) = 0 [pid 5295] rt_sigprocmask(SIG_SETMASK, [], [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... unlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5296] set_robust_list(0x7ff63eacc9a0, 24 [pid 5295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5282] close(9 [pid 5079] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5074] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5296] <... set_robust_list resumed>) = 0 [pid 5295] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5282] close(10) = -1 EBADF (Bad file descriptor) [pid 5282] close(11 [pid 5296] rt_sigprocmask(SIG_SETMASK, [], [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5296] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5295] <... futex resumed>) = 0 [pid 5282] close(12 [pid 5295] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5295] <... futex resumed>) = 0 [pid 5295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5282] close(13) = -1 EBADF (Bad file descriptor) [pid 5282] close(14 [pid 5075] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5074] getdents64(4, [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5282] close(15 [pid 5075] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5296] memfd_create("syzkaller", 0 [pid 5295] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5296] <... memfd_create resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 5074] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5295] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5282] close(16 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] rmdir("./5/file0" [pid 5073] <... openat resumed>) = 3 [pid 5296] <... mmap resumed>) = 0x7ff63668b000 [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 5075] unlink("./6/cgroup.cpu" [pid 5074] <... rmdir resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 5296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5295] <... mprotect resumed>) = 0 [pid 5282] close(17 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] umount2("./5/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5295] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] getdents64(3, [pid 5295] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5282] close(18) = -1 EBADF (Bad file descriptor) [pid 5295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5282] close(19 [pid 5079] unlink("./6/cgroup.net" [pid 5075] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./5/cgroup", [pid 5073] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5297 attached [pid 5296] <... write resumed>) = 262144 [pid 5295] <... clone3 resumed> => {parent_tid=[26]}, 88) = 26 [pid 5282] close(20 [pid 5079] umount2("./6/ext4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5297] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5296] munmap(0x7ff63668b000, 138412032 [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./5/cgroup" [pid 5073] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 5297] <... rseq resumed>) = 0 [pid 5296] <... munmap resumed>) = 0 [pid 5295] rt_sigprocmask(SIG_SETMASK, [], [pid 5282] close(21 [pid 5079] newfstatat(AT_FDCWD, "./6/ext4", [pid 5075] newfstatat(AT_FDCWD, "./6/bus", [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5297] set_robust_list(0x7ff63eaab9a0, 24 [pid 5296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5297] <... set_robust_list resumed>) = 0 [pid 5296] <... openat resumed>) = 4 [pid 5295] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] close(22 [pid 5079] umount2("./6/ext4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./6/bus" [pid 5074] umount2("./5/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] unlink("./6/cgroup.cpu" [pid 5297] rt_sigprocmask(SIG_SETMASK, [], [pid 5296] ioctl(4, LOOP_SET_FD, 3 [pid 5295] <... futex resumed>) = 0 [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... unlink resumed>) = 0 [pid 5297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5295] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] close(23 [pid 5079] openat(AT_FDCWD, "./6/ext4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5282] close(24) = -1 EBADF (Bad file descriptor) [pid 5282] close(25) = -1 EBADF (Bad file descriptor) [pid 5075] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] close(26) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5282] close(27 [pid 5075] unlink("./6/binderfs" [pid 5074] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5079] <... openat resumed>) = 4 [pid 5074] unlink("./5/cgroup.net" [pid 5079] newfstatat(4, "", [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5282] close(28 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./6/file0", [pid 5074] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(AT_FDCWD, "./6/bus", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] getdents64(4, [pid 5075] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5073] unlink("./6/bus" [pid 5079] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./5" [pid 5073] <... unlink resumed>) = 0 [pid 5079] getdents64(4, [pid 5075] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... rmdir resumed>) = 0 [pid 5073] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] mkdir("./6", 0777 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5282] close(29 [pid 5079] close(4 [pid 5075] newfstatat(4, "", [pid 5074] <... mkdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5282] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5282] exit_group(0 [pid 5079] <... close resumed>) = 0 [pid 5073] unlink("./6/binderfs" [pid 5297] creat("./bus", 000 [pid 5296] <... ioctl resumed>) = 0 [pid 5290] <... futex resumed>) = ? [pid 5288] <... futex resumed>) = ? [pid 5282] <... exit_group resumed>) = ? [pid 5079] rmdir("./6/ext4" [pid 5075] getdents64(4, [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5073] <... unlink resumed>) = 0 [pid 5297] <... creat resumed>) = 5 [pid 5296] close(3 [pid 5290] +++ exited with 0 +++ [pid 5288] +++ exited with 0 +++ [pid 5079] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5074] <... openat resumed>) = 3 [pid 5073] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5297] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5296] <... close resumed>) = 0 [pid 5079] getdents64(3, [pid 5075] getdents64(4, [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5297] <... futex resumed>) = 1 [pid 5296] mkdir("./file0", 0777 [pid 5295] <... futex resumed>) = 0 [pid 5079] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5073] newfstatat(AT_FDCWD, "./6/file0", [pid 5297] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5296] <... mkdir resumed>) = 0 [pid 5295] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] +++ exited with 0 +++ [pid 5079] close(3 [pid 5075] close(4 [pid 5074] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5296] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5295] <... futex resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5297] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5295] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] rmdir("./6" [pid 5075] rmdir("./6/file0" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5297] <... mount resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5298 attached [pid 5298] set_robust_list(0x5555560316a0, 24 [pid 5077] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 5298] <... set_robust_list resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] mkdir("./7", 0777 [pid 5077] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5298] chdir("./6" [pid 5075] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 5298] <... chdir resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5298] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... mkdir resumed>) = 0 [pid 5077] newfstatat(3, "", [pid 5075] newfstatat(AT_FDCWD, "./6/cgroup", [pid 5298] <... prctl resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(4, [pid 5298] setpgid(0, 0 [pid 5297] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... openat resumed>) = 3 [pid 5077] getdents64(3, [pid 5075] unlink("./6/cgroup" [pid 5298] <... setpgid resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556031690) = 24 [pid 5075] <... unlink resumed>) = 0 [pid 5298] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5075] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5298] <... symlink resumed>) = 0 [pid 5298] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5075] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 5297] <... futex resumed>) = 1 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5298] <... symlink resumed>) = 0 [pid 5295] <... futex resumed>) = 0 [pid 5298] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5295] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5295] <... futex resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [ 63.748362][ T5296] loop4: detected capacity change from 0 to 512 [pid 5295] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5297] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5079] close(3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./6/cgroup.net" [pid 5298] <... symlink resumed>) = 0 [pid 5073] getdents64(4, [pid 5297] <... open resumed>) = 3 [pid 5079] <... close resumed>) = 0 [pid 5077] unlink("./6/cgroup.cpu" [pid 5075] <... unlink resumed>) = 0 [pid 5297] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5301 attached [pid 5298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5297] <... futex resumed>) = 1 [pid 5295] <... futex resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5075] getdents64(3, [pid 5301] set_robust_list(0x5555560316a0, 24 [pid 5297] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] close(4 [pid 5301] <... set_robust_list resumed>) = 0 [pid 5298] <... openat resumed>) = 3 [pid 5297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5295] <... futex resumed>) = 0 [pid 5075] close(3 [pid 5073] rmdir("./6/file0" [pid 5297] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5295] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5301] chdir("./7" [pid 5298] write(3, "1000", 4 [pid 5297] <... mmap resumed>) = 0x20000000 [pid 5079] <... clone resumed>, child_tidptr=0x555556031690) = 24 [pid 5077] <... umount2 resumed>) = 0 [pid 5301] <... chdir resumed>) = 0 [pid 5298] <... write resumed>) = 4 [pid 5075] rmdir("./6" [pid 5073] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5298] close(3 [pid 5077] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5301] <... prctl resumed>) = 0 [pid 5298] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5301] setpgid(0, 0 [pid 5298] read(200, [pid 5077] newfstatat(AT_FDCWD, "./6/bus", [pid 5301] <... setpgid resumed>) = 0 [pid 5298] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5301] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5298] symlink("/dev/binderfs", "./binderfs" [pid 5077] unlink("./6/bus" [pid 5075] <... rmdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./6/cgroup", [pid 5301] <... symlink resumed>) = 0 [pid 5298] <... symlink resumed>) = 0 [pid 5297] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5296] <... mount resumed>) = 0 [pid 5295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... unlink resumed>) = 0 [pid 5075] mkdir("./7", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5301] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5298] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5301] <... symlink resumed>) = 0 [pid 5298] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... mkdir resumed>) = 0 [pid 5073] unlink("./6/cgroup" [pid 5301] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5301] <... symlink resumed>) = 0 [pid 5298] <... mmap resumed>) = 0x7ff63eaac000 [pid 5297] <... futex resumed>) = 0 [pid 5296] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5295] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5298] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5077] unlink("./6/binderfs" [pid 5075] <... openat resumed>) = 3 [pid 5301] <... openat resumed>) = 3 [pid 5298] <... mprotect resumed>) = 0 [pid 5297] memfd_create("syzkaller", 0 [pid 5296] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5295] <... futex resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5073] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5301] write(3, "1000", 4 [pid 5298] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5077] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5301] <... write resumed>) = 4 [pid 5298] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5301] close(3 [pid 5297] <... memfd_create resumed>) = 6 [pid 5296] ioctl(4, LOOP_CLR_FD [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5073] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 5297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5296] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5301] <... close resumed>) = 0 [pid 5298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5297] <... mmap resumed>) = 0x7ff63668b000 [pid 5296] close(4 [pid 5075] <... close resumed>) = 0 [pid 5073] unlink("./6/cgroup.net" [pid 5296] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5302 attached [pid 5301] read(200, [pid 5073] <... unlink resumed>) = 0 [pid 5302] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5301] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5298] <... clone3 resumed> => {parent_tid=[25]}, 88) = 25 [pid 5302] <... rseq resumed>) = 0 [pid 5301] symlink("/dev/binderfs", "./binderfs" [pid 5298] rt_sigprocmask(SIG_SETMASK, [], [pid 5302] set_robust_list(0x7ff63eacc9a0, 24 [pid 5301] <... symlink resumed>) = 0 [pid 5298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5296] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] getdents64(3, [pid 5302] <... set_robust_list resumed>) = 0 [pid 5301] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5296] <... futex resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5296] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... clone resumed>, child_tidptr=0x555556031690) = 24 [pid 5073] close(3 [pid 5302] rt_sigprocmask(SIG_SETMASK, [], [pid 5301] <... futex resumed>) = 0 [pid 5298] <... futex resumed>) = 0 [pid 5297] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./6" [pid 5302] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5298] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] memfd_create("syzkaller", 0 [pid 5301] <... mmap resumed>) = 0x7ff63eaac000 [pid 5298] <... futex resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5302] <... memfd_create resumed>) = 3 [pid 5301] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5301] <... mprotect resumed>) = 0 [pid 5298] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5302] <... mmap resumed>) = 0x7ff63668b000 [pid 5301] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5298] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5297] <... write resumed>) = 65536 [pid 5073] mkdir("./7", 0777 [pid 5302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5301] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5298] <... mprotect resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5302] <... write resumed>) = 262144 [pid 5301] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5298] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5297] munmap(0x7ff63668b000, 138412032 [pid 5073] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5304 attached [pid 5302] munmap(0x7ff63668b000, 138412032 [pid 5298] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5297] <... munmap resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5304] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5302] <... munmap resumed>) = 0 [pid 5301] <... clone3 resumed> => {parent_tid=[25]}, 88) = 25 [pid 5298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5297] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5073] close(3./strace-static-x86_64: Process 5305 attached [pid 5304] <... rseq resumed>) = 0 [pid 5302] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5301] rt_sigprocmask(SIG_SETMASK, [], [pid 5297] <... openat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5305] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5304] set_robust_list(0x7ff63eacc9a0, 24 [pid 5302] <... openat resumed>) = 4 [pid 5301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5305] <... rseq resumed>) = 0 [pid 5304] <... set_robust_list resumed>) = 0 [ 63.815478][ T5296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.831081][ T5296] ext4 filesystem being mounted at /root/syzkaller.RfCMU1/7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.856062][ T5077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5302] ioctl(4, LOOP_SET_FD, 3 [pid 5301] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... clone3 resumed> => {parent_tid=[26]}, 88) = 26 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5305] set_robust_list(0x7ff63eaab9a0, 24 [pid 5304] rt_sigprocmask(SIG_SETMASK, [], [pid 5297] ioctl(4, LOOP_SET_FD, 6 [pid 5301] <... futex resumed>) = 0 [pid 5304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5301] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] memfd_create("syzkaller", 0 [pid 5301] <... futex resumed>) = 0 [pid 5297] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5297] ioctl(4, LOOP_CLR_FD [pid 5073] <... clone resumed>, child_tidptr=0x555556031690) = 24 [pid 5297] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5303 attached [pid 5304] <... memfd_create resumed>) = 3 [pid 5301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5303] set_robust_list(0x5555560316a0, 24 [pid 5301] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5304] <... mmap resumed>) = 0x7ff63668b000 [pid 5303] <... set_robust_list resumed>) = 0 [pid 5304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5303] chdir("./7" [pid 5301] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5297] ioctl(4, LOOP_SET_FD, 6 [pid 5303] <... chdir resumed>) = 0 [pid 5303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5297] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5306 attached [pid 5305] <... set_robust_list resumed>) = 0 [pid 5303] <... prctl resumed>) = 0 [pid 5302] <... ioctl resumed>) = 0 [pid 5301] <... mprotect resumed>) = 0 [pid 5298] rt_sigprocmask(SIG_SETMASK, [], [pid 5297] close(4 [pid 5306] set_robust_list(0x5555560316a0, 24 [pid 5305] rt_sigprocmask(SIG_SETMASK, [], [pid 5303] setpgid(0, 0 [pid 5302] close(3 [pid 5301] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5297] <... close resumed>) = 0 [pid 5306] <... set_robust_list resumed>) = 0 [pid 5305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5302] <... close resumed>) = 0 [pid 5301] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5298] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] close(6 [pid 5306] chdir("./7" [pid 5305] creat("./bus", 000 [pid 5303] <... setpgid resumed>) = 0 [pid 5301] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5297] <... close resumed>) = 0 [pid 5306] <... chdir resumed>) = 0 [pid 5305] <... creat resumed>) = 3 [pid 5302] mkdir("./file0", 0777 [pid 5298] <... futex resumed>) = 0 [pid 5297] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] close(3 [pid 5306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5297] <... futex resumed>) = 0 [pid 5295] <... close resumed>) = 0 [pid 5303] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5306] <... prctl resumed>) = 0 [pid 5297] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] close(4 [pid 5306] setpgid(0, 0 [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] <... setpgid resumed>) = 0 [pid 5303] <... symlink resumed>) = 0 [pid 5295] close(5 [pid 5306] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5303] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5295] <... close resumed>) = 0 [pid 5295] close(6 [pid 5306] <... symlink resumed>) = 0 [pid 5303] <... symlink resumed>) = 0 [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5303] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5295] close(7 [pid 5306] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] <... symlink resumed>) = 0 [pid 5303] <... symlink resumed>) = 0 [pid 5295] close(8 [pid 5306] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] <... symlink resumed>) = 0 [pid 5303] <... openat resumed>) = 3 [pid 5295] close(9 [pid 5303] write(3, "1000", 4 [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5303] <... write resumed>) = 4 [pid 5295] close(10 [pid 5306] <... openat resumed>) = 3 [pid 5303] close(3 [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5303] <... close resumed>) = 0 [pid 5295] close(11 [pid 5306] write(3, "1000", 4 [pid 5303] read(200, [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] <... write resumed>) = 4 [pid 5303] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5295] close(12 [pid 5306] close(3 [pid 5303] symlink("/dev/binderfs", "./binderfs" [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] <... close resumed>) = 0 [pid 5295] close(13 [pid 5306] read(200, [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5303] <... symlink resumed>) = 0 [pid 5306] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5295] close(14 [pid 5306] symlink("/dev/binderfs", "./binderfs" [pid 5303] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] <... symlink resumed>) = 0 [pid 5295] close(15) = -1 EBADF (Bad file descriptor) [pid 5295] close(16 [pid 5306] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] <... futex resumed>) = 0 [pid 5295] close(17 [pid 5306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] <... mmap resumed>) = 0x7ff63eaac000 [pid 5295] close(18 [pid 5306] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] <... mprotect resumed>) = 0 [pid 5303] <... futex resumed>) = 0 [pid 5295] close(19./strace-static-x86_64: Process 5307 attached [pid 5306] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5304] <... write resumed>) = 262144 [pid 5301] <... clone3 resumed> => {parent_tid=[26]}, 88) = 26 [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5295] close(20 [pid 5306] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5295] close(21) = -1 EBADF (Bad file descriptor) [pid 5295] close(22) = -1 EBADF (Bad file descriptor) [pid 5295] close(23 [pid 5306] <... clone3 resumed> => {parent_tid=[25]}, 88) = 25 [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] rt_sigprocmask(SIG_SETMASK, [], [pid 5295] close(24 [pid 5306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5307] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5306] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] munmap(0x7ff63668b000, 138412032 [pid 5301] rt_sigprocmask(SIG_SETMASK, [], [pid 5298] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] close(25 [pid 5306] <... futex resumed>) = 0 [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5305] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5295] close(26 [pid 5306] <... futex resumed>) = 0 [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5307] <... rseq resumed>) = 0 [pid 5306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5305] <... futex resumed>) = 0 [pid 5302] <... mkdir resumed>) = 0 [pid 5301] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5295] close(27 [pid 5307] set_robust_list(0x7ff63eaab9a0, 24 [pid 5306] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5304] <... munmap resumed>) = 0 [pid 5303] <... mmap resumed>) = 0x7ff63eaac000 [pid 5301] <... futex resumed>) = 0 [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5295] close(28 [pid 5306] <... mprotect resumed>) = 0 [pid 5295] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5295] close(29) = -1 EBADF (Bad file descriptor) [pid 5306] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5295] exit_group(0) = ? [ 63.888985][ T5302] loop2: detected capacity change from 0 to 512 ./strace-static-x86_64: Process 5308 attached [pid 5307] <... set_robust_list resumed>) = 0 [pid 5306] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5305] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5304] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5303] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5302] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5301] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5298] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] <... futex resumed>) = ? [pid 5296] <... futex resumed>) = ? [pid 5077] <... umount2 resumed>) = 0 [pid 5308] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5307] rt_sigprocmask(SIG_SETMASK, [], [pid 5306] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5304] <... openat resumed>) = 4 [pid 5303] <... mprotect resumed>) = 0 [pid 5297] +++ exited with 0 +++ [pid 5308] <... rseq resumed>) = 0 [pid 5307] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5305] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5304] ioctl(4, LOOP_SET_FD, 3 [pid 5298] <... futex resumed>) = 0 [pid 5308] set_robust_list(0x7ff63eacc9a0, 24 [pid 5307] creat("./bus", 000 [pid 5306] <... clone3 resumed> => {parent_tid=[26]}, 88) = 26 [pid 5305] <... mount resumed>) = 0 [pid 5304] <... ioctl resumed>) = 0 [pid 5303] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5077] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5298] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5303] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5077] newfstatat(AT_FDCWD, "./6/file0", [pid 5308] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5310 attached [pid 5306] rt_sigprocmask(SIG_SETMASK, [], [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5310] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5303] <... clone3 resumed> => {parent_tid=[25]}, 88) = 25 [pid 5310] <... rseq resumed>) = 0 [pid 5303] rt_sigprocmask(SIG_SETMASK, [], [pid 5310] set_robust_list(0x7ff63eacc9a0, 24) = 0 [pid 5303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5308] rt_sigprocmask(SIG_SETMASK, [], [pid 5303] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] rt_sigprocmask(SIG_SETMASK, [], [pid 5303] <... futex resumed>) = 0 [pid 5310] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5303] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5303] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5309 attached [pid 5310] memfd_create("syzkaller", 0 [pid 5307] <... creat resumed>) = 5 [pid 5306] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5305] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] close(3 [pid 5296] +++ exited with 0 +++ [pid 5295] +++ exited with 0 +++ [pid 5077] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5309] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5308] memfd_create("syzkaller", 0 [pid 5307] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5306] <... futex resumed>) = 0 [pid 5305] <... futex resumed>) = 1 [pid 5304] <... close resumed>) = 0 [pid 5309] <... rseq resumed>) = 0 [pid 5308] <... memfd_create resumed>) = 3 [pid 5307] <... futex resumed>) = 1 [pid 5306] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5305] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5304] mkdir("./file0", 0777 [pid 5301] <... futex resumed>) = 0 [pid 5309] set_robust_list(0x7ff63eaab9a0, 24 [pid 5308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5307] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5304] <... mkdir resumed>) = 0 [pid 5309] <... set_robust_list resumed>) = 0 [pid 5308] <... mmap resumed>) = 0x7ff63668b000 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5078] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5309] rt_sigprocmask(SIG_SETMASK, [], [pid 5308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5304] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5301] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5307] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5078] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", [pid 5310] <... memfd_create resumed>) = 3 [pid 5309] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5308] <... write resumed>) = 262144 [pid 5307] <... mount resumed>) = 0 [pid 5303] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5302] <... mount resumed>) = 0 [pid 5301] <... futex resumed>) = 0 [pid 5298] <... futex resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5309] creat("./bus", 000 [pid 5303] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5077] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5310] <... mmap resumed>) = 0x7ff63668b000 [pid 5309] <... creat resumed>) = 4 [pid 5308] munmap(0x7ff63668b000, 138412032 [pid 5307] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5303] <... mprotect resumed>) = 0 [pid 5301] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] getdents64(3, [pid 5077] <... openat resumed>) = 4 [pid 5307] <... futex resumed>) = 0 [pid 5301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5307] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5301] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5309] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] <... munmap resumed>) = 0 [pid 5307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5303] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5301] <... futex resumed>) = 0 [pid 5077] newfstatat(4, "", [pid 5078] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5298] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] <... write resumed>) = 262144 [pid 5309] <... futex resumed>) = 1 [pid 5308] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5307] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5306] <... futex resumed>) = 0 [pid 5303] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5302] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5301] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 63.962717][ T5304] loop5: detected capacity change from 0 to 512 [ 63.978351][ T5302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.995945][ T5302] ext4 filesystem being mounted at /root/syzkaller.yTuF4i/6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5310] munmap(0x7ff63668b000, 138412032 [pid 5309] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5308] <... openat resumed>) = 5 [pid 5306] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5305] <... futex resumed>) = 0 [pid 5303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5302] <... openat resumed>) = 5 [pid 5298] <... futex resumed>) = 1 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 5310] <... munmap resumed>) = 0 [pid 5305] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5302] chdir("./file0" [pid 5298] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5315 attached [pid 5310] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5305] <... open resumed>) = 6 [pid 5303] <... clone3 resumed> => {parent_tid=[26]}, 88) = 26 [pid 5302] <... chdir resumed>) = 0 [pid 5077] getdents64(4, [pid 5315] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5310] <... openat resumed>) = 4 [pid 5305] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5303] rt_sigprocmask(SIG_SETMASK, [], [pid 5302] ioctl(4, LOOP_CLR_FD [pid 5077] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5315] <... rseq resumed>) = 0 [pid 5310] ioctl(4, LOOP_SET_FD, 3 [pid 5305] <... futex resumed>) = 1 [pid 5303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5302] <... ioctl resumed>) = 0 [pid 5298] <... futex resumed>) = 0 [pid 5077] close(4 [pid 5315] set_robust_list(0x7ff63eaab9a0, 24 [pid 5309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5308] ioctl(5, LOOP_SET_FD, 3 [pid 5307] <... open resumed>) = 3 [pid 5306] <... futex resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 5305] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5302] close(4 [pid 5298] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... close resumed>) = 0 [pid 5305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5302] <... close resumed>) = 0 [pid 5298] <... futex resumed>) = 0 [pid 5077] rmdir("./6/file0" [pid 5305] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 5302] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... rmdir resumed>) = 0 [pid 5305] <... mmap resumed>) = 0x20000000 [pid 5302] <... futex resumed>) = 0 [pid 5077] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./6/cgroup" [pid 5305] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... unlink resumed>) = 0 [pid 5077] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./6/cgroup.net") = 0 [pid 5077] getdents64(3, 0x555556032850 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... close resumed>) = 0 [pid 5305] <... futex resumed>) = 1 [pid 5298] <... futex resumed>) = 0 [pid 5077] rmdir("./6" [pid 5309] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5306] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5305] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5298] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] unlink("./7/cgroup.cpu" [pid 5077] <... rmdir resumed>) = 0 [pid 5315] <... set_robust_list resumed>) = 0 [pid 5310] <... ioctl resumed>) = 0 [pid 5303] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... futex resumed>) = 0 [pid 5298] <... futex resumed>) = 1 [pid 5077] mkdir("./7", 0777 [pid 5315] rt_sigprocmask(SIG_SETMASK, [], [pid 5310] close(3 [pid 5303] <... futex resumed>) = 0 [pid 5302] memfd_create("syzkaller", 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5310] <... close resumed>) = 0 [pid 5303] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5302] <... memfd_create resumed>) = 4 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5315] creat("./bus", 000 [pid 5310] mkdir("./file0", 0777 [pid 5302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... openat resumed>) = 3 [pid 5315] <... creat resumed>) = 3 [pid 5310] <... mkdir resumed>) = 0 [pid 5308] <... ioctl resumed>) = 0 [pid 5302] <... mmap resumed>) = 0x7ff63668b000 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5302] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5315] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5077] close(3 [pid 5315] <... futex resumed>) = 1 [pid 5303] <... futex resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5308] close(3 [pid 5307] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] <... mount resumed>) = 0 [pid 5302] <... write resumed>) = 65536 [pid 5078] <... unlink resumed>) = 0 [pid 5308] <... close resumed>) = 0 [pid 5315] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5308] mkdir("./file0", 0777 [pid 5307] <... futex resumed>) = 1 [pid 5304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5303] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] <... futex resumed>) = 0 [pid 5078] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5308] <... mkdir resumed>) = 0 [pid 5307] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5304] <... openat resumed>) = 6 [pid 5303] <... futex resumed>) = 0 [pid 5302] munmap(0x7ff63668b000, 138412032 [pid 5301] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5316 attached [pid 5315] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5309] <... mount resumed>) = 0 [pid 5308] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5303] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5316] set_robust_list(0x5555560316a0, 24 [pid 5315] <... mount resumed>) = 0 [pid 5309] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] <... mmap resumed>) = 0x20000000 [pid 5304] chdir(0x20000000 [pid 5302] <... munmap resumed>) = 0 [pid 5301] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... clone resumed>, child_tidptr=0x555556031690) = 24 [pid 5316] <... set_robust_list resumed>) = 0 [pid 5315] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] <... futex resumed>) = 1 [pid 5307] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5306] <... futex resumed>) = 0 [pid 5304] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 5302] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5301] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] newfstatat(AT_FDCWD, "./7/bus", [pid 5316] chdir("./7" [pid 5315] <... futex resumed>) = 1 [pid 5309] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5307] <... futex resumed>) = 0 [pid 5306] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5303] <... futex resumed>) = 0 [pid 5302] <... openat resumed>) = 7 [pid 5315] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5307] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5306] <... futex resumed>) = 0 [pid 5304] ioctl(4, LOOP_CLR_FD [pid 5303] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] ioctl(7, LOOP_SET_FD, 4 [pid 5301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5316] <... chdir resumed>) = 0 [ 64.021176][ T5304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.029017][ T5310] loop0: detected capacity change from 0 to 512 [ 64.035237][ T5304] ext4 filesystem being mounted at /root/syzkaller.51vpeu/7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.053644][ T5308] loop1: detected capacity change from 0 to 512 [pid 5316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5309] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5306] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5302] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5304] <... ioctl resumed>) = 0 [pid 5303] <... futex resumed>) = 0 [pid 5301] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] unlink("./7/bus" [pid 5316] <... prctl resumed>) = 0 [pid 5309] <... open resumed>) = 3 [pid 5304] close(4 [pid 5302] ioctl(7, LOOP_CLR_FD [pid 5078] <... unlink resumed>) = 0 [pid 5302] <... ioctl resumed>) = 0 [pid 5078] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5301] <... futex resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5307] memfd_create("syzkaller", 0 [pid 5078] unlink("./7/binderfs" [pid 5302] ioctl(7, LOOP_SET_FD, 4 [pid 5078] <... unlink resumed>) = 0 [pid 5302] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5302] close(7) = 0 [pid 5302] close(4 [pid 5307] <... memfd_create resumed>) = 7 [pid 5302] <... close resumed>) = 0 [pid 5307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5302] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] <... mmap resumed>) = 0x7ff63668b000 [pid 5302] <... futex resumed>) = 0 [pid 5302] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5307] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5298] close(3) = 0 [pid 5298] close(4) = -1 EBADF (Bad file descriptor) [pid 5298] close(5) = 0 [pid 5307] <... write resumed>) = 65536 [pid 5298] close(6) = 0 [pid 5315] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5303] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5298] close(7 [pid 5316] setpgid(0, 0 [pid 5309] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] <... setpgid resumed>) = 0 [pid 5315] <... open resumed>) = 5 [pid 5309] <... futex resumed>) = 1 [pid 5307] munmap(0x7ff63668b000, 138412032 [pid 5306] <... futex resumed>) = 0 [pid 5304] <... close resumed>) = 0 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5315] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5307] <... munmap resumed>) = 0 [pid 5306] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] close(8 [pid 5316] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5315] <... futex resumed>) = 1 [pid 5309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 64.097086][ T5310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.110963][ T5310] ext4 filesystem being mounted at /root/syzkaller.p47fVk/7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.130314][ T5082] Bluetooth: hci4: command 0x040f tx timeout [ 64.136431][ T5082] Bluetooth: hci0: command 0x040f tx timeout [pid 5307] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5306] <... futex resumed>) = 0 [pid 5304] <... futex resumed>) = 0 [pid 5303] <... futex resumed>) = 0 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5316] <... symlink resumed>) = 0 [pid 5315] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5309] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5307] <... openat resumed>) = 4 [pid 5316] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 5316] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 5316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5316] write(3, "1000", 4) = 4 [pid 5316] close(3) = 0 [pid 5316] read(200, 0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5316] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5304] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] close(9 [pid 5315] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5310] <... mount resumed>) = 0 [pid 5303] <... futex resumed>) = 0 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5310] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5303] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5315] <... mmap resumed>) = 0x20000000 [pid 5307] ioctl(4, LOOP_SET_FD, 7 [pid 5298] close(10 [pid 5315] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5315] <... futex resumed>) = 1 [pid 5310] ioctl(4, LOOP_CLR_FD [pid 5303] <... futex resumed>) = 0 [pid 5298] close(11 [pid 5316] <... mmap resumed>) = 0x7ff63eaac000 [pid 5307] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5316] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5307] ioctl(4, LOOP_CLR_FD [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5298] close(12 [pid 5316] <... mprotect resumed>) = 0 [pid 5307] <... ioctl resumed>) = 0 [pid 5316] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5316] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5303] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] close(13) = -1 EBADF (Bad file descriptor) [pid 5298] close(14) = -1 EBADF (Bad file descriptor) [pid 5316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5315] memfd_create("syzkaller", 0 [pid 5310] <... ioctl resumed>) = 0 [pid 5307] ioctl(4, LOOP_SET_FD, 7 [pid 5303] <... futex resumed>) = 0 [pid 5298] close(15 [pid 5078] <... umount2 resumed>) = 0 [pid 5315] <... memfd_create resumed>) = 6 [pid 5310] close(4 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5298] close(16 [pid 5310] <... close resumed>) = 0 ./strace-static-x86_64: Process 5321 attached [pid 5315] <... mmap resumed>) = 0x7ff63668b000 [pid 5310] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5321] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5316] <... clone3 resumed> => {parent_tid=[25]}, 88) = 25 [pid 5310] <... futex resumed>) = 0 [pid 5307] close(4 [pid 5321] <... rseq resumed>) = 0 [pid 5316] rt_sigprocmask(SIG_SETMASK, [], [pid 5315] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5310] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5307] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5321] set_robust_list(0x7ff63eacc9a0, 24 [pid 5316] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5315] <... write resumed>) = 65536 [pid 5307] close(7 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] newfstatat(AT_FDCWD, "./7/file0", [pid 5321] <... set_robust_list resumed>) = 0 [pid 5316] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] munmap(0x7ff63668b000, 138412032 [pid 5307] <... close resumed>) = 0 [pid 5298] close(17 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5321] rt_sigprocmask(SIG_SETMASK, [], [pid 5316] <... futex resumed>) = 0 [pid 5315] <... munmap resumed>) = 0 [pid 5307] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 64.139551][ T5094] Bluetooth: hci1: command 0x040f tx timeout [ 64.143060][ T5082] Bluetooth: hci2: command 0x040f tx timeout [ 64.151538][ T5308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.155527][ T5078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5078] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5316] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5307] <... futex resumed>) = 0 [pid 5298] close(18 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5321] memfd_create("syzkaller", 0 [pid 5316] <... futex resumed>) = 0 [pid 5309] <... mmap resumed>) = 0x20000000 [pid 5306] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5301] close(3) = 0 [pid 5301] close(4) = -1 EBADF (Bad file descriptor) [pid 5301] close(5) = 0 [pid 5301] close(6) = 0 [pid 5301] close(7 [pid 5309] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5301] close(8) = -1 EBADF (Bad file descriptor) [pid 5301] close(9) = -1 EBADF (Bad file descriptor) [pid 5301] close(10) = -1 EBADF (Bad file descriptor) [pid 5309] <... futex resumed>) = 0 [pid 5301] close(11) = -1 EBADF (Bad file descriptor) [pid 5301] close(12 [pid 5309] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] close(13 [pid 5309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5306] <... futex resumed>) = 0 [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5309] memfd_create("syzkaller", 0 [pid 5301] close(14 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5298] close(19 [pid 5301] close(15 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5298] close(20 [pid 5301] close(16 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5298] close(21 [pid 5309] <... memfd_create resumed>) = 6 [pid 5301] close(17 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5298] close(22 [pid 5321] <... memfd_create resumed>) = 3 [pid 5316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5309] <... mmap resumed>) = 0x7ff63668b000 [pid 5301] close(18 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5316] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5315] <... openat resumed>) = 4 [pid 5309] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5307] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5298] close(23 [pid 5078] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5321] <... mmap resumed>) = 0x7ff63668b000 [pid 5316] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5315] ioctl(4, LOOP_SET_FD, 6 [pid 5309] <... write resumed>) = 65536 [pid 5301] close(19 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5315] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5309] munmap(0x7ff63668b000, 138412032 [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5298] close(24 [pid 5315] ioctl(4, LOOP_CLR_FD [pid 5309] <... munmap resumed>) = 0 [pid 5301] close(20 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5315] <... ioctl resumed>) = 0 [pid 5309] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5298] close(25 [pid 5321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5316] <... mprotect resumed>) = 0 [pid 5309] <... openat resumed>) = 7 [pid 5301] close(21 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5309] ioctl(7, LOOP_SET_FD, 6 [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5298] close(26 [pid 5078] <... openat resumed>) = 4 [pid 5316] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5309] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5301] close(22 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5316] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5315] ioctl(4, LOOP_SET_FD, 6 [pid 5309] ioctl(7, LOOP_CLR_FD [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5298] close(27 [pid 5315] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5309] <... ioctl resumed>) = 0 [pid 5301] close(23 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] newfstatat(4, "", [pid 5315] close(4 [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5298] close(28 [pid 5315] <... close resumed>) = 0 [pid 5301] close(24 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5315] close(6 [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5298] close(29 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5321] <... write resumed>) = 262144 [pid 5315] <... close resumed>) = 0 [pid 5309] ioctl(7, LOOP_SET_FD, 6 [pid 5301] close(25 [pid 5298] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5309] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] getdents64(4, [pid 5309] close(7 [pid 5301] close(26 [ 64.214920][ T5308] ext4 filesystem being mounted at /root/syzkaller.tvsxpX/7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.220345][ T5082] Bluetooth: hci5: command 0x040f tx timeout [ 64.227327][ T5089] Bluetooth: hci3: command 0x040f tx timeout [pid 5298] exit_group(0 [pid 5315] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] <... close resumed>) = 0 [pid 5305] <... futex resumed>) = ? [pid 5303] close(3 [pid 5302] <... futex resumed>) = ? [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5298] <... exit_group resumed>) = ? [pid 5315] <... futex resumed>) = 0 [pid 5309] close(6 [pid 5305] +++ exited with 0 +++ [pid 5303] <... close resumed>) = 0 [pid 5302] +++ exited with 0 +++ [pid 5301] close(27 [pid 5298] +++ exited with 0 +++ [pid 5078] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5301] close(28 [pid 5078] getdents64(4, [pid 5301] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5301] close(29) = -1 EBADF (Bad file descriptor) [pid 5301] exit_group(0 [pid 5307] <... futex resumed>) = ? [pid 5304] <... futex resumed>) = ? [pid 5301] <... exit_group resumed>) = ? [pid 5309] <... close resumed>) = 0 [pid 5307] +++ exited with 0 +++ [pid 5304] +++ exited with 0 +++ [pid 5301] +++ exited with 0 +++ [pid 5078] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5315] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5309] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] close(4 [pid 5078] close(4 [pid 5309] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5303] close(5) = 0 [pid 5078] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5303] close(6 [pid 5079] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] rmdir("./7/file0"./strace-static-x86_64: Process 5322 attached [pid 5321] munmap(0x7ff63668b000, 138412032 [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5303] close(7 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... restart_syscall resumed>) = 0 [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5303] close(8 [pid 5079] <... openat resumed>) = 3 [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5303] close(9) = -1 EBADF (Bad file descriptor) [pid 5078] <... rmdir resumed>) = 0 [pid 5322] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5316] <... clone3 resumed> => {parent_tid=[26]}, 88) = 26 [pid 5316] rt_sigprocmask(SIG_SETMASK, [], [pid 5322] <... rseq resumed>) = 0 [pid 5316] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5322] set_robust_list(0x7ff63eaab9a0, 24 [pid 5303] close(10 [pid 5079] newfstatat(3, "", [pid 5074] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5322] <... set_robust_list resumed>) = 0 [pid 5321] <... munmap resumed>) = 0 [pid 5316] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5303] close(11 [pid 5079] getdents64(3, [pid 5074] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5303] close(12 [pid 5074] <... openat resumed>) = 3 [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5303] close(13 [pid 5074] newfstatat(3, "", [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5303] close(14) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 5074] getdents64(3, [pid 5322] rt_sigprocmask(SIG_SETMASK, [], [pid 5321] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5316] <... futex resumed>) = 0 [pid 5303] close(15 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5322] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5321] <... openat resumed>) = 4 [pid 5316] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] unlink("./7/cgroup.cpu" [pid 5078] newfstatat(AT_FDCWD, "./7/cgroup", [pid 5074] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5322] creat("./bus", 000 [pid 5321] ioctl(4, LOOP_SET_FD, 3 [pid 5303] close(16 [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./6/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5322] <... creat resumed>) = 5 [pid 5303] close(17) = -1 EBADF (Bad file descriptor) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5303] close(18 [pid 5079] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./6/cgroup.cpu", [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5303] close(19 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5303] close(20 [pid 5074] unlink("./6/cgroup.cpu" [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... unlink resumed>) = 0 [pid 5303] close(21) = -1 EBADF (Bad file descriptor) [pid 5308] <... mount resumed>) = 0 [pid 5079] <... umount2 resumed>) = 0 [pid 5078] unlink("./7/cgroup" [pid 5074] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5322] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] <... ioctl resumed>) = 0 [pid 5308] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5303] close(22 [pid 5079] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5322] <... futex resumed>) = 1 [pid 5321] close(3 [pid 5316] <... futex resumed>) = 0 [pid 5308] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5322] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5321] <... close resumed>) = 0 [pid 5316] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] ioctl(5, LOOP_CLR_FD [pid 5303] close(23 [pid 5079] newfstatat(AT_FDCWD, "./7/bus", [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5322] <... mount resumed>) = 0 [pid 5321] mkdir("./file0", 0777 [pid 5316] <... futex resumed>) = 0 [pid 5308] <... ioctl resumed>) = 0 [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 5074] newfstatat(AT_FDCWD, "./6/bus", [pid 5322] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] <... mkdir resumed>) = 0 [pid 5308] close(5 [pid 5303] close(24 [pid 5079] unlink("./7/bus" [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5322] <... futex resumed>) = 0 [pid 5321] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5316] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... unlink resumed>) = 0 [pid 5078] unlink("./7/cgroup.net" [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5322] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5308] <... close resumed>) = 0 [pid 5303] close(25 [pid 5079] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... unlink resumed>) = 0 [pid 5316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5308] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] getdents64(3, [pid 5074] unlink("./6/bus" [pid 5308] <... futex resumed>) = 0 [pid 5303] close(26 [pid 5079] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5078] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [ 64.287450][ T5321] loop3: detected capacity change from 0 to 512 [pid 5316] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5306] close(3 [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] close(3 [pid 5074] <... unlink resumed>) = 0 [pid 5306] <... close resumed>) = 0 [pid 5303] close(27 [pid 5079] unlink("./7/binderfs" [pid 5074] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] close(4 [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... unlink resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5322] <... futex resumed>) = 0 [pid 5316] <... futex resumed>) = 1 [pid 5306] <... close resumed>) = 0 [pid 5303] close(28 [pid 5079] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5322] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5316] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5306] close(5 [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] rmdir("./7" [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5303] close(29 [pid 5074] unlink("./6/binderfs" [pid 5306] close(6 [pid 5303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... unlink resumed>) = 0 [pid 5306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5303] exit_group(0 [pid 5074] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5315] <... futex resumed>) = ? [pid 5310] <... futex resumed>) = ? [pid 5306] close(7 [pid 5303] <... exit_group resumed>) = ? [pid 5315] +++ exited with 0 +++ [pid 5310] +++ exited with 0 +++ [pid 5306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5303] +++ exited with 0 +++ [pid 5306] close(8 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] close(9) = -1 EBADF (Bad file descriptor) [pid 5075] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] close(10) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] close(11 [pid 5075] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... openat resumed>) = 3 [pid 5306] close(12 [pid 5075] newfstatat(3, "", [pid 5306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5306] close(13 [pid 5075] getdents64(3, [pid 5306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] mkdir("./8", 0777 [pid 5075] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5306] close(14 [pid 5075] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] close(15 [pid 5075] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 5306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5306] close(16 [pid 5075] unlink("./7/cgroup.cpu" [pid 5306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... unlink resumed>) = 0 [pid 5306] close(17 [pid 5075] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5306] close(18) = -1 EBADF (Bad file descriptor) [pid 5306] close(19) = -1 EBADF (Bad file descriptor) [pid 5306] close(20) = -1 EBADF (Bad file descriptor) [pid 5306] close(21) = -1 EBADF (Bad file descriptor) [pid 5306] close(22) = -1 EBADF (Bad file descriptor) [pid 5306] close(23) = -1 EBADF (Bad file descriptor) [pid 5306] close(24) = -1 EBADF (Bad file descriptor) [pid 5306] close(25) = -1 EBADF (Bad file descriptor) [pid 5306] close(26) = -1 EBADF (Bad file descriptor) [pid 5306] close(27) = -1 EBADF (Bad file descriptor) [pid 5078] <... mkdir resumed>) = 0 [pid 5306] close(28) = -1 EBADF (Bad file descriptor) [pid 5306] close(29) = -1 EBADF (Bad file descriptor) [pid 5306] exit_group(0 [pid 5309] <... futex resumed>) = ? [pid 5308] <... futex resumed>) = ? [pid 5306] <... exit_group resumed>) = ? [pid 5309] +++ exited with 0 +++ [pid 5308] +++ exited with 0 +++ [pid 5306] +++ exited with 0 +++ [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5078] <... openat resumed>) = 3 [pid 5073] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./7/bus", [pid 5078] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./7/bus") = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 5075] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5078] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 ./strace-static-x86_64: Process 5325 attached [pid 5322] <... open resumed>) = 3 [pid 5321] <... mount resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5078] <... clone resumed>, child_tidptr=0x555556031690) = 27 [ 64.359417][ T5321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.383550][ T5321] ext4 filesystem being mounted at /root/syzkaller.hT4DtY/7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5325] set_robust_list(0x5555560316a0, 24 [pid 5322] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5075] unlink("./7/binderfs" [pid 5073] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5325] <... set_robust_list resumed>) = 0 [pid 5322] <... futex resumed>) = 1 [pid 5321] <... openat resumed>) = 6 [pid 5316] <... futex resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5325] chdir("./8" [pid 5322] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5321] chdir("./file0" [pid 5316] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... unlink resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 5325] <... chdir resumed>) = 0 [pid 5322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5321] <... chdir resumed>) = 0 [pid 5316] <... futex resumed>) = 0 [pid 5075] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5325] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5322] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5321] ioctl(4, LOOP_CLR_FD [pid 5316] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5325] <... prctl resumed>) = 0 [pid 5322] <... mmap resumed>) = 0x20000000 [pid 5321] <... ioctl resumed>) = 0 [pid 5073] unlink("./7/cgroup.cpu" [pid 5325] setpgid(0, 0 [pid 5322] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] close(4 [pid 5325] <... setpgid resumed>) = 0 [pid 5322] <... futex resumed>) = 1 [pid 5321] <... close resumed>) = 0 [pid 5316] <... futex resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5325] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5322] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5321] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... umount2 resumed>) = 0 [pid 5079] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5079] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5325] <... symlink resumed>) = 0 [pid 5321] <... futex resumed>) = 0 [pid 5316] <... futex resumed>) = 0 [pid 5079] getdents64(4, [pid 5074] <... umount2 resumed>) = 0 [ 64.413938][ T5074] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.414341][ T5079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5073] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5325] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5321] memfd_create("syzkaller", 0 [pid 5079] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5074] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 5325] <... symlink resumed>) = 0 [pid 5321] <... memfd_create resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5325] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] newfstatat(AT_FDCWD, "./6/file0", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5325] <... symlink resumed>) = 0 [pid 5321] <... mmap resumed>) = 0x7ff63668b000 [pid 5079] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./7/bus", [pid 5325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5325] write(3, "1000", 4 [pid 5321] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] unlink("./7/bus" [pid 5075] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5325] <... write resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5325] close(3 [pid 5321] <... write resumed>) = 65536 [pid 5079] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 4 [pid 5073] <... unlink resumed>) = 0 [pid 5325] <... close resumed>) = 0 [pid 5321] munmap(0x7ff63668b000, 138412032 [pid 5079] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./7/file0", [pid 5074] newfstatat(4, "", [pid 5073] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5325] read(200, [pid 5079] rmdir("./7/file0" [pid 5325] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5321] <... munmap resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5325] symlink("/dev/binderfs", "./binderfs" [pid 5321] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5079] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5325] <... symlink resumed>) = 0 [pid 5321] <... openat resumed>) = 7 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 64.460997][ T5075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5325] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] ioctl(7, LOOP_SET_FD, 4 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(4, [pid 5073] unlink("./7/binderfs" [pid 5325] <... futex resumed>) = 0 [pid 5321] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5079] newfstatat(AT_FDCWD, "./7/cgroup", [pid 5075] <... openat resumed>) = 4 [pid 5074] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5321] ioctl(7, LOOP_CLR_FD [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(4, "", [pid 5074] close(4 [pid 5325] <... mmap resumed>) = 0x7ff63eaac000 [pid 5321] <... ioctl resumed>) = 0 [pid 5079] unlink("./7/cgroup" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5325] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... unlink resumed>) = 0 [pid 5074] rmdir("./6/file0" [pid 5325] <... mprotect resumed>) = 0 [pid 5079] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 5074] <... rmdir resumed>) = 0 [pid 5325] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5079] unlink("./7/cgroup.net") = 0 [pid 5325] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5321] ioctl(7, LOOP_SET_FD, 4 [pid 5075] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5074] umount2("./6/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5321] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5079] getdents64(3, [pid 5075] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5326 attached [pid 5321] close(7 [pid 5079] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(AT_FDCWD, "./6/cgroup", [pid 5326] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5325] <... clone3 resumed> => {parent_tid=[28]}, 88) = 28 [pid 5321] <... close resumed>) = 0 [pid 5079] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5325] rt_sigprocmask(SIG_SETMASK, [], [pid 5321] close(4 [pid 5079] <... close resumed>) = 0 [pid 5075] close(4 [pid 5074] unlink("./6/cgroup" [pid 5325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5321] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5325] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] rmdir("./7" [pid 5075] rmdir("./7/file0" [pid 5074] <... unlink resumed>) = 0 [pid 5326] <... rseq resumed>) = 0 [pid 5325] <... futex resumed>) = 0 [pid 5321] <... futex resumed>) = 0 [pid 5079] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5326] set_robust_list(0x7ff63eacc9a0, 24 [pid 5073] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5326] <... set_robust_list resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5325] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5316] close(3 [pid 5079] mkdir("./8", 0777 [pid 5075] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./6/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5326] memfd_create("syzkaller", 0 [pid 5325] <... futex resumed>) = 0 [pid 5316] <... close resumed>) = 0 [pid 5079] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./7/file0", [pid 5326] <... memfd_create resumed>) = 3 [pid 5325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5316] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./6/cgroup.net", [pid 5326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5325] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5326] <... mmap resumed>) = 0x7ff63668b000 [pid 5325] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5316] close(5 [pid 5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./7/cgroup", [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5325] <... mprotect resumed>) = 0 [pid 5316] <... close resumed>) = 0 [pid 5316] close(6 [pid 5079] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./6/cgroup.net" [pid 5073] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5325] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5316] <... close resumed>) = 0 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5075] unlink("./7/cgroup" [pid 5074] <... unlink resumed>) = 0 [pid 5326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5316] close(7 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5325] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... unlink resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5316] close(8 [pid 5079] close(3 [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = 0 [pid 5075] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5073] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5327 attached [pid 5325] <... clone3 resumed> => {parent_tid=[29]}, 88) = 29 [pid 5316] close(9) = -1 EBADF (Bad file descriptor) [pid 5326] <... write resumed>) = 262144 [pid 5316] close(10 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 5073] newfstatat(4, "", [pid 5327] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5325] rt_sigprocmask(SIG_SETMASK, [], [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 5074] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5316] close(11 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] rmdir("./6" [pid 5327] <... rseq resumed>) = 0 [pid 5325] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] unlink("./7/cgroup.net" [pid 5074] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5328 attached [pid 5327] set_robust_list(0x7ff63eaab9a0, 24 [pid 5326] munmap(0x7ff63668b000, 138412032 [pid 5325] <... futex resumed>) = 0 [pid 5316] close(12 [pid 5075] <... unlink resumed>) = 0 [pid 5073] getdents64(4, [pid 5328] set_robust_list(0x5555560316a0, 24 [pid 5327] <... set_robust_list resumed>) = 0 [pid 5325] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 64.528985][ T5073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5074] mkdir("./7", 0777 [pid 5328] <... set_robust_list resumed>) = 0 [pid 5327] rt_sigprocmask(SIG_SETMASK, [], [pid 5316] close(13 [pid 5079] <... clone resumed>, child_tidptr=0x555556031690) = 27 [pid 5075] getdents64(3, [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5328] chdir("./8" [pid 5327] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5326] <... munmap resumed>) = 0 [pid 5073] getdents64(4, [pid 5328] <... chdir resumed>) = 0 [pid 5327] creat("./bus", 000 [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5327] <... creat resumed>) = 4 [pid 5316] close(14 [pid 5075] close(3 [pid 5327] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5327] <... futex resumed>) = 1 [pid 5325] <... futex resumed>) = 0 [pid 5316] close(15 [pid 5075] rmdir("./7" [pid 5327] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... rmdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5325] <... futex resumed>) = 0 [pid 5316] close(16 [pid 5327] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5325] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] mkdir("./8", 0777 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5327] <... mount resumed>) = 0 [pid 5316] close(17 [pid 5328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5326] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... mkdir resumed>) = 0 [pid 5074] close(3 [pid 5073] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5328] <... prctl resumed>) = 0 [pid 5327] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] close(18 [pid 5073] close(4 [pid 5326] <... openat resumed>) = 5 [pid 5328] setpgid(0, 0 [pid 5327] <... futex resumed>) = 1 [pid 5326] ioctl(5, LOOP_SET_FD, 3 [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5328] <... setpgid resumed>) = 0 [pid 5327] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] <... futex resumed>) = 0 [pid 5325] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] close(19 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5327] <... futex resumed>) = 0 [pid 5325] <... futex resumed>) = 1 [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5327] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c) = 6 [pid 5327] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] close(20 [pid 5325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5325] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] close(21 [pid 5073] rmdir("./7/file0" [pid 5327] <... futex resumed>) = 0 [pid 5325] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5327] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 5325] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5329 attached [pid 5328] <... symlink resumed>) = 0 [pid 5327] <... mmap resumed>) = 0x20000000 [pid 5316] close(22 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... clone resumed>, child_tidptr=0x555556031690) = 27 [pid 5073] <... rmdir resumed>) = 0 [pid 5329] set_robust_list(0x5555560316a0, 24 [pid 5328] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5327] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5073] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5329] <... set_robust_list resumed>) = 0 [pid 5328] <... symlink resumed>) = 0 [pid 5327] <... futex resumed>) = 1 [pid 5325] <... futex resumed>) = 0 [pid 5316] close(23 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5329] chdir("./7" [pid 5328] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5327] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] close(3 [pid 5073] newfstatat(AT_FDCWD, "./7/cgroup", [pid 5329] <... chdir resumed>) = 0 [pid 5328] <... symlink resumed>) = 0 [pid 5327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5325] <... futex resumed>) = 0 [pid 5316] close(24 [pid 5075] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5329] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5326] <... ioctl resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] unlink("./7/cgroup" [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... unlink resumed>) = 0 [pid 5329] <... prctl resumed>) = 0 [pid 5316] close(25 [pid 5329] setpgid(0, 0 [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5329] <... setpgid resumed>) = 0 [pid 5316] close(26 [pid 5073] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5330 attached [pid 5329] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5328] <... openat resumed>) = 3 [pid 5326] close(3 [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5330] set_robust_list(0x5555560316a0, 24 [pid 5328] write(3, "1000", 4 [pid 5326] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556031690) = 27 [pid 5073] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 5329] <... symlink resumed>) = 0 [pid 5316] close(27 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./7/cgroup.net" [pid 5329] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... unlink resumed>) = 0 [pid 5329] <... symlink resumed>) = 0 [pid 5328] <... write resumed>) = 4 [pid 5326] mkdir(0x20000000, 0777 [pid 5316] close(28 [pid 5073] getdents64(3, [pid 5328] close(3 [pid 5073] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5328] <... close resumed>) = 0 [pid 5328] read(200, [pid 5073] close(3 [pid 5330] <... set_robust_list resumed>) = 0 [pid 5329] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... close resumed>) = 0 [pid 5329] <... symlink resumed>) = 0 [pid 5316] close(29 [pid 5330] chdir("./8" [pid 5328] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5073] rmdir("./7" [pid 5330] <... chdir resumed>) = 0 [pid 5329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5328] symlink("/dev/binderfs", "./binderfs" [pid 5316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5329] <... openat resumed>) = 3 [pid 5316] exit_group(0 [pid 5073] <... rmdir resumed>) = 0 [pid 5329] write(3, "1000", 4 [pid 5330] <... prctl resumed>) = 0 [pid 5329] <... write resumed>) = 4 [pid 5322] <... futex resumed>) = ? [pid 5321] <... futex resumed>) = ? [pid 5316] <... exit_group resumed>) = ? [pid 5330] setpgid(0, 0 [pid 5329] close(3 [pid 5328] <... symlink resumed>) = 0 [pid 5322] +++ exited with 0 +++ [pid 5321] +++ exited with 0 +++ [pid 5316] +++ exited with 0 +++ [pid 5073] mkdir("./8", 0777 [pid 5330] <... setpgid resumed>) = 0 [pid 5329] <... close resumed>) = 0 [pid 5328] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] read(200, [pid 5328] <... futex resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5329] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5330] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5077] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5329] symlink("/dev/binderfs", "./binderfs" [pid 5328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5329] <... symlink resumed>) = 0 [pid 5328] <... mmap resumed>) = 0x7ff63eaac000 [pid 5329] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5077] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5329] <... futex resumed>) = 0 [pid 5329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5328] <... mprotect resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5329] <... mmap resumed>) = 0x7ff63eaac000 [pid 5328] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5077] newfstatat(3, "", [pid 5073] <... mkdir resumed>) = 0 [pid 5330] <... symlink resumed>) = 0 [pid 5329] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5328] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5330] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5329] <... mprotect resumed>) = 0 [pid 5328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5077] getdents64(3, ./strace-static-x86_64: Process 5331 attached [pid 5329] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5331] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5330] <... symlink resumed>) = 0 [pid 5329] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5328] <... clone3 resumed> => {parent_tid=[28]}, 88) = 28 [pid 5077] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5331] <... rseq resumed>) = 0 [pid 5330] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5328] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5332 attached [pid 5331] set_robust_list(0x7ff63eacc9a0, 24 [pid 5330] <... symlink resumed>) = 0 [pid 5328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5077] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5332] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5331] <... set_robust_list resumed>) = 0 [pid 5330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5329] <... clone3 resumed> => {parent_tid=[28]}, 88) = 28 [pid 5328] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5332] <... rseq resumed>) = 0 [pid 5331] rt_sigprocmask(SIG_SETMASK, [], [pid 5329] rt_sigprocmask(SIG_SETMASK, [], [pid 5077] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 5332] set_robust_list(0x7ff63eacc9a0, 24 [pid 5331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5330] <... openat resumed>) = 3 [pid 5329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5328] <... futex resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5332] <... set_robust_list resumed>) = 0 [pid 5331] memfd_create("syzkaller", 0 [pid 5330] write(3, "1000", 4 [pid 5329] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] unlink("./7/cgroup.cpu" [pid 5073] close(3 [pid 5332] rt_sigprocmask(SIG_SETMASK, [], [pid 5331] <... memfd_create resumed>) = 3 [pid 5330] <... write resumed>) = 4 [pid 5329] <... futex resumed>) = 0 [pid 5328] <... futex resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5329] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5326] <... mkdir resumed>) = -1 ENOENT (No such file or directory) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5332] memfd_create("syzkaller", 0 [pid 5331] <... mmap resumed>) = 0x7ff6366ac000 [pid 5330] close(3 [pid 5329] <... futex resumed>) = 0 [pid 5328] <... mmap resumed>) = 0x7ff63668b000 [pid 5326] mount("/dev/loop4", 0x20000000, 0x200005c0, MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"... [pid 5332] <... memfd_create resumed>) = 3 [pid 5329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5327] memfd_create("syzkaller", 0 [pid 5077] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5330] <... close resumed>) = 0 [pid 5329] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5327] <... memfd_create resumed>) = 3 [pid 5332] <... mmap resumed>) = 0x7ff63668b000 [pid 5329] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [ 64.604587][ T5326] loop4: detected capacity change from 0 to 512 [ 64.622378][ T5327] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [pid 5327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5333 attached [pid 5332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5330] read(200, [pid 5329] <... mprotect resumed>) = 0 [pid 5328] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5327] <... mmap resumed>) = 0x7ff63668b000 [pid 5326] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5077] <... umount2 resumed>) = 0 [pid 5333] set_robust_list(0x5555560316a0, 24 [pid 5332] <... write resumed>) = 262144 [pid 5330] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5329] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5077] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... clone resumed>, child_tidptr=0x555556031690) = 27 [pid 5333] <... set_robust_list resumed>) = 0 [pid 5330] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5333] chdir("./8" [pid 5077] newfstatat(AT_FDCWD, "./7/bus", [pid 5333] <... chdir resumed>) = 0 [pid 5330] <... symlink resumed>) = 0 [pid 5328] <... mprotect resumed>) = 0 [pid 5327] <... write resumed>) = 65536 [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5330] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5326] ioctl(5, LOOP_CLR_FD [pid 5077] unlink("./7/bus" [pid 5333] <... prctl resumed>) = 0 [pid 5330] <... futex resumed>) = 0 [pid 5328] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5327] munmap(0x7ff63668b000, 138412032 [pid 5326] <... ioctl resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5332] munmap(0x7ff63668b000, 138412032 [pid 5329] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5327] <... munmap resumed>) = 0 [pid 5077] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5333] setpgid(0, 0 [pid 5332] <... munmap resumed>) = 0 [pid 5331] <... write resumed>) = 262144 [pid 5330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5327] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5326] close(5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5333] <... setpgid resumed>) = 0 [pid 5332] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5330] <... mmap resumed>) = 0x7ff63eaac000 [pid 5329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5327] <... openat resumed>) = 7 [pid 5326] <... close resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./7/binderfs", ./strace-static-x86_64: Process 5334 attached [pid 5333] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5332] <... openat resumed>) = 4 [pid 5330] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5327] ioctl(7, LOOP_SET_FD, 3 [pid 5326] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5335 attached [pid 5334] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5333] <... symlink resumed>) = 0 [pid 5332] ioctl(4, LOOP_SET_FD, 3 [pid 5331] munmap(0x7ff6366ac000, 138412032 [pid 5330] <... mprotect resumed>) = 0 [pid 5329] <... clone3 resumed> => {parent_tid=[29]}, 88) = 29 [pid 5328] <... clone3 resumed> => {parent_tid=[29]}, 88) = 29 [pid 5327] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5326] <... futex resumed>) = 0 [pid 5077] unlink("./7/binderfs" [pid 5335] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5334] <... rseq resumed>) = 0 [pid 5333] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5332] <... ioctl resumed>) = 0 [pid 5331] <... munmap resumed>) = 0 [pid 5330] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5334] set_robust_list(0x7ff6366ab9a0, 24) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5334] rt_sigprocmask(SIG_SETMASK, [], [pid 5077] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5334] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5333] <... symlink resumed>) = 0 [pid 5331] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5330] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5328] rt_sigprocmask(SIG_SETMASK, [], [pid 5326] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5330] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5331] <... openat resumed>) = 4 [pid 5328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5334] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] <... symlink resumed>) = 0 [pid 5331] ioctl(4, LOOP_SET_FD, 3 [pid 5328] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5327] ioctl(7, LOOP_CLR_FD./strace-static-x86_64: Process 5336 attached [pid 5334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5327] <... ioctl resumed>) = 0 [pid 5334] creat("./bus", 000) = 5 [pid 5334] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5334] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5327] ioctl(7, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 5327] close(7) = 0 [pid 5336] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5330] <... clone3 resumed> => {parent_tid=[28]}, 88) = 28 [pid 5327] close(3 [pid 5333] <... openat resumed>) = 3 [pid 5327] <... close resumed>) = 0 [pid 5336] <... rseq resumed>) = 0 [pid 5334] <... futex resumed>) = 0 [pid 5333] write(3, "1000", 4 [pid 5331] <... ioctl resumed>) = 0 [pid 5330] rt_sigprocmask(SIG_SETMASK, [], [pid 5328] <... futex resumed>) = 1 [pid 5327] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] rt_sigprocmask(SIG_SETMASK, [], [pid 5336] set_robust_list(0x7ff63eacc9a0, 24 [pid 5335] <... rseq resumed>) = 0 [pid 5334] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] <... write resumed>) = 4 [pid 5332] close(3 [pid 5331] close(3 [pid 5330] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5328] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5327] <... futex resumed>) = 0 [pid 5325] close(3 [pid 5336] <... set_robust_list resumed>) = 0 [pid 5335] set_robust_list(0x7ff63eaab9a0, 24 [pid 5333] close(3 [pid 5332] <... close resumed>) = 0 [pid 5331] <... close resumed>) = 0 [pid 5330] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5327] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5336] rt_sigprocmask(SIG_SETMASK, [], [pid 5335] <... set_robust_list resumed>) = 0 [pid 5333] <... close resumed>) = 0 [pid 5332] mkdir("./file0", 0777 [pid 5331] mkdir("./file0", 0777 [pid 5330] <... futex resumed>) = 0 [pid 5329] <... futex resumed>) = 0 [pid 5328] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] close(4 [pid 5336] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5335] rt_sigprocmask(SIG_SETMASK, [], [pid 5333] read(200, [pid 5330] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... close resumed>) = 0 [pid 5331] <... mkdir resumed>) = 0 [pid 5336] memfd_create("syzkaller", 0 [pid 5334] <... futex resumed>) = 0 [pid 5333] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5332] <... mkdir resumed>) = 0 [pid 5330] <... futex resumed>) = 0 [pid 5329] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5328] <... futex resumed>) = 1 [pid 5325] close(5 [pid 5336] <... memfd_create resumed>) = 3 [pid 5335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5334] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5333] symlink("/dev/binderfs", "./binderfs" [pid 5332] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5331] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5328] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5335] creat("./bus", 000 [pid 5330] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5325] close(6 [pid 5336] <... mmap resumed>) = 0x7ff63668b000 [pid 5333] <... symlink resumed>) = 0 [pid 5330] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5325] <... close resumed>) = 0 [pid 5334] <... mount resumed>) = 0 [pid 5333] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] <... mprotect resumed>) = 0 [pid 5325] close(7 [pid 5077] <... umount2 resumed>) = 0 [pid 5333] <... futex resumed>) = 0 [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5334] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5325] close(8 [pid 5330] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5333] <... mmap resumed>) = 0x7ff63eaac000 [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5333] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5325] close(9) = -1 EBADF (Bad file descriptor) [pid 5334] <... futex resumed>) = 1 [pid 5333] <... mprotect resumed>) = 0 [pid 5328] <... futex resumed>) = 0 [pid 5325] close(10 [pid 5333] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5334] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5333] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5330] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5325] close(11 [pid 5336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5334] <... open resumed>) = 3 [pid 5330] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5328] <... futex resumed>) = 0 [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5334] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5328] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] close(12 [pid 5077] newfstatat(AT_FDCWD, "./7/file0", [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5339 attached [pid 5325] close(13 [pid 5339] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5339] <... rseq resumed>) = 0 [pid 5334] <... futex resumed>) = 0 [pid 5325] close(14 [pid 5339] set_robust_list(0x7ff63eacc9a0, 24 [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5339] <... set_robust_list resumed>) = 0 [pid 5335] <... creat resumed>) = 3 [pid 5328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5325] close(15 [pid 5339] rt_sigprocmask(SIG_SETMASK, [], [pid 5335] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5339] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5325] close(16 [pid 5077] <... openat resumed>) = 4 [pid 5339] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5334] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5335] <... futex resumed>) = 1 [pid 5333] <... clone3 resumed> => {parent_tid=[28]}, 88) = 28 [pid 5329] <... futex resumed>) = 0 [pid 5325] close(17 [pid 5077] newfstatat(4, "", [pid 5335] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5329] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5333] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5340 attached [pid 5325] close(18 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5329] <... futex resumed>) = 0 [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] getdents64(4, [pid 5334] <... futex resumed>) = 0 [pid 5325] close(19 [pid 5077] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5340] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5330] <... clone3 resumed> => {parent_tid=[29]}, 88) = 29 [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5340] <... rseq resumed>) = 0 [pid 5335] <... mount resumed>) = 0 [pid 5333] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] rt_sigprocmask(SIG_SETMASK, [], [pid 5329] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] close(20 [pid 5077] getdents64(4, [pid 5339] <... futex resumed>) = 0 [pid 5334] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5333] <... futex resumed>) = 1 [pid 5328] <... futex resumed>) = 1 [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5339] memfd_create("syzkaller", 0 [pid 5333] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] close(21 [pid 5077] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] close(4 [pid 5340] set_robust_list(0x7ff63eaab9a0, 24 [pid 5330] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5325] close(22 [pid 5077] <... close resumed>) = 0 [pid 5340] <... set_robust_list resumed>) = 0 [pid 5339] <... memfd_create resumed>) = 3 [pid 5335] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] <... mmap resumed>) = 0x20000000 [pid 5333] <... futex resumed>) = 0 [pid 5330] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 64.703547][ T5332] loop2: detected capacity change from 0 to 512 [ 64.716106][ T5077] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.727262][ T5331] loop5: detected capacity change from 0 to 512 [pid 5325] close(23 [pid 5077] rmdir("./7/file0" [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... rmdir resumed>) = 0 [pid 5325] close(24) = -1 EBADF (Bad file descriptor) [pid 5325] close(25) = -1 EBADF (Bad file descriptor) [pid 5325] close(26) = -1 EBADF (Bad file descriptor) [pid 5325] close(27 [pid 5077] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5325] close(28 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5325] close(29 [pid 5077] newfstatat(AT_FDCWD, "./7/cgroup", [pid 5325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5325] exit_group(0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5327] <... futex resumed>) = ? [pid 5325] <... exit_group resumed>) = ? [pid 5327] +++ exited with 0 +++ [pid 5077] unlink("./7/cgroup") = 0 [pid 5077] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5340] rt_sigprocmask(SIG_SETMASK, [], [pid 5339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5336] <... write resumed>) = 262144 [pid 5335] <... futex resumed>) = 1 [pid 5334] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5331] <... mount resumed>) = 0 [pid 5330] <... futex resumed>) = 0 [pid 5329] <... futex resumed>) = 0 [pid 5326] <... futex resumed>) = ? [pid 5333] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5339] <... mmap resumed>) = 0x7ff63668b000 [pid 5333] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] unlink("./7/cgroup.net") = 0 [pid 5333] <... mprotect resumed>) = 0 [pid 5077] getdents64(3, 0x555556032850 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./7" [pid 5339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5335] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5333] rt_sigprocmask(SIG_BLOCK, ~[], [ 64.781789][ T5331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.796843][ T5331] ext4 filesystem being mounted at /root/syzkaller.51vpeu/8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.799692][ T5332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [pid 5329] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5339] <... write resumed>) = 262144 [pid 5336] munmap(0x7ff63668b000, 138412032 [pid 5335] <... open resumed>) = 5 [pid 5334] <... futex resumed>) = 1 [pid 5333] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5331] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5330] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] <... futex resumed>) = 0 [pid 5326] +++ exited with 0 +++ [pid 5325] +++ exited with 0 +++ [pid 5077] <... rmdir resumed>) = 0 [pid 5340] creat("./bus", 000 [pid 5336] <... munmap resumed>) = 0 [pid 5334] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] mkdir("./8", 0777 [pid 5331] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5077] <... mkdir resumed>) = 0 [pid 5331] ioctl(4, LOOP_CLR_FD [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5331] <... ioctl resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5331] close(4 [pid 5077] <... clone resumed>, child_tidptr=0x555556031690) = 27 [pid 5331] <... close resumed>) = 0 [pid 5331] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] <... creat resumed>) = 4 [pid 5336] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5331] <... futex resumed>) = 0 [pid 5331] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5336] <... openat resumed>) = 5 ./strace-static-x86_64: Process 5343 attached [pid 5328] <... futex resumed>) = 0 [pid 5333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5343] set_robust_list(0x5555560316a0, 24 [pid 5339] munmap(0x7ff63668b000, 138412032 [pid 5328] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5340] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5336] ioctl(5, LOOP_SET_FD, 3 [pid 5330] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5344 attached [pid 5343] <... set_robust_list resumed>) = 0 [pid 5340] <... futex resumed>) = 1 [pid 5339] <... munmap resumed>) = 0 [pid 5336] <... ioctl resumed>) = 0 [pid 5335] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... mount resumed>) = 0 [pid 5331] <... futex resumed>) = 0 [pid 5329] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5328] <... futex resumed>) = 1 [pid 5344] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5343] chdir("./8" [pid 5340] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5339] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5336] close(3 [pid 5335] <... futex resumed>) = 0 [pid 5333] <... clone3 resumed> => {parent_tid=[29]}, 88) = 29 [pid 5332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5331] memfd_create("syzkaller", 0 [pid 5330] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5344] <... rseq resumed>) = 0 [pid 5343] <... chdir resumed>) = 0 [pid 5339] <... openat resumed>) = 4 [pid 5336] <... close resumed>) = 0 [pid 5333] rt_sigprocmask(SIG_SETMASK, [], [pid 5332] <... openat resumed>) = 6 [pid 5331] <... memfd_create resumed>) = 4 [pid 5330] <... futex resumed>) = 0 [pid 5329] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5344] set_robust_list(0x7ff63eaab9a0, 24 [pid 5343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5340] <... mount resumed>) = 0 [pid 5339] ioctl(4, LOOP_SET_FD, 3 [pid 5336] mkdir("./file0", 0777 [pid 5335] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5332] chdir(0x20000000 [pid 5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5330] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5344] <... set_robust_list resumed>) = 0 [pid 5343] <... prctl resumed>) = 0 [pid 5340] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] <... mmap resumed>) = 0x20000000 [pid 5330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5344] rt_sigprocmask(SIG_SETMASK, [], [pid 5340] <... futex resumed>) = 0 [pid 5332] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 5329] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5340] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5335] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] ioctl(4, LOOP_CLR_FD [pid 5330] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5344] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5340] <... open resumed>) = 3 [pid 5335] <... futex resumed>) = 0 [pid 5332] <... ioctl resumed>) = 0 [pid 5330] <... futex resumed>) = 0 [pid 5329] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] memfd_create("syzkaller", 0 [pid 5332] close(4 [pid 5330] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] <... futex resumed>) = 0 [pid 5340] <... futex resumed>) = 0 [pid 5335] <... memfd_create resumed>) = 7 [pid 5332] <... close resumed>) = 0 [pid 5330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5340] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5332] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5335] <... mmap resumed>) = 0x7ff63668b000 [pid 5330] <... futex resumed>) = 0 [pid 5340] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5330] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5343] setpgid(0, 0 [pid 5340] <... mmap resumed>) = 0x20000000 [pid 5336] <... mkdir resumed>) = 0 [pid 5335] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5332] <... futex resumed>) = 0 [pid 5331] <... mmap resumed>) = 0x7ff6366ac000 [pid 5078] <... openat resumed>) = 3 [pid 5343] <... setpgid resumed>) = 0 [pid 5340] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] newfstatat(3, "", [pid 5340] <... futex resumed>) = 1 [pid 5332] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] <... futex resumed>) = 0 [pid 5343] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5340] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5335] <... write resumed>) = 65536 [pid 5331] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5330] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5330] <... futex resumed>) = 0 [pid 5078] getdents64(3, [pid 5335] munmap(0x7ff63668b000, 138412032 [pid 5078] <... getdents64 resumed>0x555556032850 /* 7 entries */, 32768) = 200 [pid 5335] <... munmap resumed>) = 0 [pid 5331] <... write resumed>) = 65536 [pid 5343] <... symlink resumed>) = 0 [pid 5331] munmap(0x7ff6366ac000, 138412032 [pid 5078] umount2("./8/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5335] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5335] <... openat resumed>) = 4 [pid 5331] <... munmap resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 5343] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5335] ioctl(4, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 5331] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5343] <... symlink resumed>) = 0 [pid 5335] ioctl(4, LOOP_CLR_FD [pid 5078] unlink("./8/cgroup.cpu" [pid 5343] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5335] <... ioctl resumed>) = 0 [pid 5331] <... openat resumed>) = 6 [pid 5331] ioctl(6, LOOP_SET_FD, 4 [pid 5078] <... unlink resumed>) = 0 [pid 5343] <... symlink resumed>) = 0 [pid 5078] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5331] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5331] ioctl(6, LOOP_CLR_FD [pid 5343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5335] ioctl(4, LOOP_SET_FD, 7 [pid 5331] <... ioctl resumed>) = 0 [pid 5335] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5343] <... openat resumed>) = 3 [pid 5340] memfd_create("syzkaller", 0 [pid 5335] close(4 [pid 5336] mount("/dev/loop0", 0x20000000, 0x200005c0, MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"... [pid 5078] <... umount2 resumed>) = 0 [pid 5343] write(3, "1000", 4 [pid 5340] <... memfd_create resumed>) = 6 [pid 5339] <... ioctl resumed>) = 0 [pid 5335] <... close resumed>) = 0 [pid 5333] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5344] <... futex resumed>) = 0 [pid 5343] <... write resumed>) = 4 [pid 5340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5339] close(3 [pid 5336] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5335] close(7 [pid 5333] <... futex resumed>) = 1 [pid 5331] ioctl(6, LOOP_SET_FD, 4 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5344] creat("./bus", 000 [pid 5343] close(3 [pid 5340] <... mmap resumed>) = 0x7ff63668b000 [pid 5339] <... close resumed>) = 0 [pid 5336] ioctl(5, LOOP_CLR_FD [pid 5335] <... close resumed>) = 0 [pid 5331] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(AT_FDCWD, "./8/bus", [pid 5339] mkdir("./file0", 0777 [pid 5335] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5331] close(6 [pid 5329] close(3 [pid 5078] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5335] <... futex resumed>) = 0 [pid 5331] <... close resumed>) = 0 [pid 5329] <... close resumed>) = 0 [pid 5078] unlink("./8/bus" [pid 5344] <... creat resumed>) = 3 [pid 5343] <... close resumed>) = 0 [pid 5335] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5331] close(4 [pid 5329] close(4 [pid 5343] read(200, [pid 5329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... unlink resumed>) = 0 [pid 5329] close(5 [pid 5078] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5343] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5331] <... close resumed>) = 0 [pid 5329] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5343] symlink("/dev/binderfs", "./binderfs" [pid 5336] <... ioctl resumed>) = 0 [pid 5331] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] close(6 [pid 5078] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5343] <... symlink resumed>) = 0 [pid 5329] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5331] <... futex resumed>) = 0 [pid 5336] close(5 [pid 5331] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5329] close(7 [pid 5078] unlink("./8/binderfs" [pid 5329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] close(3 [pid 5329] close(8 [pid 5328] <... close resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5336] <... close resumed>) = 0 [pid 5329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] close(4 [ 64.832662][ T5332] ext4 filesystem being mounted at /root/syzkaller.yTuF4i/7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.847166][ T5336] loop0: detected capacity change from 0 to 512 [ 64.864507][ T5339] loop1: detected capacity change from 0 to 512 [pid 5078] umount2("./8/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5340] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5329] close(9 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5344] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5339] <... mkdir resumed>) = 0 [pid 5336] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5344] <... futex resumed>) = 1 [pid 5343] <... futex resumed>) = 0 [pid 5340] <... write resumed>) = 65536 [pid 5339] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5336] <... futex resumed>) = 0 [pid 5333] <... futex resumed>) = 0 [pid 5329] close(10 [pid 5328] close(5 [pid 5078] newfstatat(AT_FDCWD, "./8/cgroup", [pid 5344] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5343] <... mmap resumed>) = 0x7ff63eaac000 [pid 5340] munmap(0x7ff63668b000, 138412032 [pid 5336] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] close(11 [pid 5328] <... close resumed>) = 0 [pid 5078] unlink("./8/cgroup" [pid 5344] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5343] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5340] <... munmap resumed>) = 0 [pid 5333] <... futex resumed>) = 0 [pid 5329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] close(6 [pid 5078] <... unlink resumed>) = 0 [pid 5344] <... mount resumed>) = 0 [pid 5343] <... mprotect resumed>) = 0 [pid 5340] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5333] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] close(12 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] umount2("./8/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5344] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5340] <... openat resumed>) = 5 [pid 5333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] close(7 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5344] <... futex resumed>) = 0 [pid 5333] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] close(13 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 5344] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5343] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5340] ioctl(5, LOOP_SET_FD, 6 [pid 5333] <... futex resumed>) = 0 [pid 5329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] close(8 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5340] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5329] close(14./strace-static-x86_64: Process 5345 attached [pid 5340] ioctl(5, LOOP_CLR_FD [pid 5329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] unlink("./8/cgroup.net" [pid 5345] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5344] <... open resumed>) = 5 [pid 5343] <... clone3 resumed> => {parent_tid=[28]}, 88) = 28 [pid 5340] <... ioctl resumed>) = 0 [pid 5333] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] close(15 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... unlink resumed>) = 0 [pid 5345] <... rseq resumed>) = 0 [pid 5344] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] rt_sigprocmask(SIG_SETMASK, [], [pid 5333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] close(9 [pid 5078] getdents64(3, [pid 5345] set_robust_list(0x7ff63eacc9a0, 24 [pid 5344] <... futex resumed>) = 0 [pid 5343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5329] close(16 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5345] <... set_robust_list resumed>) = 0 [pid 5344] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] ioctl(5, LOOP_SET_FD, 6 [pid 5333] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] close(10 [pid 5078] close(3 [pid 5345] rt_sigprocmask(SIG_SETMASK, [], [pid 5344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5343] <... futex resumed>) = 0 [pid 5340] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5333] <... futex resumed>) = 0 [pid 5329] close(17 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... close resumed>) = 0 [pid 5345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5344] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5343] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] close(5 [pid 5333] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] close(11 [pid 5078] rmdir("./8" [pid 5345] memfd_create("syzkaller", 0 [pid 5344] <... mmap resumed>) = 0x20000000 [pid 5343] <... futex resumed>) = 0 [pid 5340] <... close resumed>) = 0 [pid 5329] close(18 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... rmdir resumed>) = 0 [pid 5345] <... memfd_create resumed>) = 3 [pid 5343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5340] close(6 [pid 5329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] close(12 [pid 5345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5344] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5340] <... close resumed>) = 0 [pid 5329] close(19 [pid 5078] mkdir("./9", 0777 [pid 5329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5329] close(20) = -1 EBADF (Bad file descriptor) [pid 5329] close(21) = -1 EBADF (Bad file descriptor) [pid 5329] close(22) = -1 EBADF (Bad file descriptor) [pid 5329] close(23) = -1 EBADF (Bad file descriptor) [pid 5329] close(24) = -1 EBADF (Bad file descriptor) [pid 5329] close(25) = -1 EBADF (Bad file descriptor) [pid 5329] close(26) = -1 EBADF (Bad file descriptor) [pid 5329] close(27) = -1 EBADF (Bad file descriptor) [pid 5329] close(28) = -1 EBADF (Bad file descriptor) [pid 5329] close(29) = -1 EBADF (Bad file descriptor) [pid 5329] exit_group(0 [pid 5335] <... futex resumed>) = ? [pid 5332] <... futex resumed>) = ? [pid 5329] <... exit_group resumed>) = ? [pid 5345] <... mmap resumed>) = 0x7ff63668b000 [pid 5344] <... futex resumed>) = 1 [pid 5343] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5340] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] +++ exited with 0 +++ [pid 5333] <... futex resumed>) = 0 [pid 5332] +++ exited with 0 +++ [pid 5329] +++ exited with 0 +++ [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... mkdir resumed>) = 0 [pid 5328] close(13 [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5340] <... futex resumed>) = 0 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] close(14 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5078] <... openat resumed>) = 3 [pid 5074] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5340] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x555556032850 /* 8 entries */, 32768) = 232 [pid 5074] umount2("./7/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5328] close(15 [pid 5074] newfstatat(AT_FDCWD, "./7/cgroup.cpu", [pid 5343] <... mprotect resumed>) = 0 [pid 5330] close(3 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5330] <... close resumed>) = 0 [pid 5328] close(16 [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] unlink("./7/cgroup.cpu" [pid 5345] <... write resumed>) = 262144 [pid 5344] memfd_create("syzkaller", 0 [pid 5343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5339] <... mount resumed>) = 0 [pid 5333] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] close(4 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] close(3 [pid 5074] <... unlink resumed>) = 0 [pid 5345] munmap(0x7ff63668b000, 138412032 [pid 5339] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5333] <... futex resumed>) = 0 [pid 5344] <... memfd_create resumed>) = 6 [pid 5330] <... close resumed>) = 0 [pid 5328] close(17 [pid 5078] <... close resumed>) = 0 [pid 5343] <... clone3 resumed> => {parent_tid=[29]}, 88) = 29 [pid 5330] close(5 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5343] rt_sigprocmask(SIG_SETMASK, [], [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5328] close(18 [pid 5330] close(6 [pid 5343] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5345] <... munmap resumed>) = 0 [pid 5344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5343] <... futex resumed>) = 0 [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] close(19 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5339] <... openat resumed>) = -1 ENOENT (No such file or directory) ./strace-static-x86_64: Process 5348 attached [pid 5345] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5344] <... mmap resumed>) = 0x7ff63668b000 [pid 5343] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5330] close(7 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5348] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... umount2 resumed>) = 0 [pid 5348] <... rseq resumed>) = 0 [pid 5074] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5348] set_robust_list(0x7ff63eaab9a0, 24 [pid 5344] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5339] ioctl(4, LOOP_CLR_FD [pid 5345] <... openat resumed>) = 4 [pid 5330] close(8 [pid 5328] close(20 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5348] <... set_robust_list resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./7/bus", ./strace-static-x86_64: Process 5349 attached [pid 5348] rt_sigprocmask(SIG_SETMASK, [], [pid 5345] ioctl(4, LOOP_SET_FD, 3 [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5349] set_robust_list(0x5555560316a0, 24 [pid 5348] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 64.975554][ T5339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.990011][ T5339] ext4 filesystem being mounted at /root/syzkaller.tvsxpX/8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5330] close(9 [pid 5328] close(21 [pid 5074] unlink("./7/bus" [pid 5349] <... set_robust_list resumed>) = 0 [pid 5348] creat("./bus", 000 [pid 5074] <... unlink resumed>) = 0 [pid 5349] chdir("./9" [pid 5348] <... creat resumed>) = 5 [pid 5074] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./7/binderfs") = 0 [pid 5074] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5349] <... chdir resumed>) = 0 [pid 5348] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5345] <... ioctl resumed>) = 0 [pid 5344] <... write resumed>) = 65536 [pid 5339] <... ioctl resumed>) = 0 [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... clone resumed>, child_tidptr=0x555556031690) = 30 [pid 5349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5349] setpgid(0, 0) = 0 [pid 5349] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 5349] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 5349] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 5349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5349] write(3, "1000", 4 [pid 5348] <... futex resumed>) = 1 [pid 5328] close(22 [pid 5330] close(10) = -1 EBADF (Bad file descriptor) [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5349] <... write resumed>) = 4 [pid 5348] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] <... futex resumed>) = 0 [pid 5330] close(11 [pid 5328] close(23 [pid 5339] close(4 [pid 5345] close(3 [pid 5344] munmap(0x7ff63668b000, 138412032 [pid 5348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5343] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5339] <... close resumed>) = 0 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5349] close(3 [pid 5348] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5345] <... close resumed>) = 0 [pid 5344] <... munmap resumed>) = 0 [pid 5343] <... futex resumed>) = 0 [pid 5339] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] close(12 [pid 5328] close(24 [pid 5345] mkdir("./file0", 0777 [pid 5344] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5343] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5339] <... futex resumed>) = 0 [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5339] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] close(13 [pid 5328] close(25 [pid 5344] <... openat resumed>) = 4 [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5344] ioctl(4, LOOP_SET_FD, 6 [pid 5330] close(14 [pid 5328] close(26 [pid 5344] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5330] close(15 [pid 5328] close(27 [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5348] <... mount resumed>) = 0 [pid 5330] close(16 [pid 5328] close(28 [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5330] close(17) = -1 EBADF (Bad file descriptor) [pid 5328] close(29 [pid 5348] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] close(18 [pid 5328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] exit_group(0 [pid 5330] close(19 [pid 5349] <... close resumed>) = 0 [pid 5348] <... futex resumed>) = 1 [pid 5345] <... mkdir resumed>) = 0 [pid 5344] ioctl(4, LOOP_CLR_FD [pid 5343] <... futex resumed>) = 0 [pid 5334] <... futex resumed>) = ? [pid 5331] <... futex resumed>) = ? [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] <... exit_group resumed>) = ? [pid 5074] <... umount2 resumed>) = 0 [pid 5348] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5345] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5344] <... ioctl resumed>) = 0 [pid 5331] +++ exited with 0 +++ [pid 5330] close(20 [pid 5074] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5330] close(21) = -1 EBADF (Bad file descriptor) [pid 5074] newfstatat(AT_FDCWD, "./7/file0", [pid 5330] close(22 [pid 5349] read(200, [ 65.025342][ T5345] loop3: detected capacity change from 0 to 512 [ 65.039621][ T5074] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [pid 5343] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] +++ exited with 0 +++ [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5328] +++ exited with 0 +++ [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5349] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5348] <... futex resumed>) = 0 [pid 5344] ioctl(4, LOOP_SET_FD, 6 [pid 5343] <... futex resumed>) = 1 [pid 5330] close(23 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5349] symlink("/dev/binderfs", "./binderfs" [pid 5348] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5344] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5343] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5349] <... symlink resumed>) = 0 [pid 5344] close(4 [pid 5330] close(24 [pid 5349] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... open resumed>) = 3 [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5348] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... close resumed>) = 0 [pid 5330] close(25 [pid 5079] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5349] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff63eaac000 [pid 5349] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5344] close(6 [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(4, "", [pid 5348] <... futex resumed>) = 1 [pid 5343] <... futex resumed>) = 0 [pid 5330] close(26 [pid 5079] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] getdents64(4, [pid 5330] close(27 [pid 5349] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5348] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5345] <... mount resumed>) = 0 [pid 5344] <... close resumed>) = 0 [pid 5343] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5345] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5344] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] <... futex resumed>) = 0 [pid 5333] close(3 [pid 5330] close(28 [pid 5079] newfstatat(3, "", [pid 5074] getdents64(4, [pid 5349] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5348] <... mmap resumed>) = 0x20000000 [pid 5344] <... futex resumed>) = 0 [pid 5333] <... close resumed>) = 0 [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5344] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] close(4 [pid 5330] close(29 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] getdents64(3, [pid 5074] close(4 [pid 5333] close(5 [pid 5330] exit_group(0 [pid 5079] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5074] <... close resumed>) = 0 [pid 5349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5340] <... futex resumed>) = ? [pid 5336] <... futex resumed>) = ? [pid 5333] <... close resumed>) = 0 [pid 5330] <... exit_group resumed>) = ? [pid 5079] umount2("./8/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] rmdir("./7/file0"./strace-static-x86_64: Process 5352 attached [pid 5340] +++ exited with 0 +++ [pid 5336] +++ exited with 0 +++ [pid 5333] close(6 [pid 5330] +++ exited with 0 +++ [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5352] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5349] <... clone3 resumed> => {parent_tid=[31]}, 88) = 31 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 5074] <... rmdir resumed>) = 0 [pid 5352] <... rseq resumed>) = 0 [pid 5349] rt_sigprocmask(SIG_SETMASK, [], [pid 5333] close(7 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./7/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5352] set_robust_list(0x7ff63eacc9a0, 24 [pid 5349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5348] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5345] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5343] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] unlink("./8/cgroup.cpu" [pid 5352] <... set_robust_list resumed>) = 0 [pid 5349] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... futex resumed>) = 0 [pid 5345] ioctl(4, LOOP_CLR_FD [pid 5343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5333] close(8 [pid 5079] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5352] rt_sigprocmask(SIG_SETMASK, [], [pid 5349] <... futex resumed>) = 0 [pid 5348] memfd_create("syzkaller", 0 [pid 5345] <... ioctl resumed>) = 0 [pid 5343] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] newfstatat(AT_FDCWD, "./7/cgroup", [pid 5352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5349] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... memfd_create resumed>) = 6 [pid 5345] close(4 [pid 5343] <... futex resumed>) = 0 [pid 5333] close(9 [pid 5079] <... umount2 resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5352] memfd_create("syzkaller", 0 [pid 5349] <... futex resumed>) = 0 [pid 5348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5345] <... close resumed>) = 0 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./7/cgroup" [pid 5352] <... memfd_create resumed>) = 3 [pid 5349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5348] <... mmap resumed>) = 0x7ff63668b000 [pid 5345] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] close(10 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [ 65.099343][ T5345] ext4 filesystem being mounted at /root/syzkaller.hT4DtY/8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5349] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5348] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(AT_FDCWD, "./8/bus", [pid 5075] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./7/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5352] <... mmap resumed>) = 0x7ff63668b000 [pid 5349] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5345] <... futex resumed>) = 0 [pid 5333] close(11 [pid 5079] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5349] <... mprotect resumed>) = 0 [pid 5348] <... write resumed>) = 65536 [pid 5345] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] unlink("./8/bus" [pid 5075] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(AT_FDCWD, "./7/cgroup.net", [pid 5352] <... write resumed>) = 262144 [pid 5349] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5348] munmap(0x7ff63668b000, 138412032 [pid 5333] close(12 [pid 5079] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./7/cgroup.net" [pid 5349] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5333] close(13 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(3, "", [pid 5074] <... unlink resumed>) = 0 [pid 5349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5348] <... munmap resumed>) = 0 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, ./strace-static-x86_64: Process 5353 attached [pid 5352] munmap(0x7ff63668b000, 138412032 [pid 5348] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5333] close(14 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(3, [pid 5074] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5353] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5352] <... munmap resumed>) = 0 [pid 5349] <... clone3 resumed> => {parent_tid=[32]}, 88) = 32 [pid 5348] <... openat resumed>) = 4 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] unlink("./8/binderfs" [pid 5075] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5074] close(3 [pid 5353] <... rseq resumed>) = 0 [pid 5352] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5349] rt_sigprocmask(SIG_SETMASK, [], [pid 5348] ioctl(4, LOOP_SET_FD, 6 [pid 5333] close(15 [pid 5079] <... unlink resumed>) = 0 [pid 5075] umount2("./8/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5353] set_robust_list(0x7ff63eaab9a0, 24 [pid 5352] <... openat resumed>) = 4 [pid 5349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5348] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./7" [pid 5353] <... set_robust_list resumed>) = 0 [pid 5352] ioctl(4, LOOP_SET_FD, 3 [pid 5349] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] ioctl(4, LOOP_CLR_FD [pid 5333] close(16 [pid 5349] <... futex resumed>) = 0 [pid 5349] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... rmdir resumed>) = 0 [pid 5333] close(17 [pid 5348] <... ioctl resumed>) = 0 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 5074] mkdir("./8", 0777 [pid 5353] rt_sigprocmask(SIG_SETMASK, [], [pid 5352] <... ioctl resumed>) = 0 [pid 5333] close(18 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5352] close(3 [pid 5353] creat("./bus", 000 [pid 5352] <... close resumed>) = 0 [pid 5075] unlink("./8/cgroup.cpu" [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5348] ioctl(4, LOOP_SET_FD, 6 [pid 5074] <... openat resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 5352] mkdir("./file0", 0777 [pid 5348] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5348] close(4) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5353] <... creat resumed>) = 3 [pid 5352] <... mkdir resumed>) = 0 [pid 5348] close(6 [pid 5353] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] close(3 [pid 5353] <... futex resumed>) = 1 [pid 5349] <... futex resumed>) = 0 [pid 5348] <... close resumed>) = 0 [pid 5333] close(19 [pid 5079] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5348] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5354 attached [pid 5348] <... futex resumed>) = 0 [pid 5333] close(20 [pid 5079] newfstatat(AT_FDCWD, "./8/file0", [pid 5075] newfstatat(AT_FDCWD, "./8/bus", [pid 5354] set_robust_list(0x5555560316a0, 24 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5354] <... set_robust_list resumed>) = 0 [pid 5353] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] close(21 [pid 5079] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556031690) = 30 [pid 5354] chdir("./8" [pid 5353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5349] <... futex resumed>) = 0 [pid 5354] <... chdir resumed>) = 0 [pid 5353] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5349] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5354] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5353] <... mount resumed>) = 0 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5343] close(3 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./8/bus" [pid 5354] <... prctl resumed>) = 0 [pid 5354] setpgid(0, 0 [pid 5353] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] <... setpgid resumed>) = 0 [pid 5354] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5353] <... futex resumed>) = 1 [ 65.191022][ T5352] loop4: detected capacity change from 0 to 512 [pid 5343] <... close resumed>) = 0 [pid 5333] close(22 [pid 5079] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... unlink resumed>) = 0 [pid 5353] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] <... futex resumed>) = 0 [pid 5343] close(4 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... openat resumed>) = 4 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5333] close(23 [pid 5079] newfstatat(4, "", [pid 5343] close(5 [pid 5075] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5354] <... symlink resumed>) = 0 [pid 5353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5349] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5353] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5349] <... futex resumed>) = 0 [pid 5343] <... close resumed>) = 0 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5354] <... symlink resumed>) = 0 [pid 5353] <... open resumed>) = 5 [pid 5349] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5354] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5353] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5333] close(24 [pid 5079] getdents64(4, [pid 5354] <... symlink resumed>) = 0 [pid 5353] <... futex resumed>) = 0 [pid 5349] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5353] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5343] close(6 [pid 5333] close(25 [pid 5079] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] getdents64(4, [pid 5075] unlink("./8/binderfs" [pid 5343] close(7 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5353] <... mmap resumed>) = 0x20000000 [pid 5349] <... futex resumed>) = 0 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5333] close(26 [pid 5079] close(4 [pid 5075] <... unlink resumed>) = 0 [pid 5354] <... openat resumed>) = 3 [pid 5353] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... close resumed>) = 0 [pid 5354] write(3, "1000", 4 [pid 5353] <... futex resumed>) = 0 [pid 5354] <... write resumed>) = 4 [pid 5353] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5343] close(8 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] rmdir("./8/file0" [pid 5354] close(3 [pid 5349] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] <... close resumed>) = 0 [pid 5349] <... futex resumed>) = 1 [pid 5354] read(200, [pid 5353] <... futex resumed>) = 0 [pid 5354] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5353] memfd_create("syzkaller", 0 [pid 5354] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5354] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... memfd_create resumed>) = 6 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5333] close(27 [pid 5079] <... rmdir resumed>) = 0 [pid 5075] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5343] close(9 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5333] close(28 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5354] <... futex resumed>) = 0 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] newfstatat(AT_FDCWD, "./8/file0", [pid 5343] close(10 [pid 5354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5333] close(29 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5343] close(11 [pid 5333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5354] <... mmap resumed>) = 0x7ff63eaac000 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5333] exit_group(0 [pid 5343] close(12 [pid 5333] <... exit_group resumed>) = ? [pid 5344] <... futex resumed>) = ? [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5339] <... futex resumed>) = ? [pid 5354] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5344] +++ exited with 0 +++ [pid 5354] <... mprotect resumed>) = 0 [pid 5354] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} => {parent_tid=[31]}, 88) = 31 [pid 5354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5354] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5354] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff63ea8b000 [pid 5354] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5354] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5343] close(13 [pid 5354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0}./strace-static-x86_64: Process 5356 attached [pid 5356] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5354] <... clone3 resumed> => {parent_tid=[32]}, 88) = 32 [pid 5356] <... rseq resumed>) = 0 [pid 5354] rt_sigprocmask(SIG_SETMASK, [], [pid 5356] set_robust_list(0x7ff63eaab9a0, 24 [pid 5354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5356] <... set_robust_list resumed>) = 0 [pid 5354] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] rt_sigprocmask(SIG_SETMASK, [], [pid 5354] <... futex resumed>) = 0 [pid 5356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5354] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] creat("./bus", 000) = 3 [pid 5356] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5354] <... futex resumed>) = 0 [pid 5353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5356] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5354] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... mmap resumed>) = 0x7ff63668b000 [pid 5356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5354] <... futex resumed>) = 0 [pid 5356] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5354] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5353] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5079] umount2("./8/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5356] <... mount resumed>) = 0 [pid 5343] close(14 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5355 attached [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(AT_FDCWD, "./8/cgroup", [pid 5075] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5355] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5343] close(15 [pid 5339] +++ exited with 0 +++ [pid 5333] +++ exited with 0 +++ [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5355] <... rseq resumed>) = 0 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] unlink("./8/cgroup" [pid 5075] <... openat resumed>) = 4 [pid 5355] set_robust_list(0x7ff63eacc9a0, 24 [pid 5343] close(16 [pid 5356] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] <... set_robust_list resumed>) = 0 [pid 5353] <... write resumed>) = 65536 [pid 5352] <... mount resumed>) = -1 EBADMSG (Bad message) [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... unlink resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5356] <... futex resumed>) = 1 [pid 5355] rt_sigprocmask(SIG_SETMASK, [], [pid 5354] <... futex resumed>) = 0 [pid 5353] munmap(0x7ff63668b000, 138412032 [pid 5352] ioctl(4, LOOP_CLR_FD [pid 5343] close(17 [pid 5079] umount2("./8/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5356] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5354] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... munmap resumed>) = 0 [pid 5352] <... ioctl resumed>) = 0 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5355] memfd_create("syzkaller", 0 [pid 5354] <... futex resumed>) = 0 [pid 5353] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5352] close(4 [pid 5343] close(18 [pid 5079] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5356] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5355] <... memfd_create resumed>) = 4 [pid 5354] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5353] <... openat resumed>) = 7 [pid 5352] <... close resumed>) = 0 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5356] <... open resumed>) = 5 [pid 5355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5353] ioctl(7, LOOP_SET_FD, 6 [pid 5352] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] close(19 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5073] <... restart_syscall resumed>) = 0 [pid 5356] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5352] <... futex resumed>) = 0 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] unlink("./8/cgroup.net" [pid 5075] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5356] <... futex resumed>) = 1 [pid 5354] <... futex resumed>) = 0 [pid 5353] ioctl(7, LOOP_CLR_FD [pid 5352] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] close(20 [pid 5356] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5354] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... ioctl resumed>) = 0 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... unlink resumed>) = 0 [pid 5075] close(4 [pid 5356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5354] <... futex resumed>) = 0 [pid 5343] close(21 [pid 5079] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5073] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5356] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5355] <... mmap resumed>) = 0x7ff63668b000 [pid 5354] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5356] <... mmap resumed>) = 0x20000000 [pid 5355] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000f02} --- [pid 5343] close(22 [pid 5079] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5075] rmdir("./8/file0" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5353] ioctl(7, LOOP_SET_FD, 6 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5353] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5343] close(23 [pid 5079] <... close resumed>) = 0 [pid 5075] umount2("./8/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] rmdir("./8" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(3, "", [pid 5353] close(7 [pid 5343] close(24 [pid 5079] <... rmdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./8/cgroup", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5353] <... close resumed>) = 0 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5353] close(6 [pid 5343] close(25 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(3, [pid 5353] <... close resumed>) = 0 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 65.243389][ T5352] EXT4-fs warning (device loop4): read_mmp_block:114: Error -74 while reading MMP block 12 [pid 5075] unlink("./8/cgroup" [pid 5073] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5353] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] close(26 [pid 5079] mkdir("./9", 0777 [pid 5353] <... futex resumed>) = 0 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... unlink resumed>) = 0 [pid 5073] umount2("./8/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5353] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] close(27 [pid 5079] <... mkdir resumed>) = 0 [pid 5075] umount2("./8/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5349] close(3 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 5349] <... close resumed>) = 0 [pid 5343] close(28 [pid 5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5349] close(4 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./8/cgroup.cpu" [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5343] close(29 [pid 5075] unlink("./8/cgroup.net" [pid 5073] <... unlink resumed>) = 0 [pid 5349] close(5 [pid 5343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5075] <... unlink resumed>) = 0 [pid 5073] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5349] <... close resumed>) = 0 [pid 5343] exit_group(0 [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5349] close(6 [pid 5348] <... futex resumed>) = ? [pid 5345] <... futex resumed>) = ? [pid 5343] <... exit_group resumed>) = ? [pid 5075] getdents64(3, [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5348] +++ exited with 0 +++ [pid 5345] +++ exited with 0 +++ [pid 5343] +++ exited with 0 +++ [pid 5079] close(3 [pid 5075] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] close(3 [pid 5073] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./8/bus", [pid 5077] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./8" [pid 5073] unlink("./8/bus" [pid 5077] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5349] close(7 [pid 5077] <... openat resumed>) = 3 [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5349] close(8) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5357 attached [pid 5077] newfstatat(3, "", [pid 5075] mkdir("./9", 0777 [pid 5073] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5357] set_robust_list(0x5555560316a0, 24 [pid 5079] <... clone resumed>, child_tidptr=0x555556031690) = 30 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5357] <... set_robust_list resumed>) = 0 [pid 5077] getdents64(3, 0x555556032850 /* 8 entries */, 32768) = 232 [pid 5357] chdir("./9" [pid 5077] umount2("./8/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5357] <... chdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] unlink("./8/binderfs" [pid 5357] <... prctl resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5357] setpgid(0, 0 [pid 5077] unlink("./8/cgroup.cpu" [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... unlink resumed>) = 0 [pid 5357] <... setpgid resumed>) = 0 [pid 5349] close(9 [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5349] close(10) = -1 EBADF (Bad file descriptor) [pid 5349] close(11 [pid 5357] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5073] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5357] <... symlink resumed>) = 0 [pid 5349] close(12 [pid 5075] <... close resumed>) = 0 [pid 5357] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5349] close(13 [pid 5357] <... symlink resumed>) = 0 [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5358 attached [pid 5357] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5349] close(14 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = 0 [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5358] set_robust_list(0x5555560316a0, 24 [pid 5357] <... symlink resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556031690) = 30 [pid 5357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5357] write(3, "1000", 4) = 4 [pid 5357] close(3) = 0 [pid 5357] read(200, 0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5357] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5357] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] newfstatat(AT_FDCWD, "./8/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5357] <... futex resumed>) = 0 [pid 5357] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] unlink("./8/bus") = 0 [pid 5357] <... mmap resumed>) = 0x7ff63eaac000 [pid 5073] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5357] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5349] close(15 [pid 5073] newfstatat(AT_FDCWD, "./8/file0", [pid 5358] <... set_robust_list resumed>) = 0 [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5358] chdir("./9" [pid 5357] <... mprotect resumed>) = 0 [pid 5349] close(16 [pid 5077] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5358] <... chdir resumed>) = 0 [pid 5349] close(17 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5358] <... prctl resumed>) = 0 [pid 5349] close(18 [pid 5358] setpgid(0, 0 [pid 5357] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./8/binderfs" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5358] <... setpgid resumed>) = 0 [pid 5357] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5349] close(19 [pid 5077] <... unlink resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5358] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5357] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5359 attached [pid 5358] <... symlink resumed>) = 0 [pid 5349] close(20 [pid 5073] newfstatat(4, "", [pid 5357] <... clone3 resumed> => {parent_tid=[31]}, 88) = 31 [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5358] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5357] rt_sigprocmask(SIG_SETMASK, [], [pid 5349] close(21 [pid 5073] getdents64(4, [pid 5358] <... symlink resumed>) = 0 [pid 5357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5358] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5357] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] close(22 [pid 5073] getdents64(4, [pid 5358] <... symlink resumed>) = 0 [pid 5357] <... futex resumed>) = 0 [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5357] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] close(23 [pid 5073] close(4 [pid 5357] <... futex resumed>) = 0 [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... close resumed>) = 0 [pid 5359] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5357] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5349] close(24 [pid 5358] <... openat resumed>) = 3 [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5358] write(3, "1000", 4 [pid 5349] close(25) = -1 EBADF (Bad file descriptor) [pid 5349] close(26) = -1 EBADF (Bad file descriptor) [pid 5349] close(27 [pid 5359] <... rseq resumed>) = 0 [pid 5358] <... write resumed>) = 4 [pid 5357] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = 0 [pid 5073] rmdir("./8/file0" [pid 5357] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5349] close(28 [pid 5073] <... rmdir resumed>) = 0 [pid 5359] set_robust_list(0x7ff63eacc9a0, 24 [pid 5349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5349] close(29) = -1 EBADF (Bad file descriptor) [pid 5358] close(3 [pid 5359] <... set_robust_list resumed>) = 0 [pid 5358] <... close resumed>) = 0 [pid 5357] <... mprotect resumed>) = 0 [pid 5349] exit_group(0 [pid 5359] rt_sigprocmask(SIG_SETMASK, [], [pid 5358] read(200, [pid 5357] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5353] <... futex resumed>) = ? [pid 5352] <... futex resumed>) = ? [pid 5349] <... exit_group resumed>) = ? [pid 5359] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5358] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5357] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5353] +++ exited with 0 +++ [pid 5352] +++ exited with 0 +++ [pid 5077] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./8/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5357] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5357] <... clone3 resumed> => {parent_tid=[32]}, 88) = 32 [pid 5077] newfstatat(AT_FDCWD, "./8/file0", [pid 5357] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] newfstatat(AT_FDCWD, "./8/cgroup", ./strace-static-x86_64: Process 5360 attached [pid 5359] memfd_create("syzkaller", 0 [pid 5358] symlink("/dev/binderfs", "./binderfs" [pid 5357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5357] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] unlink("./8/cgroup" [pid 5360] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5358] <... symlink resumed>) = 0 [pid 5357] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5360] <... rseq resumed>) = 0 [pid 5359] <... memfd_create resumed>) = 3 [pid 5358] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... unlink resumed>) = 0 [pid 5360] set_robust_list(0x7ff63eaab9a0, 24 [pid 5359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5358] <... futex resumed>) = 0 [pid 5360] <... set_robust_list resumed>) = 0 [pid 5360] rt_sigprocmask(SIG_SETMASK, [], [pid 5359] <... mmap resumed>) = 0x7ff63668b000 [pid 5358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./8/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5360] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(4, "", [pid 5073] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5358] <... mmap resumed>) = 0x7ff63eaac000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5358] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5077] getdents64(4, [pid 5073] unlink("./8/cgroup.net" [pid 5077] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5073] <... unlink resumed>) = 0 [pid 5358] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5349] +++ exited with 0 +++ [pid 5358] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5360] creat("./bus", 000./strace-static-x86_64: Process 5361 attached [pid 5361] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5358] <... clone3 resumed> => {parent_tid=[31]}, 88) = 31 [pid 5361] <... rseq resumed>) = 0 [pid 5358] rt_sigprocmask(SIG_SETMASK, [], [pid 5361] set_robust_list(0x7ff63eacc9a0, 24 [pid 5358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5361] <... set_robust_list resumed>) = 0 [pid 5358] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] rt_sigprocmask(SIG_SETMASK, [], [pid 5358] <... futex resumed>) = 0 [pid 5361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5358] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] memfd_create("syzkaller", 0 [pid 5358] <... futex resumed>) = 0 [pid 5077] getdents64(4, [pid 5073] getdents64(3, [pid 5361] <... memfd_create resumed>) = 3 [pid 5358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5358] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5073] close(3 [pid 5361] <... mmap resumed>) = 0x7ff63668b000 [pid 5358] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5073] <... close resumed>) = 0 [pid 5077] close(4 [pid 5073] rmdir("./8" [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./8/file0" [pid 5361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5073] <... rmdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] umount2("./8/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] mkdir("./9", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 5360] <... creat resumed>) = 4 [pid 5360] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5360] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5357] <... futex resumed>) = 0 [pid 5357] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... futex resumed>) = 0 [pid 5357] <... futex resumed>) = 1 [pid 5360] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5077] newfstatat(AT_FDCWD, "./8/cgroup", [pid 5360] <... mount resumed>) = 0 [pid 5357] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5358] <... mprotect resumed>) = 0 [pid 5077] unlink("./8/cgroup" [pid 5073] <... openat resumed>) = 3 [pid 5358] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0}./strace-static-x86_64: Process 5362 attached [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5077] umount2("./8/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5360] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5360] <... futex resumed>) = 1 [pid 5357] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 5362] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5358] <... clone3 resumed> => {parent_tid=[32]}, 88) = 32 [pid 5357] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 5073] <... close resumed>) = 0 [pid 5362] <... rseq resumed>) = 0 [pid 5360] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5358] rt_sigprocmask(SIG_SETMASK, [], [pid 5357] <... futex resumed>) = 0 [pid 5078] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5360] <... open resumed>) = 5 [pid 5357] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5362] set_robust_list(0x7ff63eaab9a0, 24 [pid 5078] <... openat resumed>) = 3 [pid 5358] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] newfstatat(3, "", [pid 5362] <... set_robust_list resumed>) = 0 [pid 5358] <... futex resumed>) = 0 [pid 5362] rt_sigprocmask(SIG_SETMASK, [], [pid 5358] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5361] <... write resumed>) = 262144 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] unlink("./8/cgroup.net") = 0 [pid 5078] getdents64(3, [pid 5077] getdents64(3, [pid 5359] <... write resumed>) = 262144 [pid 5078] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5077] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5363 attached [pid 5363] set_robust_list(0x5555560316a0, 24 [pid 5078] umount2("./9/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5363] <... set_robust_list resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555556031690) = 30 [pid 5363] chdir("./9" [pid 5362] creat("./bus", 000 [pid 5361] munmap(0x7ff63668b000, 138412032 [pid 5078] newfstatat(AT_FDCWD, "./9/cgroup.cpu", [pid 5363] <... chdir resumed>) = 0 [pid 5360] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] munmap(0x7ff63668b000, 138412032 [pid 5077] rmdir("./8" [pid 5363] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5362] <... creat resumed>) = 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5363] <... prctl resumed>) = 0 [pid 5362] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] <... munmap resumed>) = 0 [pid 5360] <... futex resumed>) = 1 [pid 5359] <... munmap resumed>) = 0 [pid 5357] <... futex resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5363] setpgid(0, 0 [pid 5078] unlink("./9/cgroup.cpu" [pid 5363] <... setpgid resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5363] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5078] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5363] <... symlink resumed>) = 0 [pid 5077] mkdir("./9", 0777 [pid 5363] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5077] <... mkdir resumed>) = 0 [pid 5363] <... symlink resumed>) = 0 [pid 5363] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5360] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5357] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5363] <... symlink resumed>) = 0 [pid 5361] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5358] <... futex resumed>) = 0 [pid 5357] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5362] <... futex resumed>) = 1 [pid 5361] <... openat resumed>) = 5 [pid 5360] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5359] <... openat resumed>) = 6 [pid 5358] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5357] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5363] <... openat resumed>) = 3 [pid 5362] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5361] ioctl(5, LOOP_SET_FD, 3 [pid 5360] <... mmap resumed>) = 0x20000000 [pid 5359] ioctl(6, LOOP_SET_FD, 3 [pid 5358] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5360] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] newfstatat(AT_FDCWD, "./9/bus", [pid 5363] write(3, "1000", 4 [pid 5078] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5363] <... write resumed>) = 4 [pid 5078] unlink("./9/bus" [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5363] close(3 [pid 5078] <... unlink resumed>) = 0 [pid 5077] close(3 [pid 5363] <... close resumed>) = 0 [pid 5358] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5363] read(200, [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5363] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5363] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5363] <... symlink resumed>) = 0 [pid 5078] unlink("./9/binderfs") = 0 ./strace-static-x86_64: Process 5364 attached [pid 5363] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5362] <... mount resumed>) = 0 [pid 5363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5364] set_robust_list(0x5555560316a0, 24 [pid 5363] <... mmap resumed>) = 0x7ff63eaac000 [pid 5360] <... futex resumed>) = 1 [pid 5359] <... ioctl resumed>) = 0 [pid 5357] <... futex resumed>) = 0 [pid 5078] newfstatat(AT_FDCWD, "./9/file0", [pid 5077] <... clone resumed>, child_tidptr=0x555556031690) = 30 [pid 5364] <... set_robust_list resumed>) = 0 [pid 5363] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5362] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] <... ioctl resumed>) = 0 [pid 5357] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] chdir("./9" [pid 5363] <... mprotect resumed>) = 0 [pid 5362] <... futex resumed>) = 1 [pid 5361] close(3 [pid 5359] close(3 [pid 5358] <... futex resumed>) = 0 [pid 5357] <... futex resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5364] <... chdir resumed>) = 0 [pid 5363] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5078] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5364] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5363] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5364] <... prctl resumed>) = 0 [pid 5363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5078] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5365 attached [pid 5364] setpgid(0, 0 [pid 5359] <... close resumed>) = 0 [pid 5365] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5359] mkdir(0x20000000, 0777 [pid 5360] memfd_create("syzkaller", 0 [pid 5365] <... rseq resumed>) = 0 [pid 5364] <... setpgid resumed>) = 0 [pid 5362] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5361] <... close resumed>) = 0 [pid 5358] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... openat resumed>) = 4 [pid 5365] set_robust_list(0x7ff63eacc9a0, 24 [pid 5364] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5363] <... clone3 resumed> => {parent_tid=[31]}, 88) = 31 [pid 5362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5361] mkdir("./file0", 0777 [pid 5360] <... memfd_create resumed>) = 3 [pid 5359] <... mkdir resumed>) = 0 [pid 5358] <... futex resumed>) = 0 [pid 5078] newfstatat(4, "", [pid 5365] <... set_robust_list resumed>) = 0 [pid 5364] <... symlink resumed>) = 0 [pid 5363] rt_sigprocmask(SIG_SETMASK, [], [pid 5362] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5361] <... mkdir resumed>) = 0 [pid 5360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5359] mount("/dev/loop5", 0x20000000, 0x200005c0, MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"... [pid 5358] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 65.499865][ T5359] loop5: detected capacity change from 0 to 512 [ 65.506814][ T5361] loop0: detected capacity change from 0 to 512 [pid 5365] rt_sigprocmask(SIG_SETMASK, [], [pid 5364] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5362] <... open resumed>) = 3 [pid 5361] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5360] <... mmap resumed>) = 0x7ff63668b000 [pid 5078] getdents64(4, [pid 5365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5364] <... symlink resumed>) = 0 [pid 5363] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5365] memfd_create("syzkaller", 0 [pid 5364] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5363] <... futex resumed>) = 0 [pid 5362] <... futex resumed>) = 1 [pid 5360] <... write resumed>) = 65536 [pid 5358] <... futex resumed>) = 0 [pid 5365] <... memfd_create resumed>) = 3 [pid 5363] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5360] munmap(0x7ff63668b000, 138412032 [pid 5358] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff6366ac000 [pid 5364] <... symlink resumed>) = 0 [pid 5363] <... futex resumed>) = 0 [pid 5360] <... munmap resumed>) = 0 [pid 5078] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] getdents64(4, [pid 5364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5363] <... mmap resumed>) = 0x7ff63668b000 [pid 5078] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5364] <... openat resumed>) = 3 [pid 5363] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5358] <... futex resumed>) = 0 [pid 5078] close(4 [pid 5363] <... mprotect resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5362] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5360] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5358] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] rmdir("./9/file0" [pid 5363] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5078] <... rmdir resumed>) = 0 [pid 5364] write(3, "1000", 4 [pid 5363] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5078] umount2("./9/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5364] <... write resumed>) = 4 [pid 5363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5362] <... mmap resumed>) = 0x20000000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5364] close(3 [pid 5078] newfstatat(AT_FDCWD, "./9/cgroup", [pid 5364] <... close resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5364] read(200, [pid 5363] <... clone3 resumed> => {parent_tid=[32]}, 88) = 32 [pid 5078] unlink("./9/cgroup" [pid 5364] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5363] rt_sigprocmask(SIG_SETMASK, [], [pid 5078] <... unlink resumed>) = 0 [pid 5364] symlink("/dev/binderfs", "./binderfs" [pid 5363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5362] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... openat resumed>) = 7 [pid 5078] umount2("./9/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5367 attached [pid 5364] <... symlink resumed>) = 0 [pid 5363] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] newfstatat(AT_FDCWD, "./9/cgroup.net", [pid 5364] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] <... futex resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5364] <... futex resumed>) = 0 [pid 5078] unlink("./9/cgroup.net" [pid 5364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5363] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... unlink resumed>) = 0 [pid 5364] <... mmap resumed>) = 0x7ff63eaac000 [pid 5078] getdents64(3, [pid 5364] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5078] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5078] close(3 [pid 5364] <... mprotect resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5364] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5078] rmdir("./9" [pid 5364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5078] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5370 attached [pid 5078] mkdir("./10", 0777 [pid 5367] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5365] <... write resumed>) = 262144 [pid 5360] ioctl(7, LOOP_SET_FD, 3 [pid 5078] <... mkdir resumed>) = 0 [pid 5370] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5364] <... clone3 resumed> => {parent_tid=[31]}, 88) = 31 [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5370] <... rseq resumed>) = 0 [pid 5367] <... rseq resumed>) = 0 [pid 5365] munmap(0x7ff6366ac000, 138412032 [pid 5364] rt_sigprocmask(SIG_SETMASK, [], [pid 5360] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... openat resumed>) = 3 [pid 5370] set_robust_list(0x7ff63eacc9a0, 24 [pid 5364] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5370] <... set_robust_list resumed>) = 0 [pid 5367] set_robust_list(0x7ff6366ab9a0, 24 [pid 5364] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] ioctl(7, LOOP_CLR_FD [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5370] rt_sigprocmask(SIG_SETMASK, [], [pid 5365] <... munmap resumed>) = 0 [pid 5364] <... futex resumed>) = 0 [pid 5360] <... ioctl resumed>) = 0 [pid 5367] <... set_robust_list resumed>) = 0 [pid 5078] close(3 [pid 5370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5367] rt_sigprocmask(SIG_SETMASK, [], [pid 5365] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5364] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] <... futex resumed>) = 1 [pid 5361] <... mount resumed>) = 0 [pid 5362] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5361] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5370] memfd_create("syzkaller", 0 [pid 5365] <... openat resumed>) = 4 [pid 5364] <... futex resumed>) = 0 [pid 5361] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5078] <... close resumed>) = 0 [pid 5370] <... memfd_create resumed>) = 3 [pid 5367] creat("./bus", 000 [pid 5365] ioctl(4, LOOP_SET_FD, 3 [pid 5364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5361] ioctl(5, LOOP_CLR_FD [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5364] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5361] <... ioctl resumed>) = 0 [pid 5360] ioctl(7, LOOP_SET_FD, 3 [pid 5370] <... mmap resumed>) = 0x7ff63668b000 [pid 5364] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5361] close(5./strace-static-x86_64: Process 5371 attached [pid 5370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5361] <... close resumed>) = 0 [pid 5361] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5371] set_robust_list(0x5555560316a0, 24 [pid 5361] <... futex resumed>) = 0 [pid 5360] close(7 [pid 5078] <... clone resumed>, child_tidptr=0x555556031690) = 33 [pid 5371] <... set_robust_list resumed>) = 0 [pid 5364] <... mprotect resumed>) = 0 [pid 5361] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5360] <... close resumed>) = 0 [pid 5371] chdir("./10") = 0 [pid 5370] <... write resumed>) = 262144 [pid 5364] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5360] close(3 [pid 5359] <... mount resumed>) = -1 ENODEV (No such device) [pid 5371] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5360] <... close resumed>) = 0 [pid 5359] ioctl(6, LOOP_CLR_FD [pid 5358] <... futex resumed>) = 0 [pid 5371] <... prctl resumed>) = 0 [pid 5367] <... creat resumed>) = 5 [pid 5365] <... ioctl resumed>) = 0 [pid 5360] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] <... ioctl resumed>) = 0 [pid 5358] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] setpgid(0, 0 [pid 5367] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] close(3 [pid 5361] <... futex resumed>) = 0 [pid 5360] <... futex resumed>) = 0 [pid 5359] close(6 [pid 5358] <... futex resumed>) = 1 [pid 5371] <... setpgid resumed>) = 0 [pid 5370] munmap(0x7ff63668b000, 138412032 [pid 5367] <... futex resumed>) = 1 [pid 5365] <... close resumed>) = 0 [pid 5364] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5363] <... futex resumed>) = 0 [pid 5361] memfd_create("syzkaller", 0 [pid 5360] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] <... close resumed>) = 0 [pid 5371] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5370] <... munmap resumed>) = 0 [pid 5361] <... memfd_create resumed>) = 5 [pid 5359] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] <... symlink resumed>) = 0 [pid 5370] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5367] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5365] mkdir("./file0", 0777 [pid 5364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5363] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5359] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5372 attached [pid 5371] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5370] <... openat resumed>) = 4 [pid 5367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5365] <... mkdir resumed>) = 0 [pid 5363] <... futex resumed>) = 0 [pid 5361] <... mmap resumed>) = 0x7ff63668b000 [pid 5359] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5357] close(3 [ 65.586586][ T5361] ext4 filesystem being mounted at /root/syzkaller.p47fVk/9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.614622][ T5365] loop1: detected capacity change from 0 to 512 [pid 5372] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5371] <... symlink resumed>) = 0 [pid 5370] ioctl(4, LOOP_SET_FD, 3 [pid 5367] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5364] <... clone3 resumed> => {parent_tid=[32]}, 88) = 32 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5372] <... rseq resumed>) = 0 [pid 5371] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5370] <... ioctl resumed>) = 0 [pid 5367] <... mount resumed>) = 0 [pid 5365] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5364] rt_sigprocmask(SIG_SETMASK, [], [pid 5363] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5361] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5357] close(4 [pid 5371] <... symlink resumed>) = 0 [pid 5372] set_robust_list(0x7ff63eaab9a0, 24 [pid 5370] close(3 [pid 5364] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5361] <... write resumed>) = 65536 [pid 5357] <... close resumed>) = 0 [pid 5367] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5367] <... futex resumed>) = 1 [pid 5363] <... futex resumed>) = 0 [pid 5367] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5357] close(5 [pid 5372] <... set_robust_list resumed>) = 0 [pid 5371] <... openat resumed>) = 3 [pid 5370] <... close resumed>) = 0 [pid 5367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5364] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5357] <... close resumed>) = 0 [pid 5361] munmap(0x7ff63668b000, 138412032 [pid 5372] rt_sigprocmask(SIG_SETMASK, [], [pid 5371] write(3, "1000", 4 [pid 5370] mkdir("./file0", 0777 [pid 5367] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5364] <... futex resumed>) = 0 [pid 5363] <... futex resumed>) = 0 [pid 5357] close(6 [pid 5372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5371] <... write resumed>) = 4 [pid 5370] <... mkdir resumed>) = 0 [pid 5363] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5361] <... munmap resumed>) = 0 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5367] <... open resumed>) = 3 [pid 5367] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5357] close(7 [pid 5361] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5361] <... openat resumed>) = 6 [pid 5357] close(8 [pid 5367] <... futex resumed>) = 1 [pid 5363] <... futex resumed>) = 0 [pid 5361] ioctl(6, LOOP_SET_FD, 5 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5367] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5357] close(9 [pid 5363] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5361] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5357] close(10 [pid 5361] ioctl(6, LOOP_CLR_FD [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5367] <... futex resumed>) = 0 [pid 5363] <... futex resumed>) = 1 [pid 5367] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5357] close(11) = -1 EBADF (Bad file descriptor) [pid 5363] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5357] close(12) = -1 EBADF (Bad file descriptor) [pid 5357] close(13 [pid 5371] close(3 [pid 5367] <... mmap resumed>) = 0x20000000 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5371] <... close resumed>) = 0 [pid 5357] close(14 [pid 5372] creat("./bus", 000 [pid 5371] read(200, [pid 5370] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5364] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5372] <... creat resumed>) = 3 [pid 5371] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5367] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] <... ioctl resumed>) = 0 [pid 5357] close(15 [pid 5371] symlink("/dev/binderfs", "./binderfs" [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 65.650508][ T5370] loop3: detected capacity change from 0 to 512 [pid 5372] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] <... symlink resumed>) = 0 [pid 5367] <... futex resumed>) = 1 [pid 5363] <... futex resumed>) = 0 [pid 5357] close(16 [pid 5354] <... futex resumed>) = ? [pid 5371] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5372] <... futex resumed>) = 1 [pid 5371] <... mmap resumed>) = 0x7ff63eaac000 [pid 5364] <... futex resumed>) = 0 [pid 5372] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5371] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5364] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5372] <... mount resumed>) = 0 [pid 5371] <... mprotect resumed>) = 0 [pid 5364] <... futex resumed>) = 0 [pid 5356] +++ killed by SIGBUS (core dumped) +++ [pid 5371] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5372] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5364] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5372] <... futex resumed>) = 0 [pid 5371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5361] ioctl(6, LOOP_SET_FD, 5 [pid 5357] close(17 [pid 5367] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5363] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5363] <... futex resumed>) = 0 [pid 5361] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5357] close(18 [pid 5361] close(6 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5361] <... close resumed>) = 0 [pid 5357] close(19 [pid 5361] close(5 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5376 attached [pid 5372] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5367] memfd_create("syzkaller", 0 [pid 5365] <... mount resumed>) = 0 [pid 5364] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] <... close resumed>) = 0 [pid 5357] close(20 [pid 5376] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5372] <... open resumed>) = 5 [pid 5371] <... clone3 resumed> => {parent_tid=[34]}, 88) = 34 [pid 5367] <... memfd_create resumed>) = 6 [pid 5365] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5364] <... futex resumed>) = 0 [pid 5361] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] close(3 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5376] <... rseq resumed>) = 0 [pid 5372] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] rt_sigprocmask(SIG_SETMASK, [], [pid 5367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5365] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5364] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5361] <... futex resumed>) = 0 [pid 5358] <... close resumed>) = 0 [pid 5357] close(21 [pid 5376] set_robust_list(0x7ff63eacc9a0, 24 [pid 5372] <... futex resumed>) = 0 [pid 5371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5367] <... mmap resumed>) = 0x7ff6366ac000 [pid 5365] ioctl(4, LOOP_CLR_FD [pid 5364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5361] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5358] close(4 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5376] <... set_robust_list resumed>) = 0 [pid 5372] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5371] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] <... ioctl resumed>) = 0 [pid 5364] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... close resumed>) = 0 [pid 5357] close(22 [pid 5376] rt_sigprocmask(SIG_SETMASK, [], [pid 5372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5371] <... futex resumed>) = 0 [pid 5367] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5365] close(4 [pid 5364] <... futex resumed>) = 0 [pid 5358] close(5 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 65.694292][ T5365] ext4 filesystem being mounted at /root/syzkaller.tvsxpX/9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5376] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5372] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5371] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] <... close resumed>) = 0 [pid 5364] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5357] close(23 [pid 5355] +++ killed by SIGBUS (core dumped) +++ [pid 5354] +++ killed by SIGBUS (core dumped) +++ [pid 5376] memfd_create("syzkaller", 0 [pid 5372] <... mmap resumed>) = 0x20000000 [pid 5371] <... futex resumed>) = 0 [pid 5367] <... write resumed>) = 65536 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5376] <... memfd_create resumed>) = 3 [pid 5371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5371] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5376] <... mmap resumed>) = 0x7ff63668b000 [pid 5371] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=30, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5371] <... mprotect resumed>) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5074] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5372] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] getdents64(3, [pid 5372] <... futex resumed>) = 1 [pid 5364] <... futex resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 224 [pid 5372] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5364] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./8/core", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5364] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5372] memfd_create("syzkaller", 0 [pid 5074] newfstatat(AT_FDCWD, "./8/core", [pid 5372] <... memfd_create resumed>) = 6 [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|0600, st_size=26624000, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5376] <... write resumed>) = 262144 [pid 5372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5371] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5370] <... mount resumed>) = 0 [pid 5367] munmap(0x7ff6366ac000, 138412032 [pid 5365] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] close(6 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] unlink("./8/core" [pid 5370] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 5367] <... munmap resumed>) = 0 [pid 5365] <... futex resumed>) = 0 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5357] close(24 [pid 5376] munmap(0x7ff63668b000, 138412032 [pid 5372] <... mmap resumed>) = 0x7ff63668b000 [pid 5371] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5370] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5367] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5365] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5358] close(7 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5376] <... munmap resumed>) = 0 [pid 5372] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5370] ioctl(4, LOOP_CLR_FD [pid 5367] <... openat resumed>) = 4 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5357] close(25 [pid 5376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5367] ioctl(4, LOOP_SET_FD, 6 [pid 5358] close(8 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5378 attached [pid 5376] <... openat resumed>) = 4 [pid 5372] <... write resumed>) = 65536 [pid 5371] <... clone3 resumed> => {parent_tid=[35]}, 88) = 35 [pid 5370] <... ioctl resumed>) = 0 [pid 5367] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5357] close(26 [pid 5074] <... unlink resumed>) = 0 [pid 5378] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5376] ioctl(4, LOOP_SET_FD, 3 [pid 5372] munmap(0x7ff63668b000, 138412032 [pid 5367] ioctl(4, LOOP_CLR_FD [pid 5358] close(9 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5378] <... rseq resumed>) = 0 [pid 5367] <... ioctl resumed>) = 0 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5357] close(27 [pid 5074] umount2("./8/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5378] set_robust_list(0x7ff63eaab9a0, 24 [pid 5358] close(10 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5378] <... set_robust_list resumed>) = 0 [pid 5371] rt_sigprocmask(SIG_SETMASK, [], [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5357] close(28 [pid 5074] newfstatat(AT_FDCWD, "./8/cgroup.cpu", [pid 5378] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5378] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] unlink("./8/cgroup.cpu") = 0 [pid 5074] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5376] <... ioctl resumed>) = 0 [pid 5372] <... munmap resumed>) = 0 [pid 5371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5370] close(4 [pid 5358] close(11 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... umount2 resumed>) = 0 [pid 5376] close(3 [pid 5371] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] ioctl(4, LOOP_SET_FD, 6 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5357] close(29 [pid 5074] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5372] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5358] close(12 [pid 5357] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5370] <... close resumed>) = 0 [pid 5367] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5357] exit_group(0 [pid 5074] newfstatat(AT_FDCWD, "./8/bus", [pid 5372] <... openat resumed>) = 4 [pid 5360] <... futex resumed>) = ? [pid 5359] <... futex resumed>) = ? [pid 5358] close(13 [pid 5357] <... exit_group resumed>) = ? [pid 5371] <... futex resumed>) = 1 [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5378] <... futex resumed>) = 0 [pid 5367] close(4 [pid 5360] +++ exited with 0 +++ [pid 5359] +++ exited with 0 +++ [pid 5074] unlink("./8/bus") = 0 [pid 5074] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./8/binderfs") = 0 [pid 5074] umount2("./8/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5378] creat("./bus", 000 [pid 5376] <... close resumed>) = 0 [pid 5372] ioctl(4, LOOP_SET_FD, 6 [pid 5371] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5370] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] <... close resumed>) = 0 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5357] +++ exited with 0 +++ [pid 5378] <... creat resumed>) = 3 [pid 5376] mkdir("./file0", 0777 [pid 5372] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5370] <... futex resumed>) = 0 [pid 5367] close(6 [pid 5358] close(14 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 65.739387][ T5370] ext4 filesystem being mounted at /root/syzkaller.hT4DtY/9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.778983][ T5376] loop4: detected capacity change from 0 to 512 [pid 5378] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] <... mkdir resumed>) = 0 [pid 5372] ioctl(4, LOOP_CLR_FD [pid 5370] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5367] <... close resumed>) = 0 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] newfstatat(AT_FDCWD, "./8/cgroup", [pid 5378] <... futex resumed>) = 1 [pid 5372] <... ioctl resumed>) = 0 [pid 5371] <... futex resumed>) = 0 [pid 5367] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] close(15 [pid 5378] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5371] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] <... futex resumed>) = 0 [pid 5363] close(3 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5376] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5371] <... futex resumed>) = 0 [pid 5367] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5363] <... close resumed>) = 0 [pid 5358] close(16 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./8/cgroup" [pid 5378] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5371] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5363] close(4 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... unlink resumed>) = 0 [pid 5372] ioctl(4, LOOP_SET_FD, 6 [pid 5358] close(17 [pid 5079] <... openat resumed>) = 3 [pid 5074] umount2("./8/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5372] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5372] close(4 [pid 5363] close(5 [pid 5358] close(18 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5378] <... mount resumed>) = 0 [pid 5372] <... close resumed>) = 0 [pid 5363] <... close resumed>) = 0 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./8/cgroup.net", [pid 5378] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5372] close(6 [pid 5363] close(6 [pid 5358] close(19 [pid 5079] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 224 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5378] <... futex resumed>) = 1 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5378] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5371] <... futex resumed>) = 0 [pid 5358] close(20) = -1 EBADF (Bad file descriptor) [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5358] close(21 [pid 5378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5371] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] close(7 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./9/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./8/cgroup.net" [pid 5378] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5372] <... close resumed>) = 0 [pid 5371] <... futex resumed>) = 0 [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5358] close(22 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [pid 5378] <... open resumed>) = 5 [pid 5372] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5363] close(8 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(AT_FDCWD, "./9/cgroup.cpu", [pid 5378] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5372] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5364] close(3 [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5358] close(23 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(3, [pid 5378] <... futex resumed>) = 0 [pid 5372] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5371] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... close resumed>) = 0 [pid 5363] close(9 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] unlink("./9/cgroup.cpu" [pid 5074] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5358] close(24 [pid 5079] <... unlink resumed>) = 0 [pid 5371] <... futex resumed>) = 0 [pid 5378] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5371] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5364] close(4 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 5378] <... mmap resumed>) = 0x20000000 [pid 5364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5358] close(25 [pid 5378] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] close(5 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5378] <... futex resumed>) = 1 [pid 5371] <... futex resumed>) = 0 [pid 5364] <... close resumed>) = 0 [pid 5358] close(26 [pid 5074] <... close resumed>) = 0 [pid 5378] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5371] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] close(6 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5371] <... futex resumed>) = 0 [pid 5364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5358] close(27 [pid 5378] memfd_create("syzkaller", 0 [pid 5364] close(7 [pid 5363] close(10 [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = 0 [pid 5074] rmdir("./8" [pid 5364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5358] close(28 [pid 5079] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5378] <... memfd_create resumed>) = 6 [pid 5364] close(8 [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... rmdir resumed>) = 0 [pid 5358] close(29) = -1 EBADF (Bad file descriptor) [pid 5358] exit_group(0 [pid 5361] <... futex resumed>) = ? [pid 5358] <... exit_group resumed>) = ? [pid 5362] <... futex resumed>) = ? [pid 5361] +++ exited with 0 +++ [pid 5364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5364] close(9) = -1 EBADF (Bad file descriptor) [pid 5364] close(10) = -1 EBADF (Bad file descriptor) [pid 5364] close(11 [pid 5378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5363] close(11 [pid 5362] +++ exited with 0 +++ [pid 5358] +++ exited with 0 +++ [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] mkdir("./9", 0777 [pid 5364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5364] close(12 [pid 5363] close(12 [pid 5364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5364] close(13) = -1 EBADF (Bad file descriptor) [pid 5364] close(14) = -1 EBADF (Bad file descriptor) [pid 5364] close(15) = -1 EBADF (Bad file descriptor) [pid 5074] <... mkdir resumed>) = 0 [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] newfstatat(AT_FDCWD, "./9/bus", [pid 5363] close(13 [pid 5364] close(16 [pid 5079] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5364] close(17 [pid 5363] close(14 [pid 5364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5364] close(18) = -1 EBADF (Bad file descriptor) [pid 5364] close(19) = -1 EBADF (Bad file descriptor) [pid 5364] close(20) = -1 EBADF (Bad file descriptor) [pid 5364] close(21) = -1 EBADF (Bad file descriptor) [pid 5364] close(22) = -1 EBADF (Bad file descriptor) [pid 5364] close(23) = -1 EBADF (Bad file descriptor) [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] unlink("./9/bus" [pid 5378] <... mmap resumed>) = 0x7ff63668b000 [pid 5364] close(24 [pid 5363] close(15 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5378] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... unlink resumed>) = 0 [pid 5364] close(25 [pid 5363] close(16 [pid 5079] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5364] close(26 [pid 5363] close(17 [pid 5378] <... write resumed>) = 65536 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5364] close(27 [pid 5363] close(18 [pid 5075] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5378] munmap(0x7ff63668b000, 138412032 [pid 5364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 5378] <... munmap resumed>) = 0 [pid 5364] close(28 [pid 5363] close(19 [pid 5074] <... close resumed>) = 0 [pid 5378] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5075] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5363] close(20 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5378] <... openat resumed>) = 7 [pid 5364] close(29 [pid 5363] close(21 [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5378] ioctl(7, LOOP_SET_FD, 6 [pid 5364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5363] close(22 [pid 5378] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5364] exit_group(0 [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... openat resumed>) = 3 [pid 5363] close(23 [pid 5378] ioctl(7, LOOP_CLR_FD [pid 5376] <... mount resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5372] <... futex resumed>) = ? [pid 5370] <... futex resumed>) = ? [pid 5364] <... exit_group resumed>) = ? [pid 5378] <... ioctl resumed>) = 0 [pid 5376] ioctl(4, LOOP_CLR_FD [pid 5372] +++ exited with 0 +++ [pid 5370] +++ exited with 0 +++ [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] unlink("./9/binderfs" [pid 5075] newfstatat(3, "", ./strace-static-x86_64: Process 5381 attached [pid 5376] <... ioctl resumed>) = 0 [pid 5363] close(24 [pid 5079] <... unlink resumed>) = 0 [pid 5381] set_robust_list(0x5555560316a0, 24 [pid 5376] close(4 [pid 5364] +++ exited with 0 +++ [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556031690) = 33 [pid 5381] <... set_robust_list resumed>) = 0 [pid 5376] <... close resumed>) = 0 [ 65.845495][ T5376] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 65.856854][ T5376] EXT4-fs (loop4): failed to initialize system zone (-117) [ 65.864723][ T5376] EXT4-fs (loop4): mount failed [pid 5381] chdir("./9" [pid 5378] ioctl(7, LOOP_SET_FD, 6 [pid 5376] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] close(25 [pid 5079] umount2("./9/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5381] <... chdir resumed>) = 0 [pid 5378] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5376] <... futex resumed>) = 0 [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5378] close(7 [pid 5376] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5363] close(26 [pid 5079] newfstatat(AT_FDCWD, "./9/cgroup", [pid 5077] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5381] <... prctl resumed>) = 0 [pid 5378] <... close resumed>) = 0 [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./9/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5381] setpgid(0, 0 [pid 5378] close(6 [pid 5363] close(27 [pid 5079] unlink("./9/cgroup" [pid 5077] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5381] <... setpgid resumed>) = 0 [pid 5378] <... close resumed>) = 0 [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... unlink resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./9/cgroup.cpu", [pid 5381] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5378] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] close(3 [pid 5363] close(28 [pid 5079] umount2("./9/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5381] <... symlink resumed>) = 0 [pid 5378] <... futex resumed>) = 0 [pid 5371] <... close resumed>) = 0 [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] newfstatat(3, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5378] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5371] close(4 [pid 5363] close(29 [pid 5079] newfstatat(AT_FDCWD, "./9/cgroup.net", [pid 5075] unlink("./9/cgroup.cpu" [pid 5381] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5381] <... symlink resumed>) = 0 [pid 5371] close(5 [pid 5363] exit_group(0 [pid 5079] unlink("./9/cgroup.net" [pid 5077] getdents64(3, [pid 5075] <... unlink resumed>) = 0 [pid 5381] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5371] <... close resumed>) = 0 [pid 5367] <... futex resumed>) = ? [pid 5363] <... exit_group resumed>) = ? [pid 5079] <... unlink resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5075] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5381] <... symlink resumed>) = 0 [pid 5371] close(6 [pid 5367] +++ exited with 0 +++ [pid 5079] umount2("./9/ext4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./9/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5365] <... futex resumed>) = ? [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 5381] <... openat resumed>) = 3 [pid 5371] close(7 [pid 5079] newfstatat(AT_FDCWD, "./9/ext4", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5381] write(3, "1000", 4 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] newfstatat(AT_FDCWD, "./9/cgroup.cpu", [pid 5381] <... write resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] umount2("./9/ext4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./9/bus", [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5381] close(3 [pid 5371] close(8 [pid 5079] openat(AT_FDCWD, "./9/ext4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5381] <... close resumed>) = 0 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5381] read(200, [pid 5371] close(9 [pid 5077] unlink("./9/cgroup.cpu" [pid 5381] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... unlink resumed>) = 0 [pid 5381] symlink("/dev/binderfs", "./binderfs" [pid 5371] close(10 [pid 5077] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5381] <... symlink resumed>) = 0 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5365] +++ exited with 0 +++ [pid 5363] +++ exited with 0 +++ [pid 5079] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] unlink("./9/bus" [pid 5381] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] close(11 [pid 5381] <... futex resumed>) = 0 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5371] close(12 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5381] <... mmap resumed>) = 0x7ff63eaac000 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./9/bus", [pid 5381] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5371] close(13 [pid 5077] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5381] <... mprotect resumed>) = 0 [pid 5079] newfstatat(4, "", [pid 5075] <... unlink resumed>) = 0 [pid 5381] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] unlink("./9/bus" [pid 5075] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5079] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5381] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5371] close(14 [pid 5079] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5077] <... unlink resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5382 attached [pid 5371] close(15 [pid 5079] getdents64(4, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5382] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5079] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5075] unlink("./9/binderfs" [pid 5079] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5381] <... clone3 resumed> => {parent_tid=[34]}, 88) = 34 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5073] <... openat resumed>) = 3 [pid 5382] <... rseq resumed>) = 0 [pid 5381] rt_sigprocmask(SIG_SETMASK, [], [pid 5371] close(16 [pid 5079] <... close resumed>) = 0 [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(3, "", [pid 5079] rmdir("./9/ext4" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5382] set_robust_list(0x7ff63eacc9a0, 24 [pid 5381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] unlink("./9/binderfs" [pid 5079] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, [pid 5075] <... unlink resumed>) = 0 [pid 5382] <... set_robust_list resumed>) = 0 [pid 5381] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] close(17 [pid 5077] <... unlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5382] rt_sigprocmask(SIG_SETMASK, [], [pid 5381] <... futex resumed>) = 0 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] getdents64(3, [pid 5077] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./9/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5382] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5381] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] close(18 [pid 5079] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] close(3 [pid 5073] newfstatat(AT_FDCWD, "./9/cgroup.cpu", [pid 5382] memfd_create("syzkaller", 0 [pid 5381] <... futex resumed>) = 0 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5382] <... memfd_create resumed>) = 3 [pid 5381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5371] close(19 [pid 5079] rmdir("./9" [pid 5073] unlink("./9/cgroup.cpu" [pid 5382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5381] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5382] <... mmap resumed>) = 0x7ff63668b000 [pid 5381] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5371] close(20 [pid 5079] <... rmdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] mkdir("./10", 0777) = 0 [pid 5073] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5371] close(21 [pid 5381] <... mprotect resumed>) = 0 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5371] close(22 [pid 5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... openat resumed>) = 3 [pid 5381] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5371] close(23 [pid 5079] ioctl(3, LOOP_CLR_FD [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5371] close(24 [pid 5079] close(3 [pid 5382] <... write resumed>) = 262144 [pid 5381] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... close resumed>) = 0 [pid 5382] munmap(0x7ff63668b000, 138412032 [pid 5381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5371] close(25 [pid 5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5383 attached [pid 5382] <... munmap resumed>) = 0 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5383] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5382] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5381] <... clone3 resumed> => {parent_tid=[35]}, 88) = 35 [pid 5371] close(26 [pid 5079] <... clone resumed>, child_tidptr=0x555556031690) = 33 [pid 5382] <... openat resumed>) = 4 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5381] rt_sigprocmask(SIG_SETMASK, [], [pid 5371] close(27 [pid 5383] <... rseq resumed>) = 0 [pid 5382] ioctl(4, LOOP_SET_FD, 3 [pid 5381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5383] set_robust_list(0x7ff63eaab9a0, 24 [pid 5381] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] close(28 [pid 5073] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5383] <... set_robust_list resumed>) = 0 [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5384 attached [pid 5383] rt_sigprocmask(SIG_SETMASK, [], [pid 5381] <... futex resumed>) = 0 [pid 5371] close(29 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5384] set_robust_list(0x5555560316a0, 24 [pid 5383] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5381] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5371] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5384] <... set_robust_list resumed>) = 0 [pid 5383] creat("./bus", 000 [pid 5077] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./9/bus", [pid 5371] exit_group(0 [pid 5384] chdir("./10" [pid 5383] <... creat resumed>) = 5 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5384] <... chdir resumed>) = 0 [pid 5383] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] newfstatat(AT_FDCWD, "./9/file0", [pid 5073] unlink("./9/bus" [pid 5384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5383] <... futex resumed>) = 1 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5384] <... prctl resumed>) = 0 [pid 5383] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5384] setpgid(0, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5384] <... setpgid resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5384] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5378] <... futex resumed>) = ? [pid 5376] <... futex resumed>) = ? [pid 5371] <... exit_group resumed>) = ? [pid 5077] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5384] <... symlink resumed>) = 0 [pid 5382] <... ioctl resumed>) = 0 [pid 5381] <... futex resumed>) = 0 [pid 5378] +++ exited with 0 +++ [pid 5376] +++ exited with 0 +++ [pid 5077] newfstatat(4, "", [pid 5384] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5384] <... symlink resumed>) = 0 [pid 5077] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5384] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5077] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5073] unlink("./9/binderfs" [pid 5077] getdents64(4, [pid 5075] <... umount2 resumed>) = 0 [pid 5077] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5077] close(4 [pid 5384] <... symlink resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./9/file0") = 0 [pid 5077] umount2("./9/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5384] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5371] +++ exited with 0 +++ [pid 5077] unlink("./9/cgroup" [pid 5075] getdents64(4, [pid 5384] write(3, "1000", 4 [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5384] <... write resumed>) = 4 [pid 5077] umount2("./9/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(4 [pid 5384] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5384] <... close resumed>) = 0 [pid 5077] newfstatat(AT_FDCWD, "./9/cgroup.net", [pid 5075] rmdir("./9/file0" [pid 5384] read(200, [pid 5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5077] unlink("./9/cgroup.net" [pid 5384] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... unlink resumed>) = 0 [pid 5384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5077] getdents64(3, [pid 5384] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./9/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5384] <... futex resumed>) = 0 [pid 5077] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5382] close(3 [pid 5381] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./9/cgroup", [pid 5384] <... mmap resumed>) = 0x7ff63eaac000 [pid 5078] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./9" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5384] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... rmdir resumed>) = 0 [pid 5075] unlink("./9/cgroup" [pid 5384] <... mprotect resumed>) = 0 [pid 5382] <... close resumed>) = 0 [pid 5381] <... futex resumed>) = 1 [pid 5078] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5384] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5383] <... futex resumed>) = 0 [pid 5077] mkdir("./10", 0777 [pid 5075] <... unlink resumed>) = 0 [ 66.019628][ T5382] loop2: detected capacity change from 0 to 512 [pid 5384] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5383] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5077] <... mkdir resumed>) = 0 [pid 5075] umount2("./9/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5384] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5383] <... mount resumed>) = 0 [pid 5382] mkdir("./file0", 0777 [pid 5381] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5385 attached [pid 5383] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5382] <... mkdir resumed>) = 0 [pid 5078] newfstatat(3, "", [pid 5077] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./9/cgroup.net", [pid 5385] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5384] <... clone3 resumed> => {parent_tid=[34]}, 88) = 34 [pid 5383] <... futex resumed>) = 1 [pid 5382] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5381] <... futex resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5385] <... rseq resumed>) = 0 [pid 5384] rt_sigprocmask(SIG_SETMASK, [], [pid 5383] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5381] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] unlink("./9/cgroup.net" [pid 5385] set_robust_list(0x7ff63eacc9a0, 24 [pid 5384] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5381] <... futex resumed>) = 0 [pid 5078] getdents64(3, [pid 5077] close(3 [pid 5075] <... unlink resumed>) = 0 [pid 5385] <... set_robust_list resumed>) = 0 [pid 5385] rt_sigprocmask(SIG_SETMASK, [], [pid 5383] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5381] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5077] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 5385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5383] <... open resumed>) = 3 [pid 5078] umount2("./10/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5385] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5384] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5385] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] newfstatat(AT_FDCWD, "./10/cgroup.cpu", [pid 5385] memfd_create("syzkaller", 0 [pid 5383] <... futex resumed>) = 1 [pid 5381] <... futex resumed>) = 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(3 [pid 5385] <... memfd_create resumed>) = 3 [pid 5384] <... futex resumed>) = 0 [pid 5383] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5381] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] unlink("./10/cgroup.cpu" [pid 5075] <... close resumed>) = 0 ./strace-static-x86_64: Process 5386 attached [pid 5385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5384] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5381] <... futex resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5075] rmdir("./9" [pid 5073] <... umount2 resumed>) = 0 [pid 5386] set_robust_list(0x5555560316a0, 24 [pid 5385] <... mmap resumed>) = 0x7ff6366ac000 [pid 5384] <... futex resumed>) = 0 [pid 5383] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5381] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... clone resumed>, child_tidptr=0x555556031690) = 33 [pid 5075] <... rmdir resumed>) = 0 [pid 5386] <... set_robust_list resumed>) = 0 [pid 5384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5383] <... mmap resumed>) = 0x20000000 [pid 5384] <... mmap resumed>) = 0x7ff63668b000 [pid 5383] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5383] <... futex resumed>) = 1 [pid 5381] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = 0 [pid 5386] chdir("./10" [pid 5384] <... mprotect resumed>) = 0 [pid 5383] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5381] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5386] <... chdir resumed>) = 0 [pid 5384] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5381] <... futex resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] mkdir("./10", 0777 [pid 5073] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5386] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5384] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5383] memfd_create("syzkaller", 0 [pid 5078] newfstatat(AT_FDCWD, "./10/bus", [pid 5075] <... mkdir resumed>) = 0 [pid 5386] <... prctl resumed>) = 0 [pid 5384] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5383] <... memfd_create resumed>) = 6 [pid 5383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5078] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5386] setpgid(0, 0 [pid 5383] <... mmap resumed>) = 0x7ff63668b000 [pid 5078] unlink("./10/bus"./strace-static-x86_64: Process 5387 attached [pid 5386] <... setpgid resumed>) = 0 [pid 5384] <... clone3 resumed> => {parent_tid=[35]}, 88) = 35 [pid 5383] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5387] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5386] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5384] rt_sigprocmask(SIG_SETMASK, [], [pid 5383] <... write resumed>) = 65536 [pid 5078] <... unlink resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./9/file0", [pid 5385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5078] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5387] <... rseq resumed>) = 0 [pid 5386] <... symlink resumed>) = 0 [pid 5384] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5383] munmap(0x7ff63668b000, 138412032 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5387] set_robust_list(0x7ff6366ab9a0, 24 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5386] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5386] <... symlink resumed>) = 0 [pid 5385] <... write resumed>) = 262144 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5384] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5387] <... set_robust_list resumed>) = 0 [pid 5387] rt_sigprocmask(SIG_SETMASK, [], [pid 5384] <... futex resumed>) = 0 [pid 5384] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5387] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5386] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5387] creat("./bus", 000) = 4 [pid 5386] <... symlink resumed>) = 0 [pid 5386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5385] munmap(0x7ff6366ac000, 138412032 [pid 5078] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5073] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5388 attached [pid 5388] set_robust_list(0x5555560316a0, 24 [pid 5075] <... clone resumed>, child_tidptr=0x555556031690) = 33 [pid 5388] <... set_robust_list resumed>) = 0 [pid 5388] chdir("./10" [pid 5387] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... openat resumed>) = 4 [pid 5384] <... futex resumed>) = 0 [pid 5388] <... chdir resumed>) = 0 [pid 5387] <... futex resumed>) = 1 [pid 5386] write(3, "1000", 4 [pid 5385] <... munmap resumed>) = 0 [pid 5384] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] <... munmap resumed>) = 0 [pid 5382] <... mount resumed>) = -1 EBADMSG (Bad message) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(4, "", [pid 5388] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5387] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5386] <... write resumed>) = 4 [pid 5385] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5384] <... futex resumed>) = 0 [pid 5383] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5382] ioctl(4, LOOP_CLR_FD [pid 5078] unlink("./10/binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5388] <... prctl resumed>) = 0 [pid 5387] <... mount resumed>) = 0 [pid 5386] close(3 [pid 5384] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5383] <... openat resumed>) = 7 [pid 5388] setpgid(0, 0 [pid 5387] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] <... close resumed>) = 0 [pid 5384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5383] ioctl(7, LOOP_SET_FD, 6 [pid 5382] <... ioctl resumed>) = 0 [pid 5078] <... unlink resumed>) = 0 [pid 5073] getdents64(4, [pid 5388] <... setpgid resumed>) = 0 [pid 5387] <... futex resumed>) = 0 [pid 5386] read(200, [pid 5385] <... openat resumed>) = 5 [pid 5384] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [ 66.110963][ T5382] EXT4-fs warning (device loop2): read_mmp_block:114: Error -74 while reading MMP block 12 [pid 5382] close(4 [pid 5078] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5388] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5387] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5386] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5385] ioctl(5, LOOP_SET_FD, 3 [pid 5384] <... futex resumed>) = 0 [pid 5383] ioctl(7, LOOP_CLR_FD [pid 5382] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 5388] <... symlink resumed>) = 0 [pid 5387] <... open resumed>) = 6 [pid 5386] symlink("/dev/binderfs", "./binderfs" [pid 5384] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5383] <... ioctl resumed>) = 0 [pid 5382] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5387] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] <... symlink resumed>) = 0 [pid 5384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5382] <... futex resumed>) = 0 [pid 5388] <... symlink resumed>) = 0 [pid 5387] <... futex resumed>) = 0 [pid 5386] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5382] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5388] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5387] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 5386] <... futex resumed>) = 0 [pid 5384] <... futex resumed>) = 0 [pid 5388] <... symlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5383] ioctl(7, LOOP_SET_FD, 6 [pid 5388] <... openat resumed>) = 3 [pid 5386] <... mmap resumed>) = 0x7ff63eaac000 [pid 5383] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] newfstatat(AT_FDCWD, "./10/file0", [pid 5073] close(4 [pid 5388] write(3, "1000", 4 [pid 5386] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5388] <... write resumed>) = 4 [pid 5383] close(7 [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5388] close(3 [pid 5386] <... mprotect resumed>) = 0 [pid 5383] <... close resumed>) = 0 [pid 5073] rmdir("./9/file0" [pid 5078] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5388] <... close resumed>) = 0 [pid 5386] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5383] close(6 [pid 5388] read(200, [pid 5386] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5383] <... close resumed>) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 5388] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5385] <... ioctl resumed>) = 0 [pid 5383] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5389 attached [pid 5388] symlink("/dev/binderfs", "./binderfs" [pid 5383] <... futex resumed>) = 0 [pid 5381] close(3 [pid 5078] <... openat resumed>) = 4 [pid 5389] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5388] <... symlink resumed>) = 0 [pid 5386] <... clone3 resumed> => {parent_tid=[34]}, 88) = 34 [pid 5385] close(3 [pid 5383] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5381] <... close resumed>) = 0 [pid 5073] umount2("./9/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5389] <... rseq resumed>) = 0 [pid 5388] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] rt_sigprocmask(SIG_SETMASK, [], [pid 5385] <... close resumed>) = 0 [pid 5381] close(4 [pid 5078] newfstatat(4, "", [pid 5389] set_robust_list(0x7ff63eacc9a0, 24 [pid 5388] <... futex resumed>) = 0 [pid 5387] <... mmap resumed>) = 0x20000000 [pid 5386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5385] mkdir(0x20000000, 0777 [pid 5384] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5389] <... set_robust_list resumed>) = 0 [pid 5388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5387] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5381] close(5 [pid 5078] getdents64(4, [pid 5389] rt_sigprocmask(SIG_SETMASK, [], [pid 5388] <... mmap resumed>) = 0x7ff63eaac000 [pid 5387] <... futex resumed>) = 0 [pid 5386] <... futex resumed>) = 0 [pid 5384] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] <... close resumed>) = 0 [pid 5389] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5388] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5386] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] close(6 [pid 5078] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5389] memfd_create("syzkaller", 0 [pid 5388] <... mprotect resumed>) = 0 [pid 5386] <... futex resumed>) = 0 [pid 5384] <... futex resumed>) = 0 [pid 5381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./9/cgroup", [pid 5389] <... memfd_create resumed>) = 3 [pid 5388] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5381] close(7 [pid 5078] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [pid 5389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5388] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5386] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5389] <... mmap resumed>) = 0x7ff63668b000 [pid 5388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5386] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5381] close(8./strace-static-x86_64: Process 5390 attached [pid 5389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5387] memfd_create("syzkaller", 0 [pid 5385] <... mkdir resumed>) = 0 [pid 5381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] close(4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5390] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5388] <... clone3 resumed> => {parent_tid=[34]}, 88) = 34 [pid 5381] close(9 [pid 5390] <... rseq resumed>) = 0 [pid 5388] rt_sigprocmask(SIG_SETMASK, [], [pid 5381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... close resumed>) = 0 [pid 5073] unlink("./9/cgroup" [pid 5390] set_robust_list(0x7ff63eacc9a0, 24 [pid 5388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5381] close(10 [pid 5078] rmdir("./10/file0" [pid 5390] <... set_robust_list resumed>) = 0 [pid 5388] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] <... mprotect resumed>) = 0 [pid 5381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... unlink resumed>) = 0 [pid 5390] rt_sigprocmask(SIG_SETMASK, [], [pid 5388] <... futex resumed>) = 0 [pid 5381] close(11 [pid 5078] <... rmdir resumed>) = 0 [pid 5390] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5389] <... write resumed>) = 262144 [pid 5381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] umount2("./9/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5381] close(12) = -1 EBADF (Bad file descriptor) [pid 5381] close(13) = -1 EBADF (Bad file descriptor) [pid 5381] close(14 [pid 5390] memfd_create("syzkaller", 0 [pid 5388] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5381] close(15) = -1 EBADF (Bad file descriptor) [pid 5381] close(16) = -1 EBADF (Bad file descriptor) [pid 5381] close(17) = -1 EBADF (Bad file descriptor) [pid 5381] close(18) = -1 EBADF (Bad file descriptor) [pid 5073] newfstatat(AT_FDCWD, "./9/cgroup.net", [pid 5078] umount2("./10/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] unlink("./9/cgroup.net" [pid 5078] newfstatat(AT_FDCWD, "./10/cgroup", [pid 5389] munmap(0x7ff63668b000, 138412032 [pid 5386] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5381] close(19 [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5385] mount("/dev/loop5", 0x20000000, 0x200005c0, MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"... [pid 5073] getdents64(3, [pid 5387] <... memfd_create resumed>) = 3 [pid 5078] unlink("./10/cgroup" [pid 5073] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5390] <... memfd_create resumed>) = 3 [pid 5389] <... munmap resumed>) = 0 [pid 5388] <... futex resumed>) = 0 [pid 5386] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... unlink resumed>) = 0 [pid 5073] close(3 [pid 5387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5389] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5381] close(20 [pid 5078] umount2("./10/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5390] <... mmap resumed>) = 0x7ff6366ac000 [pid 5388] <... mmap resumed>) = 0x7ff63668b000 [pid 5387] <... mmap resumed>) = 0x7ff6366ac000 [pid 5073] <... close resumed>) = 0 [ 66.154414][ T5385] loop5: detected capacity change from 0 to 512 [pid 5390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] rmdir("./9"./strace-static-x86_64: Process 5392 attached [pid 5390] <... write resumed>) = 262144 [pid 5389] <... openat resumed>) = 4 [pid 5388] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5078] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5390] munmap(0x7ff6366ac000, 138412032 [pid 5388] <... mprotect resumed>) = 0 [pid 5381] close(21) = -1 EBADF (Bad file descriptor) [pid 5381] close(22) = -1 EBADF (Bad file descriptor) [pid 5381] close(23) = -1 EBADF (Bad file descriptor) [pid 5381] close(24 [pid 5390] <... munmap resumed>) = 0 [pid 5388] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] <... clone3 resumed> => {parent_tid=[35]}, 88) = 35 [pid 5381] close(25 [pid 5386] rt_sigprocmask(SIG_SETMASK, [], [pid 5381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5392] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5073] <... rmdir resumed>) = 0 [pid 5390] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5389] ioctl(4, LOOP_SET_FD, 3 [pid 5388] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5381] close(26 [pid 5392] <... rseq resumed>) = 0 [pid 5390] <... openat resumed>) = 4 [pid 5388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5387] <... write resumed>) = 65536 [pid 5386] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] newfstatat(AT_FDCWD, "./10/cgroup.net", [pid 5073] mkdir("./10", 0777./strace-static-x86_64: Process 5393 attached [pid 5390] ioctl(4, LOOP_SET_FD, 3 [pid 5381] close(27) = -1 EBADF (Bad file descriptor) [pid 5381] close(28) = -1 EBADF (Bad file descriptor) [pid 5381] close(29 [pid 5073] <... mkdir resumed>) = 0 [pid 5381] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5392] set_robust_list(0x7ff63eaab9a0, 24) = 0 [pid 5387] munmap(0x7ff6366ac000, 138412032 [pid 5381] exit_group(0 [pid 5078] unlink("./10/cgroup.net" [pid 5073] <... openat resumed>) = 3 [pid 5392] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5387] <... munmap resumed>) = 0 [pid 5383] <... futex resumed>) = ? [pid 5382] <... futex resumed>) = ? [pid 5381] <... exit_group resumed>) = ? [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5392] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5387] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5383] +++ exited with 0 +++ [pid 5382] +++ exited with 0 +++ [pid 5381] +++ exited with 0 +++ [pid 5078] <... unlink resumed>) = 0 [pid 5073] close(3 [pid 5392] creat("./bus", 000 [pid 5078] getdents64(3, [pid 5073] <... close resumed>) = 0 [pid 5392] <... creat resumed>) = 5 [pid 5387] <... openat resumed>) = 7 [pid 5078] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] close(3 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5387] ioctl(7, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 5387] ioctl(7, LOOP_CLR_FD) = 0 [pid 5074] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 5394 attached [pid 5078] <... close resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555556031690) = 33 [pid 5078] rmdir("./10" [pid 5394] set_robust_list(0x5555560316a0, 24) = 0 [pid 5387] ioctl(7, LOOP_SET_FD, 3 [pid 5394] chdir("./10" [pid 5387] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5078] <... rmdir resumed>) = 0 [pid 5074] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5387] close(7 [pid 5078] mkdir("./11", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5392] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5387] <... close resumed>) = 0 [pid 5392] <... futex resumed>) = 0 [pid 5387] close(3 [pid 5074] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5392] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5387] <... close resumed>) = 0 [pid 5078] <... mkdir resumed>) = 0 [pid 5389] <... ioctl resumed>) = 0 [pid 5387] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... openat resumed>) = 3 [pid 5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5394] <... chdir resumed>) = 0 [pid 5393] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5390] <... ioctl resumed>) = 0 [pid 5389] close(3 [pid 5388] <... clone3 resumed> => {parent_tid=[35]}, 88) = 35 [pid 5387] <... futex resumed>) = 0 [pid 5386] <... futex resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5394] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5389] <... close resumed>) = 0 [pid 5387] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5385] <... mount resumed>) = -1 ENODEV (No such device) [pid 5078] <... openat resumed>) = 3 [pid 5394] <... prctl resumed>) = 0 [pid 5394] setpgid(0, 0) = 0 [pid 5394] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 5389] mkdir("./file0", 0777 [pid 5386] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5394] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 5394] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 5389] <... mkdir resumed>) = 0 [pid 5386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] ioctl(3, LOOP_CLR_FD [pid 5394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5393] <... rseq resumed>) = 0 [pid 5390] close(3 [pid 5388] rt_sigprocmask(SIG_SETMASK, [], [pid 5385] ioctl(5, LOOP_CLR_FD [pid 5078] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5394] <... openat resumed>) = 3 [pid 5389] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5386] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5385] <... ioctl resumed>) = 0 [pid 5078] close(3 [pid 5393] set_robust_list(0x7ff6366ab9a0, 24 [pid 5385] close(5 [pid 5393] <... set_robust_list resumed>) = 0 [pid 5390] <... close resumed>) = 0 [pid 5388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5394] write(3, "1000", 4) = 4 [pid 5394] close(3) = 0 [pid 5394] read(200, 0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5392] <... futex resumed>) = 0 [pid 5386] <... futex resumed>) = 1 [pid 5385] <... close resumed>) = 0 [pid 5078] <... close resumed>) = 0 [pid 5385] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5393] rt_sigprocmask(SIG_SETMASK, [], [pid 5385] <... futex resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5390] mkdir("./file0", 0777 [ 66.210497][ T5089] Bluetooth: hci1: command 0x0419 tx timeout [ 66.210514][ T5082] Bluetooth: hci0: command 0x0419 tx timeout [ 66.216504][ T5089] Bluetooth: hci4: command 0x0419 tx timeout [ 66.228524][ T5086] Bluetooth: hci2: command 0x0419 tx timeout [ 66.237184][ T5389] loop3: detected capacity change from 0 to 512 [ 66.247127][ T5390] loop0: detected capacity change from 0 to 512 [pid 5385] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5395 attached [pid 5394] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5392] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5390] <... mkdir resumed>) = 0 [pid 5388] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] getdents64(3, [pid 5395] set_robust_list(0x5555560316a0, 24 [pid 5394] <... futex resumed>) = 0 [pid 5384] close(3 [pid 5392] <... mount resumed>) = 0 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5384] close(4 [pid 5394] <... mmap resumed>) = 0x7ff63eaac000 [pid 5384] <... close resumed>) = 0 [pid 5395] <... set_robust_list resumed>) = 0 [pid 5384] close(5 [pid 5074] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 232 [pid 5395] chdir("./11" [pid 5394] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5395] <... chdir resumed>) = 0 [pid 5394] <... mprotect resumed>) = 0 [pid 5384] close(6 [pid 5074] umount2("./9/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5395] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5394] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5388] <... futex resumed>) = 0 [pid 5384] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5395] <... prctl resumed>) = 0 [pid 5394] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5393] creat("./bus", 000 [pid 5392] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5390] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5388] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5384] close(7 [pid 5078] <... clone resumed>, child_tidptr=0x555556031690) = 36 [pid 5393] <... creat resumed>) = 3 [pid 5392] <... futex resumed>) = 1 [pid 5386] <... futex resumed>) = 0 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5393] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] newfstatat(AT_FDCWD, "./9/cgroup.cpu", [pid 5393] <... futex resumed>) = 0 [pid 5393] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5395] setpgid(0, 0 [pid 5394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5388] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5384] close(8./strace-static-x86_64: Process 5398 attached [pid 5395] <... setpgid resumed>) = 0 [pid 5388] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5393] <... futex resumed>) = 0 [pid 5388] <... futex resumed>) = 1 [pid 5384] close(9 [pid 5074] unlink("./9/cgroup.cpu" [pid 5395] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5393] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5388] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... unlink resumed>) = 0 [pid 5398] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5395] <... symlink resumed>) = 0 [pid 5394] <... clone3 resumed> => {parent_tid=[34]}, 88) = 34 [pid 5393] <... mount resumed>) = 0 [pid 5384] close(10 [pid 5074] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5398] <... rseq resumed>) = 0 [pid 5395] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5394] rt_sigprocmask(SIG_SETMASK, [], [pid 5393] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... umount2 resumed>) = 0 [pid 5393] <... futex resumed>) = 1 [pid 5388] <... futex resumed>) = 0 [pid 5384] close(11 [pid 5074] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5393] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5388] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5398] set_robust_list(0x7ff63eacc9a0, 24 [pid 5395] <... symlink resumed>) = 0 [pid 5394] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5398] <... set_robust_list resumed>) = 0 [pid 5394] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5388] <... futex resumed>) = 0 [pid 5384] close(12 [pid 5074] newfstatat(AT_FDCWD, "./9/bus", [pid 5398] rt_sigprocmask(SIG_SETMASK, [], [pid 5394] <... futex resumed>) = 0 [pid 5393] <... open resumed>) = 5 [pid 5388] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5394] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5384] close(13 [pid 5074] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5398] memfd_create("syzkaller", 0 [pid 5395] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5394] <... futex resumed>) = 0 [pid 5393] <... futex resumed>) = 0 [pid 5388] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5398] <... memfd_create resumed>) = 3 [pid 5395] <... symlink resumed>) = 0 [pid 5394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5393] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5388] <... futex resumed>) = 0 [pid 5384] close(14 [pid 5074] unlink("./9/bus" [pid 5398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5394] <... mmap resumed>) = 0x7ff63ea8b000 [pid 5393] <... mmap resumed>) = 0x20000000 [pid 5388] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... unlink resumed>) = 0 [pid 5398] <... mmap resumed>) = 0x7ff63668b000 [pid 5395] <... openat resumed>) = 3 [pid 5394] mprotect(0x7ff63ea8c000, 131072, PROT_READ|PROT_WRITE [pid 5393] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5384] close(15 [pid 5074] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5395] write(3, "1000", 4 [pid 5393] <... futex resumed>) = 0 [ 66.291101][ T5086] Bluetooth: hci3: command 0x0419 tx timeout [ 66.297199][ T5089] Bluetooth: hci5: command 0x0419 tx timeout [ 66.309067][ T5389] ext4 filesystem being mounted at /root/syzkaller.hT4DtY/10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [pid 5388] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5395] <... write resumed>) = 4 [pid 5394] <... mprotect resumed>) = 0 [pid 5393] memfd_create("syzkaller", 0 [pid 5384] close(16 [pid 5074] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5398] <... write resumed>) = 262144 [pid 5395] close(3 [pid 5392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5389] <... mount resumed>) = 0 [pid 5386] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5395] <... close resumed>) = 0 [pid 5392] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5386] <... futex resumed>) = 0 [pid 5384] close(17 [pid 5074] unlink("./9/binderfs" [pid 5395] read(200, [pid 5392] <... open resumed>) = 3 [pid 5389] <... openat resumed>) = 6 [pid 5386] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... unlink resumed>) = 0 [pid 5398] munmap(0x7ff63668b000, 138412032 [pid 5395] <... read resumed>0x7fff7ff75f60, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5392] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] chdir("./file0" [pid 5384] close(18 [pid 5398] <... munmap resumed>) = 0 [pid 5395] symlink("/dev/binderfs", "./binderfs" [pid 5394] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5392] <... futex resumed>) = 1 [pid 5389] <... chdir resumed>) = 0 [pid 5386] <... futex resumed>) = 0 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5398] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5395] <... symlink resumed>) = 0 [pid 5394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eaab990, parent_tid=0x7ff63eaab990, exit_signal=0, stack=0x7ff63ea8b000, stack_size=0x20300, tls=0x7ff63eaab6c0} [pid 5384] close(19./strace-static-x86_64: Process 5401 attached [pid 5398] <... openat resumed>) = 4 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5401] rseq(0x7ff63eaabfe0, 0x20, 0, 0x53053053 [pid 5398] ioctl(4, LOOP_SET_FD, 3 [pid 5395] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5389] ioctl(4, LOOP_CLR_FD [pid 5386] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5395] <... futex resumed>) = 0 [pid 5394] <... clone3 resumed> => {parent_tid=[35]}, 88) = 35 [pid 5392] <... mmap resumed>) = 0x20000000 [pid 5389] <... ioctl resumed>) = 0 [pid 5386] <... futex resumed>) = 0 [pid 5384] close(20 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5392] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] close(4 [pid 5386] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] newfstatat(AT_FDCWD, "./9/file0", [pid 5401] <... rseq resumed>) = 0 [pid 5398] <... ioctl resumed>) = 0 [pid 5395] <... mmap resumed>) = 0x7ff63eaac000 [pid 5394] rt_sigprocmask(SIG_SETMASK, [], [pid 5393] <... memfd_create resumed>) = 6 [pid 5392] <... futex resumed>) = 0 [pid 5389] <... close resumed>) = 0 [pid 5388] <... futex resumed>) = 0 [pid 5386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5384] close(21 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5401] set_robust_list(0x7ff63eaab9a0, 24 [pid 5398] close(3 [pid 5395] mprotect(0x7ff63eaad000, 131072, PROT_READ|PROT_WRITE [pid 5394] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5392] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5389] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5401] <... set_robust_list resumed>) = 0 [pid 5398] <... close resumed>) = 0 [pid 5395] <... mprotect resumed>) = 0 [pid 5394] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] <... mmap resumed>) = 0x7ff6366ac000 [pid 5389] <... futex resumed>) = 0 [pid 5386] <... futex resumed>) = 0 [pid 5384] close(22 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5401] rt_sigprocmask(SIG_SETMASK, [], [pid 5398] mkdir("./file0", 0777 [pid 5395] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5394] <... futex resumed>) = 0 [pid 5393] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5390] <... mount resumed>) = -1 EUCLEAN (Structure needs cleaning) [pid 5389] memfd_create("syzkaller", 0 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5398] <... mkdir resumed>) = 0 [pid 5395] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5390] ioctl(4, LOOP_CLR_FD [pid 5389] <... memfd_create resumed>) = 4 [pid 5384] close(23 [pid 5074] <... openat resumed>) = 4 [pid 5401] creat("./bus", 000 [pid 5398] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 5395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff63eacc990, parent_tid=0x7ff63eacc990, exit_signal=0, stack=0x7ff63eaac000, stack_size=0x20300, tls=0x7ff63eacc6c0} [pid 5394] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5393] <... write resumed>) = 65536 [pid 5390] <... ioctl resumed>) = 0 [pid 5389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] newfstatat(4, "", ./strace-static-x86_64: Process 5402 attached [pid 5393] munmap(0x7ff6366ac000, 138412032 [pid 5390] close(4 [pid 5389] <... mmap resumed>) = 0x7ff63668b000 [pid 5384] close(24 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5402] rseq(0x7ff63eaccfe0, 0x20, 0, 0x53053053 [pid 5401] <... creat resumed>) = 3 [pid 5395] <... clone3 resumed> => {parent_tid=[37]}, 88) = 37 [pid 5393] <... munmap resumed>) = 0 [pid 5390] <... close resumed>) = 0 [pid 5389] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] getdents64(4, [pid 5402] <... rseq resumed>) = 0 [pid 5401] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] rt_sigprocmask(SIG_SETMASK, [], [pid 5393] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5389] <... write resumed>) = 65536 [pid 5384] close(25 [pid 5074] <... getdents64 resumed>0x55555603a890 /* 2 entries */, 32768) = 48 [pid 5402] set_robust_list(0x7ff63eacc9a0, 24 [pid 5401] <... futex resumed>) = 1 [pid 5394] <... futex resumed>) = 0 [pid 5393] <... openat resumed>) = 4 [pid 5390] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] getdents64(4, [pid 5402] <... set_robust_list resumed>) = 0 [pid 5401] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5394] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] ioctl(4, LOOP_SET_FD, 6 [pid 5390] <... futex resumed>) = 0 [pid 5389] munmap(0x7ff63668b000, 138412032 [pid 5384] close(26 [pid 5074] <... getdents64 resumed>0x55555603a890 /* 0 entries */, 32768) = 0 [ 66.347243][ T5390] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 66.373506][ T5390] EXT4-fs (loop0): failed to initialize system zone (-117) [ 66.379356][ T5398] loop1: detected capacity change from 0 to 512 [ 66.381199][ T5390] EXT4-fs (loop0): mount failed [pid 5402] rt_sigprocmask(SIG_SETMASK, [], [pid 5401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5395] futex(0x7ff63f39e6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... futex resumed>) = 0 [pid 5393] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5390] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5389] <... munmap resumed>) = 0 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] close(4 [pid 5402] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5401] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5395] <... futex resumed>) = 0 [pid 5394] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5393] ioctl(4, LOOP_CLR_FD [pid 5389] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5384] close(27 [pid 5074] <... close resumed>) = 0 [pid 5402] memfd_create("syzkaller", 0 [pid 5401] <... mount resumed>) = 0 [pid 5395] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] <... ioctl resumed>) = 0 [pid 5389] <... openat resumed>) = 7 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] rmdir("./9/file0" [pid 5402] <... memfd_create resumed>) = 3 [pid 5401] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] <... futex resumed>) = 0 [pid 5389] ioctl(7, LOOP_SET_FD, 4 [pid 5384] close(28 [pid 5074] <... rmdir resumed>) = 0 [pid 5402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5401] <... futex resumed>) = 1 [pid 5395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5394] <... futex resumed>) = 0 [pid 5389] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] umount2("./9/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5402] <... mmap resumed>) = 0x7ff6366ac000 [pid 5389] ioctl(7, LOOP_CLR_FD [pid 5384] close(29 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5395] <... mmap resumed>) = 0x7ff63668b000 [pid 5384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] newfstatat(AT_FDCWD, "./9/cgroup", [pid 5401] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5395] mprotect(0x7ff63668c000, 131072, PROT_READ|PROT_WRITE [pid 5394] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] <... ioctl resumed>) = 0 [pid 5384] exit_group(0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] <... futex resumed>) = 0 [pid 5393] ioctl(4, LOOP_SET_FD, 6 [pid 5387] <... futex resumed>) = ? [pid 5385] <... futex resumed>) = ? [pid 5384] <... exit_group resumed>) = ? [pid 5074] unlink("./9/cgroup" [pid 5401] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5394] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5393] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5387] +++ exited with 0 +++ [pid 5385] +++ exited with 0 +++ [pid 5401] <... open resumed>) = 5 [pid 5393] close(4 [pid 5401] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] <... close resumed>) = 0 [pid 5393] close(6) = 0 [pid 5393] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... unlink resumed>) = 0 [pid 5401] <... futex resumed>) = 1 [pid 5394] <... futex resumed>) = 0 [pid 5401] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5394] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./9/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] <... futex resumed>) = 0 [pid 5393] <... futex resumed>) = 0 [pid 5388] close(3 [pid 5401] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 5394] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5393] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5388] <... close resumed>) = 0 [pid 5401] <... mmap resumed>) = 0x20000000 [pid 5389] ioctl(7, LOOP_SET_FD, 4 [pid 5388] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5401] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] newfstatat(AT_FDCWD, "./9/cgroup.net", [pid 5401] <... futex resumed>) = 1 [pid 5395] <... mprotect resumed>) = 0 [pid 5394] <... futex resumed>) = 0 [pid 5389] close(7 [pid 5388] close(5 [pid 5401] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... close resumed>) = 0 [pid 5401] memfd_create("syzkaller", 0 [pid 5395] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5389] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5401] <... memfd_create resumed>) = 6 [pid 5394] <... futex resumed>) = 0 [pid 5389] close(4 [pid 5388] close(6 [pid 5074] unlink("./9/cgroup.net" [pid 5401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5395] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5401] <... mmap resumed>) = 0x7ff63668b000 [pid 5389] <... close resumed>) = 0 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 5401] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff6366ab990, parent_tid=0x7ff6366ab990, exit_signal=0, stack=0x7ff63668b000, stack_size=0x20300, tls=0x7ff6366ab6c0} [pid 5074] <... unlink resumed>) = 0 [pid 5401] <... write resumed>) = 65536 [pid 5401] munmap(0x7ff63668b000, 138412032./strace-static-x86_64: Process 5405 attached [ 66.456688][ T5398] ------------[ cut here ]------------ [ 66.462407][ T5398] kernel BUG at fs/ext4/super.c:7052! [ 66.472784][ T5398] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 66.478863][ T5398] CPU: 1 PID: 5398 Comm: syz-executor418 Not tainted 6.7.0-rc1-syzkaller-00019-gc42d9eeef8e5 #0 [ 66.489259][ T5398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 66.499302][ T5398] RIP: 0010:ext4_enable_quotas+0x90e/0xba0 [ 66.505123][ T5398] Code: 49 8b 56 d8 31 c9 53 48 c7 c6 40 b7 e4 8a 4c 89 e7 e8 56 7a 22 ff 4c 89 f7 e8 be 33 af ff 5a e9 74 fe ff ff e8 03 d1 41 ff 90 <0f> 0b e8 fb d0 41 ff 48 83 fd 02 0f 87 ec 01 00 00 8b 44 24 0c 45 [ 66.524720][ T5398] RSP: 0018:ffffc90004e57950 EFLAGS: 00010293 [ 66.530777][ T5398] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8245bb24 [ 66.538730][ T5398] RDX: ffff888022c25940 RSI: ffffffff8245bfed RDI: 0000000000000005 [ 66.546688][ T5398] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 66.554644][ T5398] R10: 0000000000000000 R11: ffff88806ac30c88 R12: 0000000000000008 [ 66.562607][ T5398] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000009 [ 66.570924][ T5398] FS: 00007ff63eacc6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 66.579844][ T5398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.586421][ T5398] CR2: 00007ff6366eb000 CR3: 000000006a8c5000 CR4: 0000000000350ef0 [ 66.594397][ T5398] Call Trace: [ 66.597662][ T5398] [ 66.600579][ T5398] ? show_regs+0x8f/0xa0 [ 66.604818][ T5398] ? die+0x36/0xa0 [ 66.608528][ T5398] ? do_trap+0x22b/0x420 [ 66.612765][ T5398] ? ext4_enable_quotas+0x90e/0xba0 [ 66.617961][ T5398] ? ext4_enable_quotas+0x90e/0xba0 [ 66.623148][ T5398] ? do_error_trap+0xf4/0x230 [ 66.627813][ T5398] ? ext4_enable_quotas+0x90e/0xba0 [ 66.633008][ T5398] ? handle_invalid_op+0x34/0x40 [ 66.637945][ T5398] ? ext4_enable_quotas+0x90e/0xba0 [ 66.643143][ T5398] ? exc_invalid_op+0x2e/0x40 [ 66.647850][ T5398] ? asm_exc_invalid_op+0x1a/0x20 [ 66.652884][ T5398] ? ext4_enable_quotas+0x444/0xba0 [ 66.658077][ T5398] ? ext4_enable_quotas+0x90d/0xba0 [ 66.663267][ T5398] ? ext4_enable_quotas+0x90e/0xba0 [ 66.668459][ T5398] ? ext4_force_commit+0x90/0x90 [ 66.673387][ T5398] ? ieee80211_parse_tx_radiotap+0x4c0/0x15e0 [ 66.679442][ T5398] ? proc_create_seq_private+0x121/0x180 [ 66.685062][ T5398] ? proc_create_data+0x190/0x190 [ 66.690070][ T5398] ? ext4_orphan_file_block_trigger+0x490/0x490 [ 66.696309][ T5398] ext4_fill_super+0x8a9c/0xaf10 [ 66.701257][ T5398] ? up_write+0x42b/0x510 [ 66.705578][ T5398] ? ext4_reconfigure+0x3050/0x3050 [ 66.710771][ T5398] ? lock_sync+0x190/0x190 [ 66.715180][ T5398] get_tree_bdev+0x3b5/0x650 [ 66.719760][ T5398] ? ext4_reconfigure+0x3050/0x3050 [ 66.724952][ T5398] ? sget_dev+0xe0/0xe0 [ 66.729096][ T5398] ? bpf_lsm_capable+0x9/0x10 [ 66.733767][ T5398] ? security_capable+0x92/0xc0 [ 66.738609][ T5398] vfs_get_tree+0x8c/0x370 [ 66.743021][ T5398] path_mount+0x1492/0x1ed0 [ 66.747513][ T5398] ? kmem_cache_free+0xf8/0x350 [ 66.752354][ T5398] ? finish_automount+0xa40/0xa40 [ 66.757396][ T5398] ? putname+0x12e/0x170 [ 66.761645][ T5398] __x64_sys_mount+0x293/0x310 [ 66.766405][ T5398] ? copy_mnt_ns+0xb60/0xb60 [ 66.770991][ T5398] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 66.777226][ T5398] do_syscall_64+0x40/0x110 [ 66.781724][ T5398] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 66.787637][ T5398] RIP: 0033:0x7ff63f31cd9a [ 66.792054][ T5398] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 66.811685][ T5398] RSP: 002b:00007ff63eacc038 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 66.820088][ T5398] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ff63f31cd9a [ 66.828058][ T5398] RDX: 00000000200005c0 RSI: 0000000020000000 RDI: 00007ff63eacc090 [ 66.836021][ T5398] RBP: 00000000200005c0 R08: 00007ff63eacc0d0 R09: 00000000000004d4 [ 66.843984][ T5398] R10: 0000000000200810 R11: 0000000000000206 R12: 00007ff63eacc090 [pid 5402] <... write resumed>) = 262144 [pid 5389] futex(0x7ff63f39e6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] close(7 [pid 5384] +++ exited with 0 +++ [pid 5074] getdents64(3, [pid 5405] rseq(0x7ff6366abfe0, 0x20, 0, 0x53053053 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5405] <... rseq resumed>) = 0 [pid 5388] close(8 [pid 5405] set_robust_list(0x7ff6366ab9a0, 24 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5405] <... set_robust_list resumed>) = 0 [pid 5402] munmap(0x7ff6366ac000, 138412032 [pid 5395] <... clone3 resumed> => {parent_tid=[38]}, 88) = 38 [pid 5389] <... futex resumed>) = 0 [pid 5386] close(3 [pid 5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] <... getdents64 resumed>0x555556032850 /* 0 entries */, 32768) = 0 [pid 5405] rt_sigprocmask(SIG_SETMASK, [], [pid 5395] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] close(3 [pid 5405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5402] <... munmap resumed>) = 0 [pid 5395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5389] futex(0x7ff63f39e6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5388] close(9 [pid 5386] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5405] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5402] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5401] <... munmap resumed>) = 0 [pid 5395] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(4 [pid 5074] rmdir("./9" [pid 5405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5402] <... openat resumed>) = 4 [pid 5401] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5388] close(10 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [ 66.851944][ T5398] R13: 0000000020000000 R14: 00000000000004da R15: 00007ff63eacc0d0 [ 66.859907][ T5398] [ 66.862913][ T5398] Modules linked in: [ 66.867890][ T5398] ---[ end trace 0000000000000000 ]--- [ 66.873564][ T5398] RIP: 0010:ext4_enable_quotas+0x90e/0xba0 [ 66.880872][ T5398] Code: 49 8b 56 d8 31 c9 53 48 c7 c6 40 b7 e4 8a 4c 89 e7 e8 56 7a 22 ff 4c 89 f7 e8 be 33 af ff 5a e9 74 fe ff ff e8 03 d1 41 ff 90 <0f> 0b e8 fb d0 41 ff 48 83 fd 02 0f 87 ec 01 00 00 8b 44 24 0c 45 [ 66.901293][ T5398] RSP: 0018:ffffc90004e57950 EFLAGS: 00010293 [pid 5074] mkdir("./10", 0777 [pid 5405] creat("./bus", 000 [pid 5402] ioctl(4, LOOP_SET_FD, 3 [pid 5401] <... openat resumed>) = 7 [pid 5395] <... futex resumed>) = 0 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(5 [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5395] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5405] <... creat resumed>) = 5 [pid 5402] <... ioctl resumed>) = 0 [pid 5401] ioctl(7, LOOP_SET_FD, 6 [pid 5388] close(11 [pid 5386] <... close resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... mkdir resumed>) = 0 [pid 5405] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5402] close(3 [pid 5401] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(6 [pid 5079] <... openat resumed>) = 3 [pid 5405] <... futex resumed>) = 1 [pid 5402] <... close resumed>) = 0 [pid 5401] ioctl(7, LOOP_CLR_FD [pid 5395] <... futex resumed>) = 0 [pid 5388] close(12 [pid 5386] <... close resumed>) = 0 [pid 5079] newfstatat(3, "", [pid 5405] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5402] mkdir("./file0", 0777 [pid 5401] <... ioctl resumed>) = 0 [pid 5395] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(7 [pid 5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5402] <... mkdir resumed>) = 0 [pid 5395] <... futex resumed>) = 0 [pid 5388] close(13 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] getdents64(3, [pid 5405] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5402] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [ 66.907427][ T5398] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8245bb24 [ 66.917250][ T5402] loop4: detected capacity change from 0 to 512 [ 66.917428][ T5398] RDX: ffff888022c25940 RSI: ffffffff8245bfed RDI: 0000000000000005 [ 66.932864][ T5398] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 66.941650][ T5398] R10: 0000000000000000 R11: ffff88806ac30c88 R12: 0000000000000008 [ 66.949650][ T5398] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000009 [pid 5395] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(8 [pid 5405] <... mount resumed>) = 0 [pid 5401] ioctl(7, LOOP_SET_FD, 6 [pid 5388] close(14 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] <... openat resumed>) = 3 [pid 5405] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(9 [pid 5405] <... futex resumed>) = 1 [pid 5401] close(7 [pid 5395] <... futex resumed>) = 0 [pid 5388] close(15 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5405] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5401] <... close resumed>) = 0 [pid 5395] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(10 [pid 5405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5401] close(6 [pid 5395] <... futex resumed>) = 0 [pid 5388] close(16 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5405] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 5401] <... close resumed>) = 0 [pid 5395] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(11 [pid 5405] <... open resumed>) = 3 [pid 5401] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] close(17 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5405] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... futex resumed>) = 0 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(12 [pid 5405] <... futex resumed>) = 1 [pid 5401] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5395] <... futex resumed>) = 0 [pid 5388] close(18 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5405] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5395] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(13 [pid 5405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5395] <... futex resumed>) = 0 [pid 5388] close(19 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5405] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 5395] futex(0x7ff63f39e6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(14 [pid 5405] <... mmap resumed>) = 0x20000000 [pid 5388] close(20 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5405] futex(0x7ff63f39e6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(15 [pid 5405] <... futex resumed>) = 1 [pid 5395] <... futex resumed>) = 0 [pid 5388] close(21 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... getdents64 resumed>0x555556032850 /* 8 entries */, 32768) = 224 [pid 5405] futex(0x7ff63f39e6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5395] futex(0x7ff63f39e6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(16 [pid 5079] umount2("./10/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5395] <... futex resumed>) = 0 [pid 5388] close(22 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5405] memfd_create("syzkaller", 0 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(17 [pid 5079] newfstatat(AT_FDCWD, "./10/cgroup.cpu", [pid 5405] <... memfd_create resumed>) = 6 [pid 5388] close(23 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(18 [pid 5079] unlink("./10/cgroup.cpu" [pid 5405] <... mmap resumed>) = 0x7ff6366ac000 [pid 5388] close(24 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5079] <... unlink resumed>) = 0 [pid 5074] close(3 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(19 [pid 5079] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5405] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 5388] close(25 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(20 [pid 5388] close(26 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5405] <... write resumed>) = 65536 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(21 [pid 5388] close(27 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(22 [pid 5405] munmap(0x7ff6366ac000, 138412032 [pid 5388] close(28 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5405] <... munmap resumed>) = 0 [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5386] close(23 [pid 5388] close(29 [pid 5386] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5388] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 66.958208][ T5398] FS: 00007ff63eacc6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 66.980202][ T5398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.987502][ T5398] CR2: 00007fff7ff7527c CR3: 000000006a8c5000 CR4: 0000000000350ef0 [ 66.996342][ T5398] Kernel panic - not syncing: Fatal exception [ 67.002660][ T5398] Kernel Offset: disabled [ 67.006966][ T5398] Rebooting in 86400 seconds..