./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4179345889 <...> Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. execve("./syz-executor4179345889", ["./syz-executor4179345889"], 0x7ffda3b833d0 /* 10 vars */) = 0 brk(NULL) = 0x5555563f4000 brk(0x5555563f4d40) = 0x5555563f4d40 arch_prctl(ARCH_SET_FS, 0x5555563f43c0) = 0 set_tid_address(0x5555563f4690) = 291 set_robust_list(0x5555563f46a0, 24) = 0 rseq(0x5555563f4ce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4179345889", 4096) = 28 getrandom("\xf6\xb4\x00\x3e\x72\xfa\x28\xe3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555563f4d40 brk(0x555556415d40) = 0x555556415d40 brk(0x555556416000) = 0x555556416000 mprotect(0x7fc1322cc000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 292 attached , child_tidptr=0x5555563f4690) = 292 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] set_robust_list(0x5555563f46a0, 24) = 0 ./strace-static-x86_64: Process 293 attached [pid 291] <... clone resumed>, child_tidptr=0x5555563f4690) = 293 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] set_robust_list(0x5555563f46a0, 24 [pid 292] mkdir("./syzkaller.gpm0iI", 0700./strace-static-x86_64: Process 294 attached [pid 291] <... clone resumed>, child_tidptr=0x5555563f4690) = 294 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563f4690) = 295 [pid 293] <... set_robust_list resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 295 attached [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] set_robust_list(0x5555563f46a0, 24 [pid 293] mkdir("./syzkaller.zNZ9LH", 0700 [pid 292] chmod("./syzkaller.gpm0iI", 0777./strace-static-x86_64: Process 296 attached [pid 291] <... clone resumed>, child_tidptr=0x5555563f4690) = 296 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] set_robust_list(0x5555563f46a0, 24 [pid 293] <... mkdir resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555563f4690) = 297 [pid 296] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 297 attached [pid 296] mkdir("./syzkaller.jl33I5", 0700 [pid 295] set_robust_list(0x5555563f46a0, 24 [pid 294] <... set_robust_list resumed>) = 0 [pid 293] chmod("./syzkaller.zNZ9LH", 0777 [pid 292] <... chmod resumed>) = 0 [pid 297] set_robust_list(0x5555563f46a0, 24 [pid 296] <... mkdir resumed>) = 0 [pid 295] <... set_robust_list resumed>) = 0 [pid 293] <... chmod resumed>) = 0 [pid 292] chdir("./syzkaller.gpm0iI" [pid 296] chmod("./syzkaller.jl33I5", 0777) = 0 [pid 293] chdir("./syzkaller.zNZ9LH" [pid 292] <... chdir resumed>) = 0 [pid 295] mkdir("./syzkaller.IpShW6", 0700 [pid 296] chdir("./syzkaller.jl33I5") = 0 [pid 296] mkdir("./0", 0777) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 294] mkdir("./syzkaller.duxz7m", 0700 [pid 293] <... chdir resumed>) = 0 [pid 297] <... set_robust_list resumed>) = 0 [pid 292] mkdir("./0", 0777 [pid 296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 297] mkdir("./syzkaller.SVIRRC", 0700 [pid 296] <... openat resumed>) = 3 [pid 295] chmod("./syzkaller.IpShW6", 0777 [pid 294] <... mkdir resumed>) = 0 [pid 293] mkdir("./0", 0777 [pid 292] <... mkdir resumed>) = 0 [pid 297] <... mkdir resumed>) = 0 [pid 295] <... chmod resumed>) = 0 [pid 294] chmod("./syzkaller.duxz7m", 0777 [pid 293] <... mkdir resumed>) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 297] chmod("./syzkaller.SVIRRC", 0777 [pid 295] chdir("./syzkaller.IpShW6" [pid 294] <... chmod resumed>) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 292] <... openat resumed>) = 3 [pid 297] <... chmod resumed>) = 0 [pid 296] ioctl(3, LOOP_CLR_FD [pid 295] <... chdir resumed>) = 0 [pid 294] chdir("./syzkaller.duxz7m" [pid 297] chdir("./syzkaller.SVIRRC" [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] mkdir("./0", 0777 [pid 294] <... chdir resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 292] ioctl(3, LOOP_CLR_FD [pid 297] <... chdir resumed>) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 294] mkdir("./0", 0777 [pid 293] ioctl(3, LOOP_CLR_FD [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] mkdir("./0", 0777 [pid 295] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 294] <... mkdir resumed>) = 0 [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] close(3 [pid 297] <... mkdir resumed>) = 0 [pid 295] <... openat resumed>) = 3 [pid 294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 293] close(3 [pid 292] <... close resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 295] ioctl(3, LOOP_CLR_FD [pid 294] <... openat resumed>) = 3 [pid 293] <... close resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... openat resumed>) = 3 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 294] ioctl(3, LOOP_CLR_FD [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] ioctl(3, LOOP_CLR_FD [pid 295] close(3 [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] <... clone resumed>, child_tidptr=0x5555563f4690) = 298 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] <... close resumed>) = 0 [pid 294] close(3 [pid 293] <... clone resumed>, child_tidptr=0x5555563f4690) = 299 [pid 297] close(3 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] <... close resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... clone resumed>, child_tidptr=0x5555563f4690) = 300 [pid 294] <... clone resumed>, child_tidptr=0x5555563f4690) = 301 [pid 297] <... clone resumed>, child_tidptr=0x5555563f4690) = 302 ./strace-static-x86_64: Process 302 attached [pid 302] set_robust_list(0x5555563f46a0, 24) = 0 [pid 302] chdir("./0") = 0 [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 302] setpgid(0, 0) = 0 [pid 302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 301 attached [pid 301] set_robust_list(0x5555563f46a0, 24) = 0 [pid 301] chdir("./0" [pid 302] <... openat resumed>) = 3 [pid 301] <... chdir resumed>) = 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 302] write(3, "1000", 4 [pid 301] <... prctl resumed>) = 0 [pid 302] <... write resumed>) = 4 [pid 301] setpgid(0, 0 [pid 302] close(3) = 0 [pid 301] <... setpgid resumed>) = 0 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 302] symlink("/dev/binderfs", "./binderfs" [pid 301] <... openat resumed>) = 3 [pid 302] <... symlink resumed>) = 0 [pid 301] write(3, "1000", 4) = 4 [pid 301] close(3) = 0 [pid 301] symlink("/dev/binderfs", "./binderfs" [pid 302] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... symlink resumed>) = 0 [pid 302] <... futex resumed>) = 0 [pid 301] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 301] <... futex resumed>) = 0 [pid 302] <... rt_sigaction resumed>NULL, 8) = 0 [pid 301] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 302] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 301] <... rt_sigaction resumed>NULL, 8) = 0 [pid 302] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 302] <... mmap resumed>) = 0x7fc1321e6000 [pid 301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] <... mprotect resumed>) = 0 [pid 301] <... mmap resumed>) = 0x7fc1321e6000 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 302] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] <... mprotect resumed>) = 0 [pid 302] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 301] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 302] <... clone3 resumed> => {parent_tid=[303]}, 88) = 303 [pid 301] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 301] <... clone3 resumed> => {parent_tid=[304]}, 88) = 304 [pid 302] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] rt_sigprocmask(SIG_SETMASK, [], [pid 302] <... futex resumed>) = 0 [pid 302] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] <... futex resumed>) = 0 [pid 301] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] <... futex resumed>) = 0 [pid 302] <... mmap resumed>) = 0x7fc1321c5000 [pid 301] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 301] <... futex resumed>) = 0 [pid 302] <... mprotect resumed>) = 0 [pid 301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] <... mmap resumed>) = 0x7fc1321c5000 [pid 302] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 296] close(3 [pid 302] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 301] <... mprotect resumed>) = 0 [pid 301] rt_sigprocmask(SIG_BLOCK, ~[], [pid 302] <... clone3 resumed> => {parent_tid=[305]}, 88) = 305 [pid 301] <... rt_sigprocmask resumed>[], 8) = 0 [pid 302] rt_sigprocmask(SIG_SETMASK, [], [pid 301] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 302] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... clone3 resumed> => {parent_tid=[306]}, 88) = 306 [pid 302] <... futex resumed>) = 0 [pid 301] rt_sigprocmask(SIG_SETMASK, [], [pid 302] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 303 attached [pid 303] set_robust_list(0x7fc1322069a0, 24) = 0 [pid 303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 303] memfd_create("syzkaller", 0) = 3 [pid 303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 ./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 305 attached [pid 306] creat("./bus", 000 [pid 305] set_robust_list(0x7fc1321e59a0, 24 [pid 306] <... creat resumed>) = 3 [pid 305] <... set_robust_list resumed>) = 0 [pid 303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 306] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] rt_sigprocmask(SIG_SETMASK, [], [pid 306] <... futex resumed>) = 1 [pid 305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... futex resumed>) = 0 ./strace-static-x86_64: Process 304 attached ./strace-static-x86_64: Process 300 attached ./strace-static-x86_64: Process 299 attached ./strace-static-x86_64: Process 298 attached [pid 306] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 305] creat("./bus", 000 [pid 301] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... close resumed>) = 0 [pid 306] <... mount resumed>) = 0 [pid 305] <... creat resumed>) = 4 [pid 304] set_robust_list(0x7fc1322069a0, 24 [pid 301] <... futex resumed>) = 0 [pid 300] set_robust_list(0x5555563f46a0, 24 [pid 299] set_robust_list(0x5555563f46a0, 24 [pid 298] set_robust_list(0x5555563f46a0, 24 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 1 [pid 304] <... set_robust_list resumed>) = 0 [pid 303] <... write resumed>) = 262144 [pid 302] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] <... set_robust_list resumed>) = 0 [pid 299] <... set_robust_list resumed>) = 0 [pid 298] <... set_robust_list resumed>) = 0 [pid 306] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] munmap(0x7fc129dc5000, 262144 [pid 302] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] chdir("./0" [pid 296] <... clone resumed>, child_tidptr=0x5555563f4690) = 307 [pid 304] rt_sigprocmask(SIG_SETMASK, [], [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 303] <... munmap resumed>) = 0 [pid 302] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = 0 [pid 300] <... chdir resumed>) = 0 [pid 299] chdir("./0" [pid 298] chdir("./0" [pid 306] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 305] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 304] memfd_create("syzkaller", 0 [pid 303] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 302] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] <... chdir resumed>) = 0 [pid 298] <... chdir resumed>) = 0 [pid 306] <... open resumed>) = 4 [pid 305] <... mount resumed>) = 0 [pid 304] <... memfd_create resumed>) = 5 [pid 303] <... openat resumed>) = 5 [pid 300] <... prctl resumed>) = 0 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 307 attached [pid 306] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 303] ioctl(5, LOOP_SET_FD, 3 [pid 300] setpgid(0, 0 [pid 299] <... prctl resumed>) = 0 [pid 298] <... prctl resumed>) = 0 [pid 307] set_robust_list(0x5555563f46a0, 24 [pid 306] <... futex resumed>) = 1 [pid 305] <... futex resumed>) = 1 [pid 304] <... mmap resumed>) = 0x7fc129dc5000 [pid 302] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = 0 [pid 300] <... setpgid resumed>) = 0 [pid 299] setpgid(0, 0 [pid 298] setpgid(0, 0 [pid 307] <... set_robust_list resumed>) = 0 [pid 306] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] chdir("./0" [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = 0 [pid 307] <... chdir resumed>) = 0 [pid 306] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 305] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 304] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 302] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... setpgid resumed>) = 0 [pid 298] <... setpgid resumed>) = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] <... socket resumed>) = 6 [pid 307] <... prctl resumed>) = 0 [pid 306] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] setpgid(0, 0 [pid 306] <... futex resumed>) = 1 [pid 301] <... futex resumed>) = 0 [pid 307] <... setpgid resumed>) = 0 [pid 306] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... write resumed>) = 262144 [pid 301] <... futex resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] <... openat resumed>) = 3 [pid 306] recvmmsg(6, [pid 304] munmap(0x7fc129dc5000, 262144 [pid 301] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] write(3, "1000", 4 [pid 298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... openat resumed>) = 3 [pid 307] write(3, "1000", 4 [pid 304] <... munmap resumed>) = 0 [pid 300] <... write resumed>) = 4 [pid 307] <... write resumed>) = 4 [pid 304] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 300] close(3 [pid 299] write(3, "1000", 4 [pid 298] <... openat resumed>) = 3 [pid 307] close(3 [pid 305] <... open resumed>) = 6 [pid 304] <... openat resumed>) = 7 [pid 303] <... ioctl resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 299] <... write resumed>) = 4 [pid 298] write(3, "1000", 4 [pid 307] <... close resumed>) = 0 [pid 305] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] ioctl(7, LOOP_SET_FD, 5 [pid 303] close(3 [pid 300] symlink("/dev/binderfs", "./binderfs" [pid 299] close(3 [pid 298] <... write resumed>) = 4 [pid 307] symlink("/dev/binderfs", "./binderfs" [pid 305] <... futex resumed>) = 1 [pid 303] <... close resumed>) = 0 [pid 302] <... futex resumed>) = 0 [pid 307] <... symlink resumed>) = 0 [pid 305] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] mkdir("./file0", 0777 [pid 302] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... symlink resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 298] close(3 [pid 307] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... mkdir resumed>) = 0 [pid 302] <... futex resumed>) = 0 [pid 300] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] symlink("/dev/binderfs", "./binderfs" [pid 298] <... close resumed>) = 0 [pid 307] <... futex resumed>) = 0 [pid 305] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 303] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 302] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 0 [pid 299] <... symlink resumed>) = 0 [pid 298] symlink("/dev/binderfs", "./binderfs" [pid 307] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 305] <... socket resumed>) = 3 [pid 300] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 299] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... symlink resumed>) = 0 [pid 307] <... rt_sigaction resumed>NULL, 8) = 0 [pid 305] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... rt_sigaction resumed>NULL, 8) = 0 [pid 299] <... futex resumed>) = 0 [pid 298] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 305] <... futex resumed>) = 1 [pid 302] <... futex resumed>) = 0 [pid 300] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 299] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 298] <... futex resumed>) = 0 [pid 307] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 305] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... rt_sigaction resumed>NULL, 8) = 0 [pid 298] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] <... futex resumed>) = 0 [pid 300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 298] <... rt_sigaction resumed>NULL, 8) = 0 [pid 307] <... mmap resumed>) = 0x7fc1321e6000 [pid 305] recvmmsg(3, [pid 302] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... mmap resumed>) = 0x7fc1321e6000 [pid 299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 307] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 300] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 25.671560][ T24] audit: type=1400 audit(1692557935.830:66): avc: denied { execmem } for pid=291 comm="syz-executor417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.681780][ T24] audit: type=1400 audit(1692557935.840:67): avc: denied { read write } for pid=296 comm="syz-executor417" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 25.686910][ T24] audit: type=1400 audit(1692557935.840:68): avc: denied { open } for pid=296 comm="syz-executor417" path="/dev/loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 25.693104][ T24] audit: type=1400 audit(1692557935.850:69): avc: denied { ioctl } for pid=296 comm="syz-executor417" path="/dev/loop4" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 307] <... mprotect resumed>) = 0 [pid 300] <... mprotect resumed>) = 0 [pid 299] <... mmap resumed>) = 0x7fc1321e6000 [pid 298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [pid 304] <... ioctl resumed>) = 0 [pid 300] rt_sigprocmask(SIG_BLOCK, ~[], [pid 299] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 307] <... rt_sigprocmask resumed>[], 8) = 0 [pid 298] <... mmap resumed>) = 0x7fc1321e6000 [pid 307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 304] close(5 [pid 300] <... rt_sigprocmask resumed>[], 8) = 0 [pid 299] <... mprotect resumed>) = 0 [pid 298] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 304] <... close resumed>) = 0 [pid 300] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] <... mprotect resumed>) = 0 [pid 307] <... clone3 resumed> => {parent_tid=[312]}, 88) = 312 [pid 304] mkdir("./file0", 0777 [pid 299] <... rt_sigprocmask resumed>[], 8) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 300] <... clone3 resumed> => {parent_tid=[313]}, 88) = 313 [pid 299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 298] <... rt_sigprocmask resumed>[], 8) = 0 [pid 307] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 300] rt_sigprocmask(SIG_SETMASK, [], [pid 298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 307] <... futex resumed>) = 0 [pid 307] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... clone3 resumed> => {parent_tid=[314]}, 88) = 314 [pid 307] <... futex resumed>) = 0 [pid 300] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... clone3 resumed> => {parent_tid=[315]}, 88) = 315 [pid 307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 307] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 300] <... futex resumed>) = 0 [pid 299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] rt_sigprocmask(SIG_SETMASK, [], [pid 307] <... mprotect resumed>) = 0 [pid 300] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] <... futex resumed>) = 0 [pid 299] <... futex resumed>) = 0 [pid 298] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 312 attached [pid 307] <... rt_sigprocmask resumed>[], 8) = 0 [pid 300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... futex resumed>) = 0 [pid 312] set_robust_list(0x7fc1322069a0, 24 [pid 307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 300] <... mmap resumed>) = 0x7fc1321c5000 [pid 299] <... futex resumed>) = 0 [pid 298] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... set_robust_list resumed>) = 0 [pid 300] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] <... futex resumed>) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [], [pid 307] <... clone3 resumed> => {parent_tid=[320]}, 88) = 320 [pid 300] <... mprotect resumed>) = 0 [pid 299] <... mmap resumed>) = 0x7fc1321c5000 [pid 298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 315 attached ./strace-static-x86_64: Process 314 attached ./strace-static-x86_64: Process 313 attached [pid 312] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [], [pid 300] rt_sigprocmask(SIG_BLOCK, ~[], [pid 299] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 298] <... mmap resumed>) = 0x7fc1321c5000 [pid 312] memfd_create("syzkaller", 0 [pid 307] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] <... rt_sigprocmask resumed>[], 8) = 0 [pid 299] <... mprotect resumed>) = 0 [pid 298] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 312] <... memfd_create resumed>) = 3 [pid 307] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] <... mprotect resumed>) = 0 [pid 312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 307] <... futex resumed>) = 0 [pid 299] <... rt_sigprocmask resumed>[], 8) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], [pid 312] <... mmap resumed>) = 0x7fc129dc5000 [pid 307] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... clone3 resumed> => {parent_tid=[321]}, 88) = 321 [pid 299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 298] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 320 attached [pid 312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 300] rt_sigprocmask(SIG_SETMASK, [], [pid 298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 320] set_robust_list(0x7fc1321e59a0, 24 [pid 315] set_robust_list(0x7fc1322069a0, 24 [pid 314] set_robust_list(0x7fc1322069a0, 24 [pid 313] set_robust_list(0x7fc1322069a0, 24 [pid 312] <... write resumed>) = 262144 [pid 300] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... clone3 resumed> => {parent_tid=[323]}, 88) = 323 [pid 320] <... set_robust_list resumed>) = 0 [pid 315] <... set_robust_list resumed>) = 0 [pid 314] <... set_robust_list resumed>) = 0 [pid 313] <... set_robust_list resumed>) = 0 [pid 312] munmap(0x7fc129dc5000, 262144 [pid 300] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... clone3 resumed> => {parent_tid=[325]}, 88) = 325 [pid 320] rt_sigprocmask(SIG_SETMASK, [], [pid 315] rt_sigprocmask(SIG_SETMASK, [], [pid 314] rt_sigprocmask(SIG_SETMASK, [], [pid 313] rt_sigprocmask(SIG_SETMASK, [], [pid 312] <... munmap resumed>) = 0 [pid 300] <... futex resumed>) = 0 [pid 299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] rt_sigprocmask(SIG_SETMASK, [], [pid 320] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 312] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 300] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 320] creat("./bus", 000 [pid 312] <... openat resumed>) = 4 [pid 299] <... futex resumed>) = 0 [pid 298] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... creat resumed>) = 5 [pid 312] ioctl(4, LOOP_SET_FD, 3 [pid 320] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... futex resumed>) = 0 [pid 320] <... futex resumed>) = 1 [pid 307] <... futex resumed>) = 0 [pid 298] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 320] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 307] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... mount resumed>) = 0 [pid 307] <... futex resumed>) = 0 [pid 320] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 320] <... futex resumed>) = 0 [pid 307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 320] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] <... futex resumed>) = 0 [pid 320] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [ 25.774849][ T303] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 25.777543][ T24] audit: type=1400 audit(1692557935.890:70): avc: denied { mounton } for pid=301 comm="syz-executor417" path="/root/syzkaller.duxz7m/0/bus" dev="sda1" ino=1941 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 25.791809][ T303] ext4 filesystem being mounted at /root/syzkaller.SVIRRC/0/file0 supports timestamps until 2038 (0x7fffffff) [pid 307] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 325 attached ./strace-static-x86_64: Process 323 attached ./strace-static-x86_64: Process 321 attached [pid 315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 314] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 312] <... ioctl resumed>) = 0 [pid 302] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 325] set_robust_list(0x7fc1321e59a0, 24 [pid 323] set_robust_list(0x7fc1321e59a0, 24 [pid 321] set_robust_list(0x7fc1321e59a0, 24 [pid 320] <... open resumed>) = 6 [pid 315] memfd_create("syzkaller", 0 [pid 314] memfd_create("syzkaller", 0 [pid 313] memfd_create("syzkaller", 0 [pid 312] close(3 [pid 302] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 325] <... set_robust_list resumed>) = 0 [pid 323] <... set_robust_list resumed>) = 0 [pid 321] <... set_robust_list resumed>) = 0 [pid 320] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... memfd_create resumed>) = 3 [pid 314] <... memfd_create resumed>) = 3 [pid 313] <... memfd_create resumed>) = 3 [pid 312] <... close resumed>) = 0 [pid 302] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = 0 [pid 300] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] rt_sigprocmask(SIG_SETMASK, [], [pid 323] rt_sigprocmask(SIG_SETMASK, [], [pid 321] rt_sigprocmask(SIG_SETMASK, [], [pid 320] <... futex resumed>) = 1 [pid 315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 312] mkdir("./file0", 0777 [pid 302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] <... futex resumed>) = 0 [pid 299] <... futex resumed>) = 0 [pid 325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 320] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 315] <... mmap resumed>) = 0x7fc129dc5000 [pid 314] <... mmap resumed>) = 0x7fc129dc5000 [pid 313] <... mmap resumed>) = 0x7fc129dc5000 [pid 312] <... mkdir resumed>) = 0 [pid 302] <... mmap resumed>) = 0x7fc129de4000 [pid 301] <... mmap resumed>) = 0x7fc129de4000 [pid 300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 325] creat("./bus", 000 [pid 323] creat("./bus", 000 [pid 299] <... mmap resumed>) = 0x7fc129da4000 [pid 298] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... creat resumed>) = 4 [pid 323] <... creat resumed>) = 4 [pid 321] creat("./bus", 000 [pid 307] <... futex resumed>) = 0 [pid 302] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 301] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 300] <... mmap resumed>) = 0x7fc129da4000 [pid 299] mprotect(0x7fc129da5000, 131072, PROT_READ|PROT_WRITE [pid 298] <... futex resumed>) = 0 [pid 325] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... mprotect resumed>) = 0 [pid 298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 325] <... futex resumed>) = 0 [pid 323] <... futex resumed>) = 0 [pid 321] <... creat resumed>) = 4 [pid 315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 312] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 307] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... mount resumed>) = 0 [pid 302] <... mprotect resumed>) = 0 [pid 301] <... mprotect resumed>) = 0 [pid 300] mprotect(0x7fc129da5000, 131072, PROT_READ|PROT_WRITE [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [pid 298] <... mmap resumed>) = 0x7fc129da4000 [pid 325] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 323] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... rt_sigprocmask resumed>[], 8) = 0 [pid 298] mprotect(0x7fc129da5000, 131072, PROT_READ|PROT_WRITE [pid 299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129dc4990, parent_tid=0x7fc129dc4990, exit_signal=0, stack=0x7fc129da4000, stack_size=0x20300, tls=0x7fc129dc46c0} [pid 298] <... mprotect resumed>) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], [pid 299] <... clone3 resumed> => {parent_tid=[329]}, 88) = 329 [pid 298] <... rt_sigprocmask resumed>[], 8) = 0 [pid 299] rt_sigprocmask(SIG_SETMASK, [], [pid 298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129dc4990, parent_tid=0x7fc129dc4990, exit_signal=0, stack=0x7fc129da4000, stack_size=0x20300, tls=0x7fc129dc46c0} [pid 299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... clone3 resumed> => {parent_tid=[330]}, 88) = 330 [pid 299] <... futex resumed>) = 0 [pid 298] rt_sigprocmask(SIG_SETMASK, [], [pid 299] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 25.810739][ T24] audit: type=1400 audit(1692557935.890:71): avc: denied { create } for pid=301 comm="syz-executor417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.843368][ T304] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 25.850174][ T24] audit: type=1400 audit(1692557935.900:72): avc: denied { read } for pid=301 comm="syz-executor417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [pid 298] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 330 attached ./strace-static-x86_64: Process 329 attached [pid 321] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... futex resumed>) = 0 [pid 315] <... write resumed>) = 262144 [pid 314] <... write resumed>) = 262144 [pid 313] <... write resumed>) = 262144 [pid 307] <... futex resumed>) = 1 [pid 303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] <... mprotect resumed>) = 0 [pid 304] <... mount resumed>) = 0 [pid 304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 304] chdir("./file0") = 0 [pid 304] ioctl(7, LOOP_CLR_FD) = 0 [pid 304] close(7) = 0 [pid 304] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] set_robust_list(0x7fc129dc49a0, 24) = 0 [pid 330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 330] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 298] <... futex resumed>) = 0 [pid 330] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 298] <... futex resumed>) = 1 [pid 325] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 298] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... open resumed>) = 5 [pid 325] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 298] <... futex resumed>) = 0 [pid 325] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 298] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... socket resumed>) = 6 [pid 298] <... futex resumed>) = 0 [pid 325] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 0 [pid 298] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 325] recvmmsg(6, [pid 298] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] set_robust_list(0x7fc129dc49a0, 24) = 0 [pid 329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 329] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 329] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] <... futex resumed>) = 0 [pid 299] <... futex resumed>) = 1 [pid 323] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 299] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... open resumed>) = 5 [pid 323] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 323] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... futex resumed>) = 0 [pid 323] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 299] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... socket resumed>) = 6 [pid 323] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 323] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... futex resumed>) = 0 [pid 323] recvmmsg(6, [pid 299] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 321] <... futex resumed>) = 0 [pid 321] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 320] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 3 [pid 320] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 320] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 315] munmap(0x7fc129dc5000, 262144) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 315] ioctl(7, LOOP_SET_FD, 3 [pid 314] munmap(0x7fc129dc5000, 262144) = 0 [pid 314] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 313] munmap(0x7fc129dc5000, 262144) = 0 [pid 313] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 307] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... futex resumed>) = 0 [pid 307] <... futex resumed>) = 1 [pid 320] recvmmsg(3, [pid 307] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... openat resumed>) = 7 [pid 303] chdir("./file0") = 0 [pid 303] ioctl(5, LOOP_CLR_FD [pid 302] <... rt_sigprocmask resumed>[], 8) = 0 [pid 302] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} => {parent_tid=[331]}, 88) = 331 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 302] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} => {parent_tid=[332]}, 88) = 332 [pid 301] rt_sigprocmask(SIG_SETMASK, [], [pid 300] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 332 attached ./strace-static-x86_64: Process 331 attached [pid 301] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... ioctl resumed>) = 0 [pid 314] <... openat resumed>) = 7 [pid 313] <... openat resumed>) = 5 [pid 303] <... ioctl resumed>) = 0 [pid 315] close(3 [pid 314] ioctl(7, LOOP_SET_FD, 3 [pid 313] ioctl(5, LOOP_SET_FD, 3 [pid 303] close(5 [pid 315] <... close resumed>) = 0 [pid 315] mkdir("./file0", 0777) = 0 [pid 315] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 332] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 25.857767][ T304] ext4 filesystem being mounted at /root/syzkaller.duxz7m/0/file0 supports timestamps until 2038 (0x7fffffff) [ 25.886321][ T24] audit: type=1400 audit(1692557935.900:73): avc: denied { mounton } for pid=302 comm="syz-executor417" path="/root/syzkaller.SVIRRC/0/file0" dev="sda1" ino=1945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [pid 332] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 4, 0 [pid 331] set_robust_list(0x7fc129e049a0, 24 [pid 300] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129dc4990, parent_tid=0x7fc129dc4990, exit_signal=0, stack=0x7fc129da4000, stack_size=0x20300, tls=0x7fc129dc46c0} [pid 331] <... set_robust_list resumed>) = 0 [pid 314] <... ioctl resumed>) = 0 [pid 307] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 331] rt_sigprocmask(SIG_SETMASK, [], [pid 314] close(3 [pid 307] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... clone3 resumed> => {parent_tid=[335]}, 88) = 335 [pid 299] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 330] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = 0 [pid 314] <... close resumed>) = 0 [pid 307] <... futex resumed>) = 0 [pid 300] rt_sigprocmask(SIG_SETMASK, [], [pid 299] <... futex resumed>) = 1 [pid 298] <... futex resumed>) = 1 [pid 331] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 330] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 329] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 314] mkdir(0x20000000, 0777 [pid 307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... mmap resumed>) = 0x20000000 [pid 330] <... mmap resumed>) = 0x20000000 [pid 329] <... mmap resumed>) = 0x20000000 [pid 307] <... mmap resumed>) = 0x7fc129de4000 [pid 300] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 302] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... futex resumed>) = 0 ./strace-static-x86_64: Process 335 attached [pid 332] <... mmap resumed>) = 0x20000000 [pid 331] <... futex resumed>) = 0 [pid 330] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 1 [pid 314] <... mkdir resumed>) = -1 ENOENT (No such file or directory) [pid 307] <... mprotect resumed>) = 0 [pid 302] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 0 [pid 298] <... futex resumed>) = 0 [pid 313] <... ioctl resumed>) = 0 [pid 303] <... close resumed>) = 0 [pid 335] set_robust_list(0x7fc129dc49a0, 24 [pid 332] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] memfd_create("syzkaller", 0 [pid 330] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] mount("/dev/loop1", 0x20000000, 0x200005c0, MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"... [pid 313] close(3 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [pid 302] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... memfd_create resumed>) = 5 [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 314] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 313] <... close resumed>) = 0 [pid 307] <... rt_sigprocmask resumed>[], 8) = 0 [pid 299] <... futex resumed>) = 0 [pid 298] <... futex resumed>) = 0 [pid 331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 330] memfd_create("syzkaller", 0 [pid 329] memfd_create("syzkaller", 0 [pid 314] ioctl(7, LOOP_CLR_FD [pid 313] mkdir("./file0", 0777 [pid 307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 331] <... mmap resumed>) = 0x7fc1219e4000 [pid 330] <... memfd_create resumed>) = 3 [pid 329] <... memfd_create resumed>) = 3 [pid 314] <... ioctl resumed>) = 0 [pid 313] <... mkdir resumed>) = 0 [pid 331] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 314] close(7 [ 25.911445][ T24] audit: type=1400 audit(1692557935.950:74): avc: denied { mount } for pid=302 comm="syz-executor417" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.933158][ T24] audit: type=1400 audit(1692557936.070:75): avc: denied { map } for pid=301 comm="syz-executor417" path="/root/syzkaller.duxz7m/0/bus" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 313] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 307] <... clone3 resumed> => {parent_tid=[339]}, 88) = 339 [pid 331] <... write resumed>) = 65536 [pid 330] <... mmap resumed>) = 0x7fc1219a4000 [pid 329] <... mmap resumed>) = 0x7fc1219a4000 [pid 314] <... close resumed>) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [], [pid 331] munmap(0x7fc1219e4000, 65536 [pid 330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 314] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 331] <... munmap resumed>) = 0 [pid 330] <... write resumed>) = 65536 [pid 329] <... write resumed>) = 65536 [pid 314] <... futex resumed>) = 0 [pid 307] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... set_robust_list resumed>) = 0 [pid 332] <... futex resumed>) = 0 [pid 331] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 330] munmap(0x7fc1219a4000, 65536 [pid 329] munmap(0x7fc1219a4000, 65536 [pid 314] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] <... futex resumed>) = 0 [pid 303] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 339 attached [pid 335] rt_sigprocmask(SIG_SETMASK, [], [pid 332] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 331] <... openat resumed>) = 8 [pid 315] <... mount resumed>) = -1 EBADMSG (Bad message) [pid 304] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = 1 [pid 339] set_robust_list(0x7fc129e049a0, 24 [pid 315] ioctl(7, LOOP_CLR_FD [pid 304] memfd_create("syzkaller", 0 [pid 303] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] <... set_robust_list resumed>) = 0 [pid 335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 331] ioctl(8, LOOP_SET_FD, 5 [pid 329] <... munmap resumed>) = 0 [pid 315] <... ioctl resumed>) = 0 [pid 307] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... memfd_create resumed>) = 7 [pid 339] rt_sigprocmask(SIG_SETMASK, [], [pid 315] close(7 [pid 304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 339] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 315] <... close resumed>) = 0 [pid 304] <... mmap resumed>) = 0x7fc1219e4000 [pid 339] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 315] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 339] <... mmap resumed>) = 0x20000000 [pid 335] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 331] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 329] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 315] <... futex resumed>) = 0 [pid 304] <... write resumed>) = 65536 [pid 339] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... mount resumed>) = 0 [pid 331] ioctl(8, LOOP_CLR_FD [pid 329] <... openat resumed>) = 7 [pid 315] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] munmap(0x7fc1219e4000, 65536 [pid 339] <... futex resumed>) = 1 [pid 335] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... ioctl resumed>) = 0 [pid 329] ioctl(7, LOOP_SET_FD, 3 [pid 307] <... futex resumed>) = 0 [pid 304] <... munmap resumed>) = 0 [pid 339] memfd_create("syzkaller", 0 [pid 335] <... futex resumed>) = 1 [pid 329] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 307] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 300] <... futex resumed>) = 0 [pid 339] <... memfd_create resumed>) = 7 [pid 335] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] ioctl(7, LOOP_CLR_FD [pid 307] <... futex resumed>) = 0 [pid 304] <... openat resumed>) = 8 [pid 300] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 329] <... ioctl resumed>) = 0 [pid 304] ioctl(8, LOOP_SET_FD, 7 [pid 300] <... futex resumed>) = 1 [pid 321] <... futex resumed>) = 0 [pid 339] <... mmap resumed>) = 0x7fc1219e4000 [pid 321] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 304] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 300] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 321] <... open resumed>) = 3 [pid 304] ioctl(8, LOOP_CLR_FD [pid 339] <... write resumed>) = 65536 [pid 331] ioctl(8, LOOP_SET_FD, 5 [pid 321] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... ioctl resumed>) = 0 [pid 339] munmap(0x7fc1219e4000, 65536 [pid 331] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 321] <... futex resumed>) = 1 [pid 300] <... futex resumed>) = 0 [pid 339] <... munmap resumed>) = 0 [pid 339] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 8 [pid 339] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 339] ioctl(8, LOOP_CLR_FD) = 0 [pid 330] <... munmap resumed>) = 0 [pid 330] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 331] close(8 [pid 329] ioctl(7, LOOP_SET_FD, 3 [pid 321] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 304] ioctl(8, LOOP_SET_FD, 7 [pid 300] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 339] ioctl(8, LOOP_SET_FD, 7 [pid 304] close(8 [pid 331] <... close resumed>) = 0 [pid 321] <... socket resumed>) = 6 [pid 300] <... futex resumed>) = 0 [pid 339] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 331] close(5 [pid 329] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 321] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... close resumed>) = 0 [pid 300] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] close(8 [pid 331] <... close resumed>) = 0 [pid 329] close(7 [pid 321] <... futex resumed>) = 0 [pid 304] close(7 [pid 300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 339] <... close resumed>) = 0 [pid 331] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... close resumed>) = 0 [pid 321] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... close resumed>) = 0 [pid 300] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] close(7 [pid 331] <... futex resumed>) = 0 [pid 329] close(3 [pid 321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 339] <... close resumed>) = 0 [pid 331] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] <... close resumed>) = 0 [pid 321] recvmmsg(6, [pid 304] <... futex resumed>) = 0 [pid 300] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] <... futex resumed>) = 0 [pid 330] <... openat resumed>) = 7 [pid 329] <... futex resumed>) = 0 [pid 339] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] ioctl(7, LOOP_SET_FD, 3 [pid 329] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 330] ioctl(7, LOOP_CLR_FD) = 0 [pid 330] ioctl(7, LOOP_SET_FD, 3 [pid 312] <... mount resumed>) = 0 [pid 330] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [ 25.967449][ T312] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 25.979994][ T315] EXT4-fs warning (device loop0): read_mmp_block:115: Error -74 while reading MMP block 12 [ 26.007720][ T312] ext4 filesystem being mounted at /root/syzkaller.jl33I5/0/file0 supports timestamps until 2038 (0x7fffffff) [pid 330] close(7) = 0 [pid 312] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY) = -1 ENOENT (No such file or directory) [pid 312] ioctl(4, LOOP_CLR_FD) = 0 [pid 312] close(4) = 0 [pid 312] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] close(3) = 0 [pid 330] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] <... mount resumed>) = 0 [pid 313] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 7 [pid 313] chdir("./file0") = 0 [pid 313] ioctl(5, LOOP_CLR_FD) = 0 [pid 313] close(5) = 0 [pid 313] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 313] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 300] futex(0x7fc1322d26cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... mmap resumed>) = 0x20000000 [pid 313] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 313] memfd_create("syzkaller", 0) = 5 [pid 313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219a4000 [pid 313] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 313] munmap(0x7fc1219a4000, 65536) = 0 [pid 313] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 8 [pid 313] ioctl(8, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 313] ioctl(8, LOOP_CLR_FD) = 0 [pid 313] ioctl(8, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 313] close(8) = 0 [pid 313] close(5) = 0 [pid 313] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 26.022276][ T313] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 26.034298][ T313] ext4 filesystem being mounted at /root/syzkaller.IpShW6/0/file0 supports timestamps until 2038 (0x7fffffff) [pid 313] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] exit_group(0 [pid 299] exit_group(0 [pid 315] <... futex resumed>) = 231 [pid 298] <... exit_group resumed>) = ? [pid 330] <... futex resumed>) = ? [pid 329] <... futex resumed>) = ? [pid 325] <... recvmmsg resumed> ) = ? [pid 323] <... recvmmsg resumed> ) = ? [pid 314] <... futex resumed>) = ? [pid 299] <... exit_group resumed>) = ? [pid 315] +++ exited with 0 +++ [pid 330] +++ exited with 0 +++ [pid 329] +++ exited with 0 +++ [pid 323] +++ exited with 0 +++ [pid 314] +++ exited with 0 +++ [pid 307] exit_group(0 [pid 320] <... recvmmsg resumed>) = ? [pid 307] <... exit_group resumed>) = ? [pid 339] <... futex resumed>) = ? [pid 312] <... futex resumed>) = ? [pid 339] +++ exited with 0 +++ [pid 312] +++ exited with 0 +++ [pid 320] +++ exited with 0 +++ [pid 302] exit_group(0 [pid 331] <... futex resumed>) = ? [pid 305] <... recvmmsg resumed>0x20009080, 1, 0, NULL) = 230 [pid 302] <... exit_group resumed>) = ? [pid 303] <... futex resumed>) = ? [pid 331] +++ exited with 0 +++ [pid 305] +++ exited with 0 +++ [pid 303] +++ exited with 0 +++ [pid 301] exit_group(0 [pid 332] <... futex resumed>) = ? [pid 306] <... recvmmsg resumed> ) = ? [pid 304] <... futex resumed>) = ? [pid 301] <... exit_group resumed>) = ? [pid 332] +++ exited with 0 +++ [pid 306] +++ exited with 0 +++ [pid 304] +++ exited with 0 +++ [pid 325] +++ exited with 0 +++ [pid 298] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=298, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 292] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 292] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 292] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./0/bus") = 0 [pid 292] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./0/binderfs") = 0 [pid 292] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./0/file0") = 0 [pid 292] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./0") = 0 [pid 292] mkdir("./1", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 300] exit_group(0 [pid 335] <... futex resumed>) = ? [pid 321] <... recvmmsg resumed> ) = ? [pid 313] <... futex resumed>) = ? [pid 300] <... exit_group resumed>) = ? [pid 335] +++ exited with 0 +++ [pid 321] +++ exited with 0 +++ [pid 313] +++ exited with 0 +++ [pid 307] +++ exited with 0 +++ [pid 302] +++ exited with 0 +++ [pid 301] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 292] <... openat resumed>) = 3 [pid 294] restart_syscall(<... resuming interrupted clone ...> [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] <... restart_syscall resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555563f4690) = 342 [pid 294] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 294] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- ./strace-static-x86_64: Process 342 attached [pid 300] +++ exited with 0 +++ [pid 299] +++ exited with 0 +++ [pid 296] restart_syscall(<... resuming interrupted clone ...> [pid 294] <... umount2 resumed>) = 0 [pid 342] set_robust_list(0x5555563f46a0, 24 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 296] <... restart_syscall resumed>) = 0 [pid 342] <... set_robust_list resumed>) = 0 [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 294] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 342] chdir("./1" [pid 295] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 342] <... chdir resumed>) = 0 [pid 297] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./0/bus", [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 342] <... prctl resumed>) = 0 [pid 297] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... openat resumed>) = 3 [pid 294] unlink("./0/bus" [pid 293] <... openat resumed>) = 3 [pid 342] setpgid(0, 0 [pid 297] <... openat resumed>) = 3 [pid 296] <... openat resumed>) = 3 [pid 295] newfstatat(3, "", [pid 294] <... unlink resumed>) = 0 [pid 293] newfstatat(3, "", [pid 342] <... setpgid resumed>) = 0 [pid 297] newfstatat(3, "", [pid 296] newfstatat(3, "", [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(3, [pid 294] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] getdents64(3, [pid 342] <... openat resumed>) = 3 [pid 297] getdents64(3, [pid 296] getdents64(3, [pid 295] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... getdents64 resumed>0x5555563f5730 /* 4 entries */, 32768) = 104 [pid 342] write(3, "1000", 4 [pid 297] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 296] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] newfstatat(AT_FDCWD, "./0/binderfs", [pid 293] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 342] <... write resumed>) = 4 [pid 297] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... umount2 resumed>) = 0 [pid 342] close(3 [pid 297] <... umount2 resumed>) = 0 [pid 296] <... umount2 resumed>) = 0 [pid 295] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] unlink("./0/binderfs" [pid 293] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 342] <... close resumed>) = 0 [pid 297] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 342] symlink("/dev/binderfs", "./binderfs" [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... unlink resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 342] <... symlink resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./0/bus", [pid 296] newfstatat(AT_FDCWD, "./0/bus", [pid 295] newfstatat(AT_FDCWD, "./0/bus", [pid 294] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] newfstatat(AT_FDCWD, "./0/bus", [pid 342] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 342] <... futex resumed>) = 0 [pid 297] unlink("./0/bus" [pid 296] unlink("./0/bus" [pid 293] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 342] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 297] <... unlink resumed>) = 0 [pid 296] <... unlink resumed>) = 0 [pid 295] unlink("./0/bus" [pid 342] <... rt_sigaction resumed>NULL, 8) = 0 [pid 297] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] unlink("./0/bus" [pid 342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... unlink resumed>) = 0 [pid 342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] newfstatat(AT_FDCWD, "./0/binderfs", [pid 296] newfstatat(AT_FDCWD, "./0/binderfs", [pid 293] <... unlink resumed>) = 0 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 342] <... mmap resumed>) = 0x7fc1321e6000 [pid 297] unlink("./0/binderfs" [pid 296] unlink("./0/binderfs" [pid 293] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 342] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 297] <... unlink resumed>) = 0 [pid 296] <... unlink resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 342] <... mprotect resumed>) = 0 [pid 297] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [pid 295] newfstatat(AT_FDCWD, "./0/binderfs", [pid 293] newfstatat(AT_FDCWD, "./0/binderfs", [pid 342] <... rt_sigprocmask resumed>[], 8) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 295] unlink("./0/binderfs" [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./0/binderfs" [pid 342] <... clone3 resumed> => {parent_tid=[343]}, 88) = 343 [pid 295] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 343 attached [pid 343] set_robust_list(0x7fc1322069a0, 24 [pid 293] <... unlink resumed>) = 0 [pid 342] rt_sigprocmask(SIG_SETMASK, [], [pid 295] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] getdents64(3, [pid 342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 343] <... set_robust_list resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 343] rt_sigprocmask(SIG_SETMASK, [], [pid 293] close(3 [pid 343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 293] <... close resumed>) = 0 [pid 342] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] memfd_create("syzkaller", 0) = 3 [pid 343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129de6000 [pid 293] rmdir("./0") = 0 [pid 293] mkdir("./1", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129dc5000 [pid 342] mprotect(0x7fc129dc6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129de5990, parent_tid=0x7fc129de5990, exit_signal=0, stack=0x7fc129dc5000, stack_size=0x20300, tls=0x7fc129de56c0} => {parent_tid=[344]}, 88) = 344 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... write resumed>) = 262144 [pid 343] munmap(0x7fc129de6000, 262144./strace-static-x86_64: Process 344 attached ) = 0 [pid 344] set_robust_list(0x7fc129de59a0, 24 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 344] <... set_robust_list resumed>) = 0 [pid 344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 344] creat("./bus", 000) = 5 [pid 344] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 344] <... futex resumed>) = 1 [pid 342] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... mount resumed>) = 0 [pid 344] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 344] <... futex resumed>) = 1 [pid 342] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./0/file0") = 0 [pid 294] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./0") = 0 [pid 294] mkdir("./1", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 342] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129e05000 [pid 342] mprotect(0x7fc129e06000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e25990, parent_tid=0x7fc129e25990, exit_signal=0, stack=0x7fc129e05000, stack_size=0x20300, tls=0x7fc129e256c0} => {parent_tid=[345]}, 88) = 345 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 345 attached [pid 345] set_robust_list(0x7fc129e259a0, 24) = 0 [pid 345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 345] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 7 [pid 345] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] recvmmsg(7, [pid 293] <... openat resumed>) = 3 [pid 293] ioctl(3, LOOP_CLR_FD [pid 342] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129da4000 [pid 342] mprotect(0x7fc129da5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129dc4990, parent_tid=0x7fc129dc4990, exit_signal=0, stack=0x7fc129da4000, stack_size=0x20300, tls=0x7fc129dc46c0}./strace-static-x86_64: Process 346 attached => {parent_tid=[346]}, 88) = 346 [pid 346] set_robust_list(0x7fc129dc49a0, 24 [pid 342] rt_sigprocmask(SIG_SETMASK, [], [pid 346] <... set_robust_list resumed>) = 0 [pid 342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 342] futex(0x7fc1322d26f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] rt_sigprocmask(SIG_SETMASK, [], [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fc1322d26fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 346] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, -1, 0) = -1 EBADF (Bad file descriptor) [pid 346] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 346] futex(0x7fc1322d26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] futex(0x7fc1322d26f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 346] memfd_create("syzkaller", 0) = 8 [pid 346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219a4000 [pid 346] write(8, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 346] munmap(0x7fc1219a4000, 65536) = 0 [pid 346] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 343] <... openat resumed>) = 4 [pid 297] <... umount2 resumed>) = 0 [pid 296] <... umount2 resumed>) = 0 [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] close(3 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 346] <... openat resumed>) = 9 [pid 344] <... open resumed>) = 6 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... openat resumed>) = 3 [pid 293] <... close resumed>) = 0 [pid 346] ioctl(9, LOOP_SET_FD, 8 [pid 297] newfstatat(AT_FDCWD, "./0/file0", [pid 296] newfstatat(AT_FDCWD, "./0/file0", [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 343] ioctl(4, LOOP_SET_FD, 3 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 344] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] ioctl(3, LOOP_CLR_FD [pid 297] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... clone resumed>, child_tidptr=0x5555563f4690) = 348 [pid 344] <... futex resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 344] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... openat resumed>) = 4 [pid 296] <... openat resumed>) = 4 [pid 297] newfstatat(4, "", [pid 296] newfstatat(4, "", [pid 346] <... ioctl resumed>) = 0 [pid 343] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... umount2 resumed>) = 0 [pid 346] close(8 [pid 343] ioctl(4, LOOP_CLR_FD [pid 297] getdents64(4, [pid 296] getdents64(4, [pid 295] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 346] <... close resumed>) = 0 [pid 343] <... ioctl resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 296] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 346] mkdir("./mnt", 0777 [pid 297] getdents64(4, [pid 296] getdents64(4, [pid 295] newfstatat(AT_FDCWD, "./0/file0", [pid 346] <... mkdir resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 296] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 346] mount("/dev/loop0", "./mnt", "ext4", MS_SYNCHRONOUS, "noinit_itable,data_err=abort,delalloc,lazytime,nosuid=0x000000000000ee00,errors=continue" [pid 297] close(4 [pid 296] close(4 [pid 295] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... close resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] rmdir("./0/file0" [pid 296] rmdir("./0/file0" [pid 295] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... rmdir resumed>) = 0 [pid 296] <... rmdir resumed>) = 0 [pid 295] <... openat resumed>) = 4 [pid 343] ioctl(4, LOOP_SET_FD, 3 [pid 297] getdents64(3, [pid 296] getdents64(3, [pid 295] newfstatat(4, "", [pid 343] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 297] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 296] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 343] close(4 [pid 297] close(3 [pid 296] close(3 [pid 295] getdents64(4, [pid 343] <... close resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 295] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 343] close(3 [pid 297] rmdir("./0" [pid 296] rmdir("./0" [pid 295] getdents64(4, [pid 343] <... close resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 296] <... rmdir resumed>) = 0 [pid 295] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 343] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] mkdir("./1", 0777 [pid 296] mkdir("./1", 0777 [pid 295] close(4 [pid 343] <... futex resumed>) = 0 [pid 297] <... mkdir resumed>) = 0 [pid 296] <... mkdir resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 343] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 295] rmdir("./0/file0" [pid 297] <... openat resumed>) = 3 [pid 296] <... openat resumed>) = 3 [pid 295] <... rmdir resumed>) = 0 [pid 297] ioctl(3, LOOP_CLR_FD [pid 296] ioctl(3, LOOP_CLR_FD [pid 295] getdents64(3, [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 297] close(3 [pid 296] close(3 [pid 295] close(3 [pid 297] <... close resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] rmdir("./0") = 0 [pid 297] <... clone resumed>, child_tidptr=0x5555563f4690) = 349 [pid 296] <... clone resumed>, child_tidptr=0x5555563f4690) = 350 [pid 295] mkdir("./1", 0777) = 0 ./strace-static-x86_64: Process 348 attached [pid 295] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 348] set_robust_list(0x5555563f46a0, 24 [pid 295] <... openat resumed>) = 3 [pid 348] <... set_robust_list resumed>) = 0 [pid 295] ioctl(3, LOOP_CLR_FD [pid 348] chdir("./1" [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 348] <... chdir resumed>) = 0 [pid 295] close(3 [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 295] <... close resumed>) = 0 [pid 348] <... prctl resumed>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 348] setpgid(0, 0) = 0 [pid 295] <... clone resumed>, child_tidptr=0x5555563f4690) = 351 [pid 348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 294] close(3 [pid 348] write(3, "1000", 4 [pid 294] <... close resumed>) = 0 [pid 348] <... write resumed>) = 4 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 348] close(3) = 0 [pid 348] symlink("/dev/binderfs", "./binderfs") = 0 [pid 294] <... clone resumed>, child_tidptr=0x5555563f4690) = 352 [pid 348] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, ./strace-static-x86_64: Process 350 attached NULL, 8) = 0 [pid 350] set_robust_list(0x5555563f46a0, 24 [pid 348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 350] <... set_robust_list resumed>) = 0 [pid 348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 350] chdir("./1" [pid 348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 350] <... chdir resumed>) = 0 [pid 348] <... mmap resumed>) = 0x7fc1321e6000 [pid 350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 348] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 350] <... prctl resumed>) = 0 [pid 348] <... mprotect resumed>) = 0 [pid 350] setpgid(0, 0 [pid 348] rt_sigprocmask(SIG_BLOCK, ~[], [pid 350] <... setpgid resumed>) = 0 [pid 350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 348] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 351 attached [pid 350] <... openat resumed>) = 3 [pid 348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0}./strace-static-x86_64: Process 352 attached ./strace-static-x86_64: Process 349 attached [pid 351] set_robust_list(0x5555563f46a0, 24 [pid 350] write(3, "1000", 4 [pid 352] set_robust_list(0x5555563f46a0, 24 [pid 351] <... set_robust_list resumed>) = 0 [pid 350] <... write resumed>) = 4 [pid 349] set_robust_list(0x5555563f46a0, 24 [pid 348] <... clone3 resumed> => {parent_tid=[353]}, 88) = 353 [pid 348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 348] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 348] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 348] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 352] <... set_robust_list resumed>) = 0 [pid 351] chdir("./1" [pid 350] close(3 [pid 349] <... set_robust_list resumed>) = 0 [pid 352] chdir("./1" [pid 351] <... chdir resumed>) = 0 [pid 350] <... close resumed>) = 0 [pid 349] chdir("./1" [pid 348] <... clone3 resumed> => {parent_tid=[354]}, 88) = 354 ./strace-static-x86_64: Process 353 attached [pid 352] <... chdir resumed>) = 0 [pid 351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 350] symlink("/dev/binderfs", "./binderfs" [pid 349] <... chdir resumed>) = 0 [pid 348] rt_sigprocmask(SIG_SETMASK, [], [pid 353] set_robust_list(0x7fc1322069a0, 24 [pid 352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 351] <... prctl resumed>) = 0 [pid 350] <... symlink resumed>) = 0 [pid 349] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 353] <... set_robust_list resumed>) = 0 [pid 352] <... prctl resumed>) = 0 [pid 351] setpgid(0, 0 [pid 350] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] <... prctl resumed>) = 0 [pid 348] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] rt_sigprocmask(SIG_SETMASK, [], [pid 352] setpgid(0, 0 [pid 351] <... setpgid resumed>) = 0 [pid 350] <... futex resumed>) = 0 [pid 349] setpgid(0, 0 [pid 348] <... futex resumed>) = 0 [pid 353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 352] <... setpgid resumed>) = 0 [pid 351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 350] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 349] <... setpgid resumed>) = 0 [pid 348] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] memfd_create("syzkaller", 0 [pid 352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 351] <... openat resumed>) = 3 [pid 350] <... rt_sigaction resumed>NULL, 8) = 0 [pid 349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 353] <... memfd_create resumed>) = 3 [pid 352] <... openat resumed>) = 3 [pid 351] write(3, "1000", 4 [pid 350] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 349] <... openat resumed>) = 3 [pid 353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 352] write(3, "1000", 4 [pid 351] <... write resumed>) = 4 [pid 350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 349] write(3, "1000", 4 [pid 353] <... mmap resumed>) = 0x7fc129dc5000 [pid 352] <... write resumed>) = 4 [pid 351] close(3 [pid 350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 349] <... write resumed>) = 4 [pid 353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 352] close(3 [pid 351] <... close resumed>) = 0 [pid 350] <... mmap resumed>) = 0x7fc1321e6000 [pid 349] close(3 [pid 353] <... write resumed>) = 262144 [pid 352] <... close resumed>) = 0 [pid 351] symlink("/dev/binderfs", "./binderfs" [pid 350] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 349] <... close resumed>) = 0 [pid 353] munmap(0x7fc129dc5000, 262144 [pid 352] symlink("/dev/binderfs", "./binderfs" [pid 351] <... symlink resumed>) = 0 [pid 350] <... mprotect resumed>) = 0 [pid 349] symlink("/dev/binderfs", "./binderfs" [pid 346] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 353] <... munmap resumed>) = 0 [pid 352] <... symlink resumed>) = 0 [pid 351] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] rt_sigprocmask(SIG_BLOCK, ~[], [pid 349] <... symlink resumed>) = 0 [pid 346] ioctl(9, LOOP_CLR_FD [pid 353] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 352] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 350] <... rt_sigprocmask resumed>[], 8) = 0 [pid 349] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... ioctl resumed>) = 0 [pid 353] <... openat resumed>) = 4 [pid 352] <... futex resumed>) = 0 [pid 351] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 349] <... futex resumed>) = 0 [pid 346] close(9 [pid 353] ioctl(4, LOOP_SET_FD, 3 [pid 352] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 351] <... rt_sigaction resumed>NULL, 8) = 0 [pid 349] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 352] <... rt_sigaction resumed>NULL, 8) = 0 [pid 351] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 350] <... clone3 resumed> => {parent_tid=[355]}, 88) = 355 [pid 349] <... rt_sigaction resumed>NULL, 8) = 0 [pid 346] <... close resumed>) = 0 [pid 352] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 350] rt_sigprocmask(SIG_SETMASK, [], [pid 349] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 346] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 346] <... futex resumed>) = 0 [pid 352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 351] <... mmap resumed>) = 0x7fc1321e6000 [pid 350] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 346] futex(0x7fc1322d26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] <... mmap resumed>) = 0x7fc1321e6000 [pid 351] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 350] <... futex resumed>) = 0 [pid 349] <... mmap resumed>) = 0x7fc1321e6000 [pid 352] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 351] <... mprotect resumed>) = 0 [pid 350] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 354 attached [pid 352] <... mprotect resumed>) = 0 [pid 351] rt_sigprocmask(SIG_BLOCK, ~[], [pid 350] <... futex resumed>) = 0 [pid 349] <... mprotect resumed>) = 0 [pid 354] set_robust_list(0x7fc1321e59a0, 24 [pid 352] rt_sigprocmask(SIG_BLOCK, ~[], [pid 351] <... rt_sigprocmask resumed>[], 8) = 0 [pid 350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 349] rt_sigprocmask(SIG_BLOCK, ~[], [pid 352] <... rt_sigprocmask resumed>[], 8) = 0 [pid 351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 350] <... mmap resumed>) = 0x7fc1321c5000 [pid 349] <... rt_sigprocmask resumed>[], 8) = 0 [pid 354] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 357 attached [pid 353] <... ioctl resumed>) = 0 [pid 352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 350] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 354] rt_sigprocmask(SIG_SETMASK, [], [pid 353] close(3 [pid 351] <... clone3 resumed> => {parent_tid=[357]}, 88) = 357 [pid 350] <... mprotect resumed>) = 0 [pid 354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 353] <... close resumed>) = 0 [pid 352] <... clone3 resumed> => {parent_tid=[358]}, 88) = 358 [pid 351] rt_sigprocmask(SIG_SETMASK, [], [pid 350] rt_sigprocmask(SIG_BLOCK, ~[], [pid 349] <... clone3 resumed> => {parent_tid=[359]}, 88) = 359 [pid 353] mkdir("./file0", 0777 [pid 352] rt_sigprocmask(SIG_SETMASK, [], [pid 351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 350] <... rt_sigprocmask resumed>[], 8) = 0 [pid 349] rt_sigprocmask(SIG_SETMASK, [], [pid 353] <... mkdir resumed>) = 0 [pid 352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 351] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 354] creat("./bus", 000 [pid 353] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 352] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 349] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... creat resumed>) = 3 [pid 352] <... futex resumed>) = 0 [pid 351] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... clone3 resumed> => {parent_tid=[360]}, 88) = 360 [pid 349] <... futex resumed>) = 0 ./strace-static-x86_64: Process 355 attached [pid 352] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 350] rt_sigprocmask(SIG_SETMASK, [], [pid 349] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] set_robust_list(0x7fc1322069a0, 24 [pid 352] <... futex resumed>) = 0 [pid 351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 349] <... futex resumed>) = 0 [pid 354] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] <... set_robust_list resumed>) = 0 [pid 352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 351] <... mmap resumed>) = 0x7fc1321c5000 [pid 350] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 348] <... futex resumed>) = 0 [pid 354] <... futex resumed>) = 1 [pid 355] rt_sigprocmask(SIG_SETMASK, [], [pid 352] <... mmap resumed>) = 0x7fc1321c5000 [pid 351] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 350] <... futex resumed>) = 0 [pid 349] <... mmap resumed>) = 0x7fc1321c5000 [pid 348] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 352] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 351] <... mprotect resumed>) = 0 [pid 350] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 348] <... futex resumed>) = 0 [pid 357] set_robust_list(0x7fc1322069a0, 24 [pid 355] memfd_create("syzkaller", 0 [pid 354] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 352] <... mprotect resumed>) = 0 [pid 351] rt_sigprocmask(SIG_BLOCK, ~[], [pid 349] <... mprotect resumed>) = 0 [pid 355] <... memfd_create resumed>) = 3 [pid 352] rt_sigprocmask(SIG_BLOCK, ~[], [pid 351] <... rt_sigprocmask resumed>[], 8) = 0 [pid 349] rt_sigprocmask(SIG_BLOCK, ~[], [pid 355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 352] <... rt_sigprocmask resumed>[], 8) = 0 [pid 351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 349] <... rt_sigprocmask resumed>[], 8) = 0 [pid 355] <... mmap resumed>) = 0x7fc129dc5000 [pid 352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0}./strace-static-x86_64: Process 360 attached ./strace-static-x86_64: Process 359 attached ./strace-static-x86_64: Process 358 attached [pid 357] <... set_robust_list resumed>) = 0 [pid 355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 354] <... mount resumed>) = 0 [pid 351] <... clone3 resumed> => {parent_tid=[361]}, 88) = 361 [pid 348] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] set_robust_list(0x7fc1321e59a0, 24 [pid 359] set_robust_list(0x7fc1322069a0, 24 [pid 358] set_robust_list(0x7fc1322069a0, 24 [pid 357] rt_sigprocmask(SIG_SETMASK, [], [pid 355] <... write resumed>) = 262144 [pid 354] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... clone3 resumed> => {parent_tid=[362]}, 88) = 362 [pid 351] rt_sigprocmask(SIG_SETMASK, [], [pid 349] <... clone3 resumed> => {parent_tid=[363]}, 88) = 363 [pid 348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 360] <... set_robust_list resumed>) = 0 [pid 359] <... set_robust_list resumed>) = 0 [pid 358] <... set_robust_list resumed>) = 0 [pid 357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 354] <... futex resumed>) = 0 [pid 352] rt_sigprocmask(SIG_SETMASK, [], [pid 351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 349] rt_sigprocmask(SIG_SETMASK, [], [pid 348] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 363 attached ./strace-static-x86_64: Process 362 attached ./strace-static-x86_64: Process 361 attached [pid 360] rt_sigprocmask(SIG_SETMASK, [], [pid 359] rt_sigprocmask(SIG_SETMASK, [], [pid 358] rt_sigprocmask(SIG_SETMASK, [], [pid 357] memfd_create("syzkaller", 0 [pid 355] munmap(0x7fc129dc5000, 262144 [pid 354] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 351] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 348] <... futex resumed>) = 0 [pid 363] set_robust_list(0x7fc1321e59a0, 24 [pid 362] set_robust_list(0x7fc1321e59a0, 24 [pid 361] set_robust_list(0x7fc1321e59a0, 24 [pid 360] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 357] <... memfd_create resumed>) = 3 [pid 354] <... open resumed>) = 5 [pid 352] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 349] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... set_robust_list resumed>) = 0 [pid 362] <... set_robust_list resumed>) = 0 [pid 361] <... set_robust_list resumed>) = 0 [pid 360] creat("./bus", 000 [pid 358] memfd_create("syzkaller", 0 [pid 357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 354] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 349] <... futex resumed>) = 0 [pid 348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 363] rt_sigprocmask(SIG_SETMASK, [], [pid 362] rt_sigprocmask(SIG_SETMASK, [], [pid 361] rt_sigprocmask(SIG_SETMASK, [], [pid 360] <... creat resumed>) = 4 [pid 358] <... memfd_create resumed>) = 3 [pid 357] <... mmap resumed>) = 0x7fc129dc5000 [pid 355] <... munmap resumed>) = 0 [pid 354] <... futex resumed>) = 0 [pid 352] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 360] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 354] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 348] <... futex resumed>) = 0 [pid 363] creat("./bus", 000 [pid 362] creat("./bus", 000 [pid 361] creat("./bus", 000 [pid 360] <... futex resumed>) = 1 [pid 359] memfd_create("syzkaller", 0 [pid 358] <... mmap resumed>) = 0x7fc129dc5000 [pid 357] <... write resumed>) = 262144 [pid 355] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 354] <... socket resumed>) = 6 [pid 350] <... futex resumed>) = 0 [pid 348] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... creat resumed>) = 3 [pid 362] <... creat resumed>) = 4 [pid 361] <... creat resumed>) = 4 [pid 360] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 359] <... memfd_create resumed>) = 4 [pid 358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 357] munmap(0x7fc129dc5000, 262144 [pid 354] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 363] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 358] <... write resumed>) = 262144 [pid 357] <... munmap resumed>) = 0 [pid 355] <... openat resumed>) = 5 [pid 354] <... futex resumed>) = 0 [pid 350] <... futex resumed>) = 0 [pid 348] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 363] <... futex resumed>) = 1 [pid 362] <... futex resumed>) = 1 [pid 361] <... futex resumed>) = 1 [pid 360] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 358] munmap(0x7fc129dc5000, 262144 [pid 357] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 354] recvmmsg(6, [pid 352] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 0 [pid 350] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... futex resumed>) = 0 [pid 348] <... futex resumed>) = 0 [pid 363] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] <... mount resumed>) = 0 [pid 358] <... munmap resumed>) = 0 [pid 357] <... openat resumed>) = 5 [pid 352] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 361] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 360] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 357] ioctl(5, LOOP_SET_FD, 3 [pid 352] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 0 [pid 349] <... futex resumed>) = 0 [ 26.409449][ T346] EXT4-fs (loop0): Unrecognized mount option "nosuid=0x000000000000ee00" or missing value [pid 363] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 362] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 361] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 360] <... futex resumed>) = 1 [pid 358] <... openat resumed>) = 5 [pid 352] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 350] <... futex resumed>) = 0 [pid 349] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... mount resumed>) = 0 [pid 362] <... mount resumed>) = 0 [pid 361] <... mount resumed>) = 0 [pid 360] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 359] <... mmap resumed>) = 0x7fc129dc5000 [pid 358] ioctl(5, LOOP_SET_FD, 3 [pid 355] ioctl(5, LOOP_SET_FD, 3 [pid 350] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 363] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 350] <... futex resumed>) = 0 [pid 363] <... futex resumed>) = 1 [pid 362] <... futex resumed>) = 1 [pid 361] <... futex resumed>) = 1 [pid 360] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 352] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 0 [pid 350] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... futex resumed>) = 0 [pid 363] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 361] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 352] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 0 [pid 349] <... futex resumed>) = 0 [pid 363] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 362] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 361] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 352] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... ioctl resumed>) = 0 [pid 357] close(3) = 0 [pid 357] mkdir("./file0", 0777) = 0 [pid 357] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 359] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 265740) = 265740 [pid 359] munmap(0x7fc129dc5000, 265740) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 363] <... open resumed>) = 5 [pid 362] <... open resumed>) = 6 [pid 361] <... open resumed>) = 6 [pid 360] <... open resumed>) = 6 [pid 358] <... ioctl resumed>) = 0 [pid 363] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] close(3 [pid 363] <... futex resumed>) = 1 [pid 362] <... futex resumed>) = 1 [pid 361] <... futex resumed>) = 1 [pid 360] <... futex resumed>) = 1 [pid 358] <... close resumed>) = 0 [pid 352] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 0 [pid 350] <... futex resumed>) = 0 [pid 349] <... futex resumed>) = 0 [pid 363] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] mkdir("./file0", 0777 [pid 352] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 361] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 358] <... mkdir resumed>) = 0 [pid 352] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 0 [pid 350] <... futex resumed>) = 0 [pid 349] <... futex resumed>) = 0 [pid 363] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 362] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 361] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 360] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 358] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 352] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 350] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... socket resumed>) = 7 [pid 362] <... socket resumed>) = 3 [pid 361] <... socket resumed>) = 3 [pid 360] <... socket resumed>) = 7 [pid 363] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 363] <... futex resumed>) = 1 [pid 362] <... futex resumed>) = 1 [pid 361] <... futex resumed>) = 1 [pid 360] <... futex resumed>) = 1 [pid 352] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 0 [pid 350] <... futex resumed>) = 0 [pid 349] <... futex resumed>) = 0 [pid 363] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 361] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 352] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 0 [pid 350] <... futex resumed>) = 0 [pid 349] <... futex resumed>) = 0 [pid 363] recvmmsg(7, [pid 362] recvmmsg(3, [pid 361] recvmmsg(3, [pid 360] recvmmsg(7, [pid 352] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 350] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] <... openat resumed>) = 6 [pid 355] <... ioctl resumed>) = 0 [pid 353] <... mount resumed>) = 0 [pid 359] ioctl(6, LOOP_SET_FD, 4 [pid 355] close(3 [pid 353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 359] <... ioctl resumed>) = 0 [pid 355] <... close resumed>) = 0 [pid 353] <... openat resumed>) = 7 [pid 353] chdir("./file0") = 0 [pid 353] ioctl(4, LOOP_CLR_FD [pid 355] mkdir("./file0", 0777 [pid 353] <... ioctl resumed>) = 0 [pid 359] close(4) = 0 [pid 355] <... mkdir resumed>) = 0 [pid 353] close(4 [pid 359] mkdir("./file0", 0777 [pid 355] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 353] <... close resumed>) = 0 [pid 359] <... mkdir resumed>) = 0 [pid 353] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 353] <... futex resumed>) = 0 [ 26.463614][ T353] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 26.475752][ T353] ext4 filesystem being mounted at /root/syzkaller.zNZ9LH/1/file0 supports timestamps until 2038 (0x7fffffff) [pid 353] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 348] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] futex(0x7fc1322d26cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 0 [pid 353] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 353] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 353] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 348] <... futex resumed>) = 0 [pid 353] memfd_create("syzkaller", 0) = 4 [pid 353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc121a05000 [pid 353] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 353] munmap(0x7fc121a05000, 65536) = 0 [pid 353] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 8 [pid 353] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 353] ioctl(8, LOOP_CLR_FD) = 0 [pid 352] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 351] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 350] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 349] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 358] <... mount resumed>) = 0 [pid 357] <... mount resumed>) = 0 [pid 352] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 352] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 0 [pid 350] <... futex resumed>) = 0 [pid 349] <... futex resumed>) = 0 [pid 358] <... openat resumed>) = 7 [pid 357] <... openat resumed>) = 7 [pid 353] ioctl(8, LOOP_SET_FD, 4 [pid 352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 358] chdir("./file0" [pid 357] chdir("./file0" [pid 352] <... mmap resumed>) = 0x7fc129de4000 [pid 351] <... mmap resumed>) = 0x7fc129de4000 [pid 350] <... mmap resumed>) = 0x7fc129de4000 [pid 349] <... mmap resumed>) = 0x7fc129de5000 [pid 358] <... chdir resumed>) = 0 [pid 357] <... chdir resumed>) = 0 [pid 353] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 352] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 351] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 350] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 349] mprotect(0x7fc129de6000, 131072, PROT_READ|PROT_WRITE [pid 358] ioctl(5, LOOP_CLR_FD [pid 357] ioctl(5, LOOP_CLR_FD [pid 352] <... mprotect resumed>) = 0 [pid 351] <... mprotect resumed>) = 0 [pid 350] <... mprotect resumed>) = 0 [pid 349] <... mprotect resumed>) = 0 [ 26.507094][ T358] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 26.517436][ T357] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 26.519229][ T358] ext4 filesystem being mounted at /root/syzkaller.duxz7m/1/file0 supports timestamps until 2038 (0x7fffffff) [ 26.530780][ T357] ext4 filesystem being mounted at /root/syzkaller.IpShW6/1/file0 supports timestamps until 2038 (0x7fffffff) [pid 358] <... ioctl resumed>) = 0 [pid 357] <... ioctl resumed>) = 0 [pid 353] close(8 [pid 352] rt_sigprocmask(SIG_BLOCK, ~[], [pid 351] rt_sigprocmask(SIG_BLOCK, ~[], [pid 350] rt_sigprocmask(SIG_BLOCK, ~[], [pid 349] rt_sigprocmask(SIG_BLOCK, ~[], [pid 358] close(5 [pid 357] close(5 [pid 352] <... rt_sigprocmask resumed>[], 8) = 0 [pid 351] <... rt_sigprocmask resumed>[], 8) = 0 [pid 350] <... rt_sigprocmask resumed>[], 8) = 0 [pid 349] <... rt_sigprocmask resumed>[], 8) = 0 [pid 358] <... close resumed>) = 0 [pid 357] <... close resumed>) = 0 [pid 353] <... close resumed>) = 0 [pid 353] close(4) = 0 [pid 353] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 353] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 358] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e05990, parent_tid=0x7fc129e05990, exit_signal=0, stack=0x7fc129de5000, stack_size=0x20300, tls=0x7fc129e056c0} [pid 357] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... mount resumed>) = 0 [pid 358] <... futex resumed>) = 0 [pid 358] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 357] <... futex resumed>) = 0 [pid 351] <... clone3 resumed> => {parent_tid=[379]}, 88) = 379 [pid 349] <... clone3 resumed> => {parent_tid=[381]}, 88) = 381 [pid 350] <... clone3 resumed> => {parent_tid=[380]}, 88) = 380 [pid 352] <... clone3 resumed> => {parent_tid=[378]}, 88) = 378 [pid 359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 357] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 379 attached ./strace-static-x86_64: Process 380 attached ./strace-static-x86_64: Process 381 attached [pid 381] set_robust_list(0x7fc129e059a0, 24 [pid 380] set_robust_list(0x7fc129e049a0, 24 [pid 381] <... set_robust_list resumed>) = 0 [pid 380] <... set_robust_list resumed>) = 0 [pid 380] rt_sigprocmask(SIG_SETMASK, [], [pid 379] set_robust_list(0x7fc129e049a0, 24 [pid 381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 379] <... set_robust_list resumed>) = 0 [pid 352] rt_sigprocmask(SIG_SETMASK, [], [pid 351] rt_sigprocmask(SIG_SETMASK, [], [pid 350] rt_sigprocmask(SIG_SETMASK, [], [pid 349] rt_sigprocmask(SIG_SETMASK, [], [pid 352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 352] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 0 [pid 350] <... futex resumed>) = 0 [pid 349] <... futex resumed>) = 0 [pid 352] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 350] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] <... openat resumed>) = 4 [pid 359] chdir("./file0") = 0 [pid 359] ioctl(6, LOOP_CLR_FD [pid 381] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 380] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0./strace-static-x86_64: Process 378 attached [pid 381] <... mmap resumed>) = 0x20000000 [pid 379] rt_sigprocmask(SIG_SETMASK, [], [pid 359] <... ioctl resumed>) = 0 [pid 355] <... mount resumed>) = 0 [pid 355] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 381] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... mmap resumed>) = 0x20000000 [pid 379] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 378] set_robust_list(0x7fc129e049a0, 24 [pid 359] close(6 [pid 379] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 378] <... set_robust_list resumed>) = 0 [pid 355] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 381] <... futex resumed>) = 1 [pid 380] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... close resumed>) = 0 [pid 378] rt_sigprocmask(SIG_SETMASK, [], [pid 379] <... mmap resumed>) = 0x20000000 [pid 378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 378] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 359] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... mmap resumed>) = 0x20000000 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 381] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 1 [pid 378] <... futex resumed>) = 1 [pid 380] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 349] <... futex resumed>) = 0 [pid 349] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 349] <... futex resumed>) = 1 [pid 359] memfd_create("syzkaller", 0) = 6 [pid 359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e5000 [pid 359] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 359] munmap(0x7fc1219e5000, 65536) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 8 [pid 359] ioctl(8, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 359] ioctl(8, LOOP_CLR_FD) = 0 [pid 355] ioctl(5, LOOP_CLR_FD) = 0 [pid 355] close(5) = 0 [pid 355] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] ioctl(8, LOOP_SET_FD, 6 [pid 355] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 359] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 359] close(8) = 0 [pid 352] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 0 [pid 350] <... futex resumed>) = 0 [pid 359] close(6) = 0 [pid 359] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... futex resumed>) = 0 [pid 357] <... futex resumed>) = 0 [pid 355] <... futex resumed>) = 0 [pid 352] <... futex resumed>) = 1 [pid 351] <... futex resumed>) = 1 [pid 350] <... futex resumed>) = 1 [pid 358] memfd_create("syzkaller", 0 [pid 357] memfd_create("syzkaller", 0 [pid 355] memfd_create("syzkaller", 0 [pid 358] <... memfd_create resumed>) = 5 [pid 357] <... memfd_create resumed>) = 5 [pid 355] <... memfd_create resumed>) = 3 [pid 358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 358] <... mmap resumed>) = 0x7fc1219e4000 [pid 357] <... mmap resumed>) = 0x7fc1219e4000 [pid 355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 358] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 358] <... write resumed>) = 65536 [pid 357] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 355] <... write resumed>) = 65536 [pid 358] munmap(0x7fc1219e4000, 65536 [pid 355] munmap(0x7fc1219e4000, 65536 [pid 358] <... munmap resumed>) = 0 [pid 357] <... write resumed>) = 65536 [pid 355] <... munmap resumed>) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 357] munmap(0x7fc1219e4000, 65536 [pid 355] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 358] <... openat resumed>) = 8 [pid 357] <... munmap resumed>) = 0 [pid 355] <... openat resumed>) = 5 [pid 358] ioctl(8, LOOP_SET_FD, 5 [pid 357] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 355] ioctl(5, LOOP_SET_FD, 3 [pid 358] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 357] <... openat resumed>) = 8 [pid 355] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 358] ioctl(8, LOOP_CLR_FD [pid 357] ioctl(8, LOOP_SET_FD, 5 [pid 355] ioctl(5, LOOP_CLR_FD [pid 358] <... ioctl resumed>) = 0 [pid 357] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 355] <... ioctl resumed>) = 0 [pid 357] ioctl(8, LOOP_CLR_FD) = 0 [pid 358] ioctl(8, LOOP_SET_FD, 5 [pid 355] ioctl(5, LOOP_SET_FD, 3 [pid 358] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 355] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 358] close(8 [pid 357] ioctl(8, LOOP_SET_FD, 5 [pid 355] close(5 [pid 358] <... close resumed>) = 0 [pid 357] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 355] <... close resumed>) = 0 [pid 358] close(5 [pid 357] close(8 [pid 355] close(3 [pid 358] <... close resumed>) = 0 [pid 357] <... close resumed>) = 0 [pid 358] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] close(5 [pid 355] <... close resumed>) = 0 [pid 358] <... futex resumed>) = 0 [pid 357] <... close resumed>) = 0 [pid 355] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 357] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] <... futex resumed>) = 0 [pid 357] <... futex resumed>) = 0 [pid 355] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 26.556524][ T359] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 26.569092][ T355] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 26.570371][ T359] ext4 filesystem being mounted at /root/syzkaller.SVIRRC/1/file0 supports timestamps until 2038 (0x7fffffff) [ 26.592999][ T355] ext4 filesystem being mounted at /root/syzkaller.jl33I5/1/file0 supports timestamps until 2038 (0x7fffffff) [pid 357] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] exit_group(0 [pid 346] <... futex resumed>) = ? [pid 345] <... recvmmsg resumed> ) = ? [pid 344] <... futex resumed>) = ? [pid 343] <... futex resumed>) = ? [pid 342] <... exit_group resumed>) = ? [pid 346] +++ exited with 0 +++ [pid 345] +++ exited with 0 +++ [pid 344] +++ exited with 0 +++ [pid 343] +++ exited with 0 +++ [pid 342] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=342, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 292] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 128 [pid 292] umount2("./1/mnt", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./1/mnt", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./1/mnt", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./1/mnt", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./1/mnt") = 0 [pid 292] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 292] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./1/bus") = 0 [pid 292] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./1/binderfs") = 0 [pid 292] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./1") = 0 [pid 292] mkdir("./2", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 382 attached , child_tidptr=0x5555563f4690) = 382 [pid 382] set_robust_list(0x5555563f46a0, 24) = 0 [pid 382] chdir("./2") = 0 [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 382] setpgid(0, 0) = 0 [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 382] write(3, "1000", 4) = 4 [pid 382] close(3) = 0 [pid 382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 382] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 382] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 382] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0}./strace-static-x86_64: Process 383 attached => {parent_tid=[383]}, 88) = 383 [pid 382] rt_sigprocmask(SIG_SETMASK, [], [pid 383] set_robust_list(0x7fc1322069a0, 24 [pid 382] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 382] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... set_robust_list resumed>) = 0 [pid 382] <... futex resumed>) = 0 [pid 383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 382] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 383] memfd_create("syzkaller", 0) = 3 [pid 382] <... mprotect resumed>) = 0 [pid 383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 [pid 382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0}./strace-static-x86_64: Process 384 attached => {parent_tid=[384]}, 88) = 384 [pid 384] set_robust_list(0x7fc1321e59a0, 24 [pid 382] rt_sigprocmask(SIG_SETMASK, [], [pid 384] <... set_robust_list resumed>) = 0 [pid 382] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 384] rt_sigprocmask(SIG_SETMASK, [], [pid 382] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 382] <... futex resumed>) = 0 [pid 384] creat("./bus", 000 [pid 382] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 384] <... creat resumed>) = 4 [pid 384] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 382] <... futex resumed>) = 0 [pid 383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 382] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 384] <... mount resumed>) = 0 [pid 384] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 1 [pid 384] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 382] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... open resumed>) = 5 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 384] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 382] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 384] <... futex resumed>) = 1 [pid 383] <... write resumed>) = 262144 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=49000000} [pid 383] munmap(0x7fc129dc5000, 262144 [pid 384] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 6 [pid 384] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... munmap resumed>) = 0 [pid 382] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 1 [pid 382] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 384] recvmmsg(6, [pid 383] <... openat resumed>) = 7 [pid 383] ioctl(7, LOOP_SET_FD, 3) = 0 [pid 383] close(3) = 0 [pid 383] mkdir("./file0", 0777) = 0 [pid 383] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue") = 0 [pid 383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 383] chdir("./file0") = 0 [pid 383] ioctl(7, LOOP_CLR_FD) = 0 [pid 383] close(7) = 0 [pid 383] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 382] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] <... futex resumed>) = 0 [pid 382] futex(0x7fc1322d26cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 383] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] <... futex resumed>) = 0 [pid 383] memfd_create("syzkaller", 0 [pid 382] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... memfd_create resumed>) = 7 [pid 382] <... futex resumed>) = 0 [pid 383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc121a05000 [pid 383] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 383] munmap(0x7fc121a05000, 65536) = 0 [pid 383] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 8 [pid 383] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 383] ioctl(8, LOOP_CLR_FD) = 0 [pid 383] ioctl(8, LOOP_SET_FD, 7 [pid 348] exit_group(0 [pid 353] <... futex resumed>) = ? [pid 354] <... recvmmsg resumed> ) = ? [pid 348] <... exit_group resumed>) = ? [pid 383] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 354] +++ exited with 0 +++ [pid 353] +++ exited with 0 +++ [pid 383] close(8 [pid 348] +++ exited with 0 +++ [pid 383] <... close resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=348, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 383] close(7 [pid 293] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 383] <... close resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 383] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 383] <... futex resumed>) = 0 [pid 293] getdents64(3, [pid 383] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 293] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 293] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./1/bus") = 0 [pid 293] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./1/binderfs") = 0 [ 26.710551][ T383] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 26.722369][ T383] ext4 filesystem being mounted at /root/syzkaller.gpm0iI/2/file0 supports timestamps until 2038 (0x7fffffff) [pid 293] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 349] exit_group(0 [pid 363] <... recvmmsg resumed>) = ? [pid 349] <... exit_group resumed>) = ? [pid 381] <... futex resumed>) = ? [pid 359] <... futex resumed>) = ? [pid 381] +++ exited with 0 +++ [pid 363] +++ exited with 0 +++ [pid 359] +++ exited with 0 +++ [pid 350] exit_group(0 [pid 380] <... futex resumed>) = 231 [pid 350] <... exit_group resumed>) = ? [pid 360] <... recvmmsg resumed> ) = ? [pid 355] <... futex resumed>) = ? [pid 380] +++ exited with 0 +++ [pid 360] +++ exited with 0 +++ [pid 355] +++ exited with 0 +++ [pid 352] exit_group(0 [pid 378] <... futex resumed>) = ? [pid 362] <... recvmmsg resumed> ) = ? [pid 358] <... futex resumed>) = ? [pid 352] <... exit_group resumed>) = ? [pid 378] +++ exited with 0 +++ [pid 362] +++ exited with 0 +++ [pid 358] +++ exited with 0 +++ [pid 351] exit_group(0 [pid 357] <... futex resumed>) = ? [pid 351] <... exit_group resumed>) = ? [pid 379] <... futex resumed>) = ? [pid 361] <... recvmmsg resumed> ) = ? [pid 357] +++ exited with 0 +++ [pid 379] +++ exited with 0 +++ [pid 361] +++ exited with 0 +++ [pid 352] +++ exited with 0 +++ [pid 351] +++ exited with 0 +++ [pid 350] +++ exited with 0 +++ [pid 349] +++ exited with 0 +++ [pid 293] <... umount2 resumed>) = 0 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=350, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=352, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 293] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./1/file0", [pid 296] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=349, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=351, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... openat resumed>) = 3 [pid 294] <... openat resumed>) = 3 [pid 293] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] newfstatat(3, "", [pid 295] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] newfstatat(3, "", [pid 293] <... openat resumed>) = 4 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] newfstatat(4, "", [pid 297] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] getdents64(3, [pid 295] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] getdents64(3, [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... openat resumed>) = 3 [pid 296] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] <... openat resumed>) = 3 [pid 294] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 293] getdents64(4, [pid 296] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 297] newfstatat(3, "", [pid 296] <... umount2 resumed>) = 0 [pid 295] newfstatat(3, "", [pid 294] <... umount2 resumed>) = 0 [pid 293] rmdir("./1/file0" [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... rmdir resumed>) = 0 [pid 297] getdents64(3, [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] getdents64(3, [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] getdents64(3, [pid 297] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 296] newfstatat(AT_FDCWD, "./1/bus", [pid 295] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 294] newfstatat(AT_FDCWD, "./1/bus", [pid 293] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 297] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] close(3 [pid 297] <... umount2 resumed>) = 0 [pid 296] unlink("./1/bus" [pid 295] <... umount2 resumed>) = 0 [pid 294] unlink("./1/bus" [pid 293] <... close resumed>) = 0 [pid 297] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... unlink resumed>) = 0 [pid 293] rmdir("./1" [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... unlink resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./1/bus", [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] mkdir("./2", 0777 [pid 297] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] newfstatat(AT_FDCWD, "./1/binderfs", [pid 295] newfstatat(AT_FDCWD, "./1/bus", [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... mkdir resumed>) = 0 [pid 297] unlink("./1/bus" [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] newfstatat(AT_FDCWD, "./1/binderfs", [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 296] unlink("./1/binderfs" [pid 293] <... openat resumed>) = 3 [pid 297] <... unlink resumed>) = 0 [pid 296] <... unlink resumed>) = 0 [pid 295] unlink("./1/bus" [pid 294] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] ioctl(3, LOOP_CLR_FD [pid 297] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... unlink resumed>) = 0 [pid 294] unlink("./1/binderfs" [pid 293] close(3 [pid 297] newfstatat(AT_FDCWD, "./1/binderfs", [pid 295] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... close resumed>) = 0 [pid 294] <... unlink resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] unlink("./1/binderfs" [pid 293] <... clone resumed>, child_tidptr=0x5555563f4690) = 389 [pid 297] <... unlink resumed>) = 0 [pid 295] newfstatat(AT_FDCWD, "./1/binderfs", [pid 297] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] unlink("./1/binderfs") = 0 [pid 295] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 389 attached [pid 389] set_robust_list(0x5555563f46a0, 24) = 0 [pid 389] chdir("./2") = 0 [pid 389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 389] setpgid(0, 0) = 0 [pid 389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 389] write(3, "1000", 4) = 4 [pid 389] close(3) = 0 [pid 389] symlink("/dev/binderfs", "./binderfs") = 0 [pid 389] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 389] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 389] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 389] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 389] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} => {parent_tid=[390]}, 88) = 390 ./strace-static-x86_64: Process 390 attached [pid 390] set_robust_list(0x7fc1322069a0, 24 [pid 389] rt_sigprocmask(SIG_SETMASK, [], [pid 390] <... set_robust_list resumed>) = 0 [pid 390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 390] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 389] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 389] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 389] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 389] <... futex resumed>) = 0 [pid 389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 389] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 390] memfd_create("syzkaller", 0 [pid 389] rt_sigprocmask(SIG_BLOCK, ~[], [pid 390] <... memfd_create resumed>) = 3 [pid 390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 389] <... rt_sigprocmask resumed>[], 8) = 0 [pid 389] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} => {parent_tid=[391]}, 88) = 391 [pid 389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 389] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... mmap resumed>) = 0x7fc129dc5000 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 296] <... umount2 resumed>) = 0 [pid 296] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./1/file0") = 0 [pid 296] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./1") = 0 [pid 296] mkdir("./2", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 390] <... write resumed>) = 262144 [pid 390] munmap(0x7fc129dc5000, 262144./strace-static-x86_64: Process 391 attached ) = 0 [pid 390] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 391] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 391] creat("./bus", 000) = 5 [pid 391] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 391] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 389] <... futex resumed>) = 0 [pid 391] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 389] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 389] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 389] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 389] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 389] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129de4000 [pid 389] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 389] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 389] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0}./strace-static-x86_64: Process 392 attached [pid 392] set_robust_list(0x7fc129e049a0, 24 [pid 389] <... clone3 resumed> => {parent_tid=[392]}, 88) = 392 [pid 392] <... set_robust_list resumed>) = 0 [pid 389] rt_sigprocmask(SIG_SETMASK, [], [pid 392] rt_sigprocmask(SIG_SETMASK, [], [pid 389] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 392] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 389] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] <... socket resumed>) = 7 [pid 392] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] recvmmsg(7, [pid 382] exit_group(0 [pid 384] <... recvmmsg resumed> ) = ? [pid 383] <... futex resumed>) = ? [pid 382] <... exit_group resumed>) = ? [pid 384] +++ exited with 0 +++ [pid 383] +++ exited with 0 +++ [pid 389] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 389] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129dc3000 [pid 389] mprotect(0x7fc129dc4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 389] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 389] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129de3990, parent_tid=0x7fc129de3990, exit_signal=0, stack=0x7fc129dc3000, stack_size=0x20300, tls=0x7fc129de36c0}./strace-static-x86_64: Process 393 attached [pid 393] set_robust_list(0x7fc129de39a0, 24 [pid 389] <... clone3 resumed> => {parent_tid=[393]}, 88) = 393 [pid 393] <... set_robust_list resumed>) = 0 [pid 389] rt_sigprocmask(SIG_SETMASK, [], [pid 393] rt_sigprocmask(SIG_SETMASK, [], [pid 389] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 389] futex(0x7fc1322d26f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, -1, 0 [pid 389] <... futex resumed>) = 0 [pid 393] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 389] futex(0x7fc1322d26fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 393] futex(0x7fc1322d26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7fc1322d26f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] memfd_create("syzkaller", 0) = 8 [pid 393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219c3000 [pid 393] write(8, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 393] munmap(0x7fc1219c3000, 65536) = 0 [pid 393] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 296] <... openat resumed>) = 3 [pid 294] <... umount2 resumed>) = 0 [pid 390] <... openat resumed>) = 4 [pid 382] +++ exited with 0 +++ [pid 297] <... umount2 resumed>) = 0 [pid 296] ioctl(3, LOOP_CLR_FD [pid 294] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./1/file0") = 0 [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./1") = 0 [pid 296] close(3 [pid 295] <... umount2 resumed>) = 0 [pid 297] mkdir("./2", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563f4690) = 394 ./strace-static-x86_64: Process 394 attached [pid 394] set_robust_list(0x5555563f46a0, 24) = 0 [pid 394] chdir("./2") = 0 [pid 394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 394] setpgid(0, 0) = 0 [pid 394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 394] write(3, "1000", 4) = 4 [pid 394] close(3 [pid 390] ioctl(4, LOOP_SET_FD, 3 [pid 296] <... close resumed>) = 0 [pid 295] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 394] <... close resumed>) = 0 [pid 394] symlink("/dev/binderfs", "./binderfs") = 0 [pid 394] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 394] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] newfstatat(AT_FDCWD, "./1/file0", [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 394] <... mmap resumed>) = 0x7fc1321e6000 [pid 394] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 295] newfstatat(AT_FDCWD, "./1/file0", [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] <... clone resumed>, child_tidptr=0x5555563f4690) = 395 [pid 294] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] <... openat resumed>) = 4 [pid 295] <... openat resumed>) = 4 [pid 294] newfstatat(4, "", [pid 295] newfstatat(4, "", [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, [pid 295] getdents64(4, [pid 294] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, [pid 295] getdents64(4, [pid 294] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 295] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 294] close(4 [pid 295] close(4 [pid 294] <... close resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 294] rmdir("./1/file0" [pid 295] rmdir("./1/file0" [pid 394] <... mprotect resumed>) = 0 [pid 294] <... rmdir resumed>) = 0 [pid 394] rt_sigprocmask(SIG_BLOCK, ~[], [pid 295] <... rmdir resumed>) = 0 [pid 294] getdents64(3, [pid 295] getdents64(3, [pid 294] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 295] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=382, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 295] close(3 [pid 294] close(3 [pid 295] <... close resumed>) = 0 [pid 394] <... rt_sigprocmask resumed>[], 8) = 0 [pid 294] <... close resumed>) = 0 [pid 295] rmdir("./1" [pid 294] rmdir("./1" [pid 394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 295] <... rmdir resumed>) = 0 [pid 295] mkdir("./2", 0777 [pid 294] <... rmdir resumed>) = 0 [pid 394] <... clone3 resumed> => {parent_tid=[397]}, 88) = 397 [pid 394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 294] mkdir("./2", 0777 [pid 394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 394] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 294] <... mkdir resumed>) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 292] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 397 attached ./strace-static-x86_64: Process 395 attached [pid 394] <... mprotect resumed>) = 0 [pid 393] <... openat resumed>) = 9 [pid 391] <... open resumed>) = 6 [pid 390] <... ioctl resumed>) = 0 [pid 295] <... openat resumed>) = 3 [pid 294] <... openat resumed>) = 3 [pid 292] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 393] ioctl(9, LOOP_SET_FD, 8 [pid 391] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] close(3 [pid 295] ioctl(3, LOOP_CLR_FD [pid 294] ioctl(3, LOOP_CLR_FD [pid 292] <... openat resumed>) = 3 [pid 394] rt_sigprocmask(SIG_BLOCK, ~[], [pid 393] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 391] <... futex resumed>) = 0 [pid 390] <... close resumed>) = 0 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] newfstatat(3, "", [pid 394] <... rt_sigprocmask resumed>[], 8) = 0 [pid 393] ioctl(9, LOOP_CLR_FD [pid 391] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] mkdir("ext4", 0777 [pid 295] close(3 [pid 294] close(3 [pid 394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 393] <... ioctl resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 390] <... mkdir resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 294] <... close resumed>) = 0 ./strace-static-x86_64: Process 398 attached [pid 394] <... clone3 resumed> => {parent_tid=[398]}, 88) = 398 [pid 390] mount("/dev/loop1", "ext4", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 292] getdents64(3, [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 394] rt_sigprocmask(SIG_SETMASK, [], [pid 395] set_robust_list(0x5555563f46a0, 24 [pid 394] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 395] <... set_robust_list resumed>) = 0 [pid 394] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] chdir("./2" [pid 394] <... futex resumed>) = 0 [pid 393] ioctl(9, LOOP_SET_FD, 8) = -1 EBUSY (Device or resource busy) [pid 393] close(9) = 0 [pid 393] close(8) = 0 [pid 294] <... clone resumed>, child_tidptr=0x5555563f4690) = 399 [pid 393] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 ./strace-static-x86_64: Process 400 attached ./strace-static-x86_64: Process 399 attached [pid 398] set_robust_list(0x7fc1321e59a0, 24 [pid 393] futex(0x7fc1322d26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 295] <... clone resumed>, child_tidptr=0x5555563f4690) = 400 [pid 292] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 398] <... set_robust_list resumed>) = 0 [pid 398] rt_sigprocmask(SIG_SETMASK, [], [pid 292] <... umount2 resumed>) = 0 [pid 400] set_robust_list(0x5555563f46a0, 24 [pid 399] set_robust_list(0x5555563f46a0, 24 [pid 398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 292] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 400] <... set_robust_list resumed>) = 0 [pid 399] <... set_robust_list resumed>) = 0 [pid 398] creat("./bus", 000 [pid 394] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] chdir("./2" [pid 399] chdir("./2" [pid 398] <... creat resumed>) = 3 [pid 395] <... chdir resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 398] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] set_robust_list(0x7fc1322069a0, 24 [pid 395] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 397] <... set_robust_list resumed>) = 0 [pid 395] <... prctl resumed>) = 0 [pid 398] <... futex resumed>) = 1 [pid 397] rt_sigprocmask(SIG_SETMASK, [], [pid 395] setpgid(0, 0 [pid 394] <... futex resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./2/bus", [pid 398] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 395] <... setpgid resumed>) = 0 [pid 394] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 400] <... chdir resumed>) = 0 [pid 399] <... chdir resumed>) = 0 [pid 398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 397] memfd_create("syzkaller", 0 [pid 395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 394] <... futex resumed>) = 0 [pid 292] unlink("./2/bus" [pid 398] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 394] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... memfd_create resumed>) = 4 [pid 395] <... openat resumed>) = 3 [pid 292] <... unlink resumed>) = 0 [pid 398] <... mount resumed>) = 0 [pid 397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 395] write(3, "1000", 4 [pid 398] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... mmap resumed>) = 0x7fc129dc5000 [pid 395] <... write resumed>) = 4 [pid 292] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 400] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 399] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 398] <... futex resumed>) = 1 [pid 395] close(3 [pid 394] <... futex resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 400] <... prctl resumed>) = 0 [pid 399] <... prctl resumed>) = 0 [pid 398] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] newfstatat(AT_FDCWD, "./2/binderfs", [pid 400] setpgid(0, 0 [pid 399] setpgid(0, 0 [pid 398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 394] <... futex resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 400] <... setpgid resumed>) = 0 [pid 399] <... setpgid resumed>) = 0 [pid 398] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 394] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] unlink("./2/binderfs" [pid 400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 398] <... open resumed>) = 5 [pid 292] <... unlink resumed>) = 0 [pid 400] <... openat resumed>) = 3 [pid 399] <... openat resumed>) = 3 [pid 398] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 400] write(3, "1000", 4 [pid 399] write(3, "1000", 4 [pid 398] <... futex resumed>) = 1 [pid 394] <... futex resumed>) = 0 [pid 400] <... write resumed>) = 4 [pid 399] <... write resumed>) = 4 [pid 398] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] close(3 [pid 399] close(3 [pid 398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 394] <... futex resumed>) = 0 [pid 400] <... close resumed>) = 0 [pid 399] <... close resumed>) = 0 [pid 398] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 395] <... close resumed>) = 0 [pid 394] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] symlink("/dev/binderfs", "./binderfs" [pid 399] symlink("/dev/binderfs", "./binderfs" [pid 398] <... socket resumed>) = 6 [pid 397] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 265740 [pid 400] <... symlink resumed>) = 0 [pid 399] <... symlink resumed>) = 0 [pid 398] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 1 [pid 394] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = 0 [pid 398] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 399] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 394] <... futex resumed>) = 0 [pid 400] <... rt_sigaction resumed>NULL, 8) = 0 [pid 399] <... rt_sigaction resumed>NULL, 8) = 0 [pid 398] recvmmsg(6, [pid 394] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 399] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 400] <... mmap resumed>) = 0x7fc1321e6000 [pid 399] <... mmap resumed>) = 0x7fc1321e6000 [pid 400] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 399] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 400] <... mprotect resumed>) = 0 [pid 399] <... mprotect resumed>) = 0 [pid 400] rt_sigprocmask(SIG_BLOCK, ~[], [pid 399] rt_sigprocmask(SIG_BLOCK, ~[], [pid 400] <... rt_sigprocmask resumed>[], 8) = 0 [pid 399] <... rt_sigprocmask resumed>[], 8) = 0 [pid 400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 395] symlink("/dev/binderfs", "./binderfs" [pid 400] <... clone3 resumed> => {parent_tid=[403]}, 88) = 403 [pid 399] <... clone3 resumed> => {parent_tid=[404]}, 88) = 404 [pid 397] <... write resumed>) = 265740 ./strace-static-x86_64: Process 404 attached ./strace-static-x86_64: Process 403 attached [pid 400] rt_sigprocmask(SIG_SETMASK, [], [pid 399] rt_sigprocmask(SIG_SETMASK, [], [pid 397] munmap(0x7fc129dc5000, 265740 [pid 395] <... symlink resumed>) = 0 [pid 390] <... mount resumed>) = 0 [pid 404] set_robust_list(0x7fc1322069a0, 24 [pid 403] set_robust_list(0x7fc1322069a0, 24 [pid 400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 404] <... set_robust_list resumed>) = 0 [pid 403] <... set_robust_list resumed>) = 0 [pid 400] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... munmap resumed>) = 0 [pid 395] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] openat(AT_FDCWD, "ext4", O_RDONLY|O_DIRECTORY [pid 404] rt_sigprocmask(SIG_SETMASK, [], [pid 403] rt_sigprocmask(SIG_SETMASK, [], [pid 400] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = 0 [pid 397] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 395] <... futex resumed>) = 0 [pid 390] <... openat resumed>) = 3 [pid 404] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 403] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 400] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 390] chdir("ext4" [pid 404] memfd_create("syzkaller", 0 [pid 403] memfd_create("syzkaller", 0 [pid 400] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = 0 [pid 395] <... rt_sigaction resumed>NULL, 8) = 0 [pid 390] <... chdir resumed>) = 0 [pid 404] <... memfd_create resumed>) = 3 [pid 403] <... memfd_create resumed>) = 3 [pid 400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 395] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 390] ioctl(4, LOOP_CLR_FD [pid 404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 400] <... mmap resumed>) = 0x7fc1321c5000 [pid 399] <... mmap resumed>) = 0x7fc1321c5000 [pid 395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 404] <... mmap resumed>) = 0x7fc129dc5000 [pid 403] <... mmap resumed>) = 0x7fc129dc5000 [pid 400] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 399] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 400] <... mprotect resumed>) = 0 [pid 399] <... mprotect resumed>) = 0 [pid 395] <... mmap resumed>) = 0x7fc1321e6000 [pid 404] <... write resumed>) = 262144 [pid 403] <... write resumed>) = 262144 [pid 400] rt_sigprocmask(SIG_BLOCK, ~[], [pid 399] rt_sigprocmask(SIG_BLOCK, ~[], [pid 395] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 404] munmap(0x7fc129dc5000, 262144 [pid 403] munmap(0x7fc129dc5000, 262144 [pid 400] <... rt_sigprocmask resumed>[], 8) = 0 [pid 399] <... rt_sigprocmask resumed>[], 8) = 0 [pid 395] <... mprotect resumed>) = 0 [pid 404] <... munmap resumed>) = 0 [pid 403] <... munmap resumed>) = 0 [pid 400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 395] rt_sigprocmask(SIG_BLOCK, ~[], [pid 403] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 395] <... rt_sigprocmask resumed>[], 8) = 0 [pid 395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 404] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 400] <... clone3 resumed> => {parent_tid=[405]}, 88) = 405 [pid 399] <... clone3 resumed> => {parent_tid=[407]}, 88) = 407 [pid 395] <... clone3 resumed> => {parent_tid=[406]}, 88) = 406 [pid 400] rt_sigprocmask(SIG_SETMASK, [], [pid 399] rt_sigprocmask(SIG_SETMASK, [], [pid 395] rt_sigprocmask(SIG_SETMASK, [], [pid 400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 395] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = 0 [pid 395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 400] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... mmap resumed>) = 0x7fc1321c5000 [pid 395] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 395] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0}./strace-static-x86_64: Process 408 attached [pid 408] set_robust_list(0x7fc1321e59a0, 24 [pid 395] <... clone3 resumed> => {parent_tid=[408]}, 88) = 408 [pid 395] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 405 attached NULL, 8) = 0 ./strace-static-x86_64: Process 407 attached [pid 408] <... set_robust_list resumed>) = 0 [pid 405] set_robust_list(0x7fc1321e59a0, 24 [pid 395] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] rt_sigprocmask(SIG_SETMASK, [], [pid 407] set_robust_list(0x7fc1321e59a0, 24 [pid 405] <... set_robust_list resumed>) = 0 [pid 395] <... futex resumed>) = 0 [pid 408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 407] <... set_robust_list resumed>) = 0 [pid 405] rt_sigprocmask(SIG_SETMASK, [], [pid 395] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] creat("./bus", 000 [pid 407] rt_sigprocmask(SIG_SETMASK, [], [pid 405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 408] <... creat resumed>) = 3 [pid 407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 405] creat("./bus", 000 [pid 408] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] creat("./bus", 000 [pid 405] <... creat resumed>) = 5 ./strace-static-x86_64: Process 406 attached [pid 407] <... creat resumed>) = 5 [pid 405] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 1 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] <... openat resumed>) = 4 [pid 397] <... openat resumed>) = 7 [pid 390] <... ioctl resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 403] ioctl(4, LOOP_SET_FD, 3 [pid 397] ioctl(7, LOOP_SET_FD, 4 [pid 395] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] close(4 [pid 408] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 407] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] set_robust_list(0x7fc1322069a0, 24 [pid 405] <... futex resumed>) = 1 [pid 403] <... ioctl resumed>) = 0 [pid 400] <... futex resumed>) = 0 [pid 292] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 404] <... openat resumed>) = 4 [pid 408] <... mount resumed>) = 0 [pid 407] <... futex resumed>) = 1 [pid 406] <... set_robust_list resumed>) = 0 [pid 405] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 404] ioctl(4, LOOP_SET_FD, 3 [pid 403] close(3 [pid 400] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 408] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 406] rt_sigprocmask(SIG_SETMASK, [], [pid 405] <... mount resumed>) = 0 [pid 403] <... close resumed>) = 0 [pid 400] <... futex resumed>) = 0 [pid 399] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] newfstatat(AT_FDCWD, "./2/file0", [pid 408] <... futex resumed>) = 1 [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 405] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] mkdir("./file0", 0777 [pid 400] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... futex resumed>) = 0 [pid 395] <... futex resumed>) = 0 [pid 408] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 405] <... futex resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 403] <... mkdir resumed>) = 0 [pid 395] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 397] <... ioctl resumed>) = 0 [pid 395] <... futex resumed>) = 0 [pid 390] <... close resumed>) = 0 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... mount resumed>) = 0 [pid 406] memfd_create("syzkaller", 0 [pid 405] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 292] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 408] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 407] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... ioctl resumed>) = 0 [pid 400] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] close(4 [pid 395] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 406] <... memfd_create resumed>) = 4 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] <... open resumed>) = 5 [pid 407] <... futex resumed>) = 1 [pid 406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 405] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 404] close(3 [pid 400] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = 0 [pid 397] <... close resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 405] <... open resumed>) = 3 [pid 400] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 399] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] mkdir("./file0", 0777 [pid 408] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... mmap resumed>) = 0x7fc129dc5000 [pid 404] <... close resumed>) = 0 [pid 292] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 405] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... mkdir resumed>) = 0 [pid 407] <... open resumed>) = 3 [pid 400] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... openat resumed>) = 4 [pid 408] <... futex resumed>) = 1 [pid 407] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = 0 [pid 395] <... futex resumed>) = 0 [pid 406] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 400] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 395] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] <... futex resumed>) = 1 [pid 399] <... futex resumed>) = 0 [pid 405] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 404] mkdir("./file0", 0777 [pid 397] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 292] newfstatat(4, "", [pid 408] <... socket resumed>) = 6 [pid 399] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 408] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 405] <... socket resumed>) = 6 [pid 399] <... futex resumed>) = 0 [pid 404] <... mkdir resumed>) = 0 [pid 399] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... futex resumed>) = 0 [pid 407] <... socket resumed>) = 6 [pid 405] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] getdents64(4, [pid 395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 1 [pid 404] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 400] <... futex resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 1 [pid 405] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] <... futex resumed>) = 0 [pid 395] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... write resumed>) = 262144 [pid 408] recvmmsg(6, [pid 407] recvmmsg(6, [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 292] getdents64(4, [pid 400] <... futex resumed>) = 0 [pid 395] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... futex resumed>) = 0 [pid 405] recvmmsg(6, [pid 400] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 399] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] munmap(0x7fc129dc5000, 262144 [pid 292] close(4 [pid 406] <... munmap resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 292] rmdir("./2/file0" [pid 406] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 292] <... rmdir resumed>) = 0 [pid 406] <... openat resumed>) = 7 [ 27.002879][ T390] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 27.018126][ T390] ext4 filesystem being mounted at /root/syzkaller.zNZ9LH/2/ext4 supports timestamps until 2038 (0x7fffffff) [pid 292] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 406] ioctl(7, LOOP_SET_FD, 4 [pid 292] close(3) = 0 [pid 292] rmdir("./2") = 0 [pid 406] <... ioctl resumed>) = 0 [pid 292] mkdir("./3", 0777 [pid 394] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 394] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 394] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129de5000 [pid 394] mprotect(0x7fc129de6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 394] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e05990, parent_tid=0x7fc129e05990, exit_signal=0, stack=0x7fc129de5000, stack_size=0x20300, tls=0x7fc129e056c0} => {parent_tid=[415]}, 88) = 415 [pid 394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 415 attached [pid 406] close(4 [pid 292] <... mkdir resumed>) = 0 [pid 406] <... close resumed>) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 406] mkdir("./file0", 0777 [pid 292] <... openat resumed>) = 3 [pid 406] <... mkdir resumed>) = 0 [pid 292] ioctl(3, LOOP_CLR_FD [pid 415] set_robust_list(0x7fc129e059a0, 24 [pid 406] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 415] <... set_robust_list resumed>) = 0 [pid 415] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 292] close(3 [pid 415] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 415] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] <... futex resumed>) = 0 [pid 415] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 394] <... futex resumed>) = 0 [pid 415] memfd_create("syzkaller", 0) = 4 [pid 415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e5000 [pid 415] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 415] munmap(0x7fc1219e5000, 65536) = 0 [pid 415] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 8 [pid 415] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 415] ioctl(8, LOOP_CLR_FD) = 0 [ 27.066848][ T403] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 27.082837][ T403] ext4 filesystem being mounted at /root/syzkaller.IpShW6/2/file0 supports timestamps until 2038 (0x7fffffff) [ 27.096098][ T397] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 403] <... mount resumed>) = 0 [pid 400] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 399] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 395] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 292] <... close resumed>) = 0 [pid 415] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 415] close(8) = 0 [pid 415] close(4) = 0 [pid 415] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 415] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] <... mount resumed>) = 0 [pid 403] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 400] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 403] <... openat resumed>) = 7 [pid 400] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = 0 [pid 395] <... futex resumed>) = 0 ./strace-static-x86_64: Process 420 attached [pid 404] <... openat resumed>) = 7 [pid 403] chdir("./file0" [pid 400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 397] <... mount resumed>) = 0 [pid 395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 404] chdir("./file0" [pid 403] <... chdir resumed>) = 0 [pid 400] <... mmap resumed>) = 0x7fc129de4000 [pid 399] <... mmap resumed>) = 0x7fc129de4000 [pid 395] <... mmap resumed>) = 0x7fc129de4000 [pid 292] <... clone resumed>, child_tidptr=0x5555563f4690) = 420 [pid 404] <... chdir resumed>) = 0 [pid 403] ioctl(4, LOOP_CLR_FD [pid 400] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 399] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 395] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 404] ioctl(4, LOOP_CLR_FD [pid 403] <... ioctl resumed>) = 0 [pid 400] <... mprotect resumed>) = 0 [pid 399] <... mprotect resumed>) = 0 [pid 395] <... mprotect resumed>) = 0 [pid 404] <... ioctl resumed>) = 0 [pid 403] close(4 [pid 400] rt_sigprocmask(SIG_BLOCK, ~[], [pid 399] rt_sigprocmask(SIG_BLOCK, ~[], [pid 395] rt_sigprocmask(SIG_BLOCK, ~[], [pid 404] close(4 [pid 403] <... close resumed>) = 0 [pid 400] <... rt_sigprocmask resumed>[], 8) = 0 [pid 399] <... rt_sigprocmask resumed>[], 8) = 0 [pid 395] <... rt_sigprocmask resumed>[], 8) = 0 [pid 404] <... close resumed>) = 0 [pid 403] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [ 27.096207][ T404] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 27.115655][ T416] EXT4-fs warning (device loop5): kmmpd:170: kmmpd being stopped since MMP feature has been disabled. [ 27.124251][ T404] ext4 filesystem being mounted at /root/syzkaller.duxz7m/2/file0 supports timestamps until 2038 (0x7fffffff) [ 27.135260][ T397] ext4 filesystem being mounted at /root/syzkaller.SVIRRC/2/file0 supports timestamps until 2038 (0x7fffffff) [pid 395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0}./strace-static-x86_64: Process 425 attached ./strace-static-x86_64: Process 423 attached [pid 404] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 400] <... clone3 resumed> => {parent_tid=[424]}, 88) = 424 [pid 395] <... clone3 resumed> => {parent_tid=[423]}, 88) = 423 [pid 400] rt_sigprocmask(SIG_SETMASK, [], [pid 395] rt_sigprocmask(SIG_SETMASK, [], [pid 400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 400] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 395] <... futex resumed>) = 0 [pid 400] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 425] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 423] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 423] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 423] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 423] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] <... futex resumed>) = 0 [pid 403] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 423] <... futex resumed>) = 1 [pid 423] memfd_create("syzkaller", 0) = 4 [pid 423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 404] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] <... clone3 resumed> => {parent_tid=[425]}, 88) = 425 [pid 423] <... mmap resumed>) = 0x7fc1219e4000 [pid 399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 423] munmap(0x7fc1219e4000, 65536) = 0 [pid 423] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 8 [pid 423] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 423] ioctl(8, LOOP_CLR_FD) = 0 [pid 397] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY) = -1 ENOENT (No such file or directory) [pid 397] ioctl(7, LOOP_CLR_FD) = 0 [pid 397] close(7 [pid 425] <... futex resumed>) = 0 [pid 397] <... close resumed>) = 0 [pid 397] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 397] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 423] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 423] close(8) = 0 [pid 423] close(4) = 0 [pid 423] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 424 attached [pid 424] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 424] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0) = 0x20000000 [pid 424] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = 1 [pid 424] <... futex resumed>) = 1 [pid 403] memfd_create("syzkaller", 0 [pid 425] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 403] <... memfd_create resumed>) = 4 [pid 403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 424] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 425] <... mmap resumed>) = 0x20000000 [pid 420] set_robust_list(0x5555563f46a0, 24 [pid 403] <... write resumed>) = 65536 [pid 403] munmap(0x7fc1219e4000, 65536) = 0 [pid 403] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 8 [pid 403] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 403] ioctl(8, LOOP_CLR_FD) = 0 [pid 403] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 403] close(8) = 0 [pid 403] close(4) = 0 [pid 403] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 406] <... mount resumed>) = 0 [pid 406] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY) = -1 ENOENT (No such file or directory) [pid 425] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = 1 [pid 404] memfd_create("syzkaller", 0 [pid 406] ioctl(7, LOOP_CLR_FD [pid 404] <... memfd_create resumed>) = 4 [pid 406] <... ioctl resumed>) = 0 [pid 404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 406] close(7) = 0 [pid 406] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] <... futex resumed>) = 1 [pid 404] <... mmap resumed>) = 0x7fc1219e4000 [pid 425] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 404] munmap(0x7fc1219e4000, 65536) = 0 [pid 404] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 420] <... set_robust_list resumed>) = 0 [pid 404] <... openat resumed>) = 8 [pid 404] ioctl(8, LOOP_SET_FD, 4 [pid 420] chdir("./3" [pid 404] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 420] <... chdir resumed>) = 0 [pid 404] ioctl(8, LOOP_CLR_FD) = 0 [pid 420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 420] setpgid(0, 0) = 0 [pid 420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 420] write(3, "1000", 4) = 4 [pid 404] ioctl(8, LOOP_SET_FD, 4 [pid 420] close(3 [pid 404] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 420] <... close resumed>) = 0 [pid 404] close(8 [pid 420] symlink("/dev/binderfs", "./binderfs" [pid 404] <... close resumed>) = 0 [pid 404] close(4 [pid 420] <... symlink resumed>) = 0 [pid 404] <... close resumed>) = 0 [pid 420] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] <... futex resumed>) = 0 [pid 404] <... futex resumed>) = 0 [pid 420] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 404] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 420] <... rt_sigaction resumed>NULL, 8) = 0 [pid 420] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 420] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 420] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 420] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} => {parent_tid=[426]}, 88) = 426 [pid 420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 420] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 426 attached ) = 0 [pid 426] set_robust_list(0x7fc1322069a0, 24 [pid 420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 426] <... set_robust_list resumed>) = 0 [pid 420] <... mmap resumed>) = 0x7fc1321c5000 [pid 420] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 420] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 420] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} => {parent_tid=[427]}, 88) = 427 ./strace-static-x86_64: Process 427 attached [pid 420] rt_sigprocmask(SIG_SETMASK, [], [pid 426] rt_sigprocmask(SIG_SETMASK, [], [pid 420] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 420] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] memfd_create("syzkaller", 0 [pid 427] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 427] creat("./bus", 000 [pid 426] <... memfd_create resumed>) = 4 [pid 426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 [pid 427] <... creat resumed>) = 3 [pid 427] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 1 [pid 427] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 427] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] <... futex resumed>) = 0 [pid 427] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 420] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... open resumed>) = 5 [pid 420] <... futex resumed>) = 0 [pid 427] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 0 [pid 420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 427] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 420] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... socket resumed>) = 6 [pid 426] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 420] <... futex resumed>) = 0 [pid 427] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 0 [pid 420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 427] recvmmsg(6, [pid 420] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] <... write resumed>) = 262144 [pid 426] munmap(0x7fc129dc5000, 262144) = 0 [pid 426] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 426] ioctl(7, LOOP_SET_FD, 4) = 0 [pid 426] close(4) = 0 [pid 426] mkdir("./file0", 0777) = 0 [pid 426] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 389] exit_group(0 [pid 393] <... futex resumed>) = ? [pid 392] <... recvmmsg resumed> ) = ? [pid 391] <... futex resumed>) = ? [pid 390] <... futex resumed>) = ? [pid 389] <... exit_group resumed>) = ? [pid 393] +++ exited with 0 +++ [pid 392] +++ exited with 0 +++ [pid 391] +++ exited with 0 +++ [pid 390] +++ exited with 0 +++ [pid 389] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=389, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 293] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 128 [pid 293] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 293] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 27.160609][ T406] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 27.182927][ T406] ext4 filesystem being mounted at /root/syzkaller.jl33I5/2/file0 supports timestamps until 2038 (0x7fffffff) [pid 293] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./2/bus") = 0 [pid 293] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./2/binderfs") = 0 [pid 293] umount2("./2/ext4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 426] <... mount resumed>) = 0 [pid 426] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 4 [pid 426] chdir("./file0") = 0 [pid 426] ioctl(7, LOOP_CLR_FD [pid 420] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 420] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129de4000 [pid 420] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 420] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 420] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0}./strace-static-x86_64: Process 431 attached => {parent_tid=[431]}, 88) = 431 [pid 420] rt_sigprocmask(SIG_SETMASK, [], [pid 431] set_robust_list(0x7fc129e049a0, 24 [pid 420] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 431] <... set_robust_list resumed>) = 0 [pid 420] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] rt_sigprocmask(SIG_SETMASK, [], [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 431] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 431] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] <... futex resumed>) = 0 [pid 431] <... futex resumed>) = 1 [pid 420] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] memfd_create("syzkaller", 0 [pid 420] <... futex resumed>) = 0 [pid 431] <... memfd_create resumed>) = 8 [pid 431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 431] write(8, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 431] munmap(0x7fc1219e4000, 65536) = 0 [pid 431] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 9 [pid 426] <... ioctl resumed>) = 0 [pid 293] <... umount2 resumed>) = 0 [pid 431] ioctl(9, LOOP_SET_FD, 8 [pid 426] close(7 [pid 293] umount2("./2/ext4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 431] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 426] <... close resumed>) = 0 [pid 431] ioctl(9, LOOP_CLR_FD [pid 426] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 431] <... ioctl resumed>) = 0 [pid 426] <... futex resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./2/ext4", [pid 426] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./2/ext4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./2/ext4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 431] ioctl(9, LOOP_SET_FD, 8 [pid 293] <... openat resumed>) = 4 [pid 431] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 293] newfstatat(4, "", [ 27.242148][ T426] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 27.254312][ T426] ext4 filesystem being mounted at /root/syzkaller.gpm0iI/3/file0 supports timestamps until 2038 (0x7fffffff) [pid 431] close(9 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 431] <... close resumed>) = 0 [pid 293] getdents64(4, [pid 431] close(8 [pid 293] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 431] <... close resumed>) = 0 [pid 293] getdents64(4, [pid 431] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 431] <... futex resumed>) = 0 [pid 293] close(4 [pid 431] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] <... close resumed>) = 0 [pid 293] rmdir("./2/ext4") = 0 [pid 293] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./2") = 0 [pid 293] mkdir("./3", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563f4690) = 432 ./strace-static-x86_64: Process 432 attached [pid 432] set_robust_list(0x5555563f46a0, 24) = 0 [pid 432] chdir("./3") = 0 [pid 432] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 432] setpgid(0, 0) = 0 [pid 432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 432] write(3, "1000", 4) = 4 [pid 432] close(3) = 0 [pid 432] symlink("/dev/binderfs", "./binderfs") = 0 [pid 432] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 432] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 432] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 432] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 432] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 432] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0}./strace-static-x86_64: Process 433 attached => {parent_tid=[433]}, 88) = 433 [pid 433] set_robust_list(0x7fc1322069a0, 24 [pid 432] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 432] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... set_robust_list resumed>) = 0 [pid 433] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 433] memfd_create("syzkaller", 0 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 432] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 432] rt_sigprocmask(SIG_BLOCK, ~[], [pid 433] <... memfd_create resumed>) = 3 [pid 432] <... rt_sigprocmask resumed>[], 8) = 0 [pid 432] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 [pid 432] <... clone3 resumed> => {parent_tid=[434]}, 88) = 434 [pid 432] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 432] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 434 attached [pid 433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 434] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 433] munmap(0x7fc129dc5000, 262144 [pid 434] rt_sigprocmask(SIG_SETMASK, [], [pid 433] <... munmap resumed>) = 0 [pid 434] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 433] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 434] creat("./bus", 000 [pid 433] ioctl(4, LOOP_SET_FD, 3 [pid 434] <... creat resumed>) = 5 [pid 434] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... ioctl resumed>) = 0 [pid 433] close(3 [pid 434] <... futex resumed>) = 1 [pid 433] <... close resumed>) = 0 [pid 434] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 433] mkdir("./file0", 0777 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... mkdir resumed>) = 0 [pid 434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 433] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 434] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 434] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c) = 3 [pid 434] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 434] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 432] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... socket resumed>) = 6 [pid 434] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] recvmmsg(6, [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] exit_group(0 [pid 415] <... futex resumed>) = ? [pid 398] <... recvmmsg resumed> ) = ? [pid 397] <... futex resumed>) = ? [pid 394] <... exit_group resumed>) = ? [pid 415] +++ exited with 0 +++ [pid 398] +++ exited with 0 +++ [pid 397] +++ exited with 0 +++ [pid 394] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=394, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 297] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 297] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 297] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./2/bus") = 0 [pid 297] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./2/binderfs") = 0 [pid 297] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 395] exit_group(0 [pid 423] <... futex resumed>) = ? [pid 408] <... recvmmsg resumed> ) = ? [pid 406] <... futex resumed>) = ? [pid 395] <... exit_group resumed>) = ? [pid 433] <... mount resumed>) = 0 [pid 423] +++ exited with 0 +++ [pid 408] +++ exited with 0 +++ [pid 406] +++ exited with 0 +++ [pid 395] +++ exited with 0 +++ [pid 433] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=395, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 433] <... openat resumed>) = 7 [pid 433] chdir("./file0") = 0 [pid 433] ioctl(4, LOOP_CLR_FD) = 0 [pid 433] close(4) = 0 [pid 433] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 296] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 296] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./2/bus") = 0 [pid 296] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./2/binderfs" [pid 432] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 296] <... unlink resumed>) = 0 [pid 432] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] exit_group(0 [pid 296] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 433] <... futex resumed>) = 0 [pid 432] <... futex resumed>) = 1 [pid 425] <... futex resumed>) = ? [pid 407] <... recvmmsg resumed> ) = ? [pid 404] <... futex resumed>) = ? [pid 399] <... exit_group resumed>) = ? [pid 425] +++ exited with 0 +++ [pid 404] +++ exited with 0 +++ [pid 407] +++ exited with 0 +++ [pid 432] futex(0x7fc1322d26cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0) = 0x20000000 [pid 433] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] exit_group(0 [pid 433] <... futex resumed>) = 1 [pid 432] <... futex resumed>) = 0 [pid 424] <... futex resumed>) = 0 [pid 433] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] <... recvmmsg resumed> ) = ? [pid 403] <... futex resumed>) = ? [pid 424] +++ exited with 0 +++ [pid 432] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... exit_group resumed>) = ? [pid 433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 432] <... futex resumed>) = 0 [pid 405] +++ exited with 0 +++ [pid 403] +++ exited with 0 +++ [pid 433] memfd_create("syzkaller", 0) = 4 [pid 433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc121a05000 [pid 433] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 433] munmap(0x7fc121a05000, 65536) = 0 [pid 433] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 8 [pid 433] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 433] ioctl(8, LOOP_CLR_FD) = 0 [pid 399] +++ exited with 0 +++ [pid 297] <... umount2 resumed>) = 0 [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=399, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 433] ioctl(8, LOOP_SET_FD, 4 [pid 297] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 433] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 433] close(8 [pid 297] newfstatat(AT_FDCWD, "./2/file0", [pid 294] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... openat resumed>) = 3 [pid 297] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] newfstatat(3, "", [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] getdents64(3, [pid 297] <... openat resumed>) = 4 [pid 294] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 297] newfstatat(4, "", [pid 294] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] <... umount2 resumed>) = 0 [pid 297] getdents64(4, [pid 294] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] getdents64(4, [pid 294] newfstatat(AT_FDCWD, "./2/bus", [pid 297] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] close(4 [pid 294] unlink("./2/bus" [pid 297] <... close resumed>) = 0 [pid 297] rmdir("./2/file0" [pid 294] <... unlink resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 294] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] getdents64(3, [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 294] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] close(3 [pid 294] unlink("./2/binderfs" [pid 297] <... close resumed>) = 0 [pid 297] rmdir("./2" [pid 294] <... unlink resumed>) = 0 [pid 294] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... rmdir resumed>) = 0 [pid 297] mkdir("./3", 0777) = 0 [ 27.361525][ T433] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 27.373513][ T433] ext4 filesystem being mounted at /root/syzkaller.zNZ9LH/3/file0 supports timestamps until 2038 (0x7fffffff) [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 400] +++ exited with 0 +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=400, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 295] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 295] umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] unlink("./2/bus") = 0 [pid 295] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] unlink("./2/binderfs") = 0 [pid 295] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 420] exit_group(0 [pid 426] <... futex resumed>) = ? [pid 420] <... exit_group resumed>) = ? [pid 427] <... recvmmsg resumed>0x20009080, 1, 0, NULL) = -1 (errno 18446744073709551555) [pid 431] <... futex resumed>) = ? [pid 431] +++ exited with 0 +++ [pid 426] +++ exited with 0 +++ [pid 433] <... close resumed>) = 0 [pid 433] close(4 [pid 297] <... openat resumed>) = 3 [pid 427] +++ exited with 0 +++ [pid 420] +++ exited with 0 +++ [pid 296] <... umount2 resumed>) = 0 [pid 295] <... umount2 resumed>) = 0 [pid 294] <... umount2 resumed>) = 0 [pid 433] <... close resumed>) = 0 [pid 296] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] ioctl(3, LOOP_CLR_FD [pid 294] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 433] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=420, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 433] <... futex resumed>) = 0 [pid 297] close(3 [pid 296] newfstatat(AT_FDCWD, "./2/file0", [pid 433] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 294] newfstatat(AT_FDCWD, "./2/file0", [pid 292] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... close resumed>) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... clone resumed>, child_tidptr=0x5555563f4690) = 438 [pid 296] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] <... openat resumed>) = 4 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(4, "", [pid 295] newfstatat(AT_FDCWD, "./2/file0", [pid 294] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... openat resumed>) = 3 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] getdents64(4, [pid 294] <... openat resumed>) = 4 [pid 295] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] newfstatat(3, "", [pid 296] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(4, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, [pid 295] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 295] <... openat resumed>) = 4 [pid 294] getdents64(4, [pid 292] getdents64(3, [pid 296] close(4 [pid 295] newfstatat(4, "", [pid 294] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 296] <... close resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] rmdir("./2/file0" [pid 294] getdents64(4, [pid 292] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] getdents64(4, ./strace-static-x86_64: Process 438 attached [pid 438] set_robust_list(0x5555563f46a0, 24 [pid 296] <... rmdir resumed>) = 0 [pid 294] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 294] close(4 [pid 296] getdents64(3, [pid 295] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] <... close resumed>) = 0 [pid 292] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 295] getdents64(4, [pid 294] rmdir("./2/file0" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] close(3 [pid 295] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 438] <... set_robust_list resumed>) = 0 [pid 438] chdir("./3") = 0 [pid 294] <... rmdir resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./3/bus", [pid 296] <... close resumed>) = 0 [pid 295] close(4 [pid 294] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] rmdir("./2" [pid 295] <... close resumed>) = 0 [pid 292] unlink("./3/bus" [pid 294] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 438] setpgid(0, 0) = 0 [pid 296] <... rmdir resumed>) = 0 [pid 438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 438] write(3, "1000", 4) = 4 [pid 438] close(3) = 0 [pid 438] symlink("/dev/binderfs", "./binderfs") = 0 [pid 296] mkdir("./3", 0777 [pid 295] rmdir("./2/file0" [pid 294] close(3 [pid 292] <... unlink resumed>) = 0 [pid 438] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 296] <... mkdir resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 292] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 438] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 295] <... rmdir resumed>) = 0 [pid 294] rmdir("./2" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 295] getdents64(3, [pid 438] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 438] rt_sigprocmask(SIG_BLOCK, ~[], [pid 294] <... rmdir resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./3/binderfs", [pid 295] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 294] mkdir("./3", 0777 [pid 295] close(3 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 438] <... rt_sigprocmask resumed>[], 8) = 0 [pid 438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} => {parent_tid=[439]}, 88) = 439 [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 438] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 294] <... mkdir resumed>) = 0 [pid 292] unlink("./3/binderfs" [pid 438] rt_sigprocmask(SIG_BLOCK, ~[], [pid 295] <... close resumed>) = 0 [pid 438] <... rt_sigprocmask resumed>[], 8) = 0 [pid 292] <... unlink resumed>) = 0 [pid 295] rmdir("./2" [pid 294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 292] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} => {parent_tid=[440]}, 88) = 440 [pid 295] <... rmdir resumed>) = 0 [pid 295] mkdir("./3", 0777 [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 439 attached [pid 439] set_robust_list(0x7fc1322069a0, 24 [pid 295] <... mkdir resumed>) = 0 [pid 439] <... set_robust_list resumed>) = 0 [pid 439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] memfd_create("syzkaller", 0) = 3 [pid 439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 [pid 295] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 440 attached [pid 440] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] <... write resumed>) = 262144 [pid 439] munmap(0x7fc129dc5000, 262144 [pid 440] creat("./bus", 000 [pid 439] <... munmap resumed>) = 0 [pid 439] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 440] <... creat resumed>) = 5 [pid 440] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 440] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 295] <... openat resumed>) = 3 [pid 292] <... umount2 resumed>) = 0 [pid 296] <... openat resumed>) = 3 [pid 294] <... openat resumed>) = 3 [pid 296] ioctl(3, LOOP_CLR_FD [pid 295] ioctl(3, LOOP_CLR_FD [pid 294] ioctl(3, LOOP_CLR_FD [pid 292] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] close(3 [pid 295] close(3 [pid 294] close(3 [pid 292] newfstatat(AT_FDCWD, "./3/file0", [pid 295] <... close resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... clone resumed>, child_tidptr=0x5555563f4690) = 442 [pid 294] <... clone resumed>, child_tidptr=0x5555563f4690) = 441 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 443 attached ./strace-static-x86_64: Process 442 attached ./strace-static-x86_64: Process 441 attached [pid 296] <... clone resumed>, child_tidptr=0x5555563f4690) = 443 [pid 292] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 443] set_robust_list(0x5555563f46a0, 24 [pid 442] set_robust_list(0x5555563f46a0, 24 [pid 441] set_robust_list(0x5555563f46a0, 24 [pid 443] <... set_robust_list resumed>) = 0 [pid 292] <... openat resumed>) = 4 [pid 441] <... set_robust_list resumed>) = 0 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 443] chdir("./3" [pid 292] getdents64(4, [pid 442] <... set_robust_list resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 443] <... chdir resumed>) = 0 [pid 442] chdir("./3" [pid 441] chdir("./3" [pid 292] getdents64(4, [pid 443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 442] <... chdir resumed>) = 0 [pid 441] <... chdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 443] <... prctl resumed>) = 0 [pid 442] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 441] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] close(4 [pid 443] setpgid(0, 0 [pid 442] <... prctl resumed>) = 0 [pid 441] <... prctl resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 443] <... setpgid resumed>) = 0 [pid 442] setpgid(0, 0 [pid 441] setpgid(0, 0 [pid 292] rmdir("./3/file0" [pid 442] <... setpgid resumed>) = 0 [pid 442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 292] <... rmdir resumed>) = 0 [pid 443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 441] <... setpgid resumed>) = 0 [pid 292] getdents64(3, [pid 442] write(3, "1000", 4 [pid 292] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 442] <... write resumed>) = 4 [pid 292] close(3 [pid 442] close(3 [pid 292] <... close resumed>) = 0 [pid 443] <... openat resumed>) = 3 [pid 292] rmdir("./3" [pid 442] <... close resumed>) = 0 [pid 442] symlink("/dev/binderfs", "./binderfs" [pid 443] write(3, "1000", 4 [pid 442] <... symlink resumed>) = 0 [pid 441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... rmdir resumed>) = 0 [pid 443] <... write resumed>) = 4 [pid 442] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] mkdir("./4", 0777 [pid 443] close(3 [pid 442] <... futex resumed>) = 0 [pid 441] <... openat resumed>) = 3 [pid 442] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 292] <... mkdir resumed>) = 0 [pid 443] <... close resumed>) = 0 [pid 441] write(3, "1000", 4 [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 443] symlink("/dev/binderfs", "./binderfs" [pid 441] <... write resumed>) = 4 [pid 442] <... mmap resumed>) = 0x7fc1321e6000 [pid 442] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 443] <... symlink resumed>) = 0 [pid 441] close(3 [pid 443] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] rt_sigprocmask(SIG_BLOCK, ~[], [pid 441] <... close resumed>) = 0 [pid 443] <... futex resumed>) = 0 [pid 442] <... rt_sigprocmask resumed>[], 8) = 0 [pid 441] symlink("/dev/binderfs", "./binderfs" [pid 443] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 443] <... rt_sigaction resumed>NULL, 8) = 0 [pid 442] <... clone3 resumed> => {parent_tid=[444]}, 88) = 444 [pid 443] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 442] rt_sigprocmask(SIG_SETMASK, [], [pid 441] <... symlink resumed>) = 0 [pid 442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 442] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... mmap resumed>) = 0x7fc1321e6000 [pid 442] <... futex resumed>) = 0 [pid 443] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 442] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] <... futex resumed>) = 0 [pid 443] <... mprotect resumed>) = 0 [pid 442] <... futex resumed>) = 0 [pid 442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 443] rt_sigprocmask(SIG_BLOCK, ~[], [pid 442] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 441] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 443] <... rt_sigprocmask resumed>[], 8) = 0 [pid 442] <... mprotect resumed>) = 0 [pid 443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 442] rt_sigprocmask(SIG_BLOCK, ~[], [pid 441] <... rt_sigaction resumed>NULL, 8) = 0 [pid 442] <... rt_sigprocmask resumed>[], 8) = 0 [pid 442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 441] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 446 attached ./strace-static-x86_64: Process 444 attached [pid 443] <... clone3 resumed> => {parent_tid=[445]}, 88) = 445 [pid 442] <... clone3 resumed> => {parent_tid=[446]}, 88) = 446 [pid 442] rt_sigprocmask(SIG_SETMASK, [], [pid 443] rt_sigprocmask(SIG_SETMASK, [], [pid 442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 442] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 445 attached [pid 443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 445] set_robust_list(0x7fc1322069a0, 24) = 0 [pid 445] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 445] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 446] set_robust_list(0x7fc1321e59a0, 24 [pid 443] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] <... mmap resumed>) = 0x7fc1321e6000 [pid 443] <... futex resumed>) = 1 [pid 446] <... set_robust_list resumed>) = 0 [pid 446] rt_sigprocmask(SIG_SETMASK, [], [pid 443] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 444] set_robust_list(0x7fc1322069a0, 24 [pid 443] <... futex resumed>) = 0 [pid 446] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 446] creat("./bus", 000 [pid 443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 446] <... creat resumed>) = 3 [pid 445] <... futex resumed>) = 0 [pid 444] <... set_robust_list resumed>) = 0 [pid 443] <... mmap resumed>) = 0x7fc1321c5000 [pid 441] rt_sigprocmask(SIG_BLOCK, ~[], [pid 446] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 446] <... futex resumed>) = 1 [pid 446] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 443] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 441] <... rt_sigprocmask resumed>[], 8) = 0 [pid 444] rt_sigprocmask(SIG_SETMASK, [], [pid 443] <... mprotect resumed>) = 0 [pid 445] memfd_create("syzkaller", 0 [pid 444] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 441] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 441] <... clone3 resumed> => {parent_tid=[447]}, 88) = 447 [pid 446] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... clone3 resumed> => {parent_tid=[448]}, 88) = 448 [pid 442] <... futex resumed>) = 0 [pid 441] rt_sigprocmask(SIG_SETMASK, [], [pid 446] <... futex resumed>) = 1 [pid 443] rt_sigprocmask(SIG_SETMASK, [], [pid 442] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 446] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 442] <... futex resumed>) = 0 [pid 441] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 0 [pid 443] <... futex resumed>) = 0 [pid 441] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 0 [pid 441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 441] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 444] memfd_create("syzkaller", 0./strace-static-x86_64: Process 448 attached [pid 441] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 441] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 444] <... memfd_create resumed>) = 5 [pid 448] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 441] <... clone3 resumed> => {parent_tid=[449]}, 88) = 449 [pid 448] rt_sigprocmask(SIG_SETMASK, [], [pid 441] rt_sigprocmask(SIG_SETMASK, [], [pid 444] <... mmap resumed>) = 0x7fc129dc5000 [pid 441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 441] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 441] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 448] creat("./bus", 000) = 3 [pid 448] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 443] <... futex resumed>) = 0 [pid 448] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 443] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... mount resumed>) = 0 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 448] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... memfd_create resumed>) = 5 [pid 445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 [pid 444] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 449 attached ./strace-static-x86_64: Process 447 attached ) = 262144 [pid 445] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 265740 [pid 449] set_robust_list(0x7fc1321e59a0, 24 [pid 447] set_robust_list(0x7fc1322069a0, 24 [pid 445] <... write resumed>) = 265740 [pid 444] munmap(0x7fc129dc5000, 262144 [pid 445] munmap(0x7fc129dc5000, 265740 [pid 449] <... set_robust_list resumed>) = 0 [pid 447] <... set_robust_list resumed>) = 0 [pid 445] <... munmap resumed>) = 0 [pid 444] <... munmap resumed>) = 0 [pid 445] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 449] rt_sigprocmask(SIG_SETMASK, [], [pid 444] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 447] rt_sigprocmask(SIG_SETMASK, [], [pid 449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 449] creat("./bus", 000) = 3 [pid 447] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 447] memfd_create("syzkaller", 0 [pid 449] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 441] <... futex resumed>) = 0 [pid 449] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 441] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... mount resumed>) = 0 [pid 441] <... futex resumed>) = 0 [pid 449] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 438] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 441] <... futex resumed>) = 0 [pid 438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 441] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... mmap resumed>) = 0x7fc129de4000 [pid 438] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0}./strace-static-x86_64: Process 450 attached [pid 447] <... memfd_create resumed>) = 4 [pid 438] <... clone3 resumed> => {parent_tid=[450]}, 88) = 450 [pid 450] set_robust_list(0x7fc129e049a0, 24 [pid 449] <... futex resumed>) = 1 [pid 447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 438] rt_sigprocmask(SIG_SETMASK, [], [pid 449] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 441] <... futex resumed>) = 0 [pid 438] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 438] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 450] <... set_robust_list resumed>) = 0 [pid 450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 450] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 7 [pid 441] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [pid 447] <... mmap resumed>) = 0x7fc129dc5000 [pid 450] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 438] <... futex resumed>) = 0 [pid 450] recvmmsg(7, [pid 438] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 265747) = 265747 [pid 292] <... openat resumed>) = 3 [pid 447] munmap(0x7fc129dc5000, 265747) = 0 [pid 447] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 448] <... open resumed>) = 4 [pid 445] <... openat resumed>) = 6 [pid 448] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] ioctl(6, LOOP_SET_FD, 5 [pid 448] <... futex resumed>) = 1 [pid 446] <... open resumed>) = 4 [pid 443] <... futex resumed>) = 0 [pid 439] <... openat resumed>) = 4 [pid 448] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 443] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 446] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 439] ioctl(4, LOOP_SET_FD, 3 [pid 292] ioctl(3, LOOP_CLR_FD [pid 448] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 7 [pid 448] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = 1 [pid 442] <... futex resumed>) = 0 [pid 448] <... futex resumed>) = 0 [pid 446] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 443] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 442] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] <... futex resumed>) = 0 [pid 446] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 443] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 448] <... futex resumed>) = 0 [pid 446] <... socket resumed>) = 7 [pid 443] <... futex resumed>) = 1 [pid 448] recvmmsg(7, [pid 446] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 446] <... futex resumed>) = 1 [pid 442] <... futex resumed>) = 0 [pid 446] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] <... futex resumed>) = 0 [pid 446] recvmmsg(7, [pid 442] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... ioctl resumed>) = 0 [pid 445] close(5) = 0 [pid 445] mkdir("./file0", 0777) = 0 [pid 440] <... open resumed>) = 6 [pid 445] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 449] <... open resumed>) = 5 [pid 447] <... openat resumed>) = 6 [pid 449] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] ioctl(6, LOOP_SET_FD, 4 [pid 449] <... futex resumed>) = 1 [pid 449] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] <... futex resumed>) = 0 [pid 440] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 441] <... futex resumed>) = 1 [pid 449] <... futex resumed>) = 0 [pid 440] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 449] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 441] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... socket resumed>) = 7 [pid 449] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... ioctl resumed>) = 0 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 449] <... futex resumed>) = 1 [pid 447] close(4 [pid 441] <... futex resumed>) = 0 [pid 444] <... openat resumed>) = 6 [pid 439] <... ioctl resumed>) = 0 [pid 292] close(3 [pid 447] <... close resumed>) = 0 [pid 447] mkdir("./file0", 0777) = 0 [pid 292] <... close resumed>) = 0 [pid 447] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 449] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] exit_group(0 [pid 449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 444] ioctl(6, LOOP_SET_FD, 5 [pid 441] <... futex resumed>) = 0 [pid 439] close(3 [pid 434] <... recvmmsg resumed> ) = ? [pid 433] <... futex resumed>) = ? [pid 432] <... exit_group resumed>) = ? [pid 292] <... clone resumed>, child_tidptr=0x5555563f4690) = 454 [pid 449] recvmmsg(7, [pid 441] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... close resumed>) = 0 [pid 434] +++ exited with 0 +++ [pid 433] +++ exited with 0 +++ [pid 439] mkdir("./file0", 0777./strace-static-x86_64: Process 454 attached [pid 444] <... ioctl resumed>) = 0 [pid 439] <... mkdir resumed>) = 0 [pid 432] +++ exited with 0 +++ [pid 454] set_robust_list(0x5555563f46a0, 24 [pid 444] close(5 [pid 439] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=432, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 454] <... set_robust_list resumed>) = 0 [pid 444] <... close resumed>) = 0 [pid 454] chdir("./4" [pid 444] mkdir("./file0", 0777 [pid 454] <... chdir resumed>) = 0 [pid 444] <... mkdir resumed>) = 0 [pid 454] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 444] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 293] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 454] <... prctl resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 454] setpgid(0, 0 [pid 293] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 454] <... setpgid resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] newfstatat(3, "", [pid 454] <... openat resumed>) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 454] write(3, "1000", 4 [pid 293] getdents64(3, [pid 454] <... write resumed>) = 4 [pid 293] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 454] close(3 [pid 293] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 454] <... close resumed>) = 0 [pid 454] symlink("/dev/binderfs", "./binderfs") = 0 [pid 454] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 454] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 454] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 454] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 454] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 454] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} => {parent_tid=[459]}, 88) = 459 [pid 454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 454] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 454] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 454] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 454] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} => {parent_tid=[460]}, 88) = 460 [pid 454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 454] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 459 attached [pid 459] set_robust_list(0x7fc1322069a0, 24) = 0 [pid 459] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 459] memfd_create("syzkaller", 0) = 3 [pid 459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 ./strace-static-x86_64: Process 460 attached [pid 460] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 460] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 460] creat("./bus", 000) = 4 [pid 460] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] <... futex resumed>) = 0 [pid 454] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] <... futex resumed>) = 1 [pid 460] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./3/bus", [pid 438] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 293] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 460] <... mount resumed>) = 0 [pid 459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 447] <... mount resumed>) = 0 [pid 438] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] unlink("./3/bus" [pid 440] <... futex resumed>) = 0 [pid 438] <... futex resumed>) = 1 [pid 293] <... unlink resumed>) = 0 [pid 440] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 438] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 442] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 440] <... mmap resumed>) = 0x20000000 [pid 447] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 4 [pid 447] chdir("./file0") = 0 [pid 447] ioctl(6, LOOP_CLR_FD) = 0 [pid 447] close(6) = 0 [pid 459] <... write resumed>) = 262144 [pid 447] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = 0 [pid 460] <... futex resumed>) = 1 [pid 454] <... futex resumed>) = 0 [pid 447] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 454] <... futex resumed>) = 0 [pid 460] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 454] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] <... open resumed>) = 5 [pid 460] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 454] <... futex resumed>) = 0 [pid 460] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 454] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... socket resumed>) = 6 [pid 454] <... futex resumed>) = 0 [pid 460] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] munmap(0x7fc129dc5000, 262144 [ 27.583902][ T447] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 27.595783][ T447] ext4 filesystem being mounted at /root/syzkaller.duxz7m/3/file0 supports timestamps until 2038 (0x7fffffff) [ 27.614308][ T445] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 454] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] <... futex resumed>) = 0 [pid 459] <... munmap resumed>) = 0 [pid 454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 460] recvmmsg(6, [pid 459] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 454] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... openat resumed>) = 7 [pid 454] <... futex resumed>) = 0 [pid 459] ioctl(7, LOOP_SET_FD, 3 [pid 454] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... ioctl resumed>) = 0 [pid 443] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 440] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 459] close(3) = 0 [pid 459] mkdir("./file0", 0777) = 0 [pid 459] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 445] <... mount resumed>) = 0 [pid 445] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 445] chdir("./file0") = 0 [pid 445] ioctl(6, LOOP_CLR_FD) = 0 [pid 445] close(6) = 0 [pid 445] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 445] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 443] <... futex resumed>) = 0 [pid 443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129de5000 [pid 443] mprotect(0x7fc129de6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e05990, parent_tid=0x7fc129e05990, exit_signal=0, stack=0x7fc129de5000, stack_size=0x20300, tls=0x7fc129e056c0} => {parent_tid=[467]}, 88) = 467 [pid 443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 443] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 438] <... futex resumed>) = 0 [pid 443] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 442] <... futex resumed>) = 0 [pid 442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129de4000 [pid 442] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 442] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} => {parent_tid=[468]}, 88) = 468 [pid 442] rt_sigprocmask(SIG_SETMASK, [], [pid 441] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./3/binderfs", [pid 442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 442] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] <... futex resumed>) = 0 [pid 442] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 440] memfd_create("syzkaller", 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 439] <... mount resumed>) = 0 [pid 439] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY) = -1 ENOENT (No such file or directory) [pid 439] ioctl(4, LOOP_CLR_FD) = 0 [pid 439] close(4 [pid 447] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 441] futex(0x7fc1322d26cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] unlink("./3/binderfs" [pid 447] <... mmap resumed>) = 0x20000000 [pid 440] <... memfd_create resumed>) = 3 [pid 293] <... unlink resumed>) = 0 [pid 447] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... close resumed>) = 0 [pid 439] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 27.614788][ T439] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 27.636671][ T445] ext4 filesystem being mounted at /root/syzkaller.jl33I5/3/file0 supports timestamps until 2038 (0x7fffffff) [ 27.638506][ T439] ext4 filesystem being mounted at /root/syzkaller.SVIRRC/3/file0 supports timestamps until 2038 (0x7fffffff) [pid 439] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 468 attached ./strace-static-x86_64: Process 467 attached [pid 447] <... futex resumed>) = 1 [pid 441] <... futex resumed>) = 0 [pid 440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 293] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 447] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... mmap resumed>) = 0x7fc1219e4000 [pid 447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] <... futex resumed>) = 0 [pid 440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 447] memfd_create("syzkaller", 0 [pid 440] <... write resumed>) = 65536 [pid 447] <... memfd_create resumed>) = 6 [pid 440] munmap(0x7fc1219e4000, 65536 [pid 447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 440] <... munmap resumed>) = 0 [pid 447] <... mmap resumed>) = 0x7fc121a06000 [pid 440] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 447] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 440] <... openat resumed>) = 4 [pid 447] <... write resumed>) = 65536 [pid 440] ioctl(4, LOOP_SET_FD, 3 [pid 447] munmap(0x7fc121a06000, 65536 [pid 440] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 447] <... munmap resumed>) = 0 [pid 440] ioctl(4, LOOP_CLR_FD [pid 447] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 440] <... ioctl resumed>) = 0 [pid 447] <... openat resumed>) = 8 [pid 447] ioctl(8, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 447] ioctl(8, LOOP_CLR_FD) = 0 [pid 454] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 440] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 440] close(4) = 0 [pid 440] close(3) = 0 [pid 447] ioctl(8, LOOP_SET_FD, 6 [pid 440] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 440] <... futex resumed>) = 0 [pid 447] close(8 [pid 440] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 447] <... close resumed>) = 0 [pid 447] close(6) = 0 [pid 447] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 444] <... mount resumed>) = 0 [pid 454] <... futex resumed>) = 0 [pid 444] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 444] chdir("./file0") = 0 [pid 444] ioctl(6, LOOP_CLR_FD [pid 454] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 444] <... ioctl resumed>) = 0 [pid 444] close(6) = 0 [pid 444] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] <... mmap resumed>) = 0x7fc129de4000 [pid 468] set_robust_list(0x7fc129e049a0, 24 [pid 467] set_robust_list(0x7fc129e059a0, 24 [pid 454] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 468] <... set_robust_list resumed>) = 0 [pid 468] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 468] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000 [pid 468] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 468] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] <... set_robust_list resumed>) = 0 [pid 467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 467] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000 [pid 467] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] <... mprotect resumed>) = 0 [pid 454] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 454] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} => {parent_tid=[471]}, 88) = 471 [pid 454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 454] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = 0 [pid 442] <... futex resumed>) = 1 [pid 444] memfd_create("syzkaller", 0) = 6 [pid 444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 444] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 444] munmap(0x7fc1219e4000, 65536./strace-static-x86_64: Process 471 attached [pid 459] <... mount resumed>) = 0 [pid 445] <... futex resumed>) = 0 [pid 444] <... munmap resumed>) = 0 [pid 471] set_robust_list(0x7fc129e049a0, 24 [pid 445] memfd_create("syzkaller", 0 [pid 471] <... set_robust_list resumed>) = 0 [pid 444] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 471] rt_sigprocmask(SIG_SETMASK, [], [pid 445] <... memfd_create resumed>) = 6 [pid 459] <... openat resumed>) = 3 [pid 471] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 459] chdir("./file0") = 0 [pid 459] ioctl(7, LOOP_CLR_FD [pid 471] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 471] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 454] <... futex resumed>) = 0 [pid 445] <... mmap resumed>) = 0x7fc1219e5000 [pid 471] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 454] <... futex resumed>) = 0 [pid 471] memfd_create("syzkaller", 0) = 8 [pid 445] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 445] <... write resumed>) = 65536 [pid 471] write(8, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 445] munmap(0x7fc1219e5000, 65536 [pid 471] <... write resumed>) = 65536 [pid 471] munmap(0x7fc1219e4000, 65536 [pid 445] <... munmap resumed>) = 0 [pid 471] <... munmap resumed>) = 0 [pid 445] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 471] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 444] <... openat resumed>) = 8 [pid 293] <... umount2 resumed>) = 0 [pid 444] ioctl(8, LOOP_SET_FD, 6 [pid 293] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 444] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 444] ioctl(8, LOOP_CLR_FD [pid 293] newfstatat(AT_FDCWD, "./3/file0", [pid 444] <... ioctl resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", [pid 444] ioctl(8, LOOP_SET_FD, 6 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 444] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 293] getdents64(4, [pid 444] close(8 [pid 293] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 444] <... close resumed>) = 0 [pid 293] getdents64(4, [pid 444] close(6 [pid 293] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 444] <... close resumed>) = 0 [pid 293] close(4 [pid 444] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... close resumed>) = 0 [pid 444] <... futex resumed>) = 0 [pid 293] rmdir("./3/file0" [pid 444] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] <... rmdir resumed>) = 0 [pid 293] getdents64(3, [pid 471] <... openat resumed>) = 9 [pid 459] <... ioctl resumed>) = 0 [pid 445] <... openat resumed>) = 8 [pid 293] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 471] ioctl(9, LOOP_SET_FD, 8 [pid 459] close(7 [pid 445] ioctl(8, LOOP_SET_FD, 6 [pid 293] close(3 [pid 471] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 459] <... close resumed>) = 0 [pid 445] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 293] <... close resumed>) = 0 [pid 471] ioctl(9, LOOP_CLR_FD [pid 459] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] ioctl(8, LOOP_CLR_FD [pid 293] rmdir("./3" [pid 471] <... ioctl resumed>) = 0 [pid 459] <... futex resumed>) = 0 [pid 445] <... ioctl resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 459] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] mkdir("./4", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3) = 0 [pid 471] ioctl(9, LOOP_SET_FD, 8 [pid 445] ioctl(8, LOOP_SET_FD, 6 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 471] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 445] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 471] close(9 [pid 445] close(8 [pid 293] <... clone resumed>, child_tidptr=0x5555563f4690) = 472 [pid 471] <... close resumed>) = 0 [pid 445] <... close resumed>) = 0 [pid 471] close(8 [pid 445] close(6./strace-static-x86_64: Process 472 attached [pid 471] <... close resumed>) = 0 [pid 472] set_robust_list(0x5555563f46a0, 24) = 0 [pid 472] chdir("./4" [pid 471] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... close resumed>) = 0 [pid 471] <... futex resumed>) = 0 [pid 445] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 445] <... futex resumed>) = 0 [pid 472] <... chdir resumed>) = 0 [pid 445] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 472] setpgid(0, 0) = 0 [pid 472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 27.674006][ T444] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 27.689808][ T444] ext4 filesystem being mounted at /root/syzkaller.IpShW6/3/file0 supports timestamps until 2038 (0x7fffffff) [ 27.690319][ T459] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 27.714872][ T459] ext4 filesystem being mounted at /root/syzkaller.gpm0iI/4/file0 supports timestamps until 2038 (0x7fffffff) [pid 472] write(3, "1000", 4) = 4 [pid 472] close(3) = 0 [pid 472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 472] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 472] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 472] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} => {parent_tid=[473]}, 88) = 473 [pid 472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 472] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 473 attached ) = 0 [pid 473] set_robust_list(0x7fc1322069a0, 24 [pid 472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 473] <... set_robust_list resumed>) = 0 [pid 472] <... mmap resumed>) = 0x7fc1321c5000 [pid 473] rt_sigprocmask(SIG_SETMASK, [], [pid 472] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} => {parent_tid=[474]}, 88) = 474 [pid 473] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 472] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 474 attached [pid 474] set_robust_list(0x7fc1321e59a0, 24 [pid 473] memfd_create("syzkaller", 0) = 3 [pid 474] <... set_robust_list resumed>) = 0 [pid 474] rt_sigprocmask(SIG_SETMASK, [], [pid 473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 474] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 473] <... mmap resumed>) = 0x7fc129dc5000 [pid 474] creat("./bus", 000) = 4 [pid 474] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] <... futex resumed>) = 1 [pid 474] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 474] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] <... futex resumed>) = 1 [pid 474] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c) = 5 [pid 474] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] <... futex resumed>) = 1 [pid 474] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 6 [pid 474] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 474] <... futex resumed>) = 1 [pid 474] recvmmsg(6, [pid 473] <... write resumed>) = 262144 [pid 473] munmap(0x7fc129dc5000, 262144) = 0 [pid 473] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 7 [pid 473] ioctl(7, LOOP_SET_FD, 3) = 0 [pid 473] close(3) = 0 [pid 473] mkdir("./file0", 0777) = 0 [pid 473] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue") = 0 [pid 473] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 473] chdir("./file0") = 0 [pid 473] ioctl(7, LOOP_CLR_FD) = 0 [pid 473] close(7) = 0 [pid 473] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 472] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 472] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 472] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 472] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = 0 [pid 472] <... futex resumed>) = 1 [pid 473] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 472] futex(0x7fc1322d26cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... mmap resumed>) = 0x20000000 [pid 473] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] memfd_create("syzkaller", 0) = 7 [pid 473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc121a05000 [pid 473] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 473] munmap(0x7fc121a05000, 65536) = 0 [pid 473] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 8 [pid 473] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 473] ioctl(8, LOOP_CLR_FD) = 0 [pid 473] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 473] close(8) = 0 [pid 473] close(7) = 0 [pid 473] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 27.791685][ T473] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 27.804026][ T473] ext4 filesystem being mounted at /root/syzkaller.zNZ9LH/4/file0 supports timestamps until 2038 (0x7fffffff) [pid 473] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 443] exit_group(0) = ? [pid 467] <... futex resumed>) = 230 [pid 448] <... recvmmsg resumed> ) = ? [pid 445] <... futex resumed>) = ? [pid 467] +++ exited with 0 +++ [pid 445] +++ exited with 0 +++ [pid 448] +++ exited with 0 +++ [pid 443] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=443, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 296] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 296] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 296] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 296] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./3/bus") = 0 [pid 296] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./3/binderfs" [pid 454] exit_group(0 [pid 296] <... unlink resumed>) = 0 [pid 296] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 471] <... futex resumed>) = ? [pid 454] <... exit_group resumed>) = ? [pid 459] <... futex resumed>) = ? [pid 460] <... recvmmsg resumed> ) = ? [pid 459] +++ exited with 0 +++ [pid 471] +++ exited with 0 +++ [pid 460] +++ exited with 0 +++ [pid 454] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=454, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 292] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 292] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 292] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./4/bus") = 0 [pid 292] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./4/binderfs") = 0 [pid 292] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 438] exit_group(0 [pid 440] <... futex resumed>) = ? [pid 450] <... recvmmsg resumed>0x20009080, 1, 0, NULL) = 231 [pid 438] <... exit_group resumed>) = ? [pid 439] <... futex resumed>) = ? [pid 450] +++ exited with 0 +++ [pid 440] +++ exited with 0 +++ [pid 442] exit_group(0 [pid 468] <... futex resumed>) = ? [pid 446] <... recvmmsg resumed> ) = ? [pid 444] <... futex resumed>) = ? [pid 442] <... exit_group resumed>) = ? [pid 468] +++ exited with 0 +++ [pid 446] +++ exited with 0 +++ [pid 444] +++ exited with 0 +++ [pid 441] exit_group(0 [pid 449] <... recvmmsg resumed>0x20009080, 1, 0, NULL) = -1 (errno 18446744073709551555) [pid 441] <... exit_group resumed>) = ? [pid 447] <... futex resumed>) = ? [pid 449] +++ exited with 0 +++ [pid 447] +++ exited with 0 +++ [pid 296] <... umount2 resumed>) = 0 [pid 296] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./3/file0") = 0 [pid 296] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./3") = 0 [pid 296] mkdir("./4", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 439] +++ exited with 0 +++ [pid 438] +++ exited with 0 +++ [pid 442] +++ exited with 0 +++ [pid 441] +++ exited with 0 +++ [pid 296] <... openat resumed>) = 3 [pid 292] <... umount2 resumed>) = 0 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=438, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 296] ioctl(3, LOOP_CLR_FD [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=442, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=441, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] close(3 [pid 297] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... close resumed>) = 0 [pid 294] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./4/file0", [pid 297] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... openat resumed>) = 3 [pid 294] <... openat resumed>) = 3 [pid 297] newfstatat(3, "", [pid 294] newfstatat(3, "", [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] getdents64(3, [pid 296] <... clone resumed>, child_tidptr=0x5555563f4690) = 479 [pid 295] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] getdents64(3, [pid 292] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] <... openat resumed>) = 3 [pid 294] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 297] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(3, "", [pid 292] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... openat resumed>) = 4 [pid 295] getdents64(3, [pid 292] newfstatat(4, "", [pid 297] <... umount2 resumed>) = 0 [pid 295] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 294] <... umount2 resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] getdents64(4, [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./3/bus", [pid 295] umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] newfstatat(AT_FDCWD, "./3/bus", [pid 292] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 297] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] getdents64(4, [pid 297] unlink("./3/bus" [pid 295] newfstatat(AT_FDCWD, "./3/bus", [pid 294] unlink("./3/bus" [pid 297] <... unlink resumed>) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... unlink resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 297] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] unlink("./3/bus" [pid 294] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] close(4 [pid 297] newfstatat(AT_FDCWD, "./3/binderfs", [pid 295] <... unlink resumed>) = 0 [pid 294] newfstatat(AT_FDCWD, "./3/binderfs", [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... close resumed>) = 0 [pid 297] unlink("./3/binderfs" [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] unlink("./3/binderfs" [pid 297] <... unlink resumed>) = 0 [pid 295] newfstatat(AT_FDCWD, "./3/binderfs", [pid 294] <... unlink resumed>) = 0 [pid 292] rmdir("./4/file0" [pid 297] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 479 attached [pid 295] unlink("./3/binderfs" [pid 292] <... rmdir resumed>) = 0 [pid 292] getdents64(3, [pid 295] <... unlink resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 295] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] close(3) = 0 [pid 479] set_robust_list(0x5555563f46a0, 24 [pid 292] rmdir("./4" [pid 479] <... set_robust_list resumed>) = 0 [pid 479] chdir("./4") = 0 [pid 479] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... rmdir resumed>) = 0 [pid 479] <... prctl resumed>) = 0 [pid 292] mkdir("./5", 0777 [pid 479] setpgid(0, 0) = 0 [pid 479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... mkdir resumed>) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 479] <... openat resumed>) = 3 [pid 479] write(3, "1000", 4) = 4 [pid 479] close(3) = 0 [pid 479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 479] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 479] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 479] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} => {parent_tid=[480]}, 88) = 480 [pid 479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 479] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 479] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0}./strace-static-x86_64: Process 481 attached => {parent_tid=[481]}, 88) = 481 [pid 479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 479] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] set_robust_list(0x7fc1321e59a0, 24./strace-static-x86_64: Process 480 attached [pid 480] set_robust_list(0x7fc1322069a0, 24) = 0 [pid 480] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 480] memfd_create("syzkaller", 0) = 3 [pid 480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 481] <... set_robust_list resumed>) = 0 [pid 480] <... mmap resumed>) = 0x7fc129dc5000 [pid 481] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 481] creat("./bus", 000) = 4 [pid 481] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... mount resumed>) = 0 [pid 481] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 481] <... futex resumed>) = 1 [pid 479] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... write resumed>) = 262144 [pid 481] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 480] munmap(0x7fc129dc5000, 262144) = 0 [pid 480] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./3/file0") = 0 [pid 297] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./3") = 0 [pid 297] mkdir("./4", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563f4690) = 482 [pid 292] <... openat resumed>) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563f4690) = 483 [pid 472] exit_group(0 [pid 474] <... recvmmsg resumed> ) = ? [pid 473] <... futex resumed>) = ? [pid 472] <... exit_group resumed>) = ? [pid 474] +++ exited with 0 +++ [pid 473] +++ exited with 0 +++ ./strace-static-x86_64: Process 483 attached ./strace-static-x86_64: Process 482 attached [pid 483] set_robust_list(0x5555563f46a0, 24 [pid 482] set_robust_list(0x5555563f46a0, 24 [pid 483] <... set_robust_list resumed>) = 0 [pid 482] <... set_robust_list resumed>) = 0 [pid 483] chdir("./5" [pid 482] chdir("./4") = 0 [pid 483] <... chdir resumed>) = 0 [pid 483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 483] setpgid(0, 0) = 0 [pid 483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 483] write(3, "1000", 4) = 4 [pid 483] close(3) = 0 [pid 483] symlink("/dev/binderfs", "./binderfs") = 0 [pid 483] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 483] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 483] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 482] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 482] setpgid(0, 0 [pid 483] <... clone3 resumed> => {parent_tid=[484]}, 88) = 484 ./strace-static-x86_64: Process 484 attached [pid 482] <... setpgid resumed>) = 0 [pid 483] rt_sigprocmask(SIG_SETMASK, [], [pid 482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 483] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 482] <... openat resumed>) = 3 [pid 483] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 482] write(3, "1000", 4 [pid 483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0}./strace-static-x86_64: Process 485 attached [pid 484] set_robust_list(0x7fc1322069a0, 24 [pid 482] <... write resumed>) = 4 [pid 482] close(3) = 0 [pid 483] <... clone3 resumed> => {parent_tid=[485]}, 88) = 485 [pid 483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 482] symlink("/dev/binderfs", "./binderfs" [pid 485] set_robust_list(0x7fc1321e59a0, 24 [pid 484] <... set_robust_list resumed>) = 0 [pid 483] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... symlink resumed>) = 0 [pid 483] <... futex resumed>) = 0 [pid 482] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 482] <... futex resumed>) = 0 [pid 482] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 482] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 482] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 482] rt_sigprocmask(SIG_BLOCK, ~[], [pid 485] <... set_robust_list resumed>) = 0 [pid 484] rt_sigprocmask(SIG_SETMASK, [], [pid 482] <... rt_sigprocmask resumed>[], 8) = 0 [pid 482] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0}./strace-static-x86_64: Process 486 attached [pid 484] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 485] rt_sigprocmask(SIG_SETMASK, [], [pid 482] <... clone3 resumed> => {parent_tid=[486]}, 88) = 486 [pid 482] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 482] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 482] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 482] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 482] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} => {parent_tid=[487]}, 88) = 487 [pid 482] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 482] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 487 attached [pid 487] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 487] rt_sigprocmask(SIG_SETMASK, [], [pid 484] memfd_create("syzkaller", 0 [pid 485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 485] creat("./bus", 000 [pid 486] set_robust_list(0x7fc1322069a0, 24 [pid 484] <... memfd_create resumed>) = 3 [pid 487] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 487] creat("./bus", 000) = 3 [pid 487] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 1 [pid 485] <... creat resumed>) = 4 [pid 484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 487] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 484] <... mmap resumed>) = 0x7fc129dc5000 [pid 485] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] <... set_robust_list resumed>) = 0 [pid 487] <... mount resumed>) = 0 [pid 487] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 1 [pid 487] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 485] <... futex resumed>) = 1 [pid 483] <... futex resumed>) = 0 [pid 485] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 483] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... mount resumed>) = 0 [pid 483] <... futex resumed>) = 0 [pid 485] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 485] <... futex resumed>) = 0 [pid 483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 485] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 483] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] rt_sigprocmask(SIG_SETMASK, [], [pid 484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 486] memfd_create("syzkaller", 0) = 5 [pid 486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 [pid 484] <... write resumed>) = 262144 [pid 484] munmap(0x7fc129dc5000, 262144) = 0 [pid 484] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 486] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 486] munmap(0x7fc129dc5000, 262144) = 0 [pid 486] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 481] <... open resumed>) = 5 [pid 480] <... openat resumed>) = 6 [pid 472] +++ exited with 0 +++ [pid 480] ioctl(6, LOOP_SET_FD, 3 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=472, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 481] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 480] <... ioctl resumed>) = 0 [pid 479] <... futex resumed>) = 0 [pid 485] <... open resumed>) = 5 [pid 295] <... umount2 resumed>) = 0 [pid 293] <... restart_syscall resumed>) = 0 [pid 485] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] close(3 [pid 295] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 485] <... futex resumed>) = 1 [pid 483] <... futex resumed>) = 0 [pid 480] <... close resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 485] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 483] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] mkdir("./file0", 0777 [pid 295] newfstatat(AT_FDCWD, "./3/file0", [pid 293] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 483] <... futex resumed>) = 0 [pid 480] <... mkdir resumed>) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 485] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 483] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 295] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 485] <... socket resumed>) = 7 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... openat resumed>) = 3 [pid 485] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] newfstatat(3, "", [pid 485] <... futex resumed>) = 1 [pid 483] <... futex resumed>) = 0 [pid 295] <... openat resumed>) = 4 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 485] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 483] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] newfstatat(4, "", [pid 293] getdents64(3, [pid 485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 483] <... futex resumed>) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 485] recvmmsg(7, [pid 483] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] getdents64(4, [pid 293] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 295] rmdir("./3/file0") = 0 [pid 295] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./3") = 0 [pid 295] mkdir("./4", 0777) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563f4690) = 489 [pid 481] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 479] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 294] <... umount2 resumed>) = 0 [pid 481] <... socket resumed>) = 3 [pid 479] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 479] <... futex resumed>) = 0 [pid 294] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 484] <... openat resumed>) = 6 [pid 481] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 479] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = 0 [pid 484] ioctl(6, LOOP_SET_FD, 3 [pid 481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 479] <... futex resumed>) = 0 [pid 294] newfstatat(AT_FDCWD, "./3/file0", [pid 293] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 481] recvmmsg(3, [pid 479] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] newfstatat(AT_FDCWD, "./4/bus", [pid 294] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] unlink("./4/bus" [pid 294] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... unlink resumed>) = 0 [pid 293] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... openat resumed>) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(4, "", [pid 293] newfstatat(AT_FDCWD, "./4/binderfs", [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./4/binderfs" [pid 294] getdents64(4, [pid 293] <... unlink resumed>) = 0 [pid 293] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 484] <... ioctl resumed>) = 0 [pid 294] rmdir("./3/file0" [pid 484] close(3 [pid 294] <... rmdir resumed>) = 0 [pid 484] <... close resumed>) = 0 [pid 294] getdents64(3, [pid 484] mkdir("./file0", 0777 [pid 294] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 484] <... mkdir resumed>) = 0 [pid 294] close(3 [pid 484] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 487] <... open resumed>) = 4 [pid 294] <... close resumed>) = 0 [pid 294] rmdir("./3" [pid 487] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... rmdir resumed>) = 0 [pid 482] <... futex resumed>) = 0 [pid 487] <... futex resumed>) = 1 [pid 482] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] mkdir("./4", 0777 [pid 487] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... mkdir resumed>) = 0 [pid 487] <... socket resumed>) = 7 [pid 294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 487] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 487] <... futex resumed>) = 1 [pid 482] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 487] recvmmsg(7, [pid 482] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 489 attached [pid 489] set_robust_list(0x5555563f46a0, 24) = 0 [pid 489] chdir("./4") = 0 [pid 489] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 489] setpgid(0, 0) = 0 [pid 489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 489] write(3, "1000", 4) = 4 [pid 489] close(3) = 0 [pid 489] symlink("/dev/binderfs", "./binderfs") = 0 [pid 489] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 489] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 489] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 489] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 489] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} => {parent_tid=[494]}, 88) = 494 [pid 489] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 489] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 489] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 489] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 489] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} => {parent_tid=[495]}, 88) = 495 [pid 489] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 489] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 495 attached [pid 495] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 495] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 495] creat("./bus", 000) = 3 [pid 495] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] <... futex resumed>) = 0 [pid 489] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] <... futex resumed>) = 1 [pid 495] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 495] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... mount resumed>) = 0 [pid 489] <... futex resumed>) = 0 [pid 489] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] <... futex resumed>) = 1 [pid 495] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 480] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 494 attached ) = 7 [pid 480] chdir("./file0") = 0 [pid 480] ioctl(6, LOOP_CLR_FD [pid 494] set_robust_list(0x7fc1322069a0, 24) = 0 [pid 494] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 494] memfd_create("syzkaller", 0) = 5 [pid 494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 [pid 494] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 486] <... openat resumed>) = 6 [pid 294] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = 0 [pid 483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 483] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 483] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 486] ioctl(6, LOOP_SET_FD, 5 [pid 483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 294] ioctl(3, LOOP_CLR_FD [pid 293] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 483] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 494] munmap(0x7fc129dc5000, 262144 [pid 483] <... futex resumed>) = 0 [pid 293] newfstatat(AT_FDCWD, "./4/file0", [pid 486] <... ioctl resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 486] close(5 [pid 293] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 486] <... close resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 486] mkdir("./file0", 0777 [pid 293] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 486] <... mkdir resumed>) = 0 [pid 483] <... mmap resumed>) = 0x7fc129de4000 [pid 483] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} => {parent_tid=[497]}, 88) = 497 [pid 483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 483] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 497 attached [pid 494] <... munmap resumed>) = 0 [pid 486] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 483] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 293] <... openat resumed>) = 4 [pid 495] <... open resumed>) = 4 [pid 479] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 293] newfstatat(4, "", [pid 495] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] close(3 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 28.021076][ T480] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 28.033063][ T480] ext4 filesystem being mounted at /root/syzkaller.jl33I5/4/file0 supports timestamps until 2038 (0x7fffffff) [pid 497] set_robust_list(0x7fc129e049a0, 24 [pid 495] <... futex resumed>) = 1 [pid 494] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 489] <... futex resumed>) = 0 [pid 480] <... ioctl resumed>) = 0 [pid 479] <... futex resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 293] getdents64(4, [pid 497] <... set_robust_list resumed>) = 0 [pid 495] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 494] <... openat resumed>) = 6 [pid 489] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] close(6 [pid 479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 497] rt_sigprocmask(SIG_SETMASK, [], [pid 495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 494] ioctl(6, LOOP_SET_FD, 5 [pid 489] <... futex resumed>) = 0 [pid 482] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 480] <... close resumed>) = 0 [pid 479] <... mmap resumed>) = 0x7fc129de4000 [pid 293] getdents64(4, [pid 497] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 495] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 489] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 482] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 294] <... clone resumed>, child_tidptr=0x5555563f4690) = 500 [pid 293] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 497] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 495] <... socket resumed>) = 7 [pid 482] <... futex resumed>) = 0 [pid 480] <... futex resumed>) = 0 [pid 479] <... mprotect resumed>) = 0 [pid 293] close(4 [pid 495] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 480] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 479] rt_sigprocmask(SIG_BLOCK, ~[], [pid 293] <... close resumed>) = 0 [pid 495] <... futex resumed>) = 1 [pid 489] <... futex resumed>) = 0 [pid 482] <... mmap resumed>) = 0x7fc129de4000 [pid 479] <... rt_sigprocmask resumed>[], 8) = 0 [pid 293] rmdir("./4/file0" [pid 495] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 489] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 293] <... rmdir resumed>) = 0 [pid 495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 489] <... futex resumed>) = 0 [pid 482] <... mprotect resumed>) = 0 [pid 293] getdents64(3, [pid 495] recvmmsg(7, [pid 489] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 482] rt_sigprocmask(SIG_BLOCK, ~[], [pid 479] <... clone3 resumed> => {parent_tid=[502]}, 88) = 502 [pid 293] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 482] <... rt_sigprocmask resumed>[], 8) = 0 [pid 479] rt_sigprocmask(SIG_SETMASK, [], [pid 293] close(3 [pid 482] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 479] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 293] <... close resumed>) = 0 ./strace-static-x86_64: Process 502 attached [pid 479] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] rmdir("./4" [pid 482] <... clone3 resumed> => {parent_tid=[503]}, 88) = 503 [pid 479] <... futex resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 482] rt_sigprocmask(SIG_SETMASK, [], [pid 479] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] mkdir("./5", 0777./strace-static-x86_64: Process 500 attached [pid 502] set_robust_list(0x7fc129e049a0, 24 [pid 494] <... ioctl resumed>) = 0 [pid 482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 293] <... mkdir resumed>) = 0 [pid 494] close(5 [pid 482] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 494] <... close resumed>) = 0 [pid 482] <... futex resumed>) = 0 [pid 494] mkdir("./file0", 0777 [pid 482] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... mkdir resumed>) = 0 [pid 494] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 497] <... mmap resumed>) = 0x20000000 [pid 497] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] <... futex resumed>) = 1 [pid 497] memfd_create("syzkaller", 0) = 3 [pid 497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 ./strace-static-x86_64: Process 503 attached [pid 502] <... set_robust_list resumed>) = 0 [pid 500] set_robust_list(0x5555563f46a0, 24 [pid 497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 484] <... mount resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 502] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 502] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] <... set_robust_list resumed>) = 0 [pid 500] chdir("./4") = 0 [pid 500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 500] setpgid(0, 0) = 0 [pid 500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 500] write(3, "1000", 4) = 4 [pid 500] close(3) = 0 [pid 500] symlink("/dev/binderfs", "./binderfs" [pid 479] <... futex resumed>) = 0 [pid 293] ioctl(3, LOOP_CLR_FD [pid 500] <... symlink resumed>) = 0 [pid 479] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 479] <... futex resumed>) = 1 [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 500] <... futex resumed>) = 0 [pid 480] memfd_create("syzkaller", 0 [pid 293] close(3 [pid 500] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 480] <... memfd_create resumed>) = 6 [pid 500] <... rt_sigaction resumed>NULL, 8) = 0 [pid 480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 293] <... close resumed>) = 0 [pid 500] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 484] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 484] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 500] <... mmap resumed>) = 0x7fc1321e6000 [pid 484] ioctl(6, LOOP_CLR_FD [pid 500] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 484] <... ioctl resumed>) = 0 [pid 500] <... mprotect resumed>) = 0 [pid 484] close(6 [pid 500] rt_sigprocmask(SIG_BLOCK, ~[], [pid 484] <... close resumed>) = 0 [pid 500] <... rt_sigprocmask resumed>[], 8) = 0 [pid 484] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] <... clone3 resumed> => {parent_tid=[506]}, 88) = 506 [pid 500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 500] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... write resumed>) = 65536 [pid 503] set_robust_list(0x7fc129e049a0, 24 [pid 500] <... futex resumed>) = 0 [pid 497] munmap(0x7fc1219e4000, 65536 [pid 503] <... set_robust_list resumed>) = 0 [pid 500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 503] rt_sigprocmask(SIG_SETMASK, [], [pid 500] <... mmap resumed>) = 0x7fc1321c5000 [pid 497] <... munmap resumed>) = 0 [pid 503] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 500] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 503] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 4, 0 [pid 500] <... mprotect resumed>) = 0 [pid 497] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 480] <... mmap resumed>) = 0x7fc1219e4000 [pid 503] <... mmap resumed>) = 0x20000000 [pid 500] rt_sigprocmask(SIG_BLOCK, ~[], [pid 497] <... openat resumed>) = 6 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 503] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... rt_sigprocmask resumed>[], 8) = 0 [pid 497] ioctl(6, LOOP_SET_FD, 3 [pid 503] <... futex resumed>) = 1 [pid 500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 497] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 503] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] ioctl(6, LOOP_CLR_FD [pid 500] <... clone3 resumed> => {parent_tid=[508]}, 88) = 508 [pid 500] rt_sigprocmask(SIG_SETMASK, [], [pid 497] <... ioctl resumed>) = 0 [pid 500] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 500] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 482] <... futex resumed>) = 0 [ 28.065197][ T484] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 28.082046][ T484] ext4 filesystem being mounted at /root/syzkaller.gpm0iI/5/file0 supports timestamps until 2038 (0x7fffffff) [pid 482] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 497] ioctl(6, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 497] close(6) = 0 [pid 497] close(3) = 0 [pid 497] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 506 attached [pid 506] set_robust_list(0x7fc1322069a0, 24) = 0 [pid 506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 506] memfd_create("syzkaller", 0) = 3 [pid 506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 [pid 506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 ./strace-static-x86_64: Process 509 attached ./strace-static-x86_64: Process 508 attached [pid 503] <... futex resumed>) = 0 [pid 489] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 482] <... futex resumed>) = 1 [pid 480] <... write resumed>) = 65536 [pid 293] <... clone resumed>, child_tidptr=0x5555563f4690) = 509 [pid 503] memfd_create("syzkaller", 0 [pid 489] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] munmap(0x7fc1219e4000, 65536 [pid 503] <... memfd_create resumed>) = 5 [pid 489] <... futex resumed>) = 0 [pid 480] <... munmap resumed>) = 0 [pid 503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 480] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 503] <... mmap resumed>) = 0x7fc1219e4000 [pid 489] <... mmap resumed>) = 0x7fc129de4000 [pid 480] <... openat resumed>) = 8 [pid 509] set_robust_list(0x5555563f46a0, 24 [pid 508] set_robust_list(0x7fc1321e59a0, 24 [pid 506] munmap(0x7fc129dc5000, 262144 [pid 489] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 486] <... mount resumed>) = 0 [pid 509] <... set_robust_list resumed>) = 0 [pid 508] <... set_robust_list resumed>) = 0 [pid 506] <... munmap resumed>) = 0 [pid 489] <... mprotect resumed>) = 0 [pid 486] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 480] ioctl(8, LOOP_SET_FD, 6 [pid 509] chdir("./5" [pid 508] rt_sigprocmask(SIG_SETMASK, [], [pid 506] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 486] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 509] <... chdir resumed>) = 0 [pid 508] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 506] <... openat resumed>) = 4 [pid 486] ioctl(6, LOOP_CLR_FD [pid 509] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 508] creat("./bus", 000 [pid 506] ioctl(4, LOOP_SET_FD, 3 [pid 486] <... ioctl resumed>) = 0 [pid 509] <... prctl resumed>) = 0 [pid 508] <... creat resumed>) = 5 [pid 486] close(6 [pid 509] setpgid(0, 0 [pid 508] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... setpgid resumed>) = 0 [pid 508] <... futex resumed>) = 1 [pid 500] <... futex resumed>) = 0 [pid 509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 508] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... openat resumed>) = 3 [pid 508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] <... futex resumed>) = 0 [pid 509] write(3, "1000", 4 [pid 508] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 500] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... write resumed>) = 4 [pid 508] <... mount resumed>) = 0 [pid 509] close(3 [pid 508] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... close resumed>) = 0 [pid 508] <... futex resumed>) = 1 [pid 500] <... futex resumed>) = 0 [pid 509] symlink("/dev/binderfs", "./binderfs" [pid 508] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... symlink resumed>) = 0 [pid 508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] <... futex resumed>) = 0 [pid 509] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 500] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 0 [pid 509] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 509] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 509] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 503] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 489] rt_sigprocmask(SIG_BLOCK, ~[], [pid 480] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 509] rt_sigprocmask(SIG_BLOCK, ~[], [pid 489] <... rt_sigprocmask resumed>[], 8) = 0 [pid 480] ioctl(8, LOOP_CLR_FD [pid 509] <... rt_sigprocmask resumed>[], 8) = 0 [pid 489] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 509] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 489] <... clone3 resumed> => {parent_tid=[512]}, 88) = 512 [pid 489] rt_sigprocmask(SIG_SETMASK, [], [pid 509] <... clone3 resumed> => {parent_tid=[513]}, 88) = 513 [pid 489] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 509] rt_sigprocmask(SIG_SETMASK, [], [pid 489] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 489] <... futex resumed>) = 0 [pid 509] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 509] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 513 attached [pid 509] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 509] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 513] set_robust_list(0x7fc1322069a0, 24) = 0 [pid 513] rt_sigprocmask(SIG_SETMASK, [], [pid 509] <... clone3 resumed> => {parent_tid=[514]}, 88) = 514 [pid 509] rt_sigprocmask(SIG_SETMASK, [], [pid 513] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 509] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 513] memfd_create("syzkaller", 0 [pid 509] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] <... memfd_create resumed>) = 3 [pid 509] <... futex resumed>) = 0 [pid 513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 28.115422][ T486] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 28.127496][ T486] ext4 filesystem being mounted at /root/syzkaller.SVIRRC/4/file0 supports timestamps until 2038 (0x7fffffff) [ 28.141013][ T494] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 509] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... mmap resumed>) = 0x7fc129dc5000 [pid 508] <... open resumed>) = 6 [pid 506] <... ioctl resumed>) = 0 [pid 503] <... write resumed>) = 65536 [pid 486] <... close resumed>) = 0 [pid 480] <... ioctl resumed>) = 0 [pid 513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 512 attached [pid 512] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 512] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 4, 0./strace-static-x86_64: Process 514 attached [pid 513] <... write resumed>) = 262144 [pid 512] <... mmap resumed>) = 0x20000000 [pid 508] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] close(3 [pid 503] munmap(0x7fc1219e4000, 65536 [pid 494] <... mount resumed>) = 0 [pid 486] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] set_robust_list(0x7fc1321e59a0, 24 [pid 513] munmap(0x7fc129dc5000, 262144 [pid 512] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 1 [pid 506] <... close resumed>) = 0 [pid 503] <... munmap resumed>) = 0 [pid 500] <... futex resumed>) = 0 [pid 494] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 486] <... futex resumed>) = 0 [pid 480] ioctl(8, LOOP_SET_FD, 6 [pid 514] <... set_robust_list resumed>) = 0 [pid 513] <... munmap resumed>) = 0 [pid 512] <... futex resumed>) = 1 [pid 508] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 506] mkdir("./file0", 0777 [pid 503] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 500] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 489] <... futex resumed>) = 0 [pid 486] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 480] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 514] rt_sigprocmask(SIG_SETMASK, [], [pid 513] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 512] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 489] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] close(8 [pid 514] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 513] <... openat resumed>) = 4 [pid 512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 508] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 506] <... mkdir resumed>) = 0 [pid 503] <... openat resumed>) = 6 [pid 500] <... futex resumed>) = 0 [pid 494] ioctl(6, LOOP_CLR_FD [pid 489] <... futex resumed>) = 0 [pid 480] <... close resumed>) = 0 [pid 508] <... socket resumed>) = 3 [pid 506] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 503] ioctl(6, LOOP_SET_FD, 5 [pid 500] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] close(6 [pid 508] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 480] <... close resumed>) = 0 [pid 503] ioctl(6, LOOP_CLR_FD [pid 508] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 480] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... ioctl resumed>) = 0 [pid 500] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 508] recvmmsg(3, [pid 500] <... futex resumed>) = 0 [pid 480] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 514] creat("./bus", 000 [pid 513] ioctl(4, LOOP_SET_FD, 3 [pid 512] memfd_create("syzkaller", 0 [pid 494] <... ioctl resumed>) = 0 [pid 514] <... creat resumed>) = 5 [pid 513] <... ioctl resumed>) = 0 [pid 512] <... memfd_create resumed>) = 5 [ 28.159244][ T494] ext4 filesystem being mounted at /root/syzkaller.IpShW6/4/file0 supports timestamps until 2038 (0x7fffffff) [pid 494] close(6 [pid 514] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] ioctl(6, LOOP_SET_FD, 5 [pid 513] close(3 [pid 512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 494] <... close resumed>) = 0 [pid 514] <... futex resumed>) = 1 [pid 509] <... futex resumed>) = 0 [pid 514] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] <... futex resumed>) = 0 [pid 514] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 509] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 514] <... mount resumed>) = 0 [pid 514] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] <... futex resumed>) = 0 [pid 514] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] <... futex resumed>) = 0 [pid 514] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 509] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 514] <... open resumed>) = 6 [pid 514] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] <... futex resumed>) = 0 [pid 514] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] <... futex resumed>) = 0 [pid 514] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 509] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 514] <... socket resumed>) = 7 [pid 514] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] <... futex resumed>) = 0 [pid 514] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] <... futex resumed>) = 0 [pid 514] recvmmsg(7, [pid 509] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 503] close(6) = 0 [pid 503] close(5) = 0 [pid 503] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 513] <... close resumed>) = 0 [pid 513] mkdir("./file0", 0777) = 0 [pid 513] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 512] <... mmap resumed>) = 0x7fc1219e4000 [pid 494] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... mount resumed>) = 0 [pid 512] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 494] <... futex resumed>) = 0 [pid 506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 512] <... write resumed>) = 65536 [pid 494] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] munmap(0x7fc1219e4000, 65536 [pid 506] <... openat resumed>) = 7 [pid 512] <... munmap resumed>) = 0 [pid 506] chdir("./file0") = 0 [pid 512] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 512] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 512] ioctl(6, LOOP_CLR_FD) = 0 [pid 506] ioctl(4, LOOP_CLR_FD) = 0 [pid 506] close(4) = 0 [pid 512] ioctl(6, LOOP_SET_FD, 5 [pid 506] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 512] close(6 [pid 506] <... futex resumed>) = 0 [pid 512] <... close resumed>) = 0 [pid 506] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] close(5) = 0 [pid 512] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 28.190696][ T506] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 28.202654][ T506] ext4 filesystem being mounted at /root/syzkaller.duxz7m/4/file0 supports timestamps until 2038 (0x7fffffff) [pid 512] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 500] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 506] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0) = 0x20000000 [pid 500] futex(0x7fc1322d26cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 506] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 506] <... futex resumed>) = 0 [pid 509] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 506] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129de4000 [pid 509] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 509] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 509] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} => {parent_tid=[520]}, 88) = 520 [pid 509] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 509] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 520 attached [pid 500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] set_robust_list(0x7fc129e049a0, 24 [pid 500] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] <... mount resumed>) = 0 [pid 520] <... set_robust_list resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 506] <... futex resumed>) = 0 [pid 513] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 520] rt_sigprocmask(SIG_SETMASK, [], [pid 506] memfd_create("syzkaller", 0 [pid 520] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 513] <... openat resumed>) = 3 [pid 506] <... memfd_create resumed>) = 4 [pid 520] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0) = 0x20000000 [pid 513] chdir(0x20000000 [pid 506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 520] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 513] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 509] <... futex resumed>) = 0 [pid 506] <... mmap resumed>) = 0x7fc121a05000 [pid 520] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] <... futex resumed>) = 0 [pid 506] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 520] memfd_create("syzkaller", 0 [pid 506] <... write resumed>) = 65536 [pid 520] <... memfd_create resumed>) = 8 [pid 506] munmap(0x7fc121a05000, 65536 [pid 520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 506] <... munmap resumed>) = 0 [pid 520] <... mmap resumed>) = 0x7fc1219e4000 [pid 513] ioctl(4, LOOP_CLR_FD [pid 520] write(8, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 506] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 513] <... ioctl resumed>) = 0 [pid 520] <... write resumed>) = 65536 [pid 506] <... openat resumed>) = 8 [pid 520] munmap(0x7fc1219e4000, 65536 [pid 506] ioctl(8, LOOP_SET_FD, 4 [pid 520] <... munmap resumed>) = 0 [pid 506] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 520] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 513] close(4 [pid 506] ioctl(8, LOOP_CLR_FD) = 0 [pid 520] <... openat resumed>) = 9 [pid 520] ioctl(9, LOOP_SET_FD, 8 [pid 513] <... close resumed>) = 0 [pid 520] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 513] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] ioctl(9, LOOP_CLR_FD [pid 513] <... futex resumed>) = 0 [pid 520] <... ioctl resumed>) = 0 [pid 513] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 506] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 506] close(8) = 0 [pid 520] ioctl(9, LOOP_SET_FD, 8 [pid 506] close(4 [pid 520] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 506] <... close resumed>) = 0 [pid 520] close(9 [pid 506] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] <... close resumed>) = 0 [pid 506] <... futex resumed>) = 0 [pid 520] close(8 [pid 506] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... close resumed>) = 0 [pid 520] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 28.231030][ T513] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 28.243389][ T513] ext4 filesystem being mounted at /root/syzkaller.zNZ9LH/5/file0 supports timestamps until 2038 (0x7fffffff) [pid 520] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 483] exit_group(0 [pid 497] <... futex resumed>) = ? [pid 485] <... recvmmsg resumed> ) = ? [pid 484] <... futex resumed>) = ? [pid 483] <... exit_group resumed>) = ? [pid 497] +++ exited with 0 +++ [pid 485] +++ exited with 0 +++ [pid 484] +++ exited with 0 +++ [pid 483] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=483, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 292] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 292] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./5/bus") = 0 [pid 292] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./5/binderfs") = 0 [pid 292] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 479] exit_group(0 [pid 502] <... futex resumed>) = ? [pid 480] <... futex resumed>) = ? [pid 479] <... exit_group resumed>) = ? [pid 481] <... recvmmsg resumed> ) = ? [pid 502] +++ exited with 0 +++ [pid 480] +++ exited with 0 +++ [pid 481] +++ exited with 0 +++ [pid 482] exit_group(0 [pid 503] <... futex resumed>) = ? [pid 487] <... recvmmsg resumed> ) = ? [pid 486] <... futex resumed>) = ? [pid 482] <... exit_group resumed>) = ? [pid 486] +++ exited with 0 +++ [pid 503] +++ exited with 0 +++ [pid 487] +++ exited with 0 +++ [pid 489] exit_group(0 [pid 494] <... futex resumed>) = ? [pid 489] <... exit_group resumed>) = ? [pid 512] <... futex resumed>) = ? [pid 495] <... recvmmsg resumed> ) = ? [pid 494] +++ exited with 0 +++ [pid 512] +++ exited with 0 +++ [pid 495] +++ exited with 0 +++ [pid 489] +++ exited with 0 +++ [pid 482] +++ exited with 0 +++ [pid 479] +++ exited with 0 +++ [pid 292] <... umount2 resumed>) = 0 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=479, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=489, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=482, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 292] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... openat resumed>) = 3 [pid 296] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] newfstatat(AT_FDCWD, "./5/file0", [pid 297] newfstatat(3, "", [pid 296] <... openat resumed>) = 3 [pid 295] <... openat resumed>) = 3 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] newfstatat(3, "", [pid 295] newfstatat(3, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] getdents64(3, [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 296] getdents64(3, [pid 295] getdents64(3, [pid 297] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 292] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = 0 [pid 296] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... umount2 resumed>) = 0 [pid 295] <... umount2 resumed>) = 0 [pid 292] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] <... openat resumed>) = 4 [pid 297] newfstatat(AT_FDCWD, "./4/bus", [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(4, "", [pid 509] exit_group(0 [pid 297] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] newfstatat(AT_FDCWD, "./4/bus", [pid 295] newfstatat(AT_FDCWD, "./4/bus", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 520] <... futex resumed>) = ? [pid 514] <... recvmmsg resumed> ) = ? [pid 513] <... futex resumed>) = ? [pid 509] <... exit_group resumed>) = ? [pid 297] unlink("./4/bus" [pid 296] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] getdents64(4, [pid 520] +++ exited with 0 +++ [pid 514] +++ exited with 0 +++ [pid 513] +++ exited with 0 +++ [pid 297] <... unlink resumed>) = 0 [pid 296] unlink("./4/bus" [pid 295] unlink("./4/bus" [pid 509] +++ exited with 0 +++ [pid 297] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... unlink resumed>) = 0 [pid 295] <... unlink resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 500] exit_group(0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=509, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 292] getdents64(4, [pid 508] <... recvmmsg resumed> ) = ? [pid 506] <... futex resumed>) = ? [pid 500] <... exit_group resumed>) = ? [pid 297] newfstatat(AT_FDCWD, "./4/binderfs", [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 508] +++ exited with 0 +++ [pid 506] +++ exited with 0 +++ [pid 500] +++ exited with 0 +++ [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] newfstatat(AT_FDCWD, "./4/binderfs", [pid 295] newfstatat(AT_FDCWD, "./4/binderfs", [pid 293] <... restart_syscall resumed>) = 0 [pid 292] close(4 [pid 297] unlink("./4/binderfs" [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=500, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 297] <... unlink resumed>) = 0 [pid 296] unlink("./4/binderfs" [pid 295] unlink("./4/binderfs" [pid 294] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... close resumed>) = 0 [pid 297] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... unlink resumed>) = 0 [pid 295] <... unlink resumed>) = 0 [pid 294] <... restart_syscall resumed>) = 0 [pid 293] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] rmdir("./5/file0" [pid 296] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] <... rmdir resumed>) = 0 [pid 294] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] newfstatat(3, "", [pid 292] getdents64(3, [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] getdents64(3, [pid 292] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 294] <... openat resumed>) = 3 [pid 293] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 292] close(3 [pid 294] newfstatat(3, "", [pid 293] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... close resumed>) = 0 [pid 294] getdents64(3, [pid 293] <... umount2 resumed>) = 0 [pid 292] rmdir("./5" [pid 294] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 293] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./5/bus", [pid 294] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./5/bus") = 0 [pid 292] <... rmdir resumed>) = 0 [pid 294] <... umount2 resumed>) = 0 [pid 293] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] unlink("./5/binderfs" [pid 292] mkdir("./6", 0777 [pid 293] <... unlink resumed>) = 0 [pid 293] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./4/bus", [pid 292] <... mkdir resumed>) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./4/bus") = 0 [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 294] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./4/binderfs") = 0 [pid 294] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./4/file0") = 0 [pid 297] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./4") = 0 [pid 297] mkdir("./5", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 292] <... openat resumed>) = 3 [pid 297] <... openat resumed>) = 3 [pid 297] ioctl(3, LOOP_CLR_FD [pid 295] <... umount2 resumed>) = 0 [pid 294] <... umount2 resumed>) = 0 [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] <... umount2 resumed>) = 0 [pid 295] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... openat resumed>) = 4 [pid 292] ioctl(3, LOOP_CLR_FD [pid 296] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(4, "", [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./4/file0", [pid 294] newfstatat(AT_FDCWD, "./4/file0", [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] newfstatat(AT_FDCWD, "./4/file0", [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] getdents64(4, [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 296] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] getdents64(4, [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 296] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... openat resumed>) = 4 [pid 294] <... openat resumed>) = 4 [pid 293] close(4 [pid 296] <... openat resumed>) = 4 [pid 295] newfstatat(4, "", [pid 294] newfstatat(4, "", [pid 293] <... close resumed>) = 0 [pid 296] newfstatat(4, "", [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] rmdir("./5/file0" [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, [pid 294] getdents64(4, [pid 293] <... rmdir resumed>) = 0 [pid 296] getdents64(4, [pid 293] getdents64(3, [pid 294] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 293] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 296] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, [pid 293] close(3 [pid 296] getdents64(4, [pid 295] getdents64(4, [pid 294] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 293] <... close resumed>) = 0 [pid 296] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 295] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 294] close(4 [pid 293] rmdir("./5" [pid 296] close(4 [pid 295] close(4 [pid 294] <... close resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 293] mkdir("./6", 0777 [pid 296] rmdir("./4/file0" [pid 295] <... close resumed>) = 0 [pid 294] rmdir("./4/file0" [pid 293] <... mkdir resumed>) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 296] <... rmdir resumed>) = 0 [pid 295] rmdir("./4/file0" [pid 296] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 294] <... rmdir resumed>) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./4") = 0 [pid 295] <... rmdir resumed>) = 0 [pid 294] getdents64(3, [pid 296] mkdir("./5", 0777 [pid 295] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 294] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 295] close(3 [pid 294] close(3 [pid 296] <... mkdir resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 295] rmdir("./4" [pid 294] rmdir("./4") = 0 [pid 295] <... rmdir resumed>) = 0 [pid 294] mkdir("./5", 0777 [pid 295] mkdir("./5", 0777 [pid 294] <... mkdir resumed>) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 295] <... mkdir resumed>) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] <... openat resumed>) = 3 [pid 294] <... openat resumed>) = 3 [pid 293] <... openat resumed>) = 3 [pid 296] ioctl(3, LOOP_CLR_FD [pid 294] ioctl(3, LOOP_CLR_FD [pid 293] ioctl(3, LOOP_CLR_FD [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] close(3 [pid 294] close(3 [pid 293] close(3 [pid 296] <... close resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... close resumed>) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] close(3 [pid 295] <... openat resumed>) = 3 [pid 292] close(3 [pid 297] <... close resumed>) = 0 [pid 295] ioctl(3, LOOP_CLR_FD [pid 292] <... close resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] <... clone resumed>, child_tidptr=0x5555563f4690) = 522 [pid 295] close(3 [pid 297] <... clone resumed>, child_tidptr=0x5555563f4690) = 526 [pid 295] <... close resumed>) = 0 [pid 294] <... clone resumed>, child_tidptr=0x5555563f4690) = 523 [pid 293] <... clone resumed>, child_tidptr=0x5555563f4690) = 525 [pid 292] <... clone resumed>, child_tidptr=0x5555563f4690) = 524 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563f4690) = 527 ./strace-static-x86_64: Process 527 attached [pid 527] set_robust_list(0x5555563f46a0, 24) = 0 [pid 527] chdir("./5") = 0 ./strace-static-x86_64: Process 526 attached ./strace-static-x86_64: Process 525 attached ./strace-static-x86_64: Process 524 attached ./strace-static-x86_64: Process 523 attached ./strace-static-x86_64: Process 522 attached [pid 527] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 526] set_robust_list(0x5555563f46a0, 24 [pid 524] set_robust_list(0x5555563f46a0, 24 [pid 523] set_robust_list(0x5555563f46a0, 24 [pid 522] set_robust_list(0x5555563f46a0, 24 [pid 527] <... prctl resumed>) = 0 [pid 526] <... set_robust_list resumed>) = 0 [pid 525] set_robust_list(0x5555563f46a0, 24 [pid 524] <... set_robust_list resumed>) = 0 [pid 523] <... set_robust_list resumed>) = 0 [pid 522] <... set_robust_list resumed>) = 0 [pid 527] setpgid(0, 0 [pid 526] chdir("./5" [pid 525] <... set_robust_list resumed>) = 0 [pid 524] chdir("./6" [pid 523] chdir("./5" [pid 522] chdir("./5" [pid 527] <... setpgid resumed>) = 0 [pid 526] <... chdir resumed>) = 0 [pid 525] chdir("./6" [pid 524] <... chdir resumed>) = 0 [pid 523] <... chdir resumed>) = 0 [pid 522] <... chdir resumed>) = 0 [pid 527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 526] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 525] <... chdir resumed>) = 0 [pid 524] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 523] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 522] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 527] <... openat resumed>) = 3 [pid 526] <... prctl resumed>) = 0 [pid 525] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 524] <... prctl resumed>) = 0 [pid 523] <... prctl resumed>) = 0 [pid 522] <... prctl resumed>) = 0 [pid 527] write(3, "1000", 4 [pid 526] setpgid(0, 0 [pid 525] <... prctl resumed>) = 0 [pid 524] setpgid(0, 0 [pid 523] setpgid(0, 0 [pid 522] setpgid(0, 0 [pid 527] <... write resumed>) = 4 [pid 526] <... setpgid resumed>) = 0 [pid 525] setpgid(0, 0 [pid 524] <... setpgid resumed>) = 0 [pid 523] <... setpgid resumed>) = 0 [pid 522] <... setpgid resumed>) = 0 [pid 527] close(3 [pid 526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 525] <... setpgid resumed>) = 0 [pid 524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 527] <... close resumed>) = 0 [pid 526] <... openat resumed>) = 3 [pid 525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 524] <... openat resumed>) = 3 [pid 523] <... openat resumed>) = 3 [pid 522] <... openat resumed>) = 3 [pid 527] symlink("/dev/binderfs", "./binderfs" [pid 526] write(3, "1000", 4 [pid 525] <... openat resumed>) = 3 [pid 524] write(3, "1000", 4 [pid 523] write(3, "1000", 4 [pid 522] write(3, "1000", 4 [pid 527] <... symlink resumed>) = 0 [pid 526] <... write resumed>) = 4 [pid 525] write(3, "1000", 4 [pid 524] <... write resumed>) = 4 [pid 523] <... write resumed>) = 4 [pid 522] <... write resumed>) = 4 [pid 527] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] close(3 [pid 525] <... write resumed>) = 4 [pid 524] close(3 [pid 523] close(3 [pid 522] close(3 [pid 527] <... futex resumed>) = 0 [pid 526] <... close resumed>) = 0 [pid 525] close(3 [pid 524] <... close resumed>) = 0 [pid 523] <... close resumed>) = 0 [pid 522] <... close resumed>) = 0 [pid 524] symlink("/dev/binderfs", "./binderfs" [pid 527] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 526] symlink("/dev/binderfs", "./binderfs" [pid 525] <... close resumed>) = 0 [pid 523] symlink("/dev/binderfs", "./binderfs" [pid 522] symlink("/dev/binderfs", "./binderfs" [pid 524] <... symlink resumed>) = 0 [pid 522] <... symlink resumed>) = 0 [pid 526] <... symlink resumed>) = 0 [pid 523] <... symlink resumed>) = 0 [pid 527] <... rt_sigaction resumed>NULL, 8) = 0 [pid 526] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 526] <... futex resumed>) = 0 [pid 525] symlink("/dev/binderfs", "./binderfs" [pid 524] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... futex resumed>) = 0 [pid 527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 526] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 524] <... futex resumed>) = 0 [pid 523] <... futex resumed>) = 0 [pid 522] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 526] <... rt_sigaction resumed>NULL, 8) = 0 [pid 525] <... symlink resumed>) = 0 [pid 524] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 523] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 522] <... rt_sigaction resumed>NULL, 8) = 0 [pid 527] <... mmap resumed>) = 0x7fc1321e6000 [pid 526] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 525] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... rt_sigaction resumed>NULL, 8) = 0 [pid 523] <... rt_sigaction resumed>NULL, 8) = 0 [pid 522] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 527] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 526] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 525] <... futex resumed>) = 0 [pid 524] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 523] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 527] <... mprotect resumed>) = 0 [pid 526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 525] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 523] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 527] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 526] <... mmap resumed>) = 0x7fc1321e6000 [pid 525] <... rt_sigaction resumed>NULL, 8) = 0 [pid 524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 522] <... mmap resumed>) = 0x7fc1321e6000 [pid 527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 526] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 525] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 524] <... mmap resumed>) = 0x7fc1321e6000 [pid 523] <... mmap resumed>) = 0x7fc1321e6000 [pid 522] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 526] <... mprotect resumed>) = 0 [pid 523] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 528 attached [pid 528] set_robust_list(0x7fc1322069a0, 24) = 0 [pid 528] rt_sigprocmask(SIG_SETMASK, [], [pid 522] rt_sigprocmask(SIG_BLOCK, ~[], [pid 528] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 526] rt_sigprocmask(SIG_BLOCK, ~[], [pid 527] <... clone3 resumed> => {parent_tid=[528]}, 88) = 528 [pid 525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 524] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 526] <... rt_sigprocmask resumed>[], 8) = 0 [pid 523] <... mprotect resumed>) = 0 [pid 522] <... rt_sigprocmask resumed>[], 8) = 0 [pid 527] rt_sigprocmask(SIG_SETMASK, [], [pid 526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 524] <... mprotect resumed>) = 0 [pid 527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 523] rt_sigprocmask(SIG_BLOCK, ~[], [pid 522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 524] rt_sigprocmask(SIG_BLOCK, ~[], [pid 527] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... clone3 resumed> => {parent_tid=[529]}, 88) = 529 [pid 524] <... rt_sigprocmask resumed>[], 8) = 0 [pid 523] <... rt_sigprocmask resumed>[], 8) = 0 [pid 525] <... mmap resumed>) = 0x7fc1321e6000 [pid 527] <... futex resumed>) = 0 [pid 526] rt_sigprocmask(SIG_SETMASK, [], [pid 525] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 524] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 523] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 522] <... clone3 resumed> => {parent_tid=[530]}, 88) = 530 [pid 527] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 528] memfd_create("syzkaller", 0 [pid 522] rt_sigprocmask(SIG_SETMASK, [], [pid 527] <... futex resumed>) = 0 [pid 526] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... clone3 resumed> => {parent_tid=[531]}, 88) = 531 [pid 524] <... clone3 resumed> => {parent_tid=[532]}, 88) = 532 [pid 522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 525] <... mprotect resumed>) = 0 [pid 527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 528] <... memfd_create resumed>) = 3 [pid 526] <... futex resumed>) = 0 [pid 524] rt_sigprocmask(SIG_SETMASK, [], [pid 523] rt_sigprocmask(SIG_SETMASK, [], [pid 522] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] rt_sigprocmask(SIG_BLOCK, ~[], [pid 528] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 527] <... mmap resumed>) = 0x7fc1321c5000 [pid 526] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] <... rt_sigprocmask resumed>[], 8) = 0 [pid 524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 523] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 522] <... futex resumed>) = 0 [pid 528] <... mmap resumed>) = 0x7fc129dc5000 [pid 527] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 526] <... futex resumed>) = 0 [pid 525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 524] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 532 attached [pid 528] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 527] <... mprotect resumed>) = 0 [pid 526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 524] <... futex resumed>) = 0 [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 532] set_robust_list(0x7fc1322069a0, 24 [pid 528] <... write resumed>) = 262144 [pid 527] rt_sigprocmask(SIG_BLOCK, ~[], [pid 526] <... mmap resumed>) = 0x7fc1321c5000 [pid 525] <... clone3 resumed> => {parent_tid=[533]}, 88) = 533 [pid 524] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 531 attached ./strace-static-x86_64: Process 530 attached [pid 527] <... rt_sigprocmask resumed>[], 8) = 0 [pid 526] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 525] rt_sigprocmask(SIG_SETMASK, [], [pid 524] <... futex resumed>) = 0 [pid 523] <... futex resumed>) = 0 [pid 522] <... mmap resumed>) = 0x7fc1321c5000 [pid 531] set_robust_list(0x7fc1322069a0, 24 [pid 530] set_robust_list(0x7fc1322069a0, 24 [pid 527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 526] <... mprotect resumed>) = 0 [pid 525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 522] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 529 attached [pid 531] <... set_robust_list resumed>) = 0 [pid 530] <... set_robust_list resumed>) = 0 [pid 528] munmap(0x7fc129dc5000, 262144 [pid 525] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... mmap resumed>) = 0x7fc1321c5000 [pid 523] <... mmap resumed>) = 0x7fc1321c5000 ./strace-static-x86_64: Process 534 attached [pid 532] <... set_robust_list resumed>) = 0 [pid 531] rt_sigprocmask(SIG_SETMASK, [], [pid 530] rt_sigprocmask(SIG_SETMASK, [], [pid 529] set_robust_list(0x7fc1322069a0, 24 [pid 528] <... munmap resumed>) = 0 [pid 527] <... clone3 resumed> => {parent_tid=[534]}, 88) = 534 [pid 526] rt_sigprocmask(SIG_BLOCK, ~[], [pid 525] <... futex resumed>) = 0 [pid 524] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 523] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 522] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 533 attached [pid 531] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 529] <... set_robust_list resumed>) = 0 [pid 528] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 527] rt_sigprocmask(SIG_SETMASK, [], [pid 526] <... rt_sigprocmask resumed>[], 8) = 0 [pid 525] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... mprotect resumed>) = 0 [pid 527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 525] <... futex resumed>) = 0 [pid 523] <... mprotect resumed>) = 0 [pid 522] rt_sigprocmask(SIG_BLOCK, ~[], [pid 534] set_robust_list(0x7fc1321e59a0, 24 [pid 533] set_robust_list(0x7fc1322069a0, 24 [pid 532] rt_sigprocmask(SIG_SETMASK, [], [pid 531] memfd_create("syzkaller", 0 [pid 530] memfd_create("syzkaller", 0 [pid 529] rt_sigprocmask(SIG_SETMASK, [], [pid 528] <... openat resumed>) = 4 [pid 524] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 535 attached [pid 533] <... set_robust_list resumed>) = 0 [pid 531] <... memfd_create resumed>) = 3 [pid 530] <... memfd_create resumed>) = 3 [pid 529] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 528] ioctl(4, LOOP_SET_FD, 3 [pid 527] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 524] <... rt_sigprocmask resumed>[], 8) = 0 [pid 523] rt_sigprocmask(SIG_BLOCK, ~[], [pid 522] <... rt_sigprocmask resumed>[], 8) = 0 [pid 532] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 534] <... set_robust_list resumed>) = 0 [pid 533] rt_sigprocmask(SIG_SETMASK, [], [pid 531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 529] memfd_create("syzkaller", 0 [pid 527] <... futex resumed>) = 0 [pid 526] <... clone3 resumed> => {parent_tid=[535]}, 88) = 535 [pid 525] <... mmap resumed>) = 0x7fc1321c5000 [pid 524] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 523] <... rt_sigprocmask resumed>[], 8) = 0 [pid 522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 533] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 531] <... mmap resumed>) = 0x7fc129dc5000 [pid 530] <... mmap resumed>) = 0x7fc129dc5000 [pid 529] <... memfd_create resumed>) = 3 [pid 527] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] rt_sigprocmask(SIG_SETMASK, [], [pid 525] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 523] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0}./strace-static-x86_64: Process 537 attached [pid 535] set_robust_list(0x7fc1321e59a0, 24 [pid 534] rt_sigprocmask(SIG_SETMASK, [], [pid 533] memfd_create("syzkaller", 0 [pid 532] memfd_create("syzkaller", 0 [pid 531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 537] set_robust_list(0x7fc1321e59a0, 24 [pid 535] <... set_robust_list resumed>) = 0 [pid 534] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 533] <... memfd_create resumed>) = 3 [pid 532] <... memfd_create resumed>) = 3 [pid 531] <... write resumed>) = 262144 [pid 530] <... write resumed>) = 262144 [pid 529] <... mmap resumed>) = 0x7fc129dc5000 [pid 526] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 525] <... mprotect resumed>) = 0 [pid 524] <... clone3 resumed> => {parent_tid=[537]}, 88) = 537 [pid 522] <... clone3 resumed> => {parent_tid=[538]}, 88) = 538 [pid 537] <... set_robust_list resumed>) = 0 [pid 535] rt_sigprocmask(SIG_SETMASK, [], [pid 534] creat("./bus", 000 [pid 533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 531] munmap(0x7fc129dc5000, 262144 [pid 530] munmap(0x7fc129dc5000, 262144 [pid 529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 526] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] rt_sigprocmask(SIG_BLOCK, ~[], [pid 524] rt_sigprocmask(SIG_SETMASK, [], [pid 523] <... clone3 resumed> => {parent_tid=[539]}, 88) = 539 [pid 522] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 538 attached [pid 537] rt_sigprocmask(SIG_SETMASK, [], [pid 535] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 534] <... creat resumed>) = 5 [pid 533] <... mmap resumed>) = 0x7fc129dc5000 [pid 532] <... mmap resumed>) = 0x7fc129dc5000 [pid 531] <... munmap resumed>) = 0 [pid 530] <... munmap resumed>) = 0 [pid 529] <... write resumed>) = 262144 [pid 528] <... ioctl resumed>) = 0 [pid 526] <... futex resumed>) = 0 [pid 525] <... rt_sigprocmask resumed>[], 8) = 0 [pid 524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 538] set_robust_list(0x7fc1321e59a0, 24 [pid 533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 531] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 530] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 529] munmap(0x7fc129dc5000, 262144 [pid 528] close(3 [pid 523] rt_sigprocmask(SIG_SETMASK, [], [pid 522] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 539 attached [pid 538] <... set_robust_list resumed>) = 0 [pid 534] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] <... write resumed>) = 262144 [pid 532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 531] <... openat resumed>) = 4 [pid 530] <... openat resumed>) = 4 [pid 529] <... munmap resumed>) = 0 [pid 528] <... close resumed>) = 0 [pid 526] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 524] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 522] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] set_robust_list(0x7fc1321e59a0, 24 [pid 538] rt_sigprocmask(SIG_SETMASK, [], [pid 533] munmap(0x7fc129dc5000, 262144 [pid 531] ioctl(4, LOOP_SET_FD, 3 [pid 530] ioctl(4, LOOP_SET_FD, 3 [pid 529] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 528] mkdir("./file0", 0777 [pid 539] <... set_robust_list resumed>) = 0 [pid 538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 533] <... munmap resumed>) = 0 [pid 528] <... mkdir resumed>) = 0 [pid 524] <... futex resumed>) = 0 [pid 523] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... futex resumed>) = 0 [pid 539] rt_sigprocmask(SIG_SETMASK, [], [pid 538] creat("./bus", 000 [pid 533] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 528] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 525] <... clone3 resumed> => {parent_tid=[541]}, 88) = 541 [pid 524] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... futex resumed>) = 0 [pid 522] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 538] <... creat resumed>) = 5 [pid 525] rt_sigprocmask(SIG_SETMASK, [], [pid 523] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] creat("./bus", 000 [pid 538] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 539] <... creat resumed>) = 5 [pid 538] <... futex resumed>) = 1 [pid 525] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... futex resumed>) = 0 [pid 539] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 534] <... futex resumed>) = 1 [pid 532] <... write resumed>) = 262144 [pid 527] <... futex resumed>) = 0 [pid 525] <... futex resumed>) = 0 [pid 522] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... futex resumed>) = 1 [pid 538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 539] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 527] <... futex resumed>) = 0 [pid 538] <... mount resumed>) = 0 [pid 523] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 538] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 1 [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] <... futex resumed>) = 0 [pid 523] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 537] creat("./bus", 000) = 4 [pid 537] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 534] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 524] <... futex resumed>) = 0 [pid 532] munmap(0x7fc129dc5000, 262144 [pid 524] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... mount resumed>) = 0 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 532] <... munmap resumed>) = 0 [pid 534] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... futex resumed>) = 0 [pid 537] <... mount resumed>) = 0 [pid 535] creat("./bus", 000 [pid 539] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 537] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 1 [pid 532] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 527] <... futex resumed>) = 0 [pid 537] <... futex resumed>) = 1 [pid 527] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = 0 [pid 537] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 527] <... futex resumed>) = 0 [pid 524] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] <... creat resumed>) = 5 [pid 534] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 527] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... futex resumed>) = 0 [pid 539] <... mount resumed>) = 0 [pid 535] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = 0 [pid 535] <... futex resumed>) = 1 [pid 526] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 526] <... futex resumed>) = 0 [pid 523] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... futex resumed>) = 1 [pid 535] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 526] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... futex resumed>) = 0 [pid 539] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 523] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] <... mount resumed>) = 0 [pid 535] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 541 attached ) = 1 [pid 526] <... futex resumed>) = 0 [pid 535] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 531] <... ioctl resumed>) = 0 [pid 526] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 531] close(3) = 0 [pid 531] mkdir("./file0", 0777) = 0 [pid 526] <... futex resumed>) = 0 [pid 531] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 526] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] set_robust_list(0x7fc1321e59a0, 24 [pid 533] <... openat resumed>) = 4 [pid 530] <... ioctl resumed>) = 0 [pid 529] <... openat resumed>) = 4 [pid 533] ioctl(4, LOOP_SET_FD, 3 [pid 530] close(3 [pid 529] ioctl(4, LOOP_SET_FD, 3 [pid 530] <... close resumed>) = 0 [pid 530] mkdir("./file0", 0777 [pid 541] <... set_robust_list resumed>) = 0 [pid 539] <... open resumed>) = 6 [pid 538] <... open resumed>) = 6 [pid 533] <... ioctl resumed>) = 0 [pid 532] <... openat resumed>) = 5 [pid 530] <... mkdir resumed>) = 0 [pid 539] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] close(3 [pid 532] ioctl(5, LOOP_SET_FD, 3 [pid 530] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 539] <... futex resumed>) = 1 [pid 538] <... futex resumed>) = 1 [pid 533] <... close resumed>) = 0 [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 539] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] mkdir("./file0", 0777 [pid 523] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] rt_sigprocmask(SIG_SETMASK, [], [pid 539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... mkdir resumed>) = 0 [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 539] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 538] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 533] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 523] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... socket resumed>) = 3 [pid 538] <... socket resumed>) = 3 [pid 539] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... futex resumed>) = 1 [pid 538] <... futex resumed>) = 1 [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 539] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 523] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 539] recvmmsg(3, [pid 538] recvmmsg(3, [pid 523] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 529] <... ioctl resumed>) = 0 [pid 529] close(3 [pid 534] <... open resumed>) = 3 [pid 529] <... close resumed>) = 0 [pid 529] mkdir("./file0", 0777 [pid 541] creat("./bus", 000 [pid 537] <... open resumed>) = 6 [pid 535] <... open resumed>) = 6 [pid 534] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... ioctl resumed>) = 0 [pid 529] <... mkdir resumed>) = 0 [pid 529] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 541] <... creat resumed>) = 3 [pid 537] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 1 [pid 532] close(3 [pid 527] <... futex resumed>) = 0 [pid 541] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 1 [pid 535] <... futex resumed>) = 1 [pid 534] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] <... close resumed>) = 0 [pid 527] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 1 [pid 537] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 535] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 532] mkdir("./file0", 0777 [pid 527] <... futex resumed>) = 0 [pid 541] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 534] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 532] <... mkdir resumed>) = 0 [pid 527] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 534] <... socket resumed>) = 6 [pid 532] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 534] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] <... futex resumed>) = 0 [pid 534] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] <... futex resumed>) = 0 [pid 534] recvmmsg(6, [pid 527] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 524] <... futex resumed>) = 1 [pid 537] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 524] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] <... futex resumed>) = 0 [pid 525] <... futex resumed>) = 0 [pid 537] <... socket resumed>) = 3 [pid 537] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 537] recvmmsg(3, [pid 524] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] <... mount resumed>) = 0 [pid 541] <... futex resumed>) = 0 [pid 533] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 525] <... futex resumed>) = 1 [pid 526] <... futex resumed>) = 1 [pid 535] <... futex resumed>) = 0 [pid 533] <... openat resumed>) = 5 [pid 533] chdir("./file0") = 0 [pid 533] ioctl(4, LOOP_CLR_FD) = 0 [pid 533] close(4 [pid 541] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 535] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 533] <... close resumed>) = 0 [pid 526] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 535] <... socket resumed>) = 3 [pid 541] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 1 [pid 535] <... futex resumed>) = 1 [pid 526] <... futex resumed>) = 0 [pid 525] <... futex resumed>) = 0 [pid 541] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 535] recvmmsg(3, [pid 526] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... open resumed>) = -1 ENOENT (No such file or directory) [pid 526] <... futex resumed>) = 0 [pid 525] <... futex resumed>) = 0 [pid 541] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 0 [pid 525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 541] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 525] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... socket resumed>) = 4 [pid 525] <... futex resumed>) = 0 [pid 541] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 0 [pid 525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 541] recvmmsg(4, [pid 525] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 525] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 28.900828][ T533] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 28.912739][ T533] ext4 filesystem being mounted at /root/syzkaller.zNZ9LH/6/file0 supports timestamps until 2038 (0x7fffffff) [ 28.932676][ T528] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 533] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 523] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 522] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 523] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 526] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129de4000 [pid 526] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 526] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} => {parent_tid=[559]}, 88) = 559 [pid 526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 526] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 28.936158][ T530] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 28.944867][ T531] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 28.957642][ T532] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 28.968810][ T529] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 526] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 530] <... mount resumed>) = 0 [pid 527] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 524] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 527] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 524] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 527] <... futex resumed>) = 0 [pid 525] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = 0 [pid 523] <... mmap resumed>) = 0x7fc129de4000 [pid 522] <... mmap resumed>) = 0x7fc129de4000 [pid 533] <... futex resumed>) = 0 [pid 527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 525] <... futex resumed>) = 1 [pid 524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 523] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 522] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 533] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, -1, 0 [pid 527] <... mmap resumed>) = 0x7fc129de4000 [pid 525] futex(0x7fc1322d26cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... mmap resumed>) = 0x7fc129de4000 [pid 523] <... mprotect resumed>) = 0 [pid 522] <... mprotect resumed>) = 0 [pid 533] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 527] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 524] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 523] rt_sigprocmask(SIG_BLOCK, ~[], [pid 522] rt_sigprocmask(SIG_BLOCK, ~[], [pid 533] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... mprotect resumed>) = 0 [pid 524] <... mprotect resumed>) = 0 [pid 523] <... rt_sigprocmask resumed>[], 8) = 0 [pid 522] <... rt_sigprocmask resumed>[], 8) = 0 [pid 533] <... futex resumed>) = 1 [pid 527] rt_sigprocmask(SIG_BLOCK, ~[], [pid 525] <... futex resumed>) = 0 [pid 524] rt_sigprocmask(SIG_BLOCK, ~[], [pid 523] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 533] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] <... rt_sigprocmask resumed>[], 8) = 0 [pid 525] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... rt_sigprocmask resumed>[], 8) = 0 [pid 533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 525] <... futex resumed>) = 0 [pid 524] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 523] <... clone3 resumed> => {parent_tid=[560]}, 88) = 560 [pid 522] <... clone3 resumed> => {parent_tid=[561]}, 88) = 561 [pid 533] memfd_create("syzkaller", 0) = 6 [pid 527] <... clone3 resumed> => {parent_tid=[562]}, 88) = 562 [pid 524] <... clone3 resumed> => {parent_tid=[563]}, 88) = 563 [pid 523] rt_sigprocmask(SIG_SETMASK, [], [pid 522] rt_sigprocmask(SIG_SETMASK, [], [pid 533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 527] rt_sigprocmask(SIG_SETMASK, [], [pid 524] rt_sigprocmask(SIG_SETMASK, [], [pid 523] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 533] <... mmap resumed>) = 0x7fc121a05000 [pid 527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 523] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 527] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 533] <... write resumed>) = 65536 [pid 527] <... futex resumed>) = 0 [pid 524] <... futex resumed>) = 0 [pid 523] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] munmap(0x7fc121a05000, 65536 [pid 527] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... munmap resumed>) = 0 [pid 533] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 7 [pid 533] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 533] ioctl(7, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 559 attached [pid 531] <... mount resumed>) = 0 [pid 530] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 526] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 533] ioctl(7, LOOP_SET_FD, 6 [pid 526] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 526] <... futex resumed>) = 0 [pid 533] close(7 [pid 526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 533] <... close resumed>) = 0 [pid 526] <... mmap resumed>) = 0x7fc129dc3000 [pid 533] close(6 [pid 526] mprotect(0x7fc129dc4000, 131072, PROT_READ|PROT_WRITE [pid 533] <... close resumed>) = 0 [pid 526] <... mprotect resumed>) = 0 [pid 533] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] rt_sigprocmask(SIG_BLOCK, ~[], [pid 533] <... futex resumed>) = 0 [pid 526] <... rt_sigprocmask resumed>[], 8) = 0 [pid 533] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129de3990, parent_tid=0x7fc129de3990, exit_signal=0, stack=0x7fc129dc3000, stack_size=0x20300, tls=0x7fc129de36c0} => {parent_tid=[564]}, 88) = 564 [pid 526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 526] futex(0x7fc1322d26f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 559] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 559] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 559] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0) = 0x20000000 [pid 531] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 530] <... openat resumed>) = 7 [pid 559] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 559] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 560 attached ./strace-static-x86_64: Process 561 attached ./strace-static-x86_64: Process 562 attached ./strace-static-x86_64: Process 563 attached [pid 563] set_robust_list(0x7fc129e049a0, 24 [pid 562] set_robust_list(0x7fc129e049a0, 24 [pid 561] set_robust_list(0x7fc129e049a0, 24 [pid 560] set_robust_list(0x7fc129e049a0, 24./strace-static-x86_64: Process 564 attached [pid 562] <... set_robust_list resumed>) = 0 [pid 563] <... set_robust_list resumed>) = 0 [pid 560] <... set_robust_list resumed>) = 0 [pid 561] <... set_robust_list resumed>) = 0 [pid 564] set_robust_list(0x7fc129de39a0, 24 [pid 562] rt_sigprocmask(SIG_SETMASK, [], [pid 564] <... set_robust_list resumed>) = 0 [pid 563] rt_sigprocmask(SIG_SETMASK, [], [pid 562] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 561] rt_sigprocmask(SIG_SETMASK, [], [pid 560] rt_sigprocmask(SIG_SETMASK, [], [pid 564] rt_sigprocmask(SIG_SETMASK, [], [pid 563] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 562] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 561] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 560] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 564] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 563] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 562] <... mmap resumed>) = 0x20000000 [pid 561] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 560] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 564] memfd_create("syzkaller", 0 [pid 563] <... mmap resumed>) = 0x20000000 [pid 562] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 561] <... mmap resumed>) = 0x20000000 [pid 560] <... mmap resumed>) = 0x20000000 [pid 564] <... memfd_create resumed>) = 7 [pid 563] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 1 [pid 561] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 563] <... futex resumed>) = 1 [pid 562] memfd_create("syzkaller", 0 [pid 561] <... futex resumed>) = 1 [pid 560] <... futex resumed>) = 1 [pid 524] <... futex resumed>) = 0 [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 524] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = 0 [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 564] <... mmap resumed>) = 0x7fc1219c3000 [pid 563] memfd_create("syzkaller", 0 [pid 562] <... memfd_create resumed>) = 7 [pid 561] memfd_create("syzkaller", 0 [pid 560] memfd_create("syzkaller", 0 [pid 564] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 563] <... memfd_create resumed>) = 7 [pid 562] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 561] <... memfd_create resumed>) = 8 [pid 560] <... memfd_create resumed>) = 7 [pid 531] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 530] chdir(0x20000000 [pid 564] <... write resumed>) = 65536 [pid 563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 562] <... mmap resumed>) = 0x7fc1219e4000 [pid 561] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 531] ioctl(4, LOOP_CLR_FD [pid 529] <... mount resumed>) = 0 [pid 530] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 528] <... mount resumed>) = 0 [pid 532] <... mount resumed>) = 0 [pid 564] munmap(0x7fc1219c3000, 65536 [pid 563] <... mmap resumed>) = 0x7fc1219e4000 [pid 562] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 561] <... mmap resumed>) = 0x7fc1219e4000 [pid 560] <... mmap resumed>) = 0x7fc1219e4000 [pid 531] <... ioctl resumed>) = 0 [pid 529] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 564] <... munmap resumed>) = 0 [pid 563] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 562] <... write resumed>) = 65536 [pid 560] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 532] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 531] close(4 [pid 530] ioctl(4, LOOP_CLR_FD [pid 529] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 528] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 561] write(8, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 564] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 563] <... write resumed>) = 65536 [pid 562] munmap(0x7fc1219e4000, 65536 [pid 561] <... write resumed>) = 65536 [pid 560] <... write resumed>) = 65536 [pid 531] <... close resumed>) = 0 [pid 564] <... openat resumed>) = 8 [pid 563] munmap(0x7fc1219e4000, 65536 [pid 562] <... munmap resumed>) = 0 [pid 561] munmap(0x7fc1219e4000, 65536 [pid 560] munmap(0x7fc1219e4000, 65536 [pid 564] ioctl(8, LOOP_SET_FD, 7 [pid 563] <... munmap resumed>) = 0 [pid 562] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 561] <... munmap resumed>) = 0 [pid 560] <... munmap resumed>) = 0 [pid 564] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 563] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 562] <... openat resumed>) = 8 [pid 561] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 560] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 532] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 531] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 530] <... ioctl resumed>) = 0 [pid 529] ioctl(4, LOOP_CLR_FD [pid 528] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 564] ioctl(8, LOOP_CLR_FD [pid 563] <... openat resumed>) = 8 [pid 562] ioctl(8, LOOP_SET_FD, 7 [pid 561] <... openat resumed>) = 9 [pid 560] <... openat resumed>) = 4 [pid 531] <... futex resumed>) = 0 [pid 530] close(4 [pid 529] <... ioctl resumed>) = 0 [pid 528] ioctl(4, LOOP_CLR_FD [pid 564] <... ioctl resumed>) = 0 [pid 563] ioctl(8, LOOP_SET_FD, 7 [pid 562] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 561] ioctl(9, LOOP_SET_FD, 8 [pid 560] ioctl(4, LOOP_SET_FD, 7 [pid 531] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] <... close resumed>) = 0 [pid 529] close(4 [pid 528] <... ioctl resumed>) = 0 [pid 563] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 562] ioctl(8, LOOP_CLR_FD [pid 561] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 560] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 530] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 529] <... close resumed>) = 0 [pid 528] close(4 [pid 563] ioctl(8, LOOP_CLR_FD [pid 562] <... ioctl resumed>) = 0 [pid 561] ioctl(9, LOOP_CLR_FD [pid 560] ioctl(4, LOOP_CLR_FD [pid 530] <... futex resumed>) = 0 [pid 529] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... close resumed>) = 0 [pid 564] ioctl(8, LOOP_SET_FD, 7 [pid 563] <... ioctl resumed>) = 0 [pid 561] <... ioctl resumed>) = 0 [pid 560] <... ioctl resumed>) = 0 [pid 530] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 529] <... futex resumed>) = 0 [pid 528] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 529] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 528] <... futex resumed>) = 0 [pid 564] close(8 [pid 528] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] <... close resumed>) = 0 [pid 562] ioctl(8, LOOP_SET_FD, 7 [pid 564] close(7 [pid 563] ioctl(8, LOOP_SET_FD, 7 [pid 562] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 561] ioctl(9, LOOP_SET_FD, 8 [pid 560] ioctl(4, LOOP_SET_FD, 7 [pid 564] <... close resumed>) = 0 [pid 563] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 562] close(8 [pid 561] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 560] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 564] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] close(8 [pid 562] <... close resumed>) = 0 [pid 561] close(9 [pid 560] close(4 [pid 564] <... futex resumed>) = 0 [pid 563] <... close resumed>) = 0 [pid 562] close(7 [pid 561] <... close resumed>) = 0 [pid 560] <... close resumed>) = 0 [pid 564] futex(0x7fc1322d26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 563] close(7 [pid 562] <... close resumed>) = 0 [pid 561] close(8 [pid 560] close(7 [pid 532] ioctl(5, LOOP_CLR_FD [pid 563] <... close resumed>) = 0 [pid 562] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 561] <... close resumed>) = 0 [ 28.983106][ T530] ext4 filesystem being mounted at /root/syzkaller.jl33I5/5/file0 supports timestamps until 2038 (0x7fffffff) [ 28.991556][ T528] ext4 filesystem being mounted at /root/syzkaller.IpShW6/5/file0 supports timestamps until 2038 (0x7fffffff) [ 29.003060][ T531] ext4 filesystem being mounted at /root/syzkaller.duxz7m/5/file0 supports timestamps until 2038 (0x7fffffff) [ 29.021526][ T532] ext4 filesystem being mounted at /root/syzkaller.gpm0iI/6/file0 supports timestamps until 2038 (0x7fffffff) [ 29.026264][ T529] ext4 filesystem being mounted at /root/syzkaller.SVIRRC/5/file0 supports timestamps until 2038 (0x7fffffff) [pid 560] <... close resumed>) = 0 [pid 563] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 561] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] <... futex resumed>) = 0 [pid 562] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 561] <... futex resumed>) = 0 [pid 560] <... futex resumed>) = 0 [pid 532] <... ioctl resumed>) = 0 [pid 563] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 561] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 560] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] close(5) = 0 [pid 532] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] exit_group(0) = ? [pid 533] <... futex resumed>) = 230 [pid 541] <... recvmmsg resumed> ) = ? [pid 533] +++ exited with 0 +++ [pid 541] +++ exited with 0 +++ [pid 525] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=525, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 293] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 293] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./6/bus", [pid 526] exit_group(0 [pid 293] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 564] <... futex resumed>) = ? [pid 559] <... futex resumed>) = ? [pid 535] <... recvmmsg resumed> ) = ? [pid 529] <... futex resumed>) = ? [pid 526] <... exit_group resumed>) = ? [pid 564] +++ exited with 0 +++ [pid 559] +++ exited with 0 +++ [pid 535] +++ exited with 0 +++ [pid 529] +++ exited with 0 +++ [pid 526] +++ exited with 0 +++ [pid 293] unlink("./6/bus" [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=526, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 293] <... unlink resumed>) = 0 [pid 293] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./6/binderfs", [pid 297] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] newfstatat(3, "", [pid 293] unlink("./6/binderfs" [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, [pid 293] <... unlink resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 293] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 297] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./5/bus") = 0 [pid 297] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./5/binderfs") = 0 [pid 297] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 524] exit_group(0 [pid 563] <... futex resumed>) = ? [pid 537] <... recvmmsg resumed> ) = ? [pid 532] <... futex resumed>) = ? [pid 524] <... exit_group resumed>) = ? [pid 563] +++ exited with 0 +++ [pid 537] +++ exited with 0 +++ [pid 532] +++ exited with 0 +++ [pid 524] +++ exited with 0 +++ [pid 522] exit_group(0 [pid 561] <... futex resumed>) = ? [pid 530] <... futex resumed>) = ? [pid 538] <... recvmmsg resumed> ) = ? [pid 522] <... exit_group resumed>) = ? [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=524, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 561] +++ exited with 0 +++ [pid 538] +++ exited with 0 +++ [pid 530] +++ exited with 0 +++ [pid 522] +++ exited with 0 +++ [pid 527] exit_group(0 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=522, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 528] <... futex resumed>) = ? [pid 527] <... exit_group resumed>) = ? [pid 562] <... futex resumed>) = ? [pid 534] <... recvmmsg resumed> ) = ? [pid 528] +++ exited with 0 +++ [pid 562] +++ exited with 0 +++ [pid 534] +++ exited with 0 +++ [pid 527] +++ exited with 0 +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=527, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 295] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... openat resumed>) = 3 [pid 292] newfstatat(3, "", [pid 295] <... openat resumed>) = 3 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] newfstatat(3, "", [pid 292] getdents64(3, [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] getdents64(3, [pid 292] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 523] exit_group(0 [pid 296] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 560] <... futex resumed>) = ? [pid 531] <... futex resumed>) = ? [pid 523] <... exit_group resumed>) = ? [pid 539] <... recvmmsg resumed> ) = ? [pid 560] +++ exited with 0 +++ [pid 531] +++ exited with 0 +++ [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 539] +++ exited with 0 +++ [pid 523] +++ exited with 0 +++ [pid 296] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... openat resumed>) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=523, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 296] getdents64(3, [pid 294] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 294] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 294] getdents64(3, [pid 292] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] newfstatat(AT_FDCWD, "./6/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./6/bus") = 0 [pid 292] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] <... umount2 resumed>) = 0 [pid 292] unlink("./6/binderfs" [pid 296] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] newfstatat(AT_FDCWD, "./5/bus", [pid 292] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] unlink("./5/bus" [pid 295] newfstatat(AT_FDCWD, "./5/bus", [pid 296] <... unlink resumed>) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] unlink("./5/bus" [pid 296] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./5/binderfs" [pid 295] <... unlink resumed>) = 0 [pid 296] <... unlink resumed>) = 0 [pid 295] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./5/binderfs", [pid 294] newfstatat(AT_FDCWD, "./5/bus", [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] unlink("./5/binderfs" [pid 294] unlink("./5/bus") = 0 [pid 295] <... unlink resumed>) = 0 [pid 294] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./5/binderfs") = 0 [pid 294] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./6/file0") = 0 [pid 293] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./6") = 0 [pid 293] mkdir("./7", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 297] <... umount2 resumed>) = 0 [pid 296] <... umount2 resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 292] <... umount2 resumed>) = 0 [pid 297] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] ioctl(3, LOOP_CLR_FD [pid 292] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = 0 [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./5/file0", [pid 296] newfstatat(AT_FDCWD, "./5/file0", [pid 295] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = 0 [pid 293] close(3 [pid 292] newfstatat(AT_FDCWD, "./6/file0", [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... close resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] newfstatat(AT_FDCWD, "./5/file0", [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] newfstatat(AT_FDCWD, "./5/file0", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555563f4690) = 566 [pid 292] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... openat resumed>) = 4 [pid 296] <... openat resumed>) = 4 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] <... openat resumed>) = 4 [pid 297] newfstatat(4, "", [pid 296] newfstatat(4, "", [pid 295] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(4, "", [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... openat resumed>) = 4 [pid 294] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, [pid 296] getdents64(4, [pid 295] newfstatat(4, "", [pid 294] <... openat resumed>) = 4 [pid 292] getdents64(4, [pid 297] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 296] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] newfstatat(4, "", [pid 292] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, [pid 296] getdents64(4, [pid 295] getdents64(4, [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, [pid 297] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 296] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 295] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, [pid 292] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 297] close(4 [pid 296] close(4 [pid 295] getdents64(4, [pid 294] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 292] close(4 [pid 297] <... close resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 295] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 294] getdents64(4, [pid 292] <... close resumed>) = 0 [pid 297] rmdir("./5/file0" [pid 296] rmdir("./5/file0" [pid 292] rmdir("./6/file0" [pid 297] <... rmdir resumed>) = 0 [pid 296] <... rmdir resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 297] getdents64(3, [pid 296] getdents64(3, [pid 295] close(4 [pid 294] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 292] getdents64(3, [pid 297] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 296] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 295] <... close resumed>) = 0 [pid 294] close(4 [pid 292] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 297] close(3 [pid 296] close(3 [pid 295] rmdir("./5/file0" [pid 294] <... close resumed>) = 0 [pid 292] close(3./strace-static-x86_64: Process 566 attached [pid 297] <... close resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 294] rmdir("./5/file0" [pid 292] <... close resumed>) = 0 [pid 566] set_robust_list(0x5555563f46a0, 24 [pid 297] rmdir("./5" [pid 296] rmdir("./5" [pid 295] getdents64(3, [pid 292] rmdir("./6" [pid 566] <... set_robust_list resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 296] <... rmdir resumed>) = 0 [pid 294] <... rmdir resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 566] chdir("./7" [pid 297] mkdir("./6", 0777 [pid 296] mkdir("./6", 0777 [pid 292] mkdir("./7", 0777 [pid 566] <... chdir resumed>) = 0 [pid 297] <... mkdir resumed>) = 0 [pid 296] <... mkdir resumed>) = 0 [pid 295] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 294] getdents64(3, [pid 292] <... mkdir resumed>) = 0 [pid 566] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 295] close(3 [pid 294] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 566] <... prctl resumed>) = 0 [pid 297] <... openat resumed>) = 3 [pid 296] <... openat resumed>) = 3 [pid 295] <... close resumed>) = 0 [pid 294] close(3 [pid 292] <... openat resumed>) = 3 [pid 566] setpgid(0, 0 [pid 297] ioctl(3, LOOP_CLR_FD [pid 296] ioctl(3, LOOP_CLR_FD [pid 295] rmdir("./5" [pid 294] <... close resumed>) = 0 [pid 292] ioctl(3, LOOP_CLR_FD [pid 566] <... setpgid resumed>) = 0 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] <... rmdir resumed>) = 0 [pid 294] rmdir("./5" [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 297] close(3 [pid 296] close(3 [pid 295] mkdir("./6", 0777 [pid 294] <... rmdir resumed>) = 0 [pid 292] close(3 [pid 566] <... openat resumed>) = 3 [pid 297] <... close resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 294] mkdir("./6", 0777 [pid 292] <... close resumed>) = 0 [pid 566] write(3, "1000", 4 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 294] <... mkdir resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 566] <... write resumed>) = 4 [pid 295] <... openat resumed>) = 3 [pid 294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 566] close(3 [pid 297] <... clone resumed>, child_tidptr=0x5555563f4690) = 567 [pid 296] <... clone resumed>, child_tidptr=0x5555563f4690) = 568 [pid 295] ioctl(3, LOOP_CLR_FD [pid 294] <... openat resumed>) = 3 [pid 292] <... clone resumed>, child_tidptr=0x5555563f4690) = 569 [pid 566] <... close resumed>) = 0 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 294] ioctl(3, LOOP_CLR_FD [pid 566] symlink("/dev/binderfs", "./binderfs" [pid 295] close(3 [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 566] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 567 attached [pid 566] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... close resumed>) = 0 [pid 294] close(3 [pid 567] set_robust_list(0x5555563f46a0, 24 [pid 566] <... futex resumed>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] <... close resumed>) = 0 [pid 566] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 566] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 566] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 567] <... set_robust_list resumed>) = 0 [pid 566] <... mprotect resumed>) = 0 [pid 567] chdir("./6" [pid 566] rt_sigprocmask(SIG_BLOCK, ~[], [pid 295] <... clone resumed>, child_tidptr=0x5555563f4690) = 570 [pid 566] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 569 attached [pid 567] <... chdir resumed>) = 0 [pid 566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 294] <... clone resumed>, child_tidptr=0x5555563f4690) = 571 [pid 567] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 569] set_robust_list(0x5555563f46a0, 24 [pid 567] <... prctl resumed>) = 0 [pid 566] <... clone3 resumed> => {parent_tid=[572]}, 88) = 572 [pid 567] setpgid(0, 0 [pid 566] rt_sigprocmask(SIG_SETMASK, [], [pid 569] <... set_robust_list resumed>) = 0 [pid 569] chdir("./7" [pid 567] <... setpgid resumed>) = 0 [pid 566] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 570 attached [pid 569] <... chdir resumed>) = 0 [pid 567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 566] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] set_robust_list(0x5555563f46a0, 24 [pid 569] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 567] <... openat resumed>) = 3 [pid 566] <... futex resumed>) = 0 ./strace-static-x86_64: Process 568 attached [pid 570] <... set_robust_list resumed>) = 0 [pid 569] <... prctl resumed>) = 0 [pid 567] write(3, "1000", 4 [pid 566] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] chdir("./6" [pid 569] setpgid(0, 0 [pid 568] set_robust_list(0x5555563f46a0, 24 [pid 567] <... write resumed>) = 4 [pid 566] <... futex resumed>) = 0 [pid 570] <... chdir resumed>) = 0 [pid 569] <... setpgid resumed>) = 0 [pid 568] <... set_robust_list resumed>) = 0 [pid 567] close(3 [pid 566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 571 attached [pid 570] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 568] chdir("./6" [pid 567] <... close resumed>) = 0 [pid 566] <... mmap resumed>) = 0x7fc1321c5000 ./strace-static-x86_64: Process 572 attached [pid 571] set_robust_list(0x5555563f46a0, 24 [pid 570] <... prctl resumed>) = 0 [pid 569] <... openat resumed>) = 3 [pid 568] <... chdir resumed>) = 0 [pid 567] symlink("/dev/binderfs", "./binderfs" [pid 566] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 572] set_robust_list(0x7fc1322069a0, 24 [pid 571] <... set_robust_list resumed>) = 0 [pid 568] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 566] <... mprotect resumed>) = 0 [pid 572] <... set_robust_list resumed>) = 0 [pid 571] chdir("./6" [pid 568] <... prctl resumed>) = 0 [pid 566] rt_sigprocmask(SIG_BLOCK, ~[], [pid 572] rt_sigprocmask(SIG_SETMASK, [], [pid 571] <... chdir resumed>) = 0 [pid 569] write(3, "1000", 4 [pid 570] setpgid(0, 0 [pid 568] setpgid(0, 0 [pid 567] <... symlink resumed>) = 0 [pid 566] <... rt_sigprocmask resumed>[], 8) = 0 [pid 572] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 571] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 569] <... write resumed>) = 4 [pid 568] <... setpgid resumed>) = 0 [pid 566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 572] memfd_create("syzkaller", 0 [pid 571] <... prctl resumed>) = 0 [pid 569] close(3 [pid 568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 567] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] <... memfd_create resumed>) = 3 [pid 571] setpgid(0, 0 [pid 570] <... setpgid resumed>) = 0 [pid 569] <... close resumed>) = 0 [pid 568] <... openat resumed>) = 3 [pid 567] <... futex resumed>) = 0 [pid 566] <... clone3 resumed> => {parent_tid=[573]}, 88) = 573 [pid 572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 571] <... setpgid resumed>) = 0 [pid 570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 569] symlink("/dev/binderfs", "./binderfs" [pid 568] write(3, "1000", 4 [pid 567] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 566] rt_sigprocmask(SIG_SETMASK, [], [pid 572] <... mmap resumed>) = 0x7fc129dc5000 [pid 571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 569] <... symlink resumed>) = 0 [pid 568] <... write resumed>) = 4 [pid 567] <... rt_sigaction resumed>NULL, 8) = 0 [pid 566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 570] <... openat resumed>) = 3 [pid 572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 571] <... openat resumed>) = 3 [pid 570] write(3, "1000", 4 [pid 569] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] close(3 [pid 567] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 566] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 573 attached [pid 572] <... write resumed>) = 262144 [pid 571] write(3, "1000", 4 [pid 570] <... write resumed>) = 4 [pid 569] <... futex resumed>) = 0 [pid 568] <... close resumed>) = 0 [pid 567] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 566] <... futex resumed>) = 0 [pid 573] set_robust_list(0x7fc1321e59a0, 24 [pid 570] close(3 [pid 569] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 566] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... set_robust_list resumed>) = 0 [pid 570] <... close resumed>) = 0 [pid 569] <... rt_sigaction resumed>NULL, 8) = 0 [pid 567] <... mmap resumed>) = 0x7fc1321e6000 [pid 573] rt_sigprocmask(SIG_SETMASK, [], [pid 570] symlink("/dev/binderfs", "./binderfs" [pid 569] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 567] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 568] symlink("/dev/binderfs", "./binderfs" [pid 573] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 572] munmap(0x7fc129dc5000, 262144 [pid 571] <... write resumed>) = 4 [pid 570] <... symlink resumed>) = 0 [pid 569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 567] <... mprotect resumed>) = 0 [pid 573] creat("./bus", 000 [pid 571] close(3 [pid 570] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 568] <... symlink resumed>) = 0 [pid 567] rt_sigprocmask(SIG_BLOCK, ~[], [pid 573] <... creat resumed>) = 4 [pid 571] <... close resumed>) = 0 [pid 570] <... futex resumed>) = 0 [pid 569] <... mmap resumed>) = 0x7fc1321e6000 [pid 568] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] <... rt_sigprocmask resumed>[], 8) = 0 [pid 573] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 569] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 568] <... futex resumed>) = 0 [pid 567] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 573] <... futex resumed>) = 1 [pid 572] <... munmap resumed>) = 0 [pid 571] symlink("/dev/binderfs", "./binderfs" [pid 570] <... rt_sigaction resumed>NULL, 8) = 0 [pid 569] <... mprotect resumed>) = 0 [pid 568] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 566] <... futex resumed>) = 0 [pid 573] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 571] <... symlink resumed>) = 0 [pid 570] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 569] rt_sigprocmask(SIG_BLOCK, ~[], [pid 568] <... rt_sigaction resumed>NULL, 8) = 0 [pid 567] <... clone3 resumed> => {parent_tid=[574]}, 88) = 574 [pid 566] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] <... openat resumed>) = 5 [pid 571] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 569] <... rt_sigprocmask resumed>[], 8) = 0 [pid 568] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 567] rt_sigprocmask(SIG_SETMASK, [], [pid 566] <... futex resumed>) = 0 [pid 573] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 572] ioctl(5, LOOP_SET_FD, 3 [pid 571] <... futex resumed>) = 0 [pid 570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 568] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 567] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 566] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 576 attached ./strace-static-x86_64: Process 574 attached [pid 573] <... mount resumed>) = 0 [pid 572] <... ioctl resumed>) = 0 [pid 571] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 570] <... mmap resumed>) = 0x7fc1321e6000 [pid 568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 567] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] set_robust_list(0x7fc1322069a0, 24 [pid 574] set_robust_list(0x7fc1322069a0, 24 [pid 573] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] close(3 [pid 571] <... rt_sigaction resumed>NULL, 8) = 0 [pid 570] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 569] <... clone3 resumed> => {parent_tid=[576]}, 88) = 576 [pid 568] <... mmap resumed>) = 0x7fc1321e6000 [pid 567] <... futex resumed>) = 0 [pid 576] <... set_robust_list resumed>) = 0 [pid 574] <... set_robust_list resumed>) = 0 [pid 573] <... futex resumed>) = 1 [pid 570] <... mprotect resumed>) = 0 [pid 569] rt_sigprocmask(SIG_SETMASK, [], [pid 567] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] rt_sigprocmask(SIG_SETMASK, [], [pid 574] rt_sigprocmask(SIG_SETMASK, [], [pid 573] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 570] rt_sigprocmask(SIG_BLOCK, ~[], [pid 569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 567] <... futex resumed>) = 0 [pid 576] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 574] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 570] <... rt_sigprocmask resumed>[], 8) = 0 [pid 569] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 576] memfd_create("syzkaller", 0 [pid 574] memfd_create("syzkaller", 0 [pid 572] <... close resumed>) = 0 [pid 571] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 569] <... futex resumed>) = 0 [pid 568] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 567] <... mmap resumed>) = 0x7fc1321c5000 [pid 566] <... futex resumed>) = 0 [pid 576] <... memfd_create resumed>) = 3 [pid 574] <... memfd_create resumed>) = 3 [pid 572] mkdir("./file0", 0777 [pid 571] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 569] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] <... mprotect resumed>) = 0 [pid 567] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 577 attached [pid 576] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 572] <... mkdir resumed>) = 0 [pid 571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 570] <... clone3 resumed> => {parent_tid=[577]}, 88) = 577 [pid 569] <... futex resumed>) = 0 [pid 567] <... mprotect resumed>) = 0 [pid 566] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... mmap resumed>) = 0x7fc129de6000 [pid 574] <... mmap resumed>) = 0x7fc129dc5000 [pid 573] <... futex resumed>) = 0 [pid 572] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 571] <... mmap resumed>) = 0x7fc1321e6000 [pid 570] rt_sigprocmask(SIG_SETMASK, [], [pid 569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 568] rt_sigprocmask(SIG_BLOCK, ~[], [pid 567] rt_sigprocmask(SIG_BLOCK, ~[], [pid 566] <... futex resumed>) = 1 [pid 577] set_robust_list(0x7fc1322069a0, 24 [pid 573] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 571] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 570] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 569] <... mmap resumed>) = 0x7fc129dc5000 [pid 568] <... rt_sigprocmask resumed>[], 8) = 0 [pid 567] <... rt_sigprocmask resumed>[], 8) = 0 [pid 566] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 573] <... open resumed>) = 3 [pid 571] <... mprotect resumed>) = 0 [pid 570] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] mprotect(0x7fc129dc6000, 131072, PROT_READ|PROT_WRITE [pid 568] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 567] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 576] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 574] <... write resumed>) = 262144 [pid 573] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 571] rt_sigprocmask(SIG_BLOCK, ~[], [pid 570] <... futex resumed>) = 0 [pid 569] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 578 attached ./strace-static-x86_64: Process 579 attached [pid 573] <... futex resumed>) = 1 [pid 571] <... rt_sigprocmask resumed>[], 8) = 0 [pid 574] munmap(0x7fc129dc5000, 262144 [pid 570] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] rt_sigprocmask(SIG_BLOCK, ~[], [pid 568] <... clone3 resumed> => {parent_tid=[578]}, 88) = 578 [pid 577] <... set_robust_list resumed>) = 0 [pid 576] <... write resumed>) = 262144 [pid 566] <... futex resumed>) = 0 [pid 579] set_robust_list(0x7fc1321e59a0, 24 [pid 578] set_robust_list(0x7fc1322069a0, 24 [pid 577] rt_sigprocmask(SIG_SETMASK, [], [pid 576] munmap(0x7fc129de6000, 262144 [pid 574] <... munmap resumed>) = 0 [pid 573] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 571] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 570] <... futex resumed>) = 0 [pid 569] <... rt_sigprocmask resumed>[], 8) = 0 [pid 568] rt_sigprocmask(SIG_SETMASK, [], [pid 567] <... clone3 resumed> => {parent_tid=[579]}, 88) = 579 [pid 566] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... set_robust_list resumed>) = 0 [pid 578] <... set_robust_list resumed>) = 0 [pid 577] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 576] <... munmap resumed>) = 0 [pid 574] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129de5990, parent_tid=0x7fc129de5990, exit_signal=0, stack=0x7fc129dc5000, stack_size=0x20300, tls=0x7fc129de56c0} [pid 567] rt_sigprocmask(SIG_SETMASK, [], [pid 579] rt_sigprocmask(SIG_SETMASK, [], [pid 578] rt_sigprocmask(SIG_SETMASK, [], [pid 577] memfd_create("syzkaller", 0 [pid 576] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 574] <... openat resumed>) = 4 [pid 570] <... mmap resumed>) = 0x7fc1321c5000 [pid 567] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 579] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 578] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 577] <... memfd_create resumed>) = 3 [pid 576] <... openat resumed>) = 4 [pid 574] ioctl(4, LOOP_SET_FD, 3 [pid 570] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 569] <... clone3 resumed> => {parent_tid=[582]}, 88) = 582 [pid 567] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] creat("./bus", 000 [pid 578] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 576] ioctl(4, LOOP_SET_FD, 3 [pid 570] <... mprotect resumed>) = 0 [pid 569] rt_sigprocmask(SIG_SETMASK, [], [pid 567] <... futex resumed>) = 0 [pid 579] <... creat resumed>) = 5 [pid 577] <... mmap resumed>) = 0x7fc129dc5000 [pid 573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 570] rt_sigprocmask(SIG_BLOCK, ~[], [pid 569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 568] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 567] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] <... futex resumed>) = 0 ./strace-static-x86_64: Process 584 attached ./strace-static-x86_64: Process 582 attached [pid 579] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 568] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 584] set_robust_list(0x7fc1322069a0, 24 [pid 582] set_robust_list(0x7fc129de59a0, 24 [pid 573] <... socket resumed>) = 6 [pid 571] <... clone3 resumed> => {parent_tid=[584]}, 88) = 584 [pid 568] <... futex resumed>) = 1 [pid 584] <... set_robust_list resumed>) = 0 [pid 582] <... set_robust_list resumed>) = 0 [pid 573] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 571] rt_sigprocmask(SIG_SETMASK, [], [pid 568] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] rt_sigprocmask(SIG_SETMASK, [], [pid 582] rt_sigprocmask(SIG_SETMASK, [], [pid 573] <... futex resumed>) = 1 [pid 571] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 568] <... futex resumed>) = 0 [pid 566] <... futex resumed>) = 0 [pid 584] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 573] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 571] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 566] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] memfd_create("syzkaller", 0 [pid 582] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 571] <... futex resumed>) = 0 [pid 568] <... mmap resumed>) = 0x7fc1321c5000 [pid 566] <... futex resumed>) = 0 [pid 584] <... memfd_create resumed>) = 3 [pid 578] <... futex resumed>) = 0 [pid 574] <... ioctl resumed>) = 0 [pid 573] recvmmsg(6, [pid 571] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... rt_sigprocmask resumed>[], 8) = 0 [pid 569] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 566] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 582] <... futex resumed>) = 0 [pid 579] <... futex resumed>) = 0 [pid 578] memfd_create("syzkaller", 0 [pid 577] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 576] <... ioctl resumed>) = 0 [pid 574] close(3 [pid 571] <... futex resumed>) = 0 [pid 570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 569] <... futex resumed>) = 1 [pid 568] <... mprotect resumed>) = 0 [pid 567] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... mmap resumed>) = 0x7fc129de6000 [pid 571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 568] rt_sigprocmask(SIG_BLOCK, ~[], [pid 584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 571] <... mmap resumed>) = 0x7fc129dc5000 [pid 568] <... rt_sigprocmask resumed>[], 8) = 0 [pid 584] <... write resumed>) = 262144 [pid 571] mprotect(0x7fc129dc6000, 131072, PROT_READ|PROT_WRITE [pid 568] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 584] munmap(0x7fc129de6000, 262144 [pid 571] <... mprotect resumed>) = 0 [pid 584] <... munmap resumed>) = 0 [pid 571] rt_sigprocmask(SIG_BLOCK, ~[], [pid 568] <... clone3 resumed> => {parent_tid=[586]}, 88) = 586 [pid 584] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 571] <... rt_sigprocmask resumed>[], 8) = 0 [pid 568] rt_sigprocmask(SIG_SETMASK, [], [pid 584] <... openat resumed>) = 4 [pid 571] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129de5990, parent_tid=0x7fc129de5990, exit_signal=0, stack=0x7fc129dc5000, stack_size=0x20300, tls=0x7fc129de56c0} [pid 568] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 584] ioctl(4, LOOP_SET_FD, 3 [pid 568] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 571] <... clone3 resumed> => {parent_tid=[587]}, 88) = 587 [pid 568] <... futex resumed>) = 0 ./strace-static-x86_64: Process 588 attached ./strace-static-x86_64: Process 586 attached [pid 582] creat("./bus", 000 [pid 579] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 578] <... memfd_create resumed>) = 3 [pid 577] <... write resumed>) = 262144 [pid 576] close(3 [pid 574] <... close resumed>) = 0 [pid 572] <... mount resumed>) = 0 [pid 571] rt_sigprocmask(SIG_SETMASK, [], [pid 569] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 568] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 0 ./strace-static-x86_64: Process 587 attached [pid 588] set_robust_list(0x7fc1321e59a0, 24 [pid 586] set_robust_list(0x7fc1321e59a0, 24 [pid 584] <... ioctl resumed>) = 0 [pid 582] <... creat resumed>) = 5 [pid 579] <... mount resumed>) = 0 [pid 578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 577] munmap(0x7fc129dc5000, 262144 [pid 576] <... close resumed>) = 0 [pid 574] mkdir("./file0", 0777 [pid 572] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 571] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 570] <... clone3 resumed> => {parent_tid=[588]}, 88) = 588 [pid 567] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... mmap resumed>) = 0x7fc129dc5000 [pid 577] <... munmap resumed>) = 0 [pid 567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 588] <... set_robust_list resumed>) = 0 [pid 587] set_robust_list(0x7fc129de59a0, 24 [pid 586] <... set_robust_list resumed>) = 0 [pid 584] close(3 [pid 582] <... futex resumed>) = 1 [pid 579] <... futex resumed>) = 0 [pid 578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 577] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 576] mkdir("./file0", 0777 [pid 574] <... mkdir resumed>) = 0 [pid 572] <... openat resumed>) = 7 [pid 571] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] rt_sigprocmask(SIG_SETMASK, [], [pid 569] <... futex resumed>) = 0 [pid 567] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] rt_sigprocmask(SIG_SETMASK, [], [pid 587] <... set_robust_list resumed>) = 0 [pid 586] rt_sigprocmask(SIG_SETMASK, [], [pid 584] <... close resumed>) = 0 [pid 582] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 579] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 578] <... write resumed>) = 262144 [pid 577] <... openat resumed>) = 4 [pid 576] <... mkdir resumed>) = 0 [pid 574] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 572] chdir("./file0" [pid 571] <... futex resumed>) = 0 [pid 570] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 569] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] <... futex resumed>) = 0 [pid 588] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 586] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 584] mkdir("./file0", 0777 [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 579] <... open resumed>) = 3 [pid 578] munmap(0x7fc129dc5000, 262144 [pid 577] ioctl(4, LOOP_SET_FD, 3 [pid 576] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 569] <... futex resumed>) = 0 [pid 567] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 584] <... mkdir resumed>) = 0 [pid 582] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 579] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... munmap resumed>) = 0 [pid 572] <... chdir resumed>) = 0 [pid 571] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 570] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 588] creat("./bus", 000 [pid 584] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 582] <... mount resumed>) = 0 [pid 579] <... futex resumed>) = 0 [pid 578] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 572] ioctl(5, LOOP_CLR_FD [pid 570] <... futex resumed>) = 0 [pid 567] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... creat resumed>) = 5 [pid 582] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 570] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 0 [pid 588] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] creat("./bus", 000 [pid 582] <... futex resumed>) = 1 [pid 579] <... socket resumed>) = 6 [pid 570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 569] <... futex resumed>) = 0 [pid 567] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... futex resumed>) = 0 [pid 582] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 579] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 588] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 586] <... creat resumed>) = 5 [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 579] <... futex resumed>) = 0 [pid 570] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... futex resumed>) = 0 [pid 567] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... mount resumed>) = 0 [pid 586] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 579] recvmmsg(6, [pid 570] <... futex resumed>) = 0 [pid 569] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 0 [pid 588] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 1 [pid 570] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 568] <... futex resumed>) = 0 [pid 567] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... futex resumed>) = 0 [pid 586] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 568] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 570] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] <... futex resumed>) = 0 [pid 588] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 586] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 570] <... futex resumed>) = 0 [pid 568] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c) = 6 [pid 587] rt_sigprocmask(SIG_SETMASK, [], [pid 586] <... mount resumed>) = 0 [pid 582] <... open resumed>) = 3 [pid 578] <... openat resumed>) = 4 [pid 577] <... ioctl resumed>) = 0 [pid 572] <... ioctl resumed>) = 0 [pid 570] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] ioctl(4, LOOP_SET_FD, 3 [pid 577] close(3 [pid 572] close(5 [pid 570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 588] <... futex resumed>) = 0 [pid 587] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 586] <... futex resumed>) = 1 [pid 582] <... futex resumed>) = 1 [pid 577] <... close resumed>) = 0 [pid 569] <... futex resumed>) = 0 [pid 568] <... futex resumed>) = 0 [pid 588] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 586] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 582] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] mkdir("./file0", 0777 [pid 570] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... socket resumed>) = 3 [pid 587] creat("./bus", 000 [pid 586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] <... mkdir resumed>) = 0 [pid 569] <... futex resumed>) = 0 [pid 588] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 582] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 577] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 570] <... futex resumed>) = 0 [pid 569] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 568] <... futex resumed>) = 0 [pid 588] <... futex resumed>) = 0 [pid 587] <... creat resumed>) = 3 [pid 582] <... socket resumed>) = 6 [pid 582] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 568] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... futex resumed>) = 1 [pid 569] <... futex resumed>) = 0 [pid 582] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 1 [pid 571] <... futex resumed>) = 0 [pid 569] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 571] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... futex resumed>) = 0 [pid 588] <... futex resumed>) = 0 [pid 587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 582] recvmmsg(6, [pid 571] <... futex resumed>) = 0 [pid 570] <... futex resumed>) = 1 [pid 569] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] recvmmsg(3, [pid 587] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 571] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 29.764053][ T572] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 29.778627][ T572] ext4 filesystem being mounted at /root/syzkaller.zNZ9LH/7/file0 supports timestamps until 2038 (0x7fffffff) [pid 570] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... mount resumed>) = 0 [pid 586] <... open resumed>) = 6 [pid 578] <... ioctl resumed>) = 0 [pid 572] <... close resumed>) = 0 [pid 587] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... mount resumed>) = 0 [pid 578] close(3 [pid 572] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 578] <... close resumed>) = 0 [pid 572] <... futex resumed>) = 0 [pid 567] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... openat resumed>) = 5 [pid 578] mkdir("./file0", 0777 [pid 572] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 567] <... futex resumed>) = 0 [pid 584] chdir("./file0" [pid 578] <... mkdir resumed>) = 0 [pid 567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 584] <... chdir resumed>) = 0 [pid 578] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 567] <... mmap resumed>) = 0x7fc129de4000 [pid 587] <... futex resumed>) = 0 [pid 586] <... futex resumed>) = 0 [pid 584] ioctl(4, LOOP_CLR_FD [pid 571] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 570] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 569] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 568] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 566] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 586] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] <... futex resumed>) = 0 [ 29.820635][ T584] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 29.831819][ T576] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 29.844400][ T584] ext4 filesystem being mounted at /root/syzkaller.duxz7m/6/file0 supports timestamps until 2038 (0x7fffffff) [ 29.845311][ T574] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 571] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 1 [pid 587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 571] <... futex resumed>) = 0 [pid 570] <... futex resumed>) = 0 [pid 568] <... futex resumed>) = 0 [pid 566] futex(0x7fc1322d26cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 586] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 572] <... mmap resumed>) = 0x20000000 [pid 571] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 568] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 586] <... socket resumed>) = 3 [pid 572] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... mmap resumed>) = 0x7fc129de4000 [pid 586] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] <... futex resumed>) = 1 [pid 570] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 566] <... futex resumed>) = 0 [pid 587] <... open resumed>) = -1 ENOENT (No such file or directory) [pid 586] <... futex resumed>) = 1 [pid 584] <... ioctl resumed>) = 0 [pid 576] <... mount resumed>) = 0 [pid 572] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 570] <... mprotect resumed>) = 0 [pid 569] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] <... futex resumed>) = 0 [pid 567] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 566] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 570] rt_sigprocmask(SIG_BLOCK, ~[], [pid 568] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 587] <... futex resumed>) = 1 [pid 586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] memfd_create("syzkaller", 0 [pid 571] <... futex resumed>) = 0 [pid 570] <... rt_sigprocmask resumed>[], 8) = 0 [pid 568] <... futex resumed>) = 0 [pid 587] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 586] recvmmsg(3, [pid 572] <... memfd_create resumed>) = 5 [pid 571] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 568] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 571] <... futex resumed>) = 0 [pid 587] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 572] <... mmap resumed>) = 0x7fc121a05000 [pid 571] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 570] <... clone3 resumed> => {parent_tid=[603]}, 88) = 603 [pid 587] <... socket resumed>) = 6 [pid 584] close(4 [pid 576] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 574] <... mount resumed>) = 0 [pid 572] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 570] rt_sigprocmask(SIG_SETMASK, [], [pid 569] <... futex resumed>) = 0 [pid 567] <... mprotect resumed>) = 0 [pid 587] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... close resumed>) = 0 [pid 576] <... openat resumed>) = 7 [pid 572] <... write resumed>) = 65536 [pid 570] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 567] rt_sigprocmask(SIG_BLOCK, ~[], [pid 587] <... futex resumed>) = 1 [pid 584] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] chdir("./file0" [pid 572] munmap(0x7fc121a05000, 65536 [pid 571] <... futex resumed>) = 0 [pid 570] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... mmap resumed>) = 0x7fc129e05000 [pid 567] <... rt_sigprocmask resumed>[], 8) = 0 [pid 587] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 584] <... futex resumed>) = 0 [pid 576] <... chdir resumed>) = 0 [pid 572] <... munmap resumed>) = 0 [pid 571] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 569] mprotect(0x7fc129e06000, 131072, PROT_READ|PROT_WRITE [pid 567] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0}./strace-static-x86_64: Process 603 attached [pid 584] recvmmsg(6, [pid 576] ioctl(4, LOOP_CLR_FD [pid 572] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 571] <... futex resumed>) = 0 [pid 570] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... mprotect resumed>) = 0 [pid 603] set_robust_list(0x7fc129e049a0, 24 [pid 576] <... ioctl resumed>) = 0 [pid 572] <... openat resumed>) = 8 [pid 571] futex(0x7fc1322d26cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] rt_sigprocmask(SIG_BLOCK, ~[], [pid 567] <... clone3 resumed> => {parent_tid=[604]}, 88) = 604 [ 29.868172][ T576] ext4 filesystem being mounted at /root/syzkaller.gpm0iI/7/file0 supports timestamps until 2038 (0x7fffffff) [ 29.880406][ T574] ext4 filesystem being mounted at /root/syzkaller.SVIRRC/6/file0 supports timestamps until 2038 (0x7fffffff) [ 29.893015][ T577] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 29.909407][ T577] ext4 filesystem being mounted at /root/syzkaller.IpShW6/6/file0 supports timestamps until 2038 (0x7fffffff) [pid 603] <... set_robust_list resumed>) = 0 [pid 576] close(4 [pid 572] ioctl(8, LOOP_SET_FD, 5 [pid 569] <... rt_sigprocmask resumed>[], 8) = 0 [pid 567] rt_sigprocmask(SIG_SETMASK, [], [pid 603] rt_sigprocmask(SIG_SETMASK, [], [pid 577] <... mount resumed>) = 0 [pid 576] <... close resumed>) = 0 [pid 574] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 572] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e25990, parent_tid=0x7fc129e25990, exit_signal=0, stack=0x7fc129e05000, stack_size=0x20300, tls=0x7fc129e256c0} [pid 567] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 603] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 577] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 576] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... openat resumed>) = 7 [pid 572] ioctl(8, LOOP_CLR_FD [pid 567] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 577] <... openat resumed>) = 7 [pid 576] <... futex resumed>) = 0 [pid 574] chdir("./file0" [pid 572] <... ioctl resumed>) = 0 [pid 569] <... clone3 resumed> => {parent_tid=[605]}, 88) = 605 [pid 567] <... futex resumed>) = 0 [pid 603] <... mmap resumed>) = 0x20000000 [pid 577] chdir(0x20000000 [pid 576] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] <... chdir resumed>) = 0 [pid 569] rt_sigprocmask(SIG_SETMASK, [], [pid 567] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 574] ioctl(4, LOOP_CLR_FD [pid 569] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 605 attached ./strace-static-x86_64: Process 604 attached [pid 603] <... futex resumed>) = 1 [pid 577] ioctl(4, LOOP_CLR_FD [pid 574] <... ioctl resumed>) = 0 [pid 570] <... futex resumed>) = 0 [pid 569] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] <... ioctl resumed>) = 0 [pid 574] close(4 [pid 572] ioctl(8, LOOP_SET_FD, 5 [pid 570] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... futex resumed>) = 0 [pid 603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] close(4 [pid 574] <... close resumed>) = 0 [pid 572] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 570] <... futex resumed>) = 0 [pid 569] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 568] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 605] set_robust_list(0x7fc129e259a0, 24 [pid 604] set_robust_list(0x7fc129e049a0, 24 [pid 603] memfd_create("syzkaller", 0 [pid 578] <... mount resumed>) = 0 [pid 577] <... close resumed>) = 0 [pid 574] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] close(8 [pid 568] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... set_robust_list resumed>) = 0 [pid 604] <... set_robust_list resumed>) = 0 [pid 603] <... memfd_create resumed>) = 4 [pid 577] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 0 [pid 572] <... close resumed>) = 0 [pid 568] <... futex resumed>) = 0 [pid 605] rt_sigprocmask(SIG_SETMASK, [], [pid 604] rt_sigprocmask(SIG_SETMASK, [], [pid 603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 577] <... futex resumed>) = 0 [pid 574] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] close(5 [pid 568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 604] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 603] <... mmap resumed>) = 0x7fc1219e4000 [pid 577] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 605] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 604] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 572] <... close resumed>) = 0 [pid 568] <... mmap resumed>) = 0x7fc129de4000 [pid 605] <... mmap resumed>) = 0x20000000 [pid 604] <... mmap resumed>) = 0x20000000 [pid 603] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 605] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 605] <... futex resumed>) = 1 [pid 604] <... futex resumed>) = 1 [pid 603] <... write resumed>) = 65536 [pid 572] <... futex resumed>) = 0 [pid 569] <... futex resumed>) = 0 [pid 568] <... mprotect resumed>) = 0 [pid 567] <... futex resumed>) = 0 [pid 605] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 604] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] munmap(0x7fc1219e4000, 65536 [pid 572] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 569] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] rt_sigprocmask(SIG_BLOCK, ~[], [pid 603] <... munmap resumed>) = 0 [pid 578] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 576] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = 0 [pid 569] <... futex resumed>) = 1 [pid 568] <... rt_sigprocmask resumed>[], 8) = 0 [pid 567] <... futex resumed>) = 1 [pid 603] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 578] <... openat resumed>) = 7 [pid 576] memfd_create("syzkaller", 0 [pid 574] memfd_create("syzkaller", 0 [pid 568] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 603] <... openat resumed>) = 8 [pid 578] chdir("./file0" [pid 576] <... memfd_create resumed>) = 4 [pid 574] <... memfd_create resumed>) = 4 ./strace-static-x86_64: Process 606 attached [pid 603] ioctl(8, LOOP_SET_FD, 4 [pid 578] <... chdir resumed>) = 0 [pid 576] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 568] <... clone3 resumed> => {parent_tid=[606]}, 88) = 606 [pid 606] set_robust_list(0x7fc129e049a0, 24 [pid 603] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 578] ioctl(4, LOOP_CLR_FD [pid 576] <... mmap resumed>) = 0x7fc1219c5000 [pid 568] rt_sigprocmask(SIG_SETMASK, [], [pid 606] <... set_robust_list resumed>) = 0 [pid 603] ioctl(8, LOOP_CLR_FD [pid 578] <... ioctl resumed>) = 0 [pid 576] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 568] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 606] rt_sigprocmask(SIG_SETMASK, [], [pid 603] <... ioctl resumed>) = 0 [pid 578] close(4 [pid 576] <... write resumed>) = 65536 [pid 571] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 568] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 578] <... close resumed>) = 0 [pid 576] munmap(0x7fc1219c5000, 65536 [pid 574] <... mmap resumed>) = 0x7fc1219e4000 [pid 571] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] <... futex resumed>) = 0 [pid 606] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 587] <... futex resumed>) = 0 [pid 578] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... munmap resumed>) = 0 [pid 571] <... futex resumed>) = 1 [pid 568] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 606] <... mmap resumed>) = 0x20000000 [pid 587] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, -1, 0 [pid 578] <... futex resumed>) = 0 [pid 576] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 574] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 571] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 606] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 578] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] <... openat resumed>) = 8 [pid 574] <... write resumed>) = 65536 [pid 606] <... futex resumed>) = 1 [pid 603] ioctl(8, LOOP_SET_FD, 4 [pid 587] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] ioctl(8, LOOP_SET_FD, 4 [pid 574] munmap(0x7fc1219e4000, 65536 [pid 568] <... futex resumed>) = 0 [pid 606] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 587] <... futex resumed>) = 1 [pid 576] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 574] <... munmap resumed>) = 0 [pid 571] <... futex resumed>) = 0 [pid 568] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] close(8 [pid 587] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 578] <... futex resumed>) = 0 [pid 576] ioctl(8, LOOP_CLR_FD [pid 574] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 571] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] <... futex resumed>) = 1 [pid 603] <... close resumed>) = 0 [pid 587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 578] memfd_create("syzkaller", 0 [pid 576] <... ioctl resumed>) = 0 [pid 574] <... openat resumed>) = 8 [pid 571] <... futex resumed>) = 0 [pid 603] close(4 [pid 587] memfd_create("syzkaller", 0 [pid 578] <... memfd_create resumed>) = 4 [pid 574] ioctl(8, LOOP_SET_FD, 4 [pid 603] <... close resumed>) = 0 [pid 587] <... memfd_create resumed>) = 4 [pid 578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 574] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 603] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 578] <... mmap resumed>) = 0x7fc1219e4000 [pid 574] ioctl(8, LOOP_CLR_FD [pid 603] <... futex resumed>) = 0 [pid 587] <... mmap resumed>) = 0x7fc1219c5000 [pid 578] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 574] <... ioctl resumed>) = 0 [pid 603] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 578] <... write resumed>) = 65536 [pid 576] ioctl(8, LOOP_SET_FD, 4 [pid 587] <... write resumed>) = 65536 [pid 578] munmap(0x7fc1219e4000, 65536 [pid 576] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 587] munmap(0x7fc1219c5000, 65536 [pid 578] <... munmap resumed>) = 0 [pid 576] close(8 [pid 587] <... munmap resumed>) = 0 [pid 578] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 576] <... close resumed>) = 0 [pid 587] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 578] <... openat resumed>) = 8 [pid 576] close(4 [pid 587] <... openat resumed>) = 7 [pid 578] ioctl(8, LOOP_SET_FD, 4 [pid 587] ioctl(7, LOOP_SET_FD, 4 [pid 578] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 576] <... close resumed>) = 0 [pid 587] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 578] ioctl(8, LOOP_CLR_FD [pid 576] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] ioctl(8, LOOP_SET_FD, 4 [pid 587] ioctl(7, LOOP_CLR_FD [pid 578] <... ioctl resumed>) = 0 [pid 576] <... futex resumed>) = 0 [pid 574] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 587] <... ioctl resumed>) = 0 [pid 576] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] close(8) = 0 [pid 574] close(4) = 0 [pid 574] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] ioctl(8, LOOP_SET_FD, 4 [pid 574] <... futex resumed>) = 0 [pid 587] ioctl(7, LOOP_SET_FD, 4 [pid 578] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 574] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 578] close(8 [pid 587] close(7 [pid 578] <... close resumed>) = 0 [pid 587] <... close resumed>) = 0 [pid 578] close(4 [pid 587] close(4 [pid 578] <... close resumed>) = 0 [pid 587] <... close resumed>) = 0 [pid 578] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = 0 [pid 587] <... futex resumed>) = 0 [pid 578] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 29.909519][ T578] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 29.932754][ T578] ext4 filesystem being mounted at /root/syzkaller.jl33I5/6/file0 supports timestamps until 2038 (0x7fffffff) [pid 587] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 566] exit_group(0 [pid 573] <... recvmmsg resumed>0x20009080, 1, 0, NULL) = 230 [pid 572] <... futex resumed>) = ? [pid 566] <... exit_group resumed>) = ? [pid 572] +++ exited with 0 +++ [pid 573] +++ exited with 0 +++ [pid 566] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=566, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 293] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 293] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 293] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./7/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./7/bus") = 0 [pid 293] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./7/binderfs") = 0 [pid 293] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 569] exit_group(0 [pid 582] <... recvmmsg resumed> ) = ? [pid 605] <... futex resumed>) = ? [pid 576] <... futex resumed>) = ? [pid 569] <... exit_group resumed>) = ? [pid 605] +++ exited with 0 +++ [pid 582] +++ exited with 0 +++ [pid 576] +++ exited with 0 +++ [pid 569] +++ exited with 0 +++ [pid 571] exit_group(0 [pid 587] <... futex resumed>) = ? [pid 584] <... recvmmsg resumed> ) = ? [pid 571] <... exit_group resumed>) = ? [pid 587] +++ exited with 0 +++ [pid 584] +++ exited with 0 +++ [pid 571] +++ exited with 0 +++ [pid 570] exit_group(0 [pid 603] <... futex resumed>) = ? [pid 588] <... recvmmsg resumed> ) = ? [pid 577] <... futex resumed>) = ? [pid 570] <... exit_group resumed>) = ? [pid 603] +++ exited with 0 +++ [pid 588] +++ exited with 0 +++ [pid 577] +++ exited with 0 +++ [pid 570] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=571, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=569, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=570, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 295] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... openat resumed>) = 3 [pid 292] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] newfstatat(3, "", [pid 294] <... openat resumed>) = 3 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] newfstatat(3, "", [pid 292] <... openat resumed>) = 3 [pid 295] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] newfstatat(3, "", [pid 295] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] getdents64(3, [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... umount2 resumed>) = 0 [pid 294] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 292] getdents64(3, [pid 295] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] newfstatat(AT_FDCWD, "./6/bus", [pid 294] <... umount2 resumed>) = 0 [pid 292] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 567] exit_group(0 [pid 295] unlink("./6/bus" [pid 294] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = 0 [pid 604] <... futex resumed>) = ? [pid 579] <... recvmmsg resumed> ) = ? [pid 574] <... futex resumed>) = ? [pid 567] <... exit_group resumed>) = ? [pid 295] <... unlink resumed>) = 0 [pid 604] +++ exited with 0 +++ [pid 574] +++ exited with 0 +++ [pid 579] +++ exited with 0 +++ [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./6/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] unlink("./6/bus" [pid 292] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./6/binderfs", [pid 294] <... unlink resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] newfstatat(AT_FDCWD, "./7/bus", [pid 295] unlink("./6/binderfs" [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... unlink resumed>) = 0 [pid 294] newfstatat(AT_FDCWD, "./6/binderfs", [pid 292] unlink("./7/bus" [pid 568] exit_group(0 [pid 295] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 606] <... futex resumed>) = ? [pid 586] <... recvmmsg resumed> ) = ? [pid 578] <... futex resumed>) = ? [pid 568] <... exit_group resumed>) = ? [pid 294] unlink("./6/binderfs" [pid 292] <... unlink resumed>) = 0 [pid 606] +++ exited with 0 +++ [pid 586] +++ exited with 0 +++ [pid 578] +++ exited with 0 +++ [pid 294] <... unlink resumed>) = 0 [pid 294] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./7/binderfs") = 0 [pid 292] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 567] +++ exited with 0 +++ [pid 568] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=567, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=568, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 296] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] <... restart_syscall resumed>) = 0 [pid 296] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(3, "", [pid 297] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... openat resumed>) = 3 [pid 296] getdents64(3, [pid 297] newfstatat(3, "", [pid 296] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 296] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 297] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 296] <... umount2 resumed>) = 0 [pid 297] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./6/bus", [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] newfstatat(AT_FDCWD, "./6/bus", [pid 297] unlink("./6/bus" [pid 296] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... unlink resumed>) = 0 [pid 296] unlink("./6/bus" [pid 297] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] <... unlink resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./6/binderfs", [pid 296] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] unlink("./6/binderfs" [pid 296] newfstatat(AT_FDCWD, "./6/binderfs", [pid 297] <... unlink resumed>) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] unlink("./6/binderfs") = 0 [pid 296] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./7/file0") = 0 [pid 293] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./7") = 0 [pid 293] mkdir("./8", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 297] <... umount2 resumed>) = 0 [pid 295] <... umount2 resumed>) = 0 [pid 294] <... umount2 resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 293] ioctl(3, LOOP_CLR_FD [pid 296] <... umount2 resumed>) = 0 [pid 294] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./6/file0", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./6/file0", [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] newfstatat(AT_FDCWD, "./7/file0", [pid 297] newfstatat(AT_FDCWD, "./6/file0", [pid 296] newfstatat(AT_FDCWD, "./6/file0", [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... openat resumed>) = 4 [pid 292] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] newfstatat(4, "", [pid 292] <... openat resumed>) = 4 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... openat resumed>) = 4 [pid 294] getdents64(4, [pid 292] newfstatat(4, "", [pid 296] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] newfstatat(4, "", [pid 294] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... openat resumed>) = 4 [pid 296] <... openat resumed>) = 4 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, [pid 292] getdents64(4, [pid 297] newfstatat(4, "", [pid 296] newfstatat(4, "", [pid 295] getdents64(4, [pid 294] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, [pid 294] close(4 [pid 292] getdents64(4, [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, [pid 296] getdents64(4, [pid 294] <... close resumed>) = 0 [pid 295] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 292] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 297] getdents64(4, [pid 296] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 295] close(4 [pid 294] rmdir("./6/file0" [pid 292] close(4 [pid 297] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] <... close resumed>) = 0 [pid 295] rmdir("./6/file0" [pid 294] <... rmdir resumed>) = 0 [pid 296] close(4 [pid 292] <... close resumed>) = 0 [pid 297] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 296] <... close resumed>) = 0 [pid 294] getdents64(3, [pid 292] rmdir("./7/file0" [pid 297] close(4 [pid 296] rmdir("./6/file0" [pid 295] <... rmdir resumed>) = 0 [pid 294] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 295] getdents64(3, [pid 292] <... rmdir resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 296] <... rmdir resumed>) = 0 [pid 295] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 294] close(3 [pid 292] getdents64(3, [pid 297] rmdir("./6/file0" [pid 296] getdents64(3, [pid 295] close(3 [pid 294] <... close resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 296] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 295] <... close resumed>) = 0 [pid 294] rmdir("./6" [pid 292] close(3 [pid 297] getdents64(3, [pid 296] close(3 [pid 295] rmdir("./6") = 0 [pid 295] mkdir("./7", 0777 [pid 294] <... rmdir resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 296] <... close resumed>) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 294] mkdir("./7", 0777 [pid 297] close(3 [pid 296] rmdir("./6" [pid 295] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 292] rmdir("./7" [pid 294] <... mkdir resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 297] rmdir("./6") = 0 [pid 294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 292] <... rmdir resumed>) = 0 [pid 297] mkdir("./7", 0777) = 0 [pid 296] <... rmdir resumed>) = 0 [pid 292] mkdir("./8", 0777 [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 296] mkdir("./7", 0777 [pid 292] <... mkdir resumed>) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 296] <... mkdir resumed>) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 297] <... openat resumed>) = 3 [pid 295] <... openat resumed>) = 3 [pid 294] <... openat resumed>) = 3 [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] <... openat resumed>) = 3 [pid 297] ioctl(3, LOOP_CLR_FD [pid 295] ioctl(3, LOOP_CLR_FD [pid 294] ioctl(3, LOOP_CLR_FD [pid 293] close(3 [pid 292] ioctl(3, LOOP_CLR_FD [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 293] <... close resumed>) = 0 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] close(3 [pid 295] close(3 [pid 294] close(3 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] close(3 [pid 297] <... close resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... clone resumed>, child_tidptr=0x5555563f4690) = 607 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] <... openat resumed>) = 3 [pid 297] <... clone resumed>, child_tidptr=0x5555563f4690) = 608 [pid 295] <... clone resumed>, child_tidptr=0x5555563f4690) = 609 [pid 294] <... clone resumed>, child_tidptr=0x5555563f4690) = 610 [pid 292] <... clone resumed>, child_tidptr=0x5555563f4690) = 611 ./strace-static-x86_64: Process 610 attached [pid 610] set_robust_list(0x5555563f46a0, 24) = 0 [pid 610] chdir("./7"./strace-static-x86_64: Process 608 attached ) = 0 [pid 608] set_robust_list(0x5555563f46a0, 24 [pid 610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 610] setpgid(0, 0 [pid 608] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 609 attached [pid 296] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 611 attached ) = -1 ENXIO (No such device or address) [pid 611] set_robust_list(0x5555563f46a0, 24 [pid 296] close(3 [pid 611] <... set_robust_list resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 611] chdir("./8" [pid 610] <... setpgid resumed>) = 0 [pid 609] set_robust_list(0x5555563f46a0, 24 [pid 608] chdir("./7" [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 609] <... set_robust_list resumed>) = 0 [pid 608] <... chdir resumed>) = 0 [pid 611] <... chdir resumed>) = 0 [pid 610] <... openat resumed>) = 3 [pid 609] chdir("./7" [pid 608] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 611] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 610] write(3, "1000", 4 [pid 609] <... chdir resumed>) = 0 [pid 608] <... prctl resumed>) = 0 [pid 296] <... clone resumed>, child_tidptr=0x5555563f4690) = 612 [pid 611] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 607 attached [pid 611] setpgid(0, 0 [pid 610] <... write resumed>) = 4 [pid 609] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 608] setpgid(0, 0 [pid 611] <... setpgid resumed>) = 0 [pid 610] close(3 [pid 609] <... prctl resumed>) = 0 [pid 608] <... setpgid resumed>) = 0 [pid 607] set_robust_list(0x5555563f46a0, 24 [pid 611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 610] <... close resumed>) = 0 [pid 609] setpgid(0, 0 [pid 608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 607] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 612 attached [pid 611] <... openat resumed>) = 3 [pid 610] symlink("/dev/binderfs", "./binderfs" [pid 609] <... setpgid resumed>) = 0 [pid 608] <... openat resumed>) = 3 [pid 607] chdir("./8" [pid 612] set_robust_list(0x5555563f46a0, 24 [pid 611] write(3, "1000", 4 [pid 610] <... symlink resumed>) = 0 [pid 609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 608] write(3, "1000", 4 [pid 607] <... chdir resumed>) = 0 [pid 612] <... set_robust_list resumed>) = 0 [pid 611] <... write resumed>) = 4 [pid 610] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... openat resumed>) = 3 [pid 608] <... write resumed>) = 4 [pid 607] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 610] <... futex resumed>) = 0 [pid 609] write(3, "1000", 4 [pid 608] close(3 [pid 607] <... prctl resumed>) = 0 [pid 610] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 609] <... write resumed>) = 4 [pid 608] <... close resumed>) = 0 [pid 607] setpgid(0, 0 [pid 610] <... rt_sigaction resumed>NULL, 8) = 0 [pid 609] close(3 [pid 608] symlink("/dev/binderfs", "./binderfs" [pid 607] <... setpgid resumed>) = 0 [pid 612] chdir("./7" [pid 611] close(3 [pid 610] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 609] <... close resumed>) = 0 [pid 608] <... symlink resumed>) = 0 [pid 607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 612] <... chdir resumed>) = 0 [pid 611] <... close resumed>) = 0 [pid 610] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 609] symlink("/dev/binderfs", "./binderfs" [pid 608] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... openat resumed>) = 3 [pid 610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 609] <... symlink resumed>) = 0 [pid 608] <... futex resumed>) = 0 [pid 607] write(3, "1000", 4 [pid 610] <... mmap resumed>) = 0x7fc1321e6000 [pid 609] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 607] <... write resumed>) = 4 [pid 612] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 611] symlink("/dev/binderfs", "./binderfs" [pid 610] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 609] <... futex resumed>) = 0 [pid 608] <... rt_sigaction resumed>NULL, 8) = 0 [pid 607] close(3 [pid 612] <... prctl resumed>) = 0 [pid 611] <... symlink resumed>) = 0 [pid 610] <... mprotect resumed>) = 0 [pid 609] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 608] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 607] <... close resumed>) = 0 [pid 612] setpgid(0, 0 [pid 611] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] rt_sigprocmask(SIG_BLOCK, ~[], [pid 609] <... rt_sigaction resumed>NULL, 8) = 0 [pid 608] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 607] symlink("/dev/binderfs", "./binderfs" [pid 612] <... setpgid resumed>) = 0 [pid 611] <... futex resumed>) = 0 [pid 610] <... rt_sigprocmask resumed>[], 8) = 0 [pid 609] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 607] <... symlink resumed>) = 0 [pid 612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 611] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 609] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 608] <... mmap resumed>) = 0x7fc1321e6000 [pid 607] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... openat resumed>) = 3 [pid 611] <... rt_sigaction resumed>NULL, 8) = 0 [pid 609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 608] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 607] <... futex resumed>) = 0 [pid 612] write(3, "1000", 4 [pid 611] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 610] <... clone3 resumed> => {parent_tid=[613]}, 88) = 613 [pid 609] <... mmap resumed>) = 0x7fc1321e6000 [pid 608] <... mprotect resumed>) = 0 [pid 607] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 612] <... write resumed>) = 4 [pid 611] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 610] rt_sigprocmask(SIG_SETMASK, [], [pid 609] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 608] rt_sigprocmask(SIG_BLOCK, ~[], [pid 607] <... rt_sigaction resumed>NULL, 8) = 0 [pid 610] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 609] <... mprotect resumed>) = 0 [pid 608] <... rt_sigprocmask resumed>[], 8) = 0 [pid 607] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 610] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] rt_sigprocmask(SIG_BLOCK, ~[], [pid 608] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 607] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 612] close(3 [pid 611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 610] <... futex resumed>) = 0 [pid 609] <... rt_sigprocmask resumed>[], 8) = 0 [pid 607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 612] <... close resumed>) = 0 [pid 611] <... mmap resumed>) = 0x7fc1321e6000 [pid 610] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 608] <... clone3 resumed> => {parent_tid=[614]}, 88) = 614 [pid 607] <... mmap resumed>) = 0x7fc1321e6000 [pid 612] symlink("/dev/binderfs", "./binderfs" [pid 611] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 610] <... futex resumed>) = 0 [pid 608] rt_sigprocmask(SIG_SETMASK, [], [pid 607] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 612] <... symlink resumed>) = 0 [pid 611] <... mprotect resumed>) = 0 [pid 610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 609] <... clone3 resumed> => {parent_tid=[615]}, 88) = 615 [pid 608] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 607] <... mprotect resumed>) = 0 [pid 612] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] rt_sigprocmask(SIG_BLOCK, ~[], [pid 610] <... mmap resumed>) = 0x7fc1321c5000 [pid 609] rt_sigprocmask(SIG_SETMASK, [], [pid 608] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] rt_sigprocmask(SIG_BLOCK, ~[], [pid 612] <... futex resumed>) = 0 [pid 611] <... rt_sigprocmask resumed>[], 8) = 0 [pid 610] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 609] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 608] <... futex resumed>) = 0 [pid 607] <... rt_sigprocmask resumed>[], 8) = 0 [pid 612] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 611] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 610] <... mprotect resumed>) = 0 [pid 609] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 612] <... rt_sigaction resumed>NULL, 8) = 0 [pid 610] rt_sigprocmask(SIG_BLOCK, ~[], [pid 609] <... futex resumed>) = 0 [pid 608] <... futex resumed>) = 0 [pid 612] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 611] <... clone3 resumed> => {parent_tid=[616]}, 88) = 616 [pid 610] <... rt_sigprocmask resumed>[], 8) = 0 [pid 609] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 607] <... clone3 resumed> => {parent_tid=[617]}, 88) = 617 [pid 610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 609] <... futex resumed>) = 0 [pid 608] <... mmap resumed>) = 0x7fc1321c5000 [pid 607] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 614 attached [pid 609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 608] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 607] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 614] set_robust_list(0x7fc1322069a0, 24 [pid 612] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 611] rt_sigprocmask(SIG_SETMASK, [], [pid 610] <... clone3 resumed> => {parent_tid=[618]}, 88) = 618 [pid 609] <... mmap resumed>) = 0x7fc1321c5000 [pid 608] <... mprotect resumed>) = 0 [pid 607] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... set_robust_list resumed>) = 0 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 611] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 610] rt_sigprocmask(SIG_SETMASK, [], [pid 609] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 608] rt_sigprocmask(SIG_BLOCK, ~[], [pid 607] <... futex resumed>) = 0 [pid 614] rt_sigprocmask(SIG_SETMASK, [], [pid 612] <... mmap resumed>) = 0x7fc1321e6000 [pid 611] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 609] <... mprotect resumed>) = 0 [pid 608] <... rt_sigprocmask resumed>[], 8) = 0 [pid 607] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 616 attached [pid 614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 612] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 611] <... futex resumed>) = 0 [pid 610] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] rt_sigprocmask(SIG_BLOCK, ~[], [pid 608] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 607] <... futex resumed>) = 0 ./strace-static-x86_64: Process 617 attached ./strace-static-x86_64: Process 615 attached ./strace-static-x86_64: Process 613 attached [pid 616] set_robust_list(0x7fc1322069a0, 24 [pid 614] memfd_create("syzkaller", 0 [pid 612] <... mprotect resumed>) = 0 [pid 611] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 609] <... rt_sigprocmask resumed>[], 8) = 0 [pid 607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 619 attached ./strace-static-x86_64: Process 618 attached [pid 617] set_robust_list(0x7fc1322069a0, 24 [pid 616] <... set_robust_list resumed>) = 0 [pid 615] set_robust_list(0x7fc1322069a0, 24 [pid 614] <... memfd_create resumed>) = 3 [pid 613] set_robust_list(0x7fc1322069a0, 24 [pid 612] rt_sigprocmask(SIG_BLOCK, ~[], [pid 611] <... futex resumed>) = 0 [pid 610] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 608] <... clone3 resumed> => {parent_tid=[619]}, 88) = 619 [pid 607] <... mmap resumed>) = 0x7fc1321c5000 [pid 619] set_robust_list(0x7fc1321e59a0, 24 [pid 618] set_robust_list(0x7fc1321e59a0, 24 [pid 617] <... set_robust_list resumed>) = 0 [pid 616] rt_sigprocmask(SIG_SETMASK, [], [pid 615] <... set_robust_list resumed>) = 0 [pid 614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 613] <... set_robust_list resumed>) = 0 [pid 612] <... rt_sigprocmask resumed>[], 8) = 0 [pid 611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 619] <... set_robust_list resumed>) = 0 [pid 618] <... set_robust_list resumed>) = 0 [pid 617] rt_sigprocmask(SIG_SETMASK, [], [pid 616] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 615] rt_sigprocmask(SIG_SETMASK, [], [pid 613] rt_sigprocmask(SIG_SETMASK, [], [pid 612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 611] <... mmap resumed>) = 0x7fc1321c5000 [pid 608] rt_sigprocmask(SIG_SETMASK, [], [pid 607] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 619] rt_sigprocmask(SIG_SETMASK, [], [pid 618] rt_sigprocmask(SIG_SETMASK, [], [pid 617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 616] memfd_create("syzkaller", 0 [pid 615] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 614] <... mmap resumed>) = 0x7fc129dc5000 [pid 613] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 611] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 609] <... clone3 resumed> => {parent_tid=[620]}, 88) = 620 [pid 608] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 607] <... mprotect resumed>) = 0 [pid 619] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 618] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 617] memfd_create("syzkaller", 0 [pid 616] <... memfd_create resumed>) = 3 [pid 615] memfd_create("syzkaller", 0 [pid 613] memfd_create("syzkaller", 0 [pid 612] <... clone3 resumed> => {parent_tid=[621]}, 88) = 621 [pid 611] <... mprotect resumed>) = 0 [pid 609] rt_sigprocmask(SIG_SETMASK, [], [pid 608] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] rt_sigprocmask(SIG_BLOCK, ~[], [pid 618] creat("./bus", 000 [pid 616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 615] <... memfd_create resumed>) = 3 [pid 613] <... memfd_create resumed>) = 3 [pid 612] rt_sigprocmask(SIG_SETMASK, [], [pid 611] rt_sigprocmask(SIG_BLOCK, ~[], [pid 609] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 608] <... futex resumed>) = 0 [pid 607] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 620 attached [pid 619] creat("./bus", 000 [pid 618] <... creat resumed>) = 4 [pid 617] <... memfd_create resumed>) = 3 [pid 616] <... mmap resumed>) = 0x7fc129dc5000 [pid 615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 612] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 611] <... rt_sigprocmask resumed>[], 8) = 0 [pid 609] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0}./strace-static-x86_64: Process 621 attached [pid 620] set_robust_list(0x7fc1321e59a0, 24 [pid 619] <... creat resumed>) = 4 [pid 618] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 609] <... futex resumed>) = 0 ./strace-static-x86_64: Process 622 attached [pid 620] <... set_robust_list resumed>) = 0 [pid 618] <... futex resumed>) = 1 [pid 616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 615] <... mmap resumed>) = 0x7fc129dc5000 [pid 613] <... mmap resumed>) = 0x7fc129dc5000 [pid 612] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 610] <... futex resumed>) = 0 [pid 609] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... clone3 resumed> => {parent_tid=[622]}, 88) = 622 [pid 622] set_robust_list(0x7fc1321e59a0, 24 [pid 620] rt_sigprocmask(SIG_SETMASK, [], [pid 618] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 610] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] rt_sigprocmask(SIG_SETMASK, [], [pid 616] <... write resumed>) = 262144 [pid 610] <... futex resumed>) = 0 [pid 607] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 619] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... write resumed>) = 262144 [pid 610] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = 1 [pid 617] <... mmap resumed>) = 0x7fc129dc5000 [pid 608] <... futex resumed>) = 0 [pid 607] <... futex resumed>) = 0 [pid 619] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 612] <... futex resumed>) = 0 [pid 608] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 622] <... set_robust_list resumed>) = 0 [pid 620] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 616] munmap(0x7fc129dc5000, 262144 [pid 614] munmap(0x7fc129dc5000, 262144 [pid 608] <... futex resumed>) = 0 [pid 619] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 614] <... munmap resumed>) = 0 [pid 608] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... mount resumed>) = 0 [pid 614] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 620] creat("./bus", 000 [pid 619] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 618] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 615] <... write resumed>) = 262144 [pid 614] <... openat resumed>) = 5 [pid 612] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... clone3 resumed> => {parent_tid=[623]}, 88) = 623 [pid 620] <... creat resumed>) = 4 [pid 619] <... futex resumed>) = 1 [pid 618] <... mount resumed>) = 0 [pid 616] <... munmap resumed>) = 0 [pid 614] ioctl(5, LOOP_SET_FD, 3 [pid 612] <... futex resumed>) = 0 [pid 611] rt_sigprocmask(SIG_SETMASK, [], [pid 608] <... futex resumed>) = 0 ./strace-static-x86_64: Process 623 attached [pid 622] rt_sigprocmask(SIG_SETMASK, [], [pid 621] set_robust_list(0x7fc1322069a0, 24 [pid 620] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 618] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 615] munmap(0x7fc129dc5000, 262144 [pid 613] <... write resumed>) = 262144 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 611] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 608] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 621] <... set_robust_list resumed>) = 0 [pid 620] <... futex resumed>) = 1 [pid 619] <... open resumed>) = 6 [pid 614] <... ioctl resumed>) = 0 [pid 609] <... futex resumed>) = 0 [pid 608] <... futex resumed>) = 0 [pid 621] rt_sigprocmask(SIG_SETMASK, [], [pid 619] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] close(3 [pid 609] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 621] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 619] <... futex resumed>) = 0 [pid 614] <... close resumed>) = 0 [pid 609] <... futex resumed>) = 0 [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 621] memfd_create("syzkaller", 0 [pid 619] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 618] <... futex resumed>) = 1 [pid 616] <... openat resumed>) = 4 [pid 614] mkdir("./file0", 0777 [pid 610] <... futex resumed>) = 0 [pid 609] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 621] <... memfd_create resumed>) = 3 [pid 620] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 615] <... munmap resumed>) = 0 [pid 614] <... mkdir resumed>) = 0 [pid 613] munmap(0x7fc129dc5000, 262144 [pid 612] <... mmap resumed>) = 0x7fc1321c5000 [pid 611] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 0 [pid 621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 619] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 614] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 611] <... futex resumed>) = 0 [pid 610] <... futex resumed>) = 0 [pid 608] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 622] creat("./bus", 000 [pid 621] <... mmap resumed>) = 0x7fc129dc5000 [pid 620] <... mount resumed>) = 0 [pid 619] <... socket resumed>) = 3 [pid 618] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 616] ioctl(4, LOOP_SET_FD, 3 [pid 615] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 613] <... munmap resumed>) = 0 [pid 612] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 611] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 610] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 622] <... creat resumed>) = 4 [pid 621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 619] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... mprotect resumed>) = 0 [pid 621] <... write resumed>) = 262144 [pid 620] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = 1 [pid 618] <... open resumed>) = 5 [pid 613] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 608] <... futex resumed>) = 0 [pid 612] rt_sigprocmask(SIG_BLOCK, ~[], [pid 622] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 621] munmap(0x7fc129dc5000, 262144 [pid 620] <... futex resumed>) = 1 [pid 619] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 618] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... rt_sigprocmask resumed>[], 8) = 0 [pid 609] <... futex resumed>) = 0 [pid 608] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] set_robust_list(0x7fc1321e59a0, 24 [pid 622] <... futex resumed>) = 1 [pid 621] <... munmap resumed>) = 0 [pid 620] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 618] <... futex resumed>) = 1 [pid 617] <... write resumed>) = 262144 [pid 616] <... ioctl resumed>) = 0 [pid 610] <... futex resumed>) = 0 [pid 609] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 0 [pid 607] <... futex resumed>) = 0 [pid 621] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 619] recvmmsg(3, [pid 615] <... openat resumed>) = 5 [pid 612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 610] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... futex resumed>) = 0 [pid 608] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 621] <... openat resumed>) = 4 [pid 610] <... futex resumed>) = 0 [pid 609] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 0 [pid 622] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 621] ioctl(4, LOOP_SET_FD, 3 [pid 620] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 610] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 618] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 622] <... mount resumed>) = 0 [pid 620] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 616] close(3 [pid 615] ioctl(5, LOOP_SET_FD, 3 [pid 612] <... clone3 resumed> => {parent_tid=[626]}, 88) = 626 [pid 623] <... set_robust_list resumed>) = 0 [pid 622] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 618] <... socket resumed>) = 7 [pid 617] munmap(0x7fc129dc5000, 262144 [pid 616] <... close resumed>) = 0 [pid 612] rt_sigprocmask(SIG_SETMASK, [], [pid 622] <... futex resumed>) = 1 [pid 618] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... futex resumed>) = 0 [pid 607] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 607] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 626 attached [pid 622] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 618] <... futex resumed>) = 1 [pid 616] mkdir("./file0", 0777 [pid 612] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 610] <... futex resumed>) = 0 [pid 618] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 610] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 626] set_robust_list(0x7fc1321e59a0, 24 [pid 616] <... mkdir resumed>) = 0 [pid 618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 618] recvmmsg(7, [pid 616] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 612] <... futex resumed>) = 0 [pid 626] <... set_robust_list resumed>) = 0 [pid 612] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 626] rt_sigprocmask(SIG_SETMASK, [], [pid 623] rt_sigprocmask(SIG_SETMASK, [], [pid 626] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 623] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 617] <... munmap resumed>) = 0 [pid 626] creat("./bus", 000) = 5 [pid 623] creat("./bus", 000 [pid 617] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 626] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 626] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 612] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] <... mount resumed>) = 0 [pid 623] <... creat resumed>) = 3 [pid 621] <... ioctl resumed>) = 0 [pid 612] <... futex resumed>) = 0 [pid 626] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 621] close(3 [pid 612] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 626] <... futex resumed>) = 0 [pid 623] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 621] <... close resumed>) = 0 [pid 620] <... open resumed>) = 6 [pid 613] <... openat resumed>) = 6 [pid 612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 626] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 623] <... futex resumed>) = 1 [pid 621] mkdir("./file0", 0777 [pid 620] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] ioctl(6, LOOP_SET_FD, 3 [pid 612] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 622] <... open resumed>) = 5 [pid 621] <... mkdir resumed>) = 0 [pid 615] <... ioctl resumed>) = 0 [pid 612] <... futex resumed>) = 0 [pid 626] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 621] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 612] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 622] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] <... futex resumed>) = 1 [pid 615] close(3 [pid 611] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... futex resumed>) = 0 [pid 626] <... open resumed>) = 3 [pid 623] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 622] <... futex resumed>) = 1 [pid 620] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 613] <... ioctl resumed>) = 0 [pid 607] <... futex resumed>) = 0 [pid 626] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... mount resumed>) = 0 [pid 622] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 620] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 617] <... openat resumed>) = 6 [pid 615] <... close resumed>) = 0 [pid 613] close(3 [pid 611] <... futex resumed>) = 0 [pid 609] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] <... futex resumed>) = 1 [pid 623] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 620] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 617] ioctl(6, LOOP_SET_FD, 3 [pid 615] mkdir("./file0", 0777 [pid 613] <... close resumed>) = 0 [pid 612] <... futex resumed>) = 0 [pid 611] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 0 [pid 607] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 623] <... futex resumed>) = 0 [pid 622] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 620] <... socket resumed>) = 3 [pid 615] <... mkdir resumed>) = 0 [pid 613] mkdir("./file0", 0777 [pid 612] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 609] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 623] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] <... socket resumed>) = 7 [pid 620] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... ioctl resumed>) = 0 [pid 612] <... futex resumed>) = 0 [pid 626] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 622] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] <... futex resumed>) = 0 [pid 617] close(3 [pid 615] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 613] <... mkdir resumed>) = 0 [pid 612] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 626] <... socket resumed>) = 6 [pid 623] <... futex resumed>) = 0 [pid 622] <... futex resumed>) = 0 [pid 620] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 617] <... close resumed>) = 0 [pid 613] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 611] <... futex resumed>) = 1 [pid 609] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 626] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 622] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 620] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 617] mkdir("./file0", 0777 [pid 611] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 0 [pid 607] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] <... futex resumed>) = 1 [pid 623] <... open resumed>) = 5 [pid 622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 620] recvmmsg(3, [pid 612] <... futex resumed>) = 0 [pid 626] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 623] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... mkdir resumed>) = 0 [pid 612] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 623] <... futex resumed>) = 1 [pid 622] recvmmsg(7, [pid 612] <... futex resumed>) = 0 [pid 611] <... futex resumed>) = 0 [pid 610] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 608] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 607] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 626] recvmmsg(6, [pid 623] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 617] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 612] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 610] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 608] <... futex resumed>) = 0 [pid 610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 610] <... mmap resumed>) = 0x7fc129de4000 [pid 608] <... mmap resumed>) = 0x7fc129de4000 [pid 610] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 608] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 610] <... mprotect resumed>) = 0 [pid 608] <... mprotect resumed>) = 0 [pid 610] rt_sigprocmask(SIG_BLOCK, ~[], [pid 608] rt_sigprocmask(SIG_BLOCK, ~[], [pid 610] <... rt_sigprocmask resumed>[], 8) = 0 [pid 608] <... rt_sigprocmask resumed>[], 8) = 0 [pid 610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 608] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 610] <... clone3 resumed> => {parent_tid=[639]}, 88) = 639 [pid 608] <... clone3 resumed> => {parent_tid=[640]}, 88) = 640 [pid 610] rt_sigprocmask(SIG_SETMASK, [], [pid 608] rt_sigprocmask(SIG_SETMASK, [], [pid 610] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 608] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 610] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 608] <... futex resumed>) = 0 [pid 610] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 611] <... futex resumed>) = 1 [pid 623] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 611] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... socket resumed>) = 6 [pid 623] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 611] <... futex resumed>) = 0 [pid 623] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 611] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 611] <... futex resumed>) = 0 [pid 623] recvmmsg(6, [ 30.643002][ T614] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 30.657051][ T621] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 30.669769][ T616] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 30.678493][ T614] ext4 filesystem being mounted at /root/syzkaller.SVIRRC/7/file0 supports timestamps until 2038 (0x7fffffff) [pid 611] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 640 attached ./strace-static-x86_64: Process 639 attached [pid 640] set_robust_list(0x7fc129e049a0, 24 [pid 639] set_robust_list(0x7fc129e049a0, 24 [pid 640] <... set_robust_list resumed>) = 0 [pid 639] <... set_robust_list resumed>) = 0 [pid 640] rt_sigprocmask(SIG_SETMASK, [], [pid 639] rt_sigprocmask(SIG_SETMASK, [], [pid 640] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 639] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 640] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 639] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 640] <... mmap resumed>) = 0x20000000 [pid 639] <... mmap resumed>) = 0x20000000 [pid 640] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 1 [pid 639] <... futex resumed>) = 1 [pid 640] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 639] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 610] <... futex resumed>) = 0 [pid 608] <... futex resumed>) = 0 [pid 610] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 639] <... futex resumed>) = 0 [pid 621] <... mount resumed>) = 0 [pid 610] <... futex resumed>) = 1 [pid 609] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 608] <... futex resumed>) = 1 [pid 640] memfd_create("syzkaller", 0 [pid 639] memfd_create("syzkaller", 0 [pid 612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 640] <... memfd_create resumed>) = 7 [pid 639] <... memfd_create resumed>) = 3 [pid 612] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 612] <... futex resumed>) = 0 [pid 640] <... mmap resumed>) = 0x7fc1219e4000 [pid 639] <... mmap resumed>) = 0x7fc1219e4000 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 640] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 639] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 612] <... mmap resumed>) = 0x7fc129de4000 [pid 640] <... write resumed>) = 65536 [pid 639] <... write resumed>) = 65536 [pid 612] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 640] munmap(0x7fc1219e4000, 65536 [pid 639] munmap(0x7fc1219e4000, 65536 [pid 612] <... mprotect resumed>) = 0 [pid 640] <... munmap resumed>) = 0 [pid 639] <... munmap resumed>) = 0 [pid 612] rt_sigprocmask(SIG_BLOCK, ~[], [pid 640] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 639] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 612] <... rt_sigprocmask resumed>[], 8) = 0 [pid 640] <... openat resumed>) = 8 [pid 639] <... openat resumed>) = 8 [pid 612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 640] ioctl(8, LOOP_SET_FD, 7 [pid 639] ioctl(8, LOOP_SET_FD, 3 [pid 640] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 639] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 612] <... clone3 resumed> => {parent_tid=[641]}, 88) = 641 [pid 640] ioctl(8, LOOP_CLR_FD [pid 639] ioctl(8, LOOP_CLR_FD [pid 612] rt_sigprocmask(SIG_SETMASK, [], [pid 640] <... ioctl resumed>) = 0 [pid 639] <... ioctl resumed>) = 0 [pid 612] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 612] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 30.695224][ T621] ext4 filesystem being mounted at /root/syzkaller.jl33I5/7/file0 supports timestamps until 2038 (0x7fffffff) [ 30.708799][ T615] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 30.720735][ T615] ext4 filesystem being mounted at /root/syzkaller.IpShW6/7/file0 supports timestamps until 2038 (0x7fffffff) [ 30.732454][ T616] ext4 filesystem being mounted at /root/syzkaller.gpm0iI/8/file0 supports timestamps until 2038 (0x7fffffff) [pid 612] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 621] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 615] <... mount resumed>) = 0 [pid 609] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 640] ioctl(8, LOOP_SET_FD, 7 [pid 639] ioctl(8, LOOP_SET_FD, 3 [pid 640] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 639] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 640] close(8 [pid 639] close(8 [pid 640] <... close resumed>) = 0 [pid 639] <... close resumed>) = 0 [pid 640] close(7 [pid 639] close(3./strace-static-x86_64: Process 641 attached [pid 640] <... close resumed>) = 0 [pid 639] <... close resumed>) = 0 [pid 641] set_robust_list(0x7fc129e049a0, 24 [pid 640] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] <... set_robust_list resumed>) = 0 [pid 640] <... futex resumed>) = 0 [pid 639] <... futex resumed>) = 0 [pid 641] rt_sigprocmask(SIG_SETMASK, [], [pid 640] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 639] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 641] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 641] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0) = 0x20000000 [pid 641] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 641] memfd_create("syzkaller", 0 [pid 612] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] <... memfd_create resumed>) = 7 [pid 612] <... futex resumed>) = 0 [pid 641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 641] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 641] munmap(0x7fc1219e4000, 65536) = 0 [pid 641] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 8 [pid 641] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 641] ioctl(8, LOOP_CLR_FD) = 0 [pid 621] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 615] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 609] <... futex resumed>) = 0 [pid 607] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... mount resumed>) = 0 [pid 616] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 7 [pid 616] chdir("./file0") = 0 [pid 616] ioctl(4, LOOP_CLR_FD) = 0 [pid 616] close(4) = 0 [pid 616] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 616] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] <... mount resumed>) = 0 [pid 641] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 641] close(8) = 0 [pid 641] close(7) = 0 [pid 641] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 641] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY) = -1 ENOENT (No such file or directory) [pid 614] ioctl(5, LOOP_CLR_FD) = 0 [pid 614] close(5) = 0 [pid 614] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 611] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 611] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 607] <... futex resumed>) = 0 [pid 615] <... openat resumed>) = 7 [pid 609] <... mmap resumed>) = 0x7fc129de4000 [pid 607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 621] ioctl(4, LOOP_CLR_FD [pid 616] <... futex resumed>) = 0 [pid 611] <... futex resumed>) = 1 [pid 616] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 611] futex(0x7fc1322d26cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 621] <... ioctl resumed>) = 0 [pid 616] <... mmap resumed>) = 0x20000000 [pid 615] chdir("./file0" [pid 609] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 607] <... mmap resumed>) = 0x7fc129de4000 [pid 616] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 621] close(4 [pid 615] <... chdir resumed>) = 0 [pid 609] <... mprotect resumed>) = 0 [pid 607] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 621] <... close resumed>) = 0 [pid 616] <... futex resumed>) = 1 [pid 615] ioctl(5, LOOP_CLR_FD [pid 611] <... futex resumed>) = 0 [pid 613] <... mount resumed>) = -1 EBADMSG (Bad message) [pid 609] rt_sigprocmask(SIG_BLOCK, ~[], [pid 607] <... mprotect resumed>) = 0 [pid 621] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] memfd_create("syzkaller", 0 [pid 615] <... ioctl resumed>) = 0 [pid 613] ioctl(6, LOOP_CLR_FD [pid 611] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... rt_sigprocmask resumed>[], 8) = 0 [pid 607] rt_sigprocmask(SIG_BLOCK, ~[], [pid 621] <... futex resumed>) = 0 [pid 616] <... memfd_create resumed>) = 4 [pid 615] close(5 [pid 613] <... ioctl resumed>) = 0 [pid 611] <... futex resumed>) = 0 [pid 609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 607] <... rt_sigprocmask resumed>[], 8) = 0 [pid 621] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 615] <... close resumed>) = 0 [pid 616] <... mmap resumed>) = 0x7fc121a05000 [pid 615] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] close(6 [pid 607] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 616] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 615] <... futex resumed>) = 0 [pid 616] <... write resumed>) = 65536 [pid 615] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 613] <... close resumed>) = 0 [pid 609] <... clone3 resumed> => {parent_tid=[644]}, 88) = 644 [pid 616] munmap(0x7fc121a05000, 65536 [pid 613] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] rt_sigprocmask(SIG_SETMASK, [], [pid 607] <... clone3 resumed> => {parent_tid=[645]}, 88) = 645 [pid 616] <... munmap resumed>) = 0 [pid 616] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 8 [pid 616] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 616] ioctl(8, LOOP_CLR_FD) = 0 [pid 609] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 607] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 644 attached [pid 644] set_robust_list(0x7fc129e049a0, 24 [pid 609] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 644] <... set_robust_list resumed>) = 0 [pid 644] rt_sigprocmask(SIG_SETMASK, [], [pid 616] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 616] close(8) = 0 [pid 616] close(4) = 0 [pid 616] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 616] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 644] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 644] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0) = 0x20000000 [pid 644] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 644] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 645 attached [pid 645] set_robust_list(0x7fc129e049a0, 24 [pid 607] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... futex resumed>) = 1 [pid 609] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 0 [pid 609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 615] <... futex resumed>) = 0 [pid 613] <... futex resumed>) = 0 [pid 609] <... futex resumed>) = 1 [pid 615] memfd_create("syzkaller", 0 [pid 613] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] <... memfd_create resumed>) = 5 [pid 615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 615] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 615] munmap(0x7fc1219e4000, 65536) = 0 [pid 615] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 8 [pid 615] ioctl(8, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 615] ioctl(8, LOOP_CLR_FD) = 0 [pid 644] <... futex resumed>) = 0 [pid 644] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 645] <... set_robust_list resumed>) = 0 [pid 645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 645] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 615] ioctl(8, LOOP_SET_FD, 5 [pid 645] <... mmap resumed>) = 0x20000000 [pid 615] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 645] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 615] close(8 [pid 645] <... futex resumed>) = 1 [pid 615] <... close resumed>) = 0 [pid 607] <... futex resumed>) = 0 [pid 645] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] close(5 [pid 607] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 615] <... close resumed>) = 0 [pid 607] <... futex resumed>) = 0 [pid 645] memfd_create("syzkaller", 0 [pid 615] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... memfd_create resumed>) = 3 [pid 615] <... futex resumed>) = 0 [pid 645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 615] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 645] <... mmap resumed>) = 0x7fc1219e4000 [pid 645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 645] munmap(0x7fc1219e4000, 65536) = 0 [pid 645] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 8 [pid 645] ioctl(8, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 645] ioctl(8, LOOP_CLR_FD) = 0 [pid 645] ioctl(8, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 645] close(8) = 0 [pid 645] close(3) = 0 [pid 645] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 30.732805][ T613] EXT4-fs warning (device loop2): read_mmp_block:115: Error -74 while reading MMP block 12 [ 30.777182][ T617] EXT4-fs (loop1): revision level too high, forcing read-only mode [pid 645] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 617] <... mount resumed>) = 0 [pid 617] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY) = -1 ENOENT (No such file or directory) [pid 617] ioctl(6, LOOP_CLR_FD) = 0 [pid 617] close(6) = 0 [pid 617] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 30.785609][ T617] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 617] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 608] exit_group(0) = ? [pid 614] <... futex resumed>) = 231 [pid 640] <... futex resumed>) = ? [pid 619] <... recvmmsg resumed> ) = ? [pid 640] +++ exited with 0 +++ [pid 614] +++ exited with 0 +++ [pid 610] exit_group(0 [pid 618] <... recvmmsg resumed> ) = ? [pid 613] <... futex resumed>) = ? [pid 610] <... exit_group resumed>) = ? [pid 639] <... futex resumed>) = ? [pid 619] +++ exited with 0 +++ [pid 618] +++ exited with 0 +++ [pid 613] +++ exited with 0 +++ [pid 608] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=608, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 297] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 297] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 297] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./7/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 612] exit_group(0 [pid 641] <... futex resumed>) = 230 [pid 612] <... exit_group resumed>) = ? [pid 621] <... futex resumed>) = ? [pid 626] <... recvmmsg resumed> ) = ? [pid 641] +++ exited with 0 +++ [pid 621] +++ exited with 0 +++ [pid 626] +++ exited with 0 +++ [pid 297] unlink("./7/bus" [pid 611] exit_group(0 [pid 616] <... futex resumed>) = ? [pid 623] <... recvmmsg resumed> ) = ? [pid 611] <... exit_group resumed>) = ? [pid 616] +++ exited with 0 +++ [pid 623] +++ exited with 0 +++ [pid 607] exit_group(0 [pid 645] <... futex resumed>) = ? [pid 622] <... recvmmsg resumed> ) = ? [pid 617] <... futex resumed>) = ? [pid 607] <... exit_group resumed>) = ? [pid 645] +++ exited with 0 +++ [pid 622] +++ exited with 0 +++ [pid 617] +++ exited with 0 +++ [pid 639] +++ exited with 0 +++ [pid 612] +++ exited with 0 +++ [pid 611] +++ exited with 0 +++ [pid 610] +++ exited with 0 +++ [pid 607] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=612, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=610, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=607, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=611, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 296] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... unlink resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... openat resumed>) = 3 [pid 294] <... openat resumed>) = 3 [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 609] exit_group(0 [pid 297] newfstatat(AT_FDCWD, "./7/binderfs", [pid 296] newfstatat(3, "", [pid 294] newfstatat(3, "", [pid 293] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 644] <... futex resumed>) = ? [pid 620] <... recvmmsg resumed> ) = ? [pid 615] <... futex resumed>) = ? [pid 609] <... exit_group resumed>) = ? [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 644] +++ exited with 0 +++ [pid 620] +++ exited with 0 +++ [pid 294] getdents64(3, [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 294] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 293] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 292] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 294] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 615] +++ exited with 0 +++ [pid 609] +++ exited with 0 +++ [pid 292] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] unlink("./7/binderfs" [pid 296] getdents64(3, [pid 294] <... umount2 resumed>) = 0 [pid 293] <... umount2 resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 294] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... unlink resumed>) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=609, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 294] newfstatat(AT_FDCWD, "./7/bus", [pid 293] newfstatat(AT_FDCWD, "./8/bus", [pid 292] newfstatat(AT_FDCWD, "./8/bus", [pid 296] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./7/bus" [pid 293] unlink("./8/bus" [pid 292] unlink("./8/bus" [pid 296] <... umount2 resumed>) = 0 [pid 294] <... unlink resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 294] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./7/binderfs", [pid 293] newfstatat(AT_FDCWD, "./8/binderfs", [pid 292] newfstatat(AT_FDCWD, "./8/binderfs", [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] newfstatat(AT_FDCWD, "./7/bus", [pid 295] <... openat resumed>) = 3 [pid 294] unlink("./7/binderfs" [pid 293] unlink("./8/binderfs" [pid 292] unlink("./8/binderfs" [pid 296] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] newfstatat(3, "", [pid 294] <... unlink resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 296] unlink("./7/bus" [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... unlink resumed>) = 0 [pid 295] getdents64(3, [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 294] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./7/binderfs", [pid 294] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... umount2 resumed>) = 0 [pid 294] <... openat resumed>) = 4 [pid 296] unlink("./7/binderfs" [pid 295] umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, [pid 296] <... unlink resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, [pid 296] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] newfstatat(AT_FDCWD, "./7/bus", [pid 294] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./7/file0" [pid 295] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... rmdir resumed>) = 0 [pid 294] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./7" [pid 295] unlink("./7/bus" [pid 294] <... rmdir resumed>) = 0 [pid 294] mkdir("./8", 0777 [pid 295] <... unlink resumed>) = 0 [pid 294] <... mkdir resumed>) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 295] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] unlink("./7/binderfs") = 0 [pid 295] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./7/file0") = 0 [pid 297] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./7") = 0 [pid 297] mkdir("./8", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 294] <... openat resumed>) = 3 [pid 294] ioctl(3, LOOP_CLR_FD [pid 295] <... umount2 resumed>) = 0 [pid 295] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... umount2 resumed>) = 0 [pid 297] <... openat resumed>) = 3 [pid 295] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] ioctl(3, LOOP_CLR_FD [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] newfstatat(AT_FDCWD, "./8/file0", [pid 295] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 293] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] close(4) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] rmdir("./7/file0" [pid 293] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... rmdir resumed>) = 0 [pid 293] <... openat resumed>) = 4 [pid 295] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 293] newfstatat(4, "", [pid 295] close(3) = 0 [pid 295] rmdir("./7" [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 293] getdents64(4, [pid 295] mkdir("./8", 0777 [pid 293] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] <... mkdir resumed>) = 0 [pid 293] getdents64(4, [pid 295] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 293] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./8/file0") = 0 [pid 293] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./8") = 0 [pid 293] mkdir("./9", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] <... umount2 resumed>) = 0 [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] <... umount2 resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 292] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] ioctl(3, LOOP_CLR_FD [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] newfstatat(AT_FDCWD, "./8/file0", [pid 293] close(3 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... close resumed>) = 0 [pid 292] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... clone resumed>, child_tidptr=0x5555563f4690) = 647 [pid 292] <... openat resumed>) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./8/file0") = 0 [pid 292] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./8") = 0 [pid 292] mkdir("./9", 0777) = 0 [pid 295] <... openat resumed>) = 3 [pid 294] close(3 [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 297] close(3 [pid 296] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] ioctl(3, LOOP_CLR_FD [pid 294] <... close resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] ioctl(3, LOOP_CLR_FD [pid 297] <... close resumed>) = 0 [pid 296] newfstatat(AT_FDCWD, "./7/file0", [pid 295] close(3 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... close resumed>) = 0 [pid 296] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] <... clone resumed>, child_tidptr=0x5555563f4690) = 648 [pid 292] <... clone resumed>, child_tidptr=0x5555563f4690) = 649 ./strace-static-x86_64: Process 647 attached [pid 647] set_robust_list(0x5555563f46a0, 24) = 0 [pid 647] chdir("./9" [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... clone resumed>, child_tidptr=0x5555563f4690) = 650 [pid 296] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... clone resumed>, child_tidptr=0x5555563f4690) = 651 [pid 296] <... openat resumed>) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, [pid 647] <... chdir resumed>) = 0 [pid 296] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 647] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 296] getdents64(4, [pid 647] <... prctl resumed>) = 0 [pid 296] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 647] setpgid(0, 0 [pid 296] close(4 [pid 647] <... setpgid resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 296] rmdir("./7/file0" [pid 647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 296] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 649 attached [pid 296] getdents64(3, [pid 649] set_robust_list(0x5555563f46a0, 24 [pid 296] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 296] close(3 [pid 647] <... openat resumed>) = 3 [pid 296] <... close resumed>) = 0 [pid 296] rmdir("./7" [pid 649] <... set_robust_list resumed>) = 0 [pid 649] chdir("./9" [pid 647] write(3, "1000", 4) = 4 [pid 296] <... rmdir resumed>) = 0 [pid 647] close(3 [pid 296] mkdir("./8", 0777 [pid 649] <... chdir resumed>) = 0 [pid 296] <... mkdir resumed>) = 0 [pid 647] <... close resumed>) = 0 [pid 649] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 647] symlink("/dev/binderfs", "./binderfs" [pid 649] <... prctl resumed>) = 0 [pid 647] <... symlink resumed>) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 649] setpgid(0, 0 [pid 296] <... openat resumed>) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 649] <... setpgid resumed>) = 0 [pid 649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 296] <... clone resumed>, child_tidptr=0x5555563f4690) = 652 [pid 649] <... openat resumed>) = 3 [pid 647] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 647] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 647] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 649] write(3, "1000", 4 [pid 647] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 649] <... write resumed>) = 4 [pid 647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 649] close(3 [pid 647] <... mmap resumed>) = 0x7fc1321e6000 [pid 649] <... close resumed>) = 0 [pid 647] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 649] symlink("/dev/binderfs", "./binderfs" [pid 647] <... mprotect resumed>) = 0 [pid 649] <... symlink resumed>) = 0 [pid 647] rt_sigprocmask(SIG_BLOCK, ~[], [pid 649] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] <... rt_sigprocmask resumed>[], 8) = 0 [pid 649] <... futex resumed>) = 0 [pid 647] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0}./strace-static-x86_64: Process 651 attached [pid 649] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 651] set_robust_list(0x5555563f46a0, 24 [pid 649] <... rt_sigaction resumed>NULL, 8) = 0 [pid 647] <... clone3 resumed> => {parent_tid=[653]}, 88) = 653 ./strace-static-x86_64: Process 652 attached ./strace-static-x86_64: Process 650 attached ./strace-static-x86_64: Process 648 attached [pid 651] <... set_robust_list resumed>) = 0 [pid 649] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 647] rt_sigprocmask(SIG_SETMASK, [], [pid 652] set_robust_list(0x5555563f46a0, 24 [pid 651] chdir("./8" [pid 650] set_robust_list(0x5555563f46a0, 24 [pid 649] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 648] set_robust_list(0x5555563f46a0, 24 [pid 647] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 652] <... set_robust_list resumed>) = 0 [pid 651] <... chdir resumed>) = 0 [pid 650] <... set_robust_list resumed>) = 0 [pid 649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 648] <... set_robust_list resumed>) = 0 [pid 647] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] chdir("./8" [pid 651] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 650] chdir("./8" [pid 649] <... mmap resumed>) = 0x7fc1321e6000 [pid 648] chdir("./8" [pid 647] <... futex resumed>) = 0 [pid 652] <... chdir resumed>) = 0 [pid 651] <... prctl resumed>) = 0 [pid 650] <... chdir resumed>) = 0 [pid 649] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 648] <... chdir resumed>) = 0 [pid 647] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 651] setpgid(0, 0 [pid 650] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 649] <... mprotect resumed>) = 0 [pid 648] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 647] <... futex resumed>) = 0 [pid 652] <... prctl resumed>) = 0 [pid 651] <... setpgid resumed>) = 0 [pid 650] <... prctl resumed>) = 0 [pid 649] rt_sigprocmask(SIG_BLOCK, ~[], [pid 648] <... prctl resumed>) = 0 [pid 647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 652] setpgid(0, 0 [pid 651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 650] setpgid(0, 0 [pid 649] <... rt_sigprocmask resumed>[], 8) = 0 [pid 648] setpgid(0, 0 [pid 647] <... mmap resumed>) = 0x7fc1321c5000 ./strace-static-x86_64: Process 653 attached [pid 652] <... setpgid resumed>) = 0 [pid 651] <... openat resumed>) = 3 [pid 650] <... setpgid resumed>) = 0 [pid 649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 648] <... setpgid resumed>) = 0 [pid 647] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 653] set_robust_list(0x7fc1322069a0, 24 [pid 652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 651] write(3, "1000", 4 [pid 650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 647] <... mprotect resumed>) = 0 [pid 653] <... set_robust_list resumed>) = 0 [pid 652] <... openat resumed>) = 3 [pid 651] <... write resumed>) = 4 [pid 650] <... openat resumed>) = 3 [pid 649] <... clone3 resumed> => {parent_tid=[654]}, 88) = 654 [pid 648] <... openat resumed>) = 3 [pid 647] rt_sigprocmask(SIG_BLOCK, ~[], [pid 653] rt_sigprocmask(SIG_SETMASK, [], [pid 652] write(3, "1000", 4 [pid 651] close(3 [pid 650] write(3, "1000", 4 [pid 649] rt_sigprocmask(SIG_SETMASK, [], [pid 648] write(3, "1000", 4 [pid 647] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 654 attached [pid 653] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 652] <... write resumed>) = 4 [pid 651] <... close resumed>) = 0 [pid 650] <... write resumed>) = 4 [pid 649] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 648] <... write resumed>) = 4 [pid 647] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 654] set_robust_list(0x7fc1322069a0, 24 [pid 653] memfd_create("syzkaller", 0 [pid 652] close(3 [pid 651] symlink("/dev/binderfs", "./binderfs" [pid 650] close(3 [pid 649] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] close(3 [pid 654] <... set_robust_list resumed>) = 0 [pid 653] <... memfd_create resumed>) = 3 [pid 652] <... close resumed>) = 0 [pid 651] <... symlink resumed>) = 0 [pid 649] <... futex resumed>) = 0 [pid 647] <... clone3 resumed> => {parent_tid=[655]}, 88) = 655 [pid 653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 651] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] rt_sigprocmask(SIG_SETMASK, [], [pid 654] rt_sigprocmask(SIG_SETMASK, [], [pid 653] <... mmap resumed>) = 0x7fc129dc5000 [pid 652] symlink("/dev/binderfs", "./binderfs" [pid 651] <... futex resumed>) = 0 [pid 650] <... close resumed>) = 0 [pid 649] <... futex resumed>) = 0 [pid 648] <... close resumed>) = 0 [pid 647] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 654] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 652] <... symlink resumed>) = 0 [pid 651] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 650] symlink("/dev/binderfs", "./binderfs" [pid 649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 648] symlink("/dev/binderfs", "./binderfs" [pid 647] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] memfd_create("syzkaller", 0 [pid 653] <... write resumed>) = 262144 [pid 652] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... rt_sigaction resumed>NULL, 8) = 0 [pid 650] <... symlink resumed>) = 0 [pid 649] <... mmap resumed>) = 0x7fc1321c5000 [pid 648] <... symlink resumed>) = 0 [pid 647] <... futex resumed>) = 0 [pid 654] <... memfd_create resumed>) = 3 [pid 653] munmap(0x7fc129dc5000, 262144 [pid 652] <... futex resumed>) = 0 [pid 651] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 650] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 648] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 653] <... munmap resumed>) = 0 [pid 652] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 650] <... futex resumed>) = 0 [pid 649] <... mprotect resumed>) = 0 [pid 648] <... futex resumed>) = 0 [pid 653] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 649] rt_sigprocmask(SIG_BLOCK, ~[], [pid 653] <... openat resumed>) = 4 [pid 651] <... mmap resumed>) = 0x7fc1321e6000 [pid 649] <... rt_sigprocmask resumed>[], 8) = 0 [pid 653] ioctl(4, LOOP_SET_FD, 3 [pid 651] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0}./strace-static-x86_64: Process 655 attached [pid 654] <... mmap resumed>) = 0x7fc129dc5000 [pid 652] <... rt_sigaction resumed>NULL, 8) = 0 [pid 651] <... mprotect resumed>) = 0 [pid 650] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 648] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 655] set_robust_list(0x7fc1321e59a0, 24 [pid 654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 652] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 650] <... rt_sigaction resumed>NULL, 8) = 0 [pid 648] <... rt_sigaction resumed>NULL, 8) = 0 [pid 655] <... set_robust_list resumed>) = 0 [pid 654] <... write resumed>) = 262144 [pid 652] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 650] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 648] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 655] rt_sigprocmask(SIG_SETMASK, [], [pid 654] munmap(0x7fc129dc5000, 262144 [pid 652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 648] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 655] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 654] <... munmap resumed>) = 0 [pid 652] <... mmap resumed>) = 0x7fc1321e6000 [pid 650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 655] creat("./bus", 000 [pid 654] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 652] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 650] <... mmap resumed>) = 0x7fc1321e6000 [pid 648] <... mmap resumed>) = 0x7fc1321e6000 [pid 655] <... creat resumed>) = 5 [pid 654] <... openat resumed>) = 4 [pid 652] <... mprotect resumed>) = 0 [pid 650] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 648] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 655] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] ioctl(4, LOOP_SET_FD, 3 [pid 652] rt_sigprocmask(SIG_BLOCK, ~[], [pid 650] <... mprotect resumed>) = 0 [pid 648] <... mprotect resumed>) = 0 [pid 655] <... futex resumed>) = 1 [pid 652] <... rt_sigprocmask resumed>[], 8) = 0 [pid 650] rt_sigprocmask(SIG_BLOCK, ~[], [pid 649] <... clone3 resumed> => {parent_tid=[657]}, 88) = 657 [pid 648] rt_sigprocmask(SIG_BLOCK, ~[], [pid 651] rt_sigprocmask(SIG_BLOCK, ~[], [pid 647] <... futex resumed>) = 0 [pid 655] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] <... ioctl resumed>) = 0 [pid 652] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 651] <... rt_sigprocmask resumed>[], 8) = 0 [pid 650] <... rt_sigprocmask resumed>[], 8) = 0 [pid 649] rt_sigprocmask(SIG_SETMASK, [], [pid 648] <... rt_sigprocmask resumed>[], 8) = 0 [pid 647] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] close(3 [pid 651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 650] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 649] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 648] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 647] <... futex resumed>) = 0 [pid 655] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 653] <... close resumed>) = 0 [pid 652] <... clone3 resumed> => {parent_tid=[659]}, 88) = 659 [pid 649] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] <... mount resumed>) = 0 [pid 653] mkdir("./file0", 0777 [pid 652] rt_sigprocmask(SIG_SETMASK, [], [pid 651] <... clone3 resumed> => {parent_tid=[661]}, 88) = 661 [pid 650] <... clone3 resumed> => {parent_tid=[660]}, 88) = 660 [pid 649] <... futex resumed>) = 0 [pid 648] <... clone3 resumed> => {parent_tid=[662]}, 88) = 662 [pid 655] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 651] rt_sigprocmask(SIG_SETMASK, [], [pid 650] rt_sigprocmask(SIG_SETMASK, [], [pid 649] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 648] rt_sigprocmask(SIG_SETMASK, [], [pid 655] <... futex resumed>) = 1 [pid 653] <... mkdir resumed>) = 0 [pid 652] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 648] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 647] <... futex resumed>) = 0 [pid 655] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] <... futex resumed>) = 0 [pid 651] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 650] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 652] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... futex resumed>) = 0 [pid 650] <... futex resumed>) = 0 [pid 648] <... futex resumed>) = 0 [pid 647] <... futex resumed>) = 0 [pid 655] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 652] <... futex resumed>) = 0 [pid 651] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 650] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 651] <... futex resumed>) = 0 [pid 650] <... futex resumed>) = 0 [pid 648] <... futex resumed>) = 0 [pid 652] <... mmap resumed>) = 0x7fc1321c5000 [pid 651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 652] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 651] <... mmap resumed>) = 0x7fc1321c5000 [pid 650] <... mmap resumed>) = 0x7fc1321c5000 [pid 648] <... mmap resumed>) = 0x7fc1321c5000 [pid 652] <... mprotect resumed>) = 0 [pid 651] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 650] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 648] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 652] rt_sigprocmask(SIG_BLOCK, ~[], [pid 651] <... mprotect resumed>) = 0 [pid 650] <... mprotect resumed>) = 0 [pid 648] <... mprotect resumed>) = 0 [pid 652] <... rt_sigprocmask resumed>[], 8) = 0 [pid 651] rt_sigprocmask(SIG_BLOCK, ~[], [pid 650] rt_sigprocmask(SIG_BLOCK, ~[], [pid 648] rt_sigprocmask(SIG_BLOCK, ~[], [pid 652] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 651] <... rt_sigprocmask resumed>[], 8) = 0 [pid 650] <... rt_sigprocmask resumed>[], 8) = 0 [pid 648] <... rt_sigprocmask resumed>[], 8) = 0 [pid 651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 650] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 648] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 652] <... clone3 resumed> => {parent_tid=[663]}, 88) = 663 ./strace-static-x86_64: Process 666 attached ./strace-static-x86_64: Process 665 attached ./strace-static-x86_64: Process 664 attached ./strace-static-x86_64: Process 663 attached ./strace-static-x86_64: Process 662 attached ./strace-static-x86_64: Process 661 attached ./strace-static-x86_64: Process 660 attached ./strace-static-x86_64: Process 659 attached ./strace-static-x86_64: Process 657 attached [pid 654] <... ioctl resumed>) = 0 [pid 651] <... clone3 resumed> => {parent_tid=[665]}, 88) = 665 [pid 666] set_robust_list(0x7fc1321e59a0, 24 [pid 665] set_robust_list(0x7fc1321e59a0, 24 [pid 664] set_robust_list(0x7fc1321e59a0, 24 [pid 663] set_robust_list(0x7fc1321e59a0, 24 [pid 662] set_robust_list(0x7fc1322069a0, 24 [pid 661] set_robust_list(0x7fc1322069a0, 24 [pid 660] set_robust_list(0x7fc1322069a0, 24 [pid 659] set_robust_list(0x7fc1322069a0, 24 [pid 657] set_robust_list(0x7fc1321e59a0, 24 [pid 651] rt_sigprocmask(SIG_SETMASK, [], [pid 666] <... set_robust_list resumed>) = 0 [pid 665] <... set_robust_list resumed>) = 0 [pid 664] <... set_robust_list resumed>) = 0 [pid 663] <... set_robust_list resumed>) = 0 [pid 662] <... set_robust_list resumed>) = 0 [pid 661] <... set_robust_list resumed>) = 0 [pid 660] <... set_robust_list resumed>) = 0 [pid 659] <... set_robust_list resumed>) = 0 [pid 657] <... set_robust_list resumed>) = 0 [pid 655] <... open resumed>) = 3 [pid 654] close(3 [pid 652] rt_sigprocmask(SIG_SETMASK, [], [pid 651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 650] <... clone3 resumed> => {parent_tid=[664]}, 88) = 664 [pid 648] <... clone3 resumed> => {parent_tid=[666]}, 88) = 666 [pid 666] rt_sigprocmask(SIG_SETMASK, [], [pid 664] rt_sigprocmask(SIG_SETMASK, [], [pid 663] rt_sigprocmask(SIG_SETMASK, [], [pid 662] rt_sigprocmask(SIG_SETMASK, [], [pid 661] rt_sigprocmask(SIG_SETMASK, [], [pid 660] rt_sigprocmask(SIG_SETMASK, [], [pid 659] rt_sigprocmask(SIG_SETMASK, [], [pid 657] rt_sigprocmask(SIG_SETMASK, [], [pid 655] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] <... close resumed>) = 0 [pid 652] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 651] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 650] rt_sigprocmask(SIG_SETMASK, [], [pid 648] rt_sigprocmask(SIG_SETMASK, [], [pid 666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 664] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 663] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 662] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 661] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 660] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 659] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 657] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 655] <... futex resumed>) = 1 [pid 654] mkdir("./file0", 0777 [pid 652] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... futex resumed>) = 0 [pid 650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 648] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 647] <... futex resumed>) = 0 [pid 666] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] creat("./bus", 000 [pid 662] memfd_create("syzkaller", 0 [pid 661] memfd_create("syzkaller", 0 [pid 660] memfd_create("syzkaller", 0 [pid 659] memfd_create("syzkaller", 0 [pid 657] creat("./bus", 000 [pid 655] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] <... mkdir resumed>) = 0 [pid 652] <... futex resumed>) = 0 [pid 651] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 650] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] rt_sigprocmask(SIG_SETMASK, [], [pid 655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 654] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 652] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 650] <... futex resumed>) = 0 [pid 648] <... futex resumed>) = 0 [pid 647] <... futex resumed>) = 0 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] <... creat resumed>) = 4 [pid 662] <... memfd_create resumed>) = 3 [pid 661] <... memfd_create resumed>) = 3 [pid 660] <... memfd_create resumed>) = 3 [pid 659] <... memfd_create resumed>) = 3 [pid 657] <... creat resumed>) = 3 [pid 655] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 650] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] creat("./bus", 000 [pid 664] creat("./bus", 000 [pid 663] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 657] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 655] <... socket resumed>) = 6 [pid 648] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] creat("./bus", 000 [pid 662] <... mmap resumed>) = 0x7fc129dc5000 [pid 661] <... mmap resumed>) = 0x7fc129dc5000 [pid 660] <... mmap resumed>) = 0x7fc129dc5000 [pid 659] <... mmap resumed>) = 0x7fc129dc5000 [pid 657] <... futex resumed>) = 1 [pid 655] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 666] <... creat resumed>) = 4 [pid 657] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 655] <... futex resumed>) = 0 [pid 647] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 655] recvmmsg(6, [pid 647] <... futex resumed>) = 0 [pid 647] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] <... creat resumed>) = 4 [pid 664] <... creat resumed>) = 4 [pid 663] <... futex resumed>) = 1 [pid 662] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 661] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 649] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = 1 [pid 665] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 662] <... write resumed>) = 262144 [pid 661] <... write resumed>) = 262144 [pid 660] <... write resumed>) = 262144 [pid 659] <... write resumed>) = 262144 [pid 657] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 649] <... futex resumed>) = 0 [pid 666] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 665] <... futex resumed>) = 1 [pid 664] <... futex resumed>) = 1 [pid 662] munmap(0x7fc129dc5000, 262144 [pid 661] munmap(0x7fc129dc5000, 262144 [pid 660] munmap(0x7fc129dc5000, 262144 [pid 659] munmap(0x7fc129dc5000, 262144 [pid 657] <... mount resumed>) = 0 [pid 652] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = 0 [pid 650] <... futex resumed>) = 0 [pid 649] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 648] <... futex resumed>) = 0 [pid 665] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 662] <... munmap resumed>) = 0 [pid 661] <... munmap resumed>) = 0 [pid 660] <... munmap resumed>) = 0 [pid 659] <... munmap resumed>) = 0 [pid 657] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] <... futex resumed>) = 0 [pid 662] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 661] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 660] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 659] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 657] <... futex resumed>) = 0 [pid 652] <... futex resumed>) = 1 [pid 651] <... futex resumed>) = 0 [pid 649] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 663] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 662] <... openat resumed>) = 5 [pid 661] <... openat resumed>) = 5 [pid 660] <... openat resumed>) = 5 [pid 659] <... openat resumed>) = 5 [pid 657] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 652] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... futex resumed>) = 0 [pid 665] <... mount resumed>) = 0 [pid 663] <... mount resumed>) = 0 [pid 662] ioctl(5, LOOP_SET_FD, 3 [pid 661] ioctl(5, LOOP_SET_FD, 3 [pid 660] ioctl(5, LOOP_SET_FD, 3 [pid 659] ioctl(5, LOOP_SET_FD, 3 [pid 657] <... open resumed>) = 5 [pid 649] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 657] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = 1 [pid 663] <... futex resumed>) = 1 [pid 657] <... futex resumed>) = 0 [pid 652] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = 0 [pid 649] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 657] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 652] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 657] <... socket resumed>) = 6 [pid 652] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = 0 [pid 649] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 663] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 657] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] <... mount resumed>) = 0 [pid 650] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = 0 [pid 664] <... futex resumed>) = 0 [pid 663] <... open resumed>) = 6 [pid 662] <... ioctl resumed>) = 0 [pid 657] <... futex resumed>) = 0 [pid 653] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 650] <... futex resumed>) = 1 [pid 649] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... futex resumed>) = 1 [pid 666] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 664] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 663] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] close(3 [pid 661] <... ioctl resumed>) = 0 [pid 657] recvmmsg(6, [pid 649] <... futex resumed>) = 0 [pid 650] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 648] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... mount resumed>) = 0 [pid 664] <... mount resumed>) = 0 [pid 663] <... futex resumed>) = 1 [pid 662] <... close resumed>) = 0 [pid 661] close(3 [pid 652] <... futex resumed>) = 0 [pid 649] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 662] mkdir("./file0", 0777 [pid 661] <... close resumed>) = 0 [pid 652] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = 0 [pid 664] <... futex resumed>) = 0 [pid 663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 662] <... mkdir resumed>) = 0 [pid 661] mkdir("./file0", 0777 [pid 652] <... futex resumed>) = 0 [pid 666] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 662] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 661] <... mkdir resumed>) = 0 [pid 652] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] <... socket resumed>) = 7 [pid 661] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 663] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 652] <... futex resumed>) = 0 [pid 663] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 652] <... futex resumed>) = 0 [pid 663] recvmmsg(7, [pid 652] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 660] <... ioctl resumed>) = 0 [pid 660] close(3) = 0 [pid 660] mkdir("./file0", 0777 [pid 653] <... openat resumed>) = 7 [pid 650] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 650] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [ 31.372535][ T653] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 31.384682][ T653] ext4 filesystem being mounted at /root/syzkaller.zNZ9LH/9/file0 supports timestamps until 2038 (0x7fffffff) [ 31.398471][ T654] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 648] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = 0 [pid 664] <... futex resumed>) = 0 [pid 650] <... futex resumed>) = 1 [pid 648] <... futex resumed>) = 1 [pid 666] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 664] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 650] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 648] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 660] <... mkdir resumed>) = 0 [pid 653] chdir("./file0" [pid 666] <... open resumed>) = 3 [pid 665] <... open resumed>) = 6 [pid 664] <... open resumed>) = 3 [pid 660] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 659] <... ioctl resumed>) = 0 [pid 653] <... chdir resumed>) = 0 [pid 647] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 647] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129de4000 [pid 647] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 647] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 647] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} => {parent_tid=[675]}, 88) = 675 [pid 666] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] close(3 [pid 654] <... mount resumed>) = 0 [pid 653] ioctl(4, LOOP_CLR_FD [pid 647] rt_sigprocmask(SIG_SETMASK, [], [pid 665] <... futex resumed>) = 1 [pid 647] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 647] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 647] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 675 attached [pid 675] set_robust_list(0x7fc129e049a0, 24 [pid 666] <... futex resumed>) = 1 [pid 665] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] <... futex resumed>) = 1 [pid 659] <... close resumed>) = 0 [pid 654] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 653] <... ioctl resumed>) = 0 [pid 651] <... futex resumed>) = 0 [pid 650] <... futex resumed>) = 0 [pid 648] <... futex resumed>) = 0 [pid 666] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 659] mkdir("./file0", 0777 [pid 653] close(4 [pid 651] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] <... futex resumed>) = 0 [pid 659] <... mkdir resumed>) = 0 [pid 653] <... close resumed>) = 0 [pid 651] <... futex resumed>) = 1 [pid 665] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 659] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 653] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... socket resumed>) = 3 [pid 650] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = 0 [pid 664] <... futex resumed>) = 0 [pid 650] <... futex resumed>) = 1 [pid 648] <... futex resumed>) = 1 [pid 666] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 664] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 650] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 648] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... socket resumed>) = 6 [pid 664] <... socket resumed>) = 6 [pid 666] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = 1 [pid 664] <... futex resumed>) = 1 [pid 650] <... futex resumed>) = 0 [pid 648] <... futex resumed>) = 0 [pid 666] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 650] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 650] <... futex resumed>) = 0 [pid 648] <... futex resumed>) = 0 [pid 666] recvmmsg(6, [pid 664] recvmmsg(6, [pid 650] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 648] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... openat resumed>) = 7 [pid 675] <... set_robust_list resumed>) = 0 [pid 675] rt_sigprocmask(SIG_SETMASK, [], [pid 654] chdir("./file0" [pid 675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 654] <... chdir resumed>) = 0 [pid 675] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 654] ioctl(4, LOOP_CLR_FD [pid 675] <... mmap resumed>) = 0x20000000 [pid 654] <... ioctl resumed>) = 0 [pid 675] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 654] close(4 [pid 647] <... futex resumed>) = 0 [pid 675] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] <... close resumed>) = 0 [pid 647] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 647] <... futex resumed>) = 0 [pid 665] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] <... futex resumed>) = 0 [pid 652] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 649] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 665] <... futex resumed>) = 1 [pid 662] <... mount resumed>) = 0 [pid 654] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] memfd_create("syzkaller", 0 [pid 652] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... futex resumed>) = 0 [pid 649] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 662] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 653] <... memfd_create resumed>) = 4 [pid 652] <... futex resumed>) = 0 [pid 651] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 662] <... openat resumed>) = 7 [pid 653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 651] <... futex resumed>) = 0 [pid 649] futex(0x7fc1322d26cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] recvmmsg(3, [pid 662] chdir("./file0" [pid 653] <... mmap resumed>) = 0x7fc1219e4000 [pid 652] <... mmap resumed>) = 0x7fc129de4000 [pid 651] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 662] <... chdir resumed>) = 0 [pid 653] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 652] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 662] ioctl(5, LOOP_CLR_FD [pid 653] <... write resumed>) = 65536 [pid 652] <... mprotect resumed>) = 0 [pid 662] <... ioctl resumed>) = 0 [pid 653] munmap(0x7fc1219e4000, 65536 [pid 652] rt_sigprocmask(SIG_BLOCK, ~[], [pid 662] close(5 [pid 653] <... munmap resumed>) = 0 [pid 652] <... rt_sigprocmask resumed>[], 8) = 0 [pid 662] <... close resumed>) = 0 [pid 653] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 652] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 662] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... openat resumed>) = 8 [pid 662] <... futex resumed>) = 0 [pid 653] ioctl(8, LOOP_SET_FD, 4 [pid 652] <... clone3 resumed> => {parent_tid=[682]}, 88) = 682 [pid 662] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 652] rt_sigprocmask(SIG_SETMASK, [], [pid 653] ioctl(8, LOOP_CLR_FD [pid 652] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 653] <... ioctl resumed>) = 0 [pid 652] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 652] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 653] close(8) = 0 [pid 654] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 654] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 653] close(4 [pid 654] <... mmap resumed>) = 0x20000000 [pid 654] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] <... close resumed>) = 0 [pid 653] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] <... futex resumed>) = 1 [pid 654] memfd_create("syzkaller", 0) = 4 [pid 654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc121a05000 [pid 654] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [ 31.410460][ T654] ext4 filesystem being mounted at /root/syzkaller.gpm0iI/9/file0 supports timestamps until 2038 (0x7fffffff) [ 31.435001][ T662] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 31.447265][ T662] ext4 filesystem being mounted at /root/syzkaller.duxz7m/8/file0 supports timestamps until 2038 (0x7fffffff) [pid 654] munmap(0x7fc121a05000, 65536) = 0 ./strace-static-x86_64: Process 682 attached [pid 654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 8 [pid 654] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 654] ioctl(8, LOOP_CLR_FD) = 0 [pid 682] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 682] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 682] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0) = 0x20000000 [pid 682] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] <... futex resumed>) = 0 [pid 652] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 682] <... futex resumed>) = 1 [pid 654] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 654] close(8) = 0 [pid 654] close(4) = 0 [pid 654] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 682] memfd_create("syzkaller", 0) = 3 [pid 682] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 682] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 682] munmap(0x7fc1219e4000, 65536) = 0 [pid 682] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 8 [pid 682] ioctl(8, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 682] ioctl(8, LOOP_CLR_FD) = 0 [pid 682] ioctl(8, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 682] close(8) = 0 [pid 682] close(3) = 0 [pid 682] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 682] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 650] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 648] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 650] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = 0 [pid 650] <... futex resumed>) = 0 [pid 648] <... futex resumed>) = 1 [pid 662] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 648] futex(0x7fc1322d26cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 662] <... mmap resumed>) = 0x20000000 [pid 650] <... mmap resumed>) = 0x7fc129de4000 [pid 662] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 650] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 662] <... futex resumed>) = 1 [pid 650] <... mprotect resumed>) = 0 [pid 648] <... futex resumed>) = 0 [pid 662] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 650] rt_sigprocmask(SIG_BLOCK, ~[], [pid 648] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 650] <... rt_sigprocmask resumed>[], 8) = 0 [pid 648] <... futex resumed>) = 0 [pid 662] memfd_create("syzkaller", 0 [pid 650] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 662] <... memfd_create resumed>) = 5 [ 31.475136][ T661] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 31.475181][ T660] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 31.492943][ T661] ext4 filesystem being mounted at /root/syzkaller.IpShW6/8/file0 supports timestamps until 2038 (0x7fffffff) [ 31.510963][ T660] ext4 filesystem being mounted at /root/syzkaller.SVIRRC/8/file0 supports timestamps until 2038 (0x7fffffff) [pid 662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 650] <... clone3 resumed> => {parent_tid=[685]}, 88) = 685 ./strace-static-x86_64: Process 685 attached [pid 662] <... mmap resumed>) = 0x7fc121a05000 [pid 661] <... mount resumed>) = 0 [pid 660] <... mount resumed>) = 0 [pid 651] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 650] rt_sigprocmask(SIG_SETMASK, [], [pid 685] set_robust_list(0x7fc129e049a0, 24 [pid 661] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 660] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 651] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] <... set_robust_list resumed>) = 0 [pid 662] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 661] <... openat resumed>) = 7 [pid 660] <... openat resumed>) = 7 [pid 651] <... futex resumed>) = 0 [pid 650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 685] rt_sigprocmask(SIG_SETMASK, [], [pid 661] chdir("./file0" [pid 660] chdir("./file0" [pid 651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 685] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 662] <... write resumed>) = 65536 [pid 661] <... chdir resumed>) = 0 [pid 660] <... chdir resumed>) = 0 [pid 651] <... mmap resumed>) = 0x7fc129de4000 [pid 650] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 662] munmap(0x7fc121a05000, 65536 [pid 661] ioctl(5, LOOP_CLR_FD [pid 660] ioctl(5, LOOP_CLR_FD [pid 651] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 650] <... futex resumed>) = 0 [pid 685] <... mmap resumed>) = 0x20000000 [pid 661] <... ioctl resumed>) = 0 [pid 660] <... ioctl resumed>) = 0 [pid 651] <... mprotect resumed>) = 0 [pid 650] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... munmap resumed>) = 0 [pid 661] close(5 [pid 660] close(5 [pid 651] rt_sigprocmask(SIG_BLOCK, ~[], [pid 650] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 685] <... futex resumed>) = 0 [pid 662] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 661] <... close resumed>) = 0 [pid 660] <... close resumed>) = 0 [pid 651] <... rt_sigprocmask resumed>[], 8) = 0 [pid 650] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] memfd_create("syzkaller", 0 [pid 662] <... openat resumed>) = 8 [pid 661] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 660] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 650] <... futex resumed>) = 0 [pid 685] <... memfd_create resumed>) = 5 [pid 662] ioctl(8, LOOP_SET_FD, 5 [pid 661] <... futex resumed>) = 0 [pid 660] <... futex resumed>) = 0 [pid 685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 662] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 661] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 660] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 651] <... clone3 resumed> => {parent_tid=[686]}, 88) = 686 [pid 685] <... mmap resumed>) = 0x7fc1219e4000 [pid 662] ioctl(8, LOOP_CLR_FD [pid 651] rt_sigprocmask(SIG_SETMASK, [], [pid 685] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 662] <... ioctl resumed>) = 0 [pid 651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 685] <... write resumed>) = 65536 [pid 651] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] munmap(0x7fc1219e4000, 65536 [pid 651] <... futex resumed>) = 0 [pid 685] <... munmap resumed>) = 0 [pid 651] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 8 [pid 685] ioctl(8, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 685] ioctl(8, LOOP_CLR_FD) = 0 [pid 662] ioctl(8, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 662] close(8) = 0 [pid 662] close(5) = 0 [pid 662] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 662] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 685] ioctl(8, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 685] close(8) = 0 [pid 685] close(5) = 0 [pid 685] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 685] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 686 attached [pid 659] <... mount resumed>) = 0 [pid 659] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY) = -1 ENOENT (No such file or directory) [pid 659] ioctl(5, LOOP_CLR_FD) = 0 [pid 659] close(5) = 0 [pid 659] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 659] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 686] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 686] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 686] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0) = 0x20000000 [pid 686] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 651] <... futex resumed>) = 0 [pid 686] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 651] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 661] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = 1 [pid 661] memfd_create("syzkaller", 0) = 5 [pid 661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 661] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 661] munmap(0x7fc1219e4000, 65536) = 0 [pid 661] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 8 [pid 661] ioctl(8, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 661] ioctl(8, LOOP_CLR_FD) = 0 [pid 661] ioctl(8, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 661] close(8) = 0 [pid 661] close(5) = 0 [pid 661] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 31.510978][ T659] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 31.544735][ T659] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 661] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 649] exit_group(0) = ? [pid 654] <... futex resumed>) = -1 (errno 18446744073709551555) [pid 657] <... recvmmsg resumed> ) = ? [pid 657] +++ exited with 0 +++ [pid 654] +++ exited with 0 +++ [pid 649] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=649, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 292] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 647] exit_group(0 [pid 292] newfstatat(3, "", [pid 647] <... exit_group resumed>) = ? [pid 653] <... futex resumed>) = ? [pid 675] <... futex resumed>) = ? [pid 655] <... recvmmsg resumed> ) = ? [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 675] +++ exited with 0 +++ [pid 655] +++ exited with 0 +++ [pid 653] +++ exited with 0 +++ [pid 647] +++ exited with 0 +++ [pid 292] getdents64(3, [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=647, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 292] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 292] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 292] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./9/bus", [pid 652] exit_group(0 [pid 292] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 682] <... futex resumed>) = ? [pid 663] <... recvmmsg resumed> ) = ? [pid 659] <... futex resumed>) = ? [pid 652] <... exit_group resumed>) = ? [pid 292] unlink("./9/bus" [pid 682] +++ exited with 0 +++ [pid 663] +++ exited with 0 +++ [pid 659] +++ exited with 0 +++ [pid 652] +++ exited with 0 +++ [pid 292] <... unlink resumed>) = 0 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=652, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 292] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] restart_syscall(<... resuming interrupted clone ...> [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./9/binderfs", [pid 293] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... openat resumed>) = 3 [pid 292] unlink("./9/binderfs" [pid 296] <... restart_syscall resumed>) = 0 [pid 293] newfstatat(3, "", [pid 292] <... unlink resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 293] getdents64(3, [pid 296] newfstatat(3, "", [pid 293] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, [pid 293] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 296] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = 0 [pid 296] <... umount2 resumed>) = 0 [pid 296] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./8/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] unlink("./8/bus") = 0 [pid 293] newfstatat(AT_FDCWD, "./9/bus", [pid 296] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./8/binderfs", [pid 293] unlink("./9/bus" [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./8/binderfs" [pid 293] <... unlink resumed>) = 0 [pid 296] <... unlink resumed>) = 0 [pid 293] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./9/binderfs") = 0 [pid 293] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 650] exit_group(0) = ? [pid 664] <... recvmmsg resumed>) = ? [pid 685] <... futex resumed>) = ? [pid 660] <... futex resumed>) = ? [pid 685] +++ exited with 0 +++ [pid 664] +++ exited with 0 +++ [pid 660] +++ exited with 0 +++ [pid 648] exit_group(0 [pid 662] <... futex resumed>) = ? [pid 666] <... recvmmsg resumed> ) = ? [pid 648] <... exit_group resumed>) = ? [pid 662] +++ exited with 0 +++ [pid 666] +++ exited with 0 +++ [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 651] exit_group(0 [pid 292] <... openat resumed>) = 4 [pid 651] <... exit_group resumed>) = ? [pid 686] <... futex resumed>) = ? [pid 661] <... futex resumed>) = ? [pid 665] <... recvmmsg resumed> ) = ? [pid 686] +++ exited with 0 +++ [pid 661] +++ exited with 0 +++ [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./9/file0") = 0 [pid 292] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./9") = 0 [pid 292] mkdir("./10", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 665] +++ exited with 0 +++ [pid 651] +++ exited with 0 +++ [pid 650] +++ exited with 0 +++ [pid 648] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=650, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=651, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=648, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 295] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... openat resumed>) = 3 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... openat resumed>) = 3 [pid 295] newfstatat(3, "", [pid 294] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] newfstatat(3, "", [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(3, [pid 294] <... openat resumed>) = 3 [pid 297] getdents64(3, [pid 295] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] newfstatat(3, "", [pid 297] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] <... umount2 resumed>) = 0 [pid 297] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... umount2 resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] newfstatat(AT_FDCWD, "./8/bus", [pid 294] getdents64(3, [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] newfstatat(AT_FDCWD, "./8/bus", [pid 295] unlink("./8/bus" [pid 294] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 297] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... unlink resumed>) = 0 [pid 294] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] unlink("./8/bus" [pid 295] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./8/binderfs", [pid 297] <... unlink resumed>) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] unlink("./8/binderfs" [pid 294] <... umount2 resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... unlink resumed>) = 0 [pid 294] umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] newfstatat(AT_FDCWD, "./8/binderfs", [pid 295] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] unlink("./8/binderfs" [pid 294] newfstatat(AT_FDCWD, "./8/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... unlink resumed>) = 0 [pid 294] unlink("./8/bus" [pid 297] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... unlink resumed>) = 0 [pid 294] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] unlink("./8/binderfs") = 0 [pid 294] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] <... openat resumed>) = 3 [pid 296] <... umount2 resumed>) = 0 [pid 296] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] ioctl(3, LOOP_CLR_FD [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./8/file0") = 0 [pid 296] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./8") = 0 [pid 296] mkdir("./9", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./9/file0") = 0 [pid 293] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./9") = 0 [pid 293] mkdir("./10", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 296] <... openat resumed>) = 3 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] ioctl(3, LOOP_CLR_FD [pid 292] close(3 [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] <... close resumed>) = 0 [pid 296] close(3 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... umount2 resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 295] <... umount2 resumed>) = 0 [pid 294] <... umount2 resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] ioctl(3, LOOP_CLR_FD [pid 292] <... clone resumed>, child_tidptr=0x5555563f4690) = 688 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] <... clone resumed>, child_tidptr=0x5555563f4690) = 689 [pid 294] newfstatat(AT_FDCWD, "./8/file0", [pid 293] close(3 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... close resumed>) = 0 [pid 294] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", [pid 293] <... clone resumed>, child_tidptr=0x5555563f4690) = 690 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./8/file0") = 0 [pid 294] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./8") = 0 [pid 294] mkdir("./9", 0777 [pid 297] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... mkdir resumed>) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563f4690) = 691 ./strace-static-x86_64: Process 690 attached [pid 690] set_robust_list(0x5555563f46a0, 24) = 0 [pid 690] chdir("./10") = 0 [pid 690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 690] setpgid(0, 0) = 0 [pid 690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 690] write(3, "1000", 4) = 4 [pid 690] close(3) = 0 [pid 690] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 688 attached ./strace-static-x86_64: Process 689 attached ) = 0 [pid 688] set_robust_list(0x5555563f46a0, 24 [pid 689] set_robust_list(0x5555563f46a0, 24 [pid 688] <... set_robust_list resumed>) = 0 [pid 688] chdir("./10" [pid 689] <... set_robust_list resumed>) = 0 [pid 689] chdir("./9" [pid 688] <... chdir resumed>) = 0 [pid 690] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./8/file0", [pid 297] newfstatat(AT_FDCWD, "./8/file0", [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... openat resumed>) = 4 [pid 297] <... openat resumed>) = 4 [pid 295] newfstatat(4, "", [pid 297] newfstatat(4, "", [pid 689] <... chdir resumed>) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 690] <... futex resumed>) = 0 [pid 295] getdents64(4, [pid 297] getdents64(4, [pid 688] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 295] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 297] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, [pid 297] getdents64(4, [pid 295] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 297] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 295] close(4 [pid 297] close(4 [pid 690] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 295] <... close resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 295] rmdir("./8/file0" [pid 297] rmdir("./8/file0" [pid 295] <... rmdir resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 295] getdents64(3, [pid 297] getdents64(3, [pid 688] <... prctl resumed>) = 0 [pid 295] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 297] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 295] close(3 [pid 297] close(3 [pid 689] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 295] <... close resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 295] rmdir("./8" [pid 297] rmdir("./8" [pid 690] <... rt_sigaction resumed>NULL, 8) = 0 [pid 688] setpgid(0, 0 [pid 689] <... prctl resumed>) = 0 [pid 690] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 295] <... rmdir resumed>) = 0 [pid 689] setpgid(0, 0 [pid 690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 688] <... setpgid resumed>) = 0 [pid 690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 297] <... rmdir resumed>) = 0 [pid 295] mkdir("./9", 0777 [pid 297] mkdir("./9", 0777 [pid 295] <... mkdir resumed>) = 0 [pid 690] <... mmap resumed>) = 0x7fc1321e6000 [pid 689] <... setpgid resumed>) = 0 [pid 689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 297] <... mkdir resumed>) = 0 [pid 690] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 690] rt_sigprocmask(SIG_BLOCK, ~[], [pid 688] <... openat resumed>) = 3 [pid 689] <... openat resumed>) = 3 [pid 690] <... rt_sigprocmask resumed>[], 8) = 0 [pid 688] write(3, "1000", 4 [pid 690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 689] write(3, "1000", 4 [pid 688] <... write resumed>) = 4 [pid 689] <... write resumed>) = 4 [pid 688] close(3 [pid 690] <... clone3 resumed> => {parent_tid=[692]}, 88) = 692 [pid 689] close(3 [pid 688] <... close resumed>) = 0 [pid 690] rt_sigprocmask(SIG_SETMASK, [], [pid 689] <... close resumed>) = 0 [pid 688] symlink("/dev/binderfs", "./binderfs" [pid 690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 689] symlink("/dev/binderfs", "./binderfs" [pid 688] <... symlink resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 295] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 690] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... symlink resumed>) = 0 [pid 688] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... openat resumed>) = 3 [pid 295] <... openat resumed>) = 3 [pid 297] ioctl(3, LOOP_CLR_FD [pid 295] ioctl(3, LOOP_CLR_FD [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] close(3 [pid 295] close(3 [pid 690] <... futex resumed>) = 0 [pid 689] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... futex resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 690] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 688] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 690] <... futex resumed>) = 0 [pid 689] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 688] <... rt_sigaction resumed>NULL, 8) = 0 [pid 690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 689] <... rt_sigaction resumed>NULL, 8) = 0 [pid 688] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 690] <... mmap resumed>) = 0x7fc1321c5000 [pid 689] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] <... clone resumed>, child_tidptr=0x5555563f4690) = 693 [pid 690] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 689] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 295] <... clone resumed>, child_tidptr=0x5555563f4690) = 694 [pid 690] <... mprotect resumed>) = 0 [pid 689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 688] <... mmap resumed>) = 0x7fc1321e6000 [pid 690] rt_sigprocmask(SIG_BLOCK, ~[], [pid 689] <... mmap resumed>) = 0x7fc1321e6000 [pid 688] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 690] <... rt_sigprocmask resumed>[], 8) = 0 [pid 689] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 688] <... mprotect resumed>) = 0 [pid 690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 689] <... mprotect resumed>) = 0 [pid 688] rt_sigprocmask(SIG_BLOCK, ~[], [pid 689] rt_sigprocmask(SIG_BLOCK, ~[], [pid 688] <... rt_sigprocmask resumed>[], 8) = 0 [pid 690] <... clone3 resumed> => {parent_tid=[695]}, 88) = 695 [pid 689] <... rt_sigprocmask resumed>[], 8) = 0 [pid 688] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0}./strace-static-x86_64: Process 691 attached [pid 690] rt_sigprocmask(SIG_SETMASK, [], [pid 689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 688] <... clone3 resumed> => {parent_tid=[696]}, 88) = 696 ./strace-static-x86_64: Process 694 attached [pid 691] set_robust_list(0x5555563f46a0, 24 [pid 690] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... clone3 resumed> => {parent_tid=[697]}, 88) = 697 [pid 688] rt_sigprocmask(SIG_SETMASK, [], [pid 694] set_robust_list(0x5555563f46a0, 24 [pid 691] <... set_robust_list resumed>) = 0 [pid 690] <... futex resumed>) = 0 [pid 689] rt_sigprocmask(SIG_SETMASK, [], [pid 688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 694] <... set_robust_list resumed>) = 0 [pid 690] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 689] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 688] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] chdir("./9" [pid 691] chdir("./9" [pid 689] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... futex resumed>) = 0 [pid 694] <... chdir resumed>) = 0 [pid 689] <... futex resumed>) = 0 [pid 688] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 689] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... futex resumed>) = 0 [pid 694] <... prctl resumed>) = 0 [pid 689] <... futex resumed>) = 0 [pid 688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 694] setpgid(0, 0 [pid 689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 688] <... mmap resumed>) = 0x7fc1321c5000 [pid 694] <... setpgid resumed>) = 0 [pid 689] <... mmap resumed>) = 0x7fc1321c5000 [pid 688] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 691] <... chdir resumed>) = 0 [pid 689] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 688] <... mprotect resumed>) = 0 [pid 694] <... openat resumed>) = 3 [pid 691] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 689] <... mprotect resumed>) = 0 [pid 688] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 693 attached [pid 694] write(3, "1000", 4 [pid 691] <... prctl resumed>) = 0 [pid 689] rt_sigprocmask(SIG_BLOCK, ~[], [pid 688] <... rt_sigprocmask resumed>[], 8) = 0 [pid 694] <... write resumed>) = 4 [pid 689] <... rt_sigprocmask resumed>[], 8) = 0 [pid 688] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 694] close(3 [pid 693] set_robust_list(0x5555563f46a0, 24 [pid 691] setpgid(0, 0 [pid 689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 694] <... close resumed>) = 0 [pid 688] <... clone3 resumed> => {parent_tid=[698]}, 88) = 698 ./strace-static-x86_64: Process 697 attached ./strace-static-x86_64: Process 695 attached [pid 694] symlink("/dev/binderfs", "./binderfs" [pid 689] <... clone3 resumed> => {parent_tid=[699]}, 88) = 699 [pid 688] rt_sigprocmask(SIG_SETMASK, [], [pid 697] set_robust_list(0x7fc1322069a0, 24 [pid 695] set_robust_list(0x7fc1321e59a0, 24 [pid 694] <... symlink resumed>) = 0 [pid 689] rt_sigprocmask(SIG_SETMASK, [], [pid 688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 697] <... set_robust_list resumed>) = 0 [pid 695] <... set_robust_list resumed>) = 0 [pid 694] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 688] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] rt_sigprocmask(SIG_SETMASK, [], [pid 695] rt_sigprocmask(SIG_SETMASK, [], [pid 694] <... futex resumed>) = 0 [pid 689] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... futex resumed>) = 0 [pid 697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 695] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 694] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 689] <... futex resumed>) = 0 [pid 688] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] memfd_create("syzkaller", 0 [pid 695] creat("./bus", 000 [pid 694] <... rt_sigaction resumed>NULL, 8) = 0 [pid 689] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] <... memfd_create resumed>) = 3 [pid 695] <... creat resumed>) = 3 [pid 694] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 695] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 697] <... mmap resumed>) = 0x7fc129dc5000 [pid 695] <... futex resumed>) = 1 [pid 694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 690] <... futex resumed>) = 0 [pid 697] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 695] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] <... mmap resumed>) = 0x7fc1321e6000 [pid 693] <... set_robust_list resumed>) = 0 [pid 691] <... setpgid resumed>) = 0 [pid 690] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 699 attached ./strace-static-x86_64: Process 696 attached ./strace-static-x86_64: Process 692 attached [pid 697] <... write resumed>) = 262144 [pid 695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 690] <... futex resumed>) = 0 [pid 699] set_robust_list(0x7fc1321e59a0, 24 [pid 695] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 694] <... mprotect resumed>) = 0 [pid 693] chdir("./9" [pid 690] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... set_robust_list resumed>) = 0 [pid 697] munmap(0x7fc129dc5000, 262144 [pid 695] <... mount resumed>) = 0 [pid 694] rt_sigprocmask(SIG_BLOCK, ~[], [pid 691] <... openat resumed>) = 3 ./strace-static-x86_64: Process 698 attached [pid 699] rt_sigprocmask(SIG_SETMASK, [], [pid 697] <... munmap resumed>) = 0 [pid 696] set_robust_list(0x7fc1322069a0, 24 [pid 695] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... rt_sigprocmask resumed>[], 8) = 0 [pid 693] <... chdir resumed>) = 0 [pid 692] set_robust_list(0x7fc1322069a0, 24 [pid 699] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 697] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 695] <... futex resumed>) = 1 [pid 694] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 690] <... futex resumed>) = 0 [pid 699] creat("./bus", 000 [pid 697] <... openat resumed>) = 4 [pid 695] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 693] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 691] write(3, "1000", 4 [pid 690] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... creat resumed>) = 5 [pid 698] set_robust_list(0x7fc1321e59a0, 24 [pid 697] ioctl(4, LOOP_SET_FD, 3 [pid 696] <... set_robust_list resumed>) = 0 [pid 695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] <... clone3 resumed> => {parent_tid=[700]}, 88) = 700 [pid 693] <... prctl resumed>) = 0 [pid 692] <... set_robust_list resumed>) = 0 [pid 691] <... write resumed>) = 4 [pid 690] <... futex resumed>) = 0 [pid 699] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 694] rt_sigprocmask(SIG_SETMASK, [], [pid 693] setpgid(0, 0 [pid 691] close(3 [pid 690] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... futex resumed>) = 1 [pid 696] rt_sigprocmask(SIG_SETMASK, [], [pid 694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 693] <... setpgid resumed>) = 0 [pid 691] <... close resumed>) = 0 [pid 689] <... futex resumed>) = 0 [pid 692] rt_sigprocmask(SIG_SETMASK, [], [pid 699] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] <... set_robust_list resumed>) = 0 [pid 694] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 691] symlink("/dev/binderfs", "./binderfs" [pid 692] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 689] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = 0 [pid 699] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 694] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... mount resumed>) = 0 [pid 694] <... futex resumed>) = 0 [pid 693] <... openat resumed>) = 3 [pid 691] <... symlink resumed>) = 0 [pid 699] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 696] memfd_create("syzkaller", 0 [pid 694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 693] write(3, "1000", 4 [pid 692] memfd_create("syzkaller", 0 [pid 691] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = 1 [pid 696] <... memfd_create resumed>) = 3 [pid 694] <... mmap resumed>) = 0x7fc1321c5000 [pid 693] <... write resumed>) = 4 [pid 692] <... memfd_create resumed>) = 5 [pid 691] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = 0 [pid 699] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 694] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 693] close(3 [pid 692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 691] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 689] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] rt_sigprocmask(SIG_SETMASK, [], [pid 696] <... mmap resumed>) = 0x7fc129dc5000 [pid 694] <... mprotect resumed>) = 0 [pid 693] <... close resumed>) = 0 [pid 692] <... mmap resumed>) = 0x7fc129dc5000 [pid 691] <... rt_sigaction resumed>NULL, 8) = 0 [pid 689] <... futex resumed>) = 0 [pid 699] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 694] rt_sigprocmask(SIG_BLOCK, ~[], [pid 693] symlink("/dev/binderfs", "./binderfs" [pid 691] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 689] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... rt_sigprocmask resumed>[], 8) = 0 [pid 691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 694] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 694] <... clone3 resumed> => {parent_tid=[702]}, 88) = 702 [pid 691] <... mmap resumed>) = 0x7fc1321e6000 [pid 694] rt_sigprocmask(SIG_SETMASK, [], [pid 691] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 694] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] <... mprotect resumed>) = 0 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] rt_sigprocmask(SIG_BLOCK, ~[], [pid 693] <... symlink resumed>) = 0 [pid 691] <... rt_sigprocmask resumed>[], 8) = 0 [pid 691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 693] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 691] <... clone3 resumed> => {parent_tid=[703]}, 88) = 703 [pid 691] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 700 attached NULL, 8) = 0 [pid 700] set_robust_list(0x7fc1322069a0, 24 [pid 691] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... set_robust_list resumed>) = 0 [pid 691] <... futex resumed>) = 0 [pid 700] rt_sigprocmask(SIG_SETMASK, [], [pid 691] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 691] <... futex resumed>) = 0 [pid 700] memfd_create("syzkaller", 0 [pid 691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 700] <... memfd_create resumed>) = 3 [pid 693] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 691] <... mmap resumed>) = 0x7fc1321c5000 [pid 700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 693] <... rt_sigaction resumed>NULL, 8) = 0 [pid 691] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 700] <... mmap resumed>) = 0x7fc129dc5000 [pid 693] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 691] <... mprotect resumed>) = 0 [pid 700] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 698] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 693] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 692] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 691] rt_sigprocmask(SIG_BLOCK, ~[], [pid 698] creat("./bus", 000 [pid 693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 691] <... rt_sigprocmask resumed>[], 8) = 0 [pid 700] <... write resumed>) = 262144 [pid 698] <... creat resumed>) = 4 [pid 696] <... write resumed>) = 262144 [pid 693] <... mmap resumed>) = 0x7fc1321e6000 [pid 691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 693] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 698] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] rt_sigprocmask(SIG_BLOCK, ~[], [pid 691] <... clone3 resumed> => {parent_tid=[704]}, 88) = 704 [pid 698] <... futex resumed>) = 1 [pid 688] <... futex resumed>) = 0 [pid 693] <... rt_sigprocmask resumed>[], 8) = 0 [pid 691] rt_sigprocmask(SIG_SETMASK, [], [pid 688] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 688] <... futex resumed>) = 0 ./strace-static-x86_64: Process 702 attached [pid 700] munmap(0x7fc129dc5000, 262144 [pid 688] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] set_robust_list(0x7fc1321e59a0, 24 [pid 700] <... munmap resumed>) = 0 [pid 691] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 702] <... set_robust_list resumed>) = 0 [pid 700] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 693] <... clone3 resumed> => {parent_tid=[705]}, 88) = 705 [pid 691] <... futex resumed>) = 0 [pid 702] rt_sigprocmask(SIG_SETMASK, [], [pid 693] rt_sigprocmask(SIG_SETMASK, [], [pid 691] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... mount resumed>) = 0 [pid 702] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 693] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 702] creat("./bus", 000 [pid 698] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 696] munmap(0x7fc129dc5000, 262144 [pid 693] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... creat resumed>) = 5 [pid 698] <... futex resumed>) = 1 [pid 696] <... munmap resumed>) = 0 [pid 693] <... futex resumed>) = 0 [pid 688] <... futex resumed>) = 0 [pid 702] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 1 [pid 694] <... futex resumed>) = 0 [pid 693] <... futex resumed>) = 0 [pid 688] <... futex resumed>) = 0 [pid 702] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 694] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 688] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... mount resumed>) = 0 [pid 694] <... futex resumed>) = 0 [pid 693] <... mmap resumed>) = 0x7fc1321c5000 [pid 702] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 705 attached [pid 702] <... futex resumed>) = 0 [pid 694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 705] set_robust_list(0x7fc1322069a0, 24 [pid 702] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 694] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 705] <... set_robust_list resumed>) = 0 [pid 694] <... futex resumed>) = 0 [pid 693] <... mprotect resumed>) = 0 [pid 698] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 696] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 705] rt_sigprocmask(SIG_SETMASK, [], [pid 694] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] rt_sigprocmask(SIG_BLOCK, ~[], [pid 705] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 693] <... rt_sigprocmask resumed>[], 8) = 0 [pid 705] memfd_create("syzkaller", 0 [pid 693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 705] <... memfd_create resumed>) = 3 [pid 692] <... write resumed>) = 262144 [pid 705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 693] <... clone3 resumed> => {parent_tid=[706]}, 88) = 706 [pid 692] munmap(0x7fc129dc5000, 262144 [pid 693] rt_sigprocmask(SIG_SETMASK, [], [pid 705] <... mmap resumed>) = 0x7fc129dc5000 [pid 693] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 693] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 703 attached [pid 705] <... write resumed>) = 262144 [pid 702] <... open resumed>) = 6 [pid 700] <... openat resumed>) = 4 [pid 699] <... open resumed>) = 6 [pid 698] <... open resumed>) = 5 [pid 697] <... ioctl resumed>) = 0 [pid 696] <... openat resumed>) = 6 [pid 695] <... open resumed>) = 4 [pid 693] <... futex resumed>) = 0 [pid 692] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 702] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] ioctl(4, LOOP_SET_FD, 3 [pid 699] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] close(3 [pid 696] ioctl(6, LOOP_SET_FD, 3 [pid 695] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] munmap(0x7fc129dc5000, 262144 [pid 702] <... futex resumed>) = 1 [pid 699] <... futex resumed>) = 1 [pid 698] <... futex resumed>) = 1 [pid 697] <... close resumed>) = 0 [pid 695] <... futex resumed>) = 1 [pid 694] <... futex resumed>) = 0 [pid 690] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = 0 [pid 688] <... futex resumed>) = 0 [pid 705] <... munmap resumed>) = 0 [pid 702] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 699] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 697] mkdir("./file0", 0777 [pid 695] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 703] set_robust_list(0x7fc1322069a0, 24 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 697] <... mkdir resumed>) = 0 [pid 695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] <... futex resumed>) = 0 [pid 690] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = 0 [pid 688] <... futex resumed>) = 0 ./strace-static-x86_64: Process 706 attached ./strace-static-x86_64: Process 704 attached [pid 702] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 699] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 698] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 697] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 703] <... set_robust_list resumed>) = 0 [pid 695] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 694] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 689] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 688] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 706] set_robust_list(0x7fc1321e59a0, 24 [pid 704] set_robust_list(0x7fc1321e59a0, 24 [pid 703] rt_sigprocmask(SIG_SETMASK, [], [pid 702] <... socket resumed>) = 7 [pid 699] <... socket resumed>) = 3 [pid 698] <... socket resumed>) = 7 [pid 695] <... socket resumed>) = 7 [pid 706] <... set_robust_list resumed>) = 0 [pid 704] <... set_robust_list resumed>) = 0 [pid 703] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 702] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] rt_sigprocmask(SIG_SETMASK, [], [pid 702] <... futex resumed>) = 1 [pid 700] <... ioctl resumed>) = 0 [pid 699] <... futex resumed>) = 1 [pid 698] <... futex resumed>) = 1 [pid 695] <... futex resumed>) = 1 [pid 694] <... futex resumed>) = 0 [pid 690] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = 0 [pid 688] <... futex resumed>) = 0 [pid 706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 702] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] close(3 [pid 699] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 695] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] memfd_create("syzkaller", 0 [pid 689] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] rt_sigprocmask(SIG_SETMASK, [], [pid 688] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] creat("./bus", 000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] <... close resumed>) = 0 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] <... futex resumed>) = 0 [pid 690] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = 0 [pid 688] <... futex resumed>) = 0 [pid 706] <... creat resumed>) = 5 [pid 704] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 703] <... memfd_create resumed>) = 3 [pid 702] recvmmsg(7, [pid 700] mkdir("./file0", 0777 [pid 699] recvmmsg(3, [pid 698] recvmmsg(7, [pid 695] recvmmsg(7, [pid 694] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 689] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 688] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 706] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] creat("./bus", 000 [pid 703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 700] <... mkdir resumed>) = 0 [pid 706] <... futex resumed>) = 1 [pid 703] <... mmap resumed>) = 0x7fc129dc5000 [pid 700] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 693] <... futex resumed>) = 0 [pid 706] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 704] <... creat resumed>) = 4 [pid 693] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 693] <... futex resumed>) = 0 [pid 706] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 693] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 706] <... mount resumed>) = 0 [pid 706] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 693] <... futex resumed>) = 0 [pid 706] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 693] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 693] <... futex resumed>) = 0 [pid 706] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 704] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 704] <... futex resumed>) = 1 [pid 696] <... ioctl resumed>) = 0 [pid 691] <... futex resumed>) = 0 [pid 696] close(3 [pid 691] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... open resumed>) = 6 [pid 705] <... openat resumed>) = 4 [pid 706] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] ioctl(4, LOOP_SET_FD, 3 [pid 696] <... close resumed>) = 0 [pid 706] <... futex resumed>) = 1 [pid 696] mkdir("./file0", 0777 [pid 706] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 696] <... mkdir resumed>) = 0 [pid 696] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 693] <... futex resumed>) = 0 [pid 691] <... futex resumed>) = 0 [pid 704] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 703] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 692] <... openat resumed>) = 6 [pid 704] <... mount resumed>) = 0 [pid 693] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] ioctl(6, LOOP_SET_FD, 5 [pid 691] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 706] <... futex resumed>) = 0 [pid 704] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 1 [pid 691] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 706] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 704] <... futex resumed>) = 0 [pid 693] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... socket resumed>) = 7 [pid 704] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 691] <... futex resumed>) = 0 [pid 706] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 706] <... futex resumed>) = 1 [pid 693] <... futex resumed>) = 0 [pid 706] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 693] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 693] <... futex resumed>) = 0 [pid 706] recvmmsg(7, [pid 693] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... write resumed>) = 262144 [pid 703] munmap(0x7fc129dc5000, 262144) = 0 [pid 703] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 705] <... ioctl resumed>) = 0 [pid 705] close(3) = 0 [pid 705] mkdir("./file0", 0777) = 0 [pid 705] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 700] <... mount resumed>) = 0 [pid 692] <... ioctl resumed>) = 0 [pid 700] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 700] chdir("./file0") = 0 [pid 700] ioctl(4, LOOP_CLR_FD) = 0 [pid 700] close(4 [pid 704] <... open resumed>) = 5 [pid 703] <... openat resumed>) = 6 [pid 692] close(5) = 0 [pid 692] mkdir("./file0", 0777) = 0 [pid 692] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 694] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 690] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 689] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 688] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 704] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] ioctl(6, LOOP_SET_FD, 3 [pid 700] <... close resumed>) = 0 [pid 694] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] <... futex resumed>) = 1 [pid 700] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 691] <... futex resumed>) = 0 [pid 690] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = 0 [pid 688] <... futex resumed>) = 0 [pid 693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 704] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 703] <... ioctl resumed>) = 0 [pid 700] <... futex resumed>) = 0 [pid 694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 693] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 703] close(3 [pid 700] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] <... mmap resumed>) = 0x7fc129de4000 [pid 693] <... futex resumed>) = 0 [pid 691] <... futex resumed>) = 0 [pid 690] <... mmap resumed>) = 0x7fc129de4000 [pid 689] <... mmap resumed>) = 0x7fc129de4000 [pid 688] <... mmap resumed>) = 0x7fc129de4000 [pid 704] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 703] <... close resumed>) = 0 [pid 694] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 691] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 689] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 688] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 704] <... socket resumed>) = 3 [pid 703] mkdir("./file0", 0777 [pid 694] <... mprotect resumed>) = 0 [pid 693] <... mmap resumed>) = 0x7fc129de4000 [pid 690] <... mprotect resumed>) = 0 [pid 689] <... mprotect resumed>) = 0 [pid 688] <... mprotect resumed>) = 0 [pid 704] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... mkdir resumed>) = 0 [pid 694] rt_sigprocmask(SIG_BLOCK, ~[], [pid 693] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 690] rt_sigprocmask(SIG_BLOCK, ~[], [pid 689] rt_sigprocmask(SIG_BLOCK, ~[], [pid 688] rt_sigprocmask(SIG_BLOCK, ~[], [pid 704] <... futex resumed>) = 1 [pid 703] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 694] <... rt_sigprocmask resumed>[], 8) = 0 [pid 693] <... mprotect resumed>) = 0 [pid 691] <... futex resumed>) = 0 [pid 693] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} => {parent_tid=[719]}, 88) = 719 [pid 693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 691] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... rt_sigprocmask resumed>[], 8) = 0 [pid 689] <... rt_sigprocmask resumed>[], 8) = 0 [pid 694] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 688] <... rt_sigprocmask resumed>[], 8) = 0 [pid 704] recvmmsg(3, [ 32.090933][ T700] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 32.102810][ T700] ext4 filesystem being mounted at /root/syzkaller.IpShW6/9/file0 supports timestamps until 2038 (0x7fffffff) [ 32.127497][ T697] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 693] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] <... futex resumed>) = 0 [pid 690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 688] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0}./strace-static-x86_64: Process 720 attached [pid 694] <... clone3 resumed> => {parent_tid=[720]}, 88) = 720 [pid 693] <... futex resumed>) = 0 [pid 691] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 719 attached [pid 719] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 719] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 719] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0) = 0x20000000 [pid 719] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 693] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] <... futex resumed>) = 1 [pid 719] memfd_create("syzkaller", 0) = 3 [ 32.157096][ T696] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 32.157867][ T697] ext4 filesystem being mounted at /root/syzkaller.jl33I5/9/file0 supports timestamps until 2038 (0x7fffffff) [ 32.176435][ T705] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 32.181356][ T696] ext4 filesystem being mounted at /root/syzkaller.gpm0iI/10/file0 supports timestamps until 2038 (0x7fffffff) [pid 720] set_robust_list(0x7fc129e049a0, 24 [pid 719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 697] <... mount resumed>) = 0 [pid 696] <... mount resumed>) = 0 [pid 694] rt_sigprocmask(SIG_SETMASK, [], [pid 720] <... set_robust_list resumed>) = 0 [pid 697] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 696] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 690] <... clone3 resumed> => {parent_tid=[722]}, 88) = 722 [pid 689] <... clone3 resumed> => {parent_tid=[723]}, 88) = 723 [pid 688] <... clone3 resumed> => {parent_tid=[724]}, 88) = 724 [pid 720] rt_sigprocmask(SIG_SETMASK, [], [pid 697] <... openat resumed>) = 7 [pid 696] <... openat resumed>) = 3 [pid 694] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] rt_sigprocmask(SIG_SETMASK, [], [pid 689] rt_sigprocmask(SIG_SETMASK, [], [pid 688] rt_sigprocmask(SIG_SETMASK, [], [pid 720] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 697] chdir("./file0" [pid 696] chdir("./file0" [pid 694] <... futex resumed>) = 0 [pid 690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 689] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 720] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 697] <... chdir resumed>) = 0 [pid 696] <... chdir resumed>) = 0 [pid 694] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 720] <... mmap resumed>) = 0x20000000 [pid 697] ioctl(4, LOOP_CLR_FD [pid 696] ioctl(6, LOOP_CLR_FD [pid 690] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = 0 [pid 688] <... futex resumed>) = 0 [pid 720] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... ioctl resumed>) = 0 [pid 696] <... ioctl resumed>) = 0 [pid 690] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 689] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 688] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [pid 697] close(4 [pid 696] close(6 [pid 694] <... futex resumed>) = 0 [pid 720] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 719] <... mmap resumed>) = 0x7fc1219e4000 [pid 697] <... close resumed>) = 0 [pid 696] <... close resumed>) = 0 [pid 694] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... futex resumed>) = 0 [pid 697] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 696] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 1 [pid 700] memfd_create("syzkaller", 0 [pid 697] <... futex resumed>) = 0 [pid 696] <... futex resumed>) = 0 [pid 700] <... memfd_create resumed>) = 4 [pid 697] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 696] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 68515 [pid 700] <... mmap resumed>) = 0x7fc1219e4000 [pid 700] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 ./strace-static-x86_64: Process 724 attached ./strace-static-x86_64: Process 723 attached ./strace-static-x86_64: Process 722 attached [pid 719] <... write resumed>) = 68515 [pid 700] munmap(0x7fc1219e4000, 65536 [pid 724] set_robust_list(0x7fc129e049a0, 24 [pid 723] set_robust_list(0x7fc129e049a0, 24 [pid 722] set_robust_list(0x7fc129e049a0, 24 [pid 719] munmap(0x7fc1219e4000, 68515 [pid 700] <... munmap resumed>) = 0 [pid 724] <... set_robust_list resumed>) = 0 [pid 723] <... set_robust_list resumed>) = 0 [pid 722] <... set_robust_list resumed>) = 0 [pid 719] <... munmap resumed>) = 0 [pid 724] rt_sigprocmask(SIG_SETMASK, [], [pid 723] rt_sigprocmask(SIG_SETMASK, [], [pid 722] rt_sigprocmask(SIG_SETMASK, [], [pid 719] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 724] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 723] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 722] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 719] <... openat resumed>) = 8 [pid 724] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 723] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 722] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 4, 0 [pid 719] ioctl(8, LOOP_SET_FD, 3 [pid 724] <... mmap resumed>) = 0x20000000 [pid 723] <... mmap resumed>) = 0x20000000 [pid 722] <... mmap resumed>) = 0x20000000 [pid 719] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 724] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 722] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] ioctl(8, LOOP_CLR_FD [pid 724] <... futex resumed>) = 1 [pid 723] <... futex resumed>) = 1 [pid 722] <... futex resumed>) = 1 [pid 719] <... ioctl resumed>) = 0 [pid 724] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 723] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 722] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 705] <... mount resumed>) = 0 [pid 705] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY) = -1 ENOENT (No such file or directory) [pid 705] ioctl(4, LOOP_CLR_FD [pid 719] ioctl(8, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 719] close(8) = 0 [pid 719] close(3) = 0 [pid 719] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 690] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = 0 [pid 688] <... futex resumed>) = 0 [pid 690] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 689] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 722] <... futex resumed>) = 0 [pid 700] <... openat resumed>) = 8 [pid 690] <... futex resumed>) = 1 [pid 689] <... futex resumed>) = 1 [pid 688] <... futex resumed>) = 1 [pid 697] <... futex resumed>) = 0 [pid 696] <... futex resumed>) = 0 [pid 722] memfd_create("syzkaller", 0 [pid 700] ioctl(8, LOOP_SET_FD, 4 [pid 722] <... memfd_create resumed>) = 5 [pid 700] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 697] memfd_create("syzkaller", 0 [pid 696] memfd_create("syzkaller", 0 [pid 691] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 722] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 700] ioctl(8, LOOP_CLR_FD [pid 697] <... memfd_create resumed>) = 4 [pid 691] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 722] <... mmap resumed>) = 0x7fc1219e4000 [pid 700] <... ioctl resumed>) = 0 [pid 697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 696] <... memfd_create resumed>) = 6 [pid 691] <... futex resumed>) = 0 [pid 722] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 697] <... mmap resumed>) = 0x7fc1219e4000 [pid 696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 722] <... write resumed>) = 65536 [pid 691] <... mmap resumed>) = 0x7fc129de4000 [pid 722] munmap(0x7fc1219e4000, 65536 [pid 697] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 696] <... mmap resumed>) = 0x7fc1219e4000 [pid 691] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 722] <... munmap resumed>) = 0 [pid 697] <... write resumed>) = 65536 [pid 691] <... mprotect resumed>) = 0 [pid 722] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 697] munmap(0x7fc1219e4000, 65536 [pid 691] rt_sigprocmask(SIG_BLOCK, ~[], [pid 722] <... openat resumed>) = 8 [pid 697] <... munmap resumed>) = 0 [pid 696] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 691] <... rt_sigprocmask resumed>[], 8) = 0 [pid 722] ioctl(8, LOOP_SET_FD, 5 [pid 700] ioctl(8, LOOP_SET_FD, 4 [pid 697] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 722] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 700] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 697] <... openat resumed>) = 8 [pid 722] ioctl(8, LOOP_CLR_FD [pid 700] close(8 [pid 697] ioctl(8, LOOP_SET_FD, 4 [pid 696] <... write resumed>) = 65536 [pid 691] <... clone3 resumed> => {parent_tid=[729]}, 88) = 729 [pid 722] <... ioctl resumed>) = 0 [pid 700] <... close resumed>) = 0 [pid 697] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 696] munmap(0x7fc1219e4000, 65536 [pid 691] rt_sigprocmask(SIG_SETMASK, [], [pid 705] <... ioctl resumed>) = 0 [pid 700] close(4 [pid 697] ioctl(8, LOOP_CLR_FD [pid 691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 705] close(4) = 0 [pid 700] <... close resumed>) = 0 [pid 700] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... ioctl resumed>) = 0 [pid 691] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 722] ioctl(8, LOOP_SET_FD, 5 [pid 700] <... futex resumed>) = 0 [pid 691] <... futex resumed>) = 0 [pid 722] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 705] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 696] <... munmap resumed>) = 0 [pid 691] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 722] close(8 [pid 705] <... futex resumed>) = 0 [pid 696] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 722] <... close resumed>) = 0 [pid 705] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 697] ioctl(8, LOOP_SET_FD, 4 [pid 696] <... openat resumed>) = 8 [pid 722] close(5 [pid 697] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 696] ioctl(8, LOOP_SET_FD, 6./strace-static-x86_64: Process 729 attached [pid 722] <... close resumed>) = 0 [pid 697] close(8 [pid 696] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 729] set_robust_list(0x7fc129e049a0, 24 [pid 722] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... close resumed>) = 0 [pid 696] ioctl(8, LOOP_CLR_FD [pid 722] <... futex resumed>) = 0 [pid 697] close(4 [pid 696] <... ioctl resumed>) = 0 [pid 729] <... set_robust_list resumed>) = 0 [pid 722] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 697] <... close resumed>) = 0 [pid 729] rt_sigprocmask(SIG_SETMASK, [], [pid 697] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 697] <... futex resumed>) = 0 [pid 729] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 697] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 696] ioctl(8, LOOP_SET_FD, 6 [pid 729] <... mmap resumed>) = 0x20000000 [pid 696] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [ 32.188769][ T705] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 32.218571][ T703] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 32.247195][ T692] EXT4-fs (loop1): revision level too high, forcing read-only mode [pid 729] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... mount resumed>) = 0 [pid 696] close(8 [pid 729] <... futex resumed>) = 1 [pid 696] <... close resumed>) = 0 [pid 691] <... futex resumed>) = 0 [pid 729] memfd_create("syzkaller", 0 [pid 696] close(6 [pid 691] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... memfd_create resumed>) = 7 [pid 696] <... close resumed>) = 0 [pid 691] <... futex resumed>) = 0 [pid 729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 696] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... mmap resumed>) = 0x7fc1219e4000 [pid 696] <... futex resumed>) = 0 [pid 729] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 696] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 729] <... write resumed>) = 65536 [pid 729] munmap(0x7fc1219e4000, 65536) = 0 [pid 729] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 8 [pid 703] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 692] <... mount resumed>) = 0 [pid 729] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 729] ioctl(8, LOOP_CLR_FD) = 0 [pid 692] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 703] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 692] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 692] ioctl(6, LOOP_CLR_FD) = 0 [pid 692] close(6) = 0 [pid 692] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 729] close(8) = 0 [pid 729] close(7) = 0 [pid 729] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 692] <... futex resumed>) = 0 [pid 692] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 703] ioctl(6, LOOP_CLR_FD) = 0 [pid 703] close(6) = 0 [pid 703] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 32.255947][ T703] ext4 filesystem being mounted at /root/syzkaller.duxz7m/9/file0 supports timestamps until 2038 (0x7fffffff) [ 32.257806][ T692] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 703] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 693] exit_group(0 [pid 719] <... futex resumed>) = ? [pid 706] <... recvmmsg resumed> ) = ? [pid 705] <... futex resumed>) = ? [pid 693] <... exit_group resumed>) = ? [pid 719] +++ exited with 0 +++ [pid 706] +++ exited with 0 +++ [pid 705] +++ exited with 0 +++ [pid 693] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=693, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 297] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 297] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./9/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./9/bus") = 0 [pid 297] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./9/binderfs") = 0 [pid 297] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 694] exit_group(0 [pid 702] <... recvmmsg resumed>) = ? [pid 694] <... exit_group resumed>) = ? [pid 720] <... futex resumed>) = -1 (errno 18446744073709551555) [pid 700] <... futex resumed>) = ? [pid 720] +++ exited with 0 +++ [pid 702] +++ exited with 0 +++ [pid 689] exit_group(0 [pid 723] <... futex resumed>) = ? [pid 699] <... recvmmsg resumed> ) = ? [pid 697] <... futex resumed>) = ? [pid 689] <... exit_group resumed>) = ? [pid 723] +++ exited with 0 +++ [pid 699] +++ exited with 0 +++ [pid 697] +++ exited with 0 +++ [pid 690] exit_group(0) = ? [pid 722] <... futex resumed>) = ? [pid 695] <... recvmmsg resumed> ) = ? [pid 692] <... futex resumed>) = ? [pid 722] +++ exited with 0 +++ [pid 692] +++ exited with 0 +++ [pid 688] exit_group(0 [pid 724] <... futex resumed>) = ? [pid 688] <... exit_group resumed>) = ? [pid 698] <... recvmmsg resumed> ) = ? [pid 724] +++ exited with 0 +++ [pid 696] <... futex resumed>) = ? [pid 698] +++ exited with 0 +++ [pid 691] exit_group(0 [pid 729] <... futex resumed>) = 231 [pid 691] <... exit_group resumed>) = ? [pid 704] <... recvmmsg resumed> ) = ? [pid 703] <... futex resumed>) = ? [pid 729] +++ exited with 0 +++ [pid 703] +++ exited with 0 +++ [pid 704] +++ exited with 0 +++ [pid 700] +++ exited with 0 +++ [pid 696] +++ exited with 0 +++ [pid 695] +++ exited with 0 +++ [pid 694] +++ exited with 0 +++ [pid 691] +++ exited with 0 +++ [pid 690] +++ exited with 0 +++ [pid 689] +++ exited with 0 +++ [pid 688] +++ exited with 0 +++ [pid 297] <... umount2 resumed>) = 0 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=689, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=694, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=691, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=690, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 297] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=688, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./9/file0", [pid 296] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... openat resumed>) = 3 [pid 295] <... openat resumed>) = 3 [pid 294] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 297] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] newfstatat(3, "", [pid 295] newfstatat(3, "", [pid 294] <... openat resumed>) = 3 [pid 293] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 297] <... openat resumed>) = 4 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] newfstatat(3, "", [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] newfstatat(4, "", [pid 296] getdents64(3, [pid 295] getdents64(3, [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 294] getdents64(3, [pid 293] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 292] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 297] getdents64(4, [pid 296] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 293] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 296] <... umount2 resumed>) = 0 [pid 295] <... umount2 resumed>) = 0 [pid 293] <... umount2 resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 297] rmdir("./9/file0" [pid 296] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] getdents64(3, [pid 296] newfstatat(AT_FDCWD, "./9/bus", [pid 295] newfstatat(AT_FDCWD, "./9/bus", [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] newfstatat(AT_FDCWD, "./9/bus", [pid 293] newfstatat(AT_FDCWD, "./10/bus", [pid 292] newfstatat(AT_FDCWD, "./10/bus", [pid 297] close(3 [pid 296] unlink("./9/bus" [pid 295] unlink("./9/bus" [pid 294] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... close resumed>) = 0 [pid 296] <... unlink resumed>) = 0 [pid 295] <... unlink resumed>) = 0 [pid 294] unlink("./9/bus" [pid 293] unlink("./10/bus" [pid 292] unlink("./10/bus" [pid 297] rmdir("./9" [pid 296] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... unlink resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] mkdir("./10", 0777 [pid 296] newfstatat(AT_FDCWD, "./9/binderfs", [pid 295] newfstatat(AT_FDCWD, "./9/binderfs", [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] newfstatat(AT_FDCWD, "./10/binderfs", [pid 292] newfstatat(AT_FDCWD, "./10/binderfs", [pid 297] <... mkdir resumed>) = 0 [pid 296] unlink("./9/binderfs" [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] newfstatat(AT_FDCWD, "./9/binderfs", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 296] <... unlink resumed>) = 0 [pid 295] unlink("./9/binderfs" [pid 294] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./10/binderfs" [pid 292] unlink("./10/binderfs" [pid 297] <... openat resumed>) = 3 [pid 296] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... unlink resumed>) = 0 [pid 294] unlink("./9/binderfs" [pid 293] <... unlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 297] ioctl(3, LOOP_CLR_FD [pid 293] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... unlink resumed>) = 0 [pid 294] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] close(3 [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./10/file0") = 0 [pid 293] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./10") = 0 [pid 293] mkdir("./11", 0777) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 297] <... close resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 730 attached , child_tidptr=0x5555563f4690) = 730 [pid 730] set_robust_list(0x5555563f46a0, 24) = 0 [pid 730] chdir("./10") = 0 [pid 730] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 730] setpgid(0, 0) = 0 [pid 730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 730] write(3, "1000", 4) = 4 [pid 730] close(3) = 0 [pid 730] symlink("/dev/binderfs", "./binderfs") = 0 [pid 730] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 730] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 730] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 730] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 730] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 730] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} => {parent_tid=[731]}, 88) = 731 [pid 730] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 731 attached [pid 731] set_robust_list(0x7fc1322069a0, 24) = 0 [pid 731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 731] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 730] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 730] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 731] <... futex resumed>) = 0 [pid 730] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] memfd_create("syzkaller", 0) = 3 [pid 731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129de6000 [pid 730] <... futex resumed>) = 0 [pid 730] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129dc5000 [pid 730] mprotect(0x7fc129dc6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 730] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 730] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129de5990, parent_tid=0x7fc129de5990, exit_signal=0, stack=0x7fc129dc5000, stack_size=0x20300, tls=0x7fc129de56c0} => {parent_tid=[732]}, 88) = 732 [pid 730] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 730] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 732 attached [pid 732] set_robust_list(0x7fc129de59a0, 24 [pid 731] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 732] <... set_robust_list resumed>) = 0 [pid 732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 732] creat("./bus", 000 [pid 731] <... write resumed>) = 262144 [pid 731] munmap(0x7fc129de6000, 262144) = 0 [pid 731] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 732] <... creat resumed>) = 4 [pid 732] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 730] <... futex resumed>) = 0 [pid 730] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 732] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 732] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 730] <... futex resumed>) = 0 [pid 730] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 732] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 730] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 730] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 730] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 730] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 730] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 730] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129e05000 [pid 730] mprotect(0x7fc129e06000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 730] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 730] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e25990, parent_tid=0x7fc129e25990, exit_signal=0, stack=0x7fc129e05000, stack_size=0x20300, tls=0x7fc129e256c0}./strace-static-x86_64: Process 733 attached [pid 733] set_robust_list(0x7fc129e259a0, 24 [pid 730] <... clone3 resumed> => {parent_tid=[733]}, 88) = 733 [pid 733] <... set_robust_list resumed>) = 0 [pid 730] rt_sigprocmask(SIG_SETMASK, [], [pid 733] rt_sigprocmask(SIG_SETMASK, [], [pid 730] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 733] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 730] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 730] <... futex resumed>) = 0 [pid 733] <... socket resumed>) = 7 [pid 733] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 730] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 0 [pid 730] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 733] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 730] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] <... futex resumed>) = 0 [pid 730] <... futex resumed>) = 1 [pid 730] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] recvmmsg(7, [pid 730] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 730] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 730] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129da4000 [pid 730] mprotect(0x7fc129da5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 730] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 730] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129dc4990, parent_tid=0x7fc129dc4990, exit_signal=0, stack=0x7fc129da4000, stack_size=0x20300, tls=0x7fc129dc46c0} => {parent_tid=[734]}, 88) = 734 [pid 730] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 730] futex(0x7fc1322d26f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] futex(0x7fc1322d26fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 734 attached [pid 734] set_robust_list(0x7fc129dc49a0, 24) = 0 [pid 734] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 734] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, -1, 0) = -1 EBADF (Bad file descriptor) [pid 734] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 730] <... futex resumed>) = 0 [pid 730] futex(0x7fc1322d26f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 734] <... futex resumed>) = 1 [pid 734] memfd_create("syzkaller", 0) = 8 [pid 734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219a4000 [pid 734] write(8, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 734] munmap(0x7fc1219a4000, 65536 [pid 293] <... openat resumed>) = 3 [pid 293] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] close(3 [pid 296] <... umount2 resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563f4690) = 735 ./strace-static-x86_64: Process 735 attached [pid 735] set_robust_list(0x5555563f46a0, 24) = 0 [pid 735] chdir("./11") = 0 [pid 735] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 735] setpgid(0, 0) = 0 [pid 735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 735] write(3, "1000", 4) = 4 [pid 735] close(3) = 0 [pid 735] symlink("/dev/binderfs", "./binderfs") = 0 [pid 732] <... open resumed>) = 6 [pid 731] <... openat resumed>) = 5 [pid 294] <... umount2 resumed>) = 0 [pid 732] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 735] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 735] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 735] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 295] <... umount2 resumed>) = 0 [pid 731] ioctl(5, LOOP_SET_FD, 3 [pid 735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 294] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] newfstatat(AT_FDCWD, "./9/file0", [pid 295] newfstatat(AT_FDCWD, "./9/file0", [pid 294] newfstatat(AT_FDCWD, "./9/file0", [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] newfstatat(AT_FDCWD, "./10/file0", [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] <... openat resumed>) = 4 [pid 295] <... openat resumed>) = 4 [pid 296] newfstatat(4, "", [pid 295] newfstatat(4, "", [pid 294] <... openat resumed>) = 4 [pid 292] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] newfstatat(4, "", [pid 296] getdents64(4, [pid 295] getdents64(4, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, [pid 295] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, [pid 292] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 295] getdents64(4, [pid 294] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 296] close(4 [pid 292] <... openat resumed>) = 4 [pid 296] <... close resumed>) = 0 [pid 295] close(4 [pid 294] getdents64(4, [pid 292] newfstatat(4, "", [pid 296] rmdir("./9/file0" [pid 295] <... close resumed>) = 0 [pid 294] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 734] <... munmap resumed>) = 0 [pid 735] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 296] <... rmdir resumed>) = 0 [pid 295] rmdir("./9/file0" [pid 294] close(4 [pid 292] getdents64(4, [pid 296] getdents64(3, [pid 735] <... mprotect resumed>) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 296] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 295] getdents64(3, [pid 294] rmdir("./9/file0" [pid 292] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 296] close(3 [pid 295] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 735] rt_sigprocmask(SIG_BLOCK, ~[], [pid 296] <... close resumed>) = 0 [pid 295] close(3 [pid 294] <... rmdir resumed>) = 0 [pid 292] getdents64(4, [pid 296] rmdir("./9" [pid 295] <... close resumed>) = 0 [pid 294] getdents64(3, [pid 292] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 735] <... rt_sigprocmask resumed>[], 8) = 0 [pid 735] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 296] <... rmdir resumed>) = 0 [pid 295] rmdir("./9" [pid 294] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 292] close(4 [pid 296] mkdir("./10", 0777 [pid 295] <... rmdir resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 294] close(3 [pid 735] <... clone3 resumed> => {parent_tid=[737]}, 88) = 737 [pid 735] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 735] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] <... mkdir resumed>) = 0 [pid 292] rmdir("./10/file0" [pid 296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 295] mkdir("./10", 0777 [pid 294] <... close resumed>) = 0 [pid 735] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 292] <... rmdir resumed>) = 0 [pid 294] rmdir("./9" [pid 735] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 735] rt_sigprocmask(SIG_BLOCK, ~[], [pid 295] <... mkdir resumed>) = 0 [pid 735] <... rt_sigprocmask resumed>[], 8) = 0 [pid 735] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 295] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 294] <... rmdir resumed>) = 0 [pid 292] getdents64(3, [pid 294] mkdir("./10", 0777 [pid 292] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 735] <... clone3 resumed> => {parent_tid=[738]}, 88) = 738 [pid 294] <... mkdir resumed>) = 0 [pid 292] close(3 [pid 294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 292] <... close resumed>) = 0 [pid 735] rt_sigprocmask(SIG_SETMASK, [], [pid 292] rmdir("./10" [pid 735] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 735] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 735] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 737 attached [pid 292] mkdir("./11", 0777 [pid 737] set_robust_list(0x7fc1322069a0, 24) = 0 [pid 737] rt_sigprocmask(SIG_SETMASK, [], [pid 731] <... ioctl resumed>) = 0 [pid 737] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 731] close(3 [pid 292] <... mkdir resumed>) = 0 [pid 737] memfd_create("syzkaller", 0) = 3 [pid 737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 [pid 731] <... close resumed>) = 0 [pid 294] <... openat resumed>) = 3 [pid 737] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 737] munmap(0x7fc129dc5000, 262144) = 0 [pid 737] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 737] ioctl(4, LOOP_SET_FD, 3 [pid 731] mkdir("ext4", 0777) = 0 [pid 731] mount("/dev/loop5", "ext4", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 294] ioctl(3, LOOP_CLR_FD [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 738 attached [pid 734] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 296] <... openat resumed>) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563f4690) = 740 [pid 737] <... ioctl resumed>) = 0 [pid 737] close(3) = 0 [pid 737] mkdir("./file0", 0777 [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 737] <... mkdir resumed>) = 0 [pid 737] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 295] ioctl(3, LOOP_CLR_FD [pid 294] close(3 [pid 292] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 740 attached [pid 740] set_robust_list(0x5555563f46a0, 24) = 0 [pid 740] chdir("./10") = 0 [pid 740] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 740] setpgid(0, 0) = 0 [pid 740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 740] write(3, "1000", 4) = 4 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 294] <... close resumed>) = 0 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 734] <... openat resumed>) = 3 [pid 292] close(3 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 740] close(3 [pid 292] <... close resumed>) = 0 [pid 740] <... close resumed>) = 0 [pid 740] symlink("/dev/binderfs", "./binderfs" [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] <... clone resumed>, child_tidptr=0x5555563f4690) = 742 [pid 740] <... symlink resumed>) = 0 [pid 740] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 295] <... clone resumed>, child_tidptr=0x5555563f4690) = 743 [pid 292] <... clone resumed>, child_tidptr=0x5555563f4690) = 744 [pid 740] <... rt_sigaction resumed>NULL, 8) = 0 [pid 740] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 734] ioctl(3, LOOP_SET_FD, 8 [pid 740] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 740] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 740] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 740] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} => {parent_tid=[745]}, 88) = 745 [pid 740] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 740] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 734] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 734] ioctl(3, LOOP_CLR_FD) = 0 [pid 740] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 740] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 740] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} => {parent_tid=[746]}, 88) = 746 [pid 740] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 740] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 742 attached [pid 742] set_robust_list(0x5555563f46a0, 24) = 0 [pid 734] ioctl(3, LOOP_SET_FD, 8) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 743 attached [pid 734] close(3 [pid 742] chdir("./10" [pid 734] <... close resumed>) = 0 [pid 743] set_robust_list(0x5555563f46a0, 24 [pid 734] close(8) = 0 [pid 734] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 734] futex(0x7fc1322d26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 742] <... chdir resumed>) = 0 [pid 743] <... set_robust_list resumed>) = 0 [pid 738] set_robust_list(0x7fc1321e59a0, 24 [pid 743] chdir("./10" [pid 738] <... set_robust_list resumed>) = 0 [pid 742] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 738] rt_sigprocmask(SIG_SETMASK, [], [pid 742] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 744 attached [pid 742] setpgid(0, 0 [pid 743] <... chdir resumed>) = 0 [pid 744] set_robust_list(0x5555563f46a0, 24 [pid 742] <... setpgid resumed>) = 0 [pid 742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 743] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 744] <... set_robust_list resumed>) = 0 [pid 743] <... prctl resumed>) = 0 [pid 744] chdir("./11" [pid 743] setpgid(0, 0) = 0 [pid 738] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 738] creat("./bus", 000) = 3 [pid 738] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 744] <... chdir resumed>) = 0 [pid 743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 742] <... openat resumed>) = 3 [pid 744] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 743] <... openat resumed>) = 3 [pid 742] write(3, "1000", 4 [pid 738] <... futex resumed>) = 1 [pid 735] <... futex resumed>) = 0 [pid 735] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 738] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 735] <... futex resumed>) = 0 [pid 735] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... mount resumed>) = 0 [pid 738] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 735] <... futex resumed>) = 0 [pid 735] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 738] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 735] <... futex resumed>) = 0 [pid 735] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... open resumed>) = 5 ./strace-static-x86_64: Process 746 attached ./strace-static-x86_64: Process 745 attached [pid 744] <... prctl resumed>) = 0 [pid 743] write(3, "1000", 4 [pid 742] <... write resumed>) = 4 [pid 738] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] set_robust_list(0x7fc1321e59a0, 24 [pid 745] set_robust_list(0x7fc1322069a0, 24 [pid 744] setpgid(0, 0 [pid 743] <... write resumed>) = 4 [pid 742] close(3 [pid 738] <... futex resumed>) = 1 [pid 735] <... futex resumed>) = 0 [pid 746] <... set_robust_list resumed>) = 0 [pid 745] <... set_robust_list resumed>) = 0 [pid 744] <... setpgid resumed>) = 0 [pid 743] close(3 [pid 742] <... close resumed>) = 0 [pid 738] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 735] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] rt_sigprocmask(SIG_SETMASK, [], [pid 745] rt_sigprocmask(SIG_SETMASK, [], [pid 744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 743] <... close resumed>) = 0 [pid 742] symlink("/dev/binderfs", "./binderfs" [pid 738] <... socket resumed>) = 6 [pid 735] <... futex resumed>) = 0 [pid 735] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... symlink resumed>) = 0 [pid 746] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 745] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 744] <... openat resumed>) = 3 [pid 743] symlink("/dev/binderfs", "./binderfs" [pid 742] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] creat("./bus", 000 [pid 745] memfd_create("syzkaller", 0 [pid 744] write(3, "1000", 4 [pid 743] <... symlink resumed>) = 0 [pid 742] <... futex resumed>) = 0 [pid 746] <... creat resumed>) = 3 [pid 745] <... memfd_create resumed>) = 4 [pid 744] <... write resumed>) = 4 [pid 743] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 746] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 744] close(3 [pid 743] <... futex resumed>) = 0 [pid 742] <... rt_sigaction resumed>NULL, 8) = 0 [pid 746] <... futex resumed>) = 1 [pid 745] <... mmap resumed>) = 0x7fc129dc5000 [pid 744] <... close resumed>) = 0 [pid 743] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 742] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 740] <... futex resumed>) = 0 [pid 738] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 745] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 744] symlink("/dev/binderfs", "./binderfs" [pid 743] <... rt_sigaction resumed>NULL, 8) = 0 [pid 742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 740] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 738] <... futex resumed>) = 1 [pid 735] <... futex resumed>) = 0 [pid 746] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 745] <... write resumed>) = 262144 [pid 744] <... symlink resumed>) = 0 [pid 743] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 740] <... futex resumed>) = 0 [pid 738] recvmmsg(6, [pid 735] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 745] munmap(0x7fc129dc5000, 262144 [pid 744] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 743] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 742] <... mmap resumed>) = 0x7fc1321e6000 [pid 740] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] <... futex resumed>) = 0 [pid 746] <... mount resumed>) = 0 [pid 745] <... munmap resumed>) = 0 [pid 744] <... futex resumed>) = 0 [pid 743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 742] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 735] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 746] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 744] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 743] <... mmap resumed>) = 0x7fc1321e6000 [pid 742] <... mprotect resumed>) = 0 [pid 746] <... futex resumed>) = 1 [pid 745] <... openat resumed>) = 5 [pid 744] <... rt_sigaction resumed>NULL, 8) = 0 [pid 743] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 742] rt_sigprocmask(SIG_BLOCK, ~[], [pid 740] <... futex resumed>) = 0 [pid 746] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 745] ioctl(5, LOOP_SET_FD, 4 [pid 744] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 743] <... mprotect resumed>) = 0 [pid 742] <... rt_sigprocmask resumed>[], 8) = 0 [pid 740] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 743] rt_sigprocmask(SIG_BLOCK, ~[], [pid 742] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 740] <... futex resumed>) = 0 [pid 746] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 743] <... rt_sigprocmask resumed>[], 8) = 0 [pid 740] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 744] <... mmap resumed>) = 0x7fc1321e6000 [pid 743] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 742] <... clone3 resumed> => {parent_tid=[751]}, 88) = 751 [pid 744] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 742] rt_sigprocmask(SIG_SETMASK, [], [pid 744] <... mprotect resumed>) = 0 [pid 743] <... clone3 resumed> => {parent_tid=[752]}, 88) = 752 [pid 742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 744] rt_sigprocmask(SIG_BLOCK, ~[], [pid 743] rt_sigprocmask(SIG_SETMASK, [], [pid 742] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 744] <... rt_sigprocmask resumed>[], 8) = 0 [pid 743] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 742] <... futex resumed>) = 0 [pid 744] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 743] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 743] <... futex resumed>) = 0 [pid 742] <... futex resumed>) = 0 [pid 744] <... clone3 resumed> => {parent_tid=[753]}, 88) = 753 [pid 743] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 744] rt_sigprocmask(SIG_SETMASK, [], [pid 743] <... futex resumed>) = 0 [pid 742] <... mmap resumed>) = 0x7fc1321c5000 [pid 744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 742] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 744] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 743] <... mmap resumed>) = 0x7fc1321c5000 [pid 742] <... mprotect resumed>) = 0 [pid 744] <... futex resumed>) = 0 [pid 743] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 742] rt_sigprocmask(SIG_BLOCK, ~[], [pid 744] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 743] <... mprotect resumed>) = 0 [pid 742] <... rt_sigprocmask resumed>[], 8) = 0 [pid 744] <... futex resumed>) = 0 [pid 743] rt_sigprocmask(SIG_BLOCK, ~[], [pid 742] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 743] <... rt_sigprocmask resumed>[], 8) = 0 [pid 744] <... mmap resumed>) = 0x7fc1321c5000 [pid 743] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 742] <... clone3 resumed> => {parent_tid=[754]}, 88) = 754 [pid 744] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 742] rt_sigprocmask(SIG_SETMASK, [], [pid 744] <... mprotect resumed>) = 0 [pid 743] <... clone3 resumed> => {parent_tid=[755]}, 88) = 755 [pid 742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 744] rt_sigprocmask(SIG_BLOCK, ~[], [pid 743] rt_sigprocmask(SIG_SETMASK, [], [pid 742] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 744] <... rt_sigprocmask resumed>[], 8) = 0 [pid 743] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 742] <... futex resumed>) = 0 [pid 744] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 743] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 743] <... futex resumed>) = 0 [pid 744] <... clone3 resumed> => {parent_tid=[756]}, 88) = 756 [pid 743] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 744] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 744] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 744] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 753 attached ./strace-static-x86_64: Process 752 attached ./strace-static-x86_64: Process 751 attached [pid 746] <... open resumed>) = 6 [pid 745] <... ioctl resumed>) = 0 [pid 746] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] close(4 [pid 746] <... futex resumed>) = 1 [pid 745] <... close resumed>) = 0 [pid 740] <... futex resumed>) = 0 [pid 746] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 745] mkdir("./file0", 0777 [pid 740] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 745] <... mkdir resumed>) = 0 [pid 740] <... futex resumed>) = 0 [pid 746] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 745] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 740] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 755 attached ./strace-static-x86_64: Process 754 attached [pid 753] set_robust_list(0x7fc1322069a0, 24 [pid 752] set_robust_list(0x7fc1322069a0, 24 [pid 751] set_robust_list(0x7fc1322069a0, 24 [pid 746] <... socket resumed>) = 4 [pid 731] <... mount resumed>) = 0 [pid 746] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 740] <... futex resumed>) = 0 [pid 746] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 740] <... futex resumed>) = 0 [pid 746] recvmmsg(4, [pid 740] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 756 attached [pid 755] set_robust_list(0x7fc1321e59a0, 24 [pid 754] set_robust_list(0x7fc1321e59a0, 24 [pid 753] <... set_robust_list resumed>) = 0 [pid 752] <... set_robust_list resumed>) = 0 [pid 751] <... set_robust_list resumed>) = 0 [pid 756] set_robust_list(0x7fc1321e59a0, 24 [pid 755] <... set_robust_list resumed>) = 0 [pid 754] <... set_robust_list resumed>) = 0 [pid 753] rt_sigprocmask(SIG_SETMASK, [], [pid 752] rt_sigprocmask(SIG_SETMASK, [], [pid 751] rt_sigprocmask(SIG_SETMASK, [], [pid 756] <... set_robust_list resumed>) = 0 [pid 755] rt_sigprocmask(SIG_SETMASK, [], [pid 754] rt_sigprocmask(SIG_SETMASK, [], [pid 753] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 752] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 756] rt_sigprocmask(SIG_SETMASK, [], [pid 755] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 754] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 753] memfd_create("syzkaller", 0 [pid 752] memfd_create("syzkaller", 0 [pid 751] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 756] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 755] creat("./bus", 000 [pid 754] creat("./bus", 000 [pid 753] <... memfd_create resumed>) = 3 [pid 752] <... memfd_create resumed>) = 3 [pid 751] memfd_create("syzkaller", 0 [pid 756] creat("./bus", 000 [pid 755] <... creat resumed>) = 4 [pid 754] <... creat resumed>) = 3 [pid 753] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 752] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 751] <... memfd_create resumed>) = 4 [pid 756] <... creat resumed>) = 4 [pid 755] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 753] <... mmap resumed>) = 0x7fc129dc5000 [pid 752] <... mmap resumed>) = 0x7fc129dc5000 [pid 751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 756] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] <... futex resumed>) = 1 [pid 754] <... futex resumed>) = 1 [pid 753] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 752] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 751] <... mmap resumed>) = 0x7fc129dc5000 [pid 743] <... futex resumed>) = 0 [pid 742] <... futex resumed>) = 0 [pid 756] <... futex resumed>) = 1 [pid 755] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 754] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] <... write resumed>) = 262144 [pid 752] <... write resumed>) = 262144 [pid 751] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 744] <... futex resumed>) = 0 [pid 743] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 753] munmap(0x7fc129dc5000, 262144 [pid 752] munmap(0x7fc129dc5000, 262144 [pid 751] <... write resumed>) = 262144 [pid 744] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 743] <... futex resumed>) = 0 [pid 742] <... futex resumed>) = 0 [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 755] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 754] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 753] <... munmap resumed>) = 0 [pid 752] <... munmap resumed>) = 0 [pid 751] munmap(0x7fc129dc5000, 262144 [pid 744] <... futex resumed>) = 0 [pid 743] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 756] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 755] <... mount resumed>) = 0 [pid 754] <... mount resumed>) = 0 [pid 753] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 752] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 751] <... munmap resumed>) = 0 [pid 744] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... mount resumed>) = 0 [pid 755] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 753] <... openat resumed>) = 5 [pid 752] <... openat resumed>) = 5 [pid 731] openat(AT_FDCWD, "ext4", O_RDONLY|O_DIRECTORY [pid 756] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 735] <... futex resumed>) = 0 [pid 731] <... openat resumed>) = 3 [pid 756] <... futex resumed>) = 0 [pid 731] chdir("ext4" [pid 756] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 744] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... chdir resumed>) = 0 [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 731] ioctl(5, LOOP_CLR_FD [pid 744] <... futex resumed>) = 0 [pid 756] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 744] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 0 [pid 735] <... mmap resumed>) = 0x7fc129de4000 [pid 731] <... ioctl resumed>) = 0 [pid 756] <... open resumed>) = 6 [pid 731] close(5 [pid 756] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... close resumed>) = 0 [pid 756] <... futex resumed>) = 0 [pid 731] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 731] <... futex resumed>) = 0 [pid 731] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 742] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 737] <... mount resumed>) = 0 [pid 737] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 7 [pid 737] chdir("./file0") = 0 [pid 737] ioctl(4, LOOP_CLR_FD) = 0 [pid 737] close(4) = 0 [pid 737] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 751] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 5 [pid 751] ioctl(5, LOOP_SET_FD, 4 [pid 743] <... futex resumed>) = 0 [pid 743] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 743] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] <... futex resumed>) = 1 [pid 755] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 753] ioctl(5, LOOP_SET_FD, 3 [pid 752] ioctl(5, LOOP_SET_FD, 3 [pid 754] <... futex resumed>) = 1 [pid 735] <... mprotect resumed>) = 0 [pid 742] <... futex resumed>) = 0 [pid 744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 742] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] rt_sigprocmask(SIG_BLOCK, ~[], [pid 754] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 744] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] <... rt_sigprocmask resumed>[], 8) = 0 [pid 735] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 756] <... futex resumed>) = 0 [pid 744] <... futex resumed>) = 1 [pid 756] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 744] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 756] <... socket resumed>) = 7 [pid 735] <... clone3 resumed> => {parent_tid=[759]}, 88) = 759 [pid 756] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] rt_sigprocmask(SIG_SETMASK, [], [pid 756] <... futex resumed>) = 1 [pid 744] <... futex resumed>) = 0 [pid 756] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 744] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = 0 [pid 751] <... ioctl resumed>) = 0 [pid 744] <... futex resumed>) = 1 [pid 735] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 756] recvmmsg(7, [pid 744] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] <... open resumed>) = 6 [pid 755] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 743] <... futex resumed>) = 0 [pid 743] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 743] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 7 [pid 755] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] <... futex resumed>) = 0 [pid 755] <... futex resumed>) = 1 [pid 743] <... futex resumed>) = 0 [pid 735] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] recvmmsg(7, [pid 743] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 743] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] close(4) = 0 [pid 751] mkdir("./file0", 0777) = 0 [pid 751] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue"./strace-static-x86_64: Process 759 attached [pid 759] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 759] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 759] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0) = 0x20000000 [pid 759] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 735] <... futex resumed>) = 0 [pid 759] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 735] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 753] <... ioctl resumed>) = 0 [pid 737] <... futex resumed>) = 0 [pid 735] <... futex resumed>) = 1 [pid 737] memfd_create("syzkaller", 0 [pid 753] close(3) = 0 [ 32.723981][ T731] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 32.738008][ T737] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 32.739419][ T731] ext4 filesystem being mounted at /root/syzkaller.SVIRRC/10/ext4 supports timestamps until 2038 (0x7fffffff) [ 32.761599][ T737] ext4 filesystem being mounted at /root/syzkaller.zNZ9LH/11/file0 supports timestamps until 2038 (0x7fffffff) [pid 753] mkdir("./file0", 0777) = 0 [pid 737] <... memfd_create resumed>) = 4 [pid 737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 753] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 737] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 752] <... ioctl resumed>) = 0 [pid 737] munmap(0x7fc1219e4000, 65536 [pid 754] <... open resumed>) = 6 [pid 754] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 752] close(3 [pid 754] <... futex resumed>) = 1 [pid 752] <... close resumed>) = 0 [pid 754] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 752] mkdir("./file0", 0777) = 0 [pid 752] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 742] <... futex resumed>) = 0 [pid 742] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 754] <... futex resumed>) = 0 [pid 754] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 742] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 737] <... munmap resumed>) = 0 [pid 754] <... socket resumed>) = 4 [pid 754] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 742] <... futex resumed>) = 0 [pid 737] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 754] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 742] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 742] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 737] <... openat resumed>) = 8 [pid 754] recvmmsg(4, [pid 737] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 737] ioctl(8, LOOP_CLR_FD) = 0 [pid 737] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 740] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 737] close(8 [pid 743] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 743] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 743] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 32.790930][ T745] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 32.805351][ T753] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 32.809660][ T745] ext4 filesystem being mounted at /root/syzkaller.jl33I5/10/file0 supports timestamps until 2038 (0x7fffffff) [ 32.817707][ T753] ext4 filesystem being mounted at /root/syzkaller.gpm0iI/11/file0 supports timestamps until 2038 (0x7fffffff) [pid 743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 753] <... mount resumed>) = 0 [pid 745] <... mount resumed>) = 0 [pid 744] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 743] <... mmap resumed>) = 0x7fc129de4000 [pid 742] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 740] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... close resumed>) = 0 [pid 753] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 744] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] <... futex resumed>) = 0 [pid 737] close(4 [pid 753] <... openat resumed>) = 3 [pid 744] <... futex resumed>) = 0 [pid 742] <... futex resumed>) = 0 [pid 740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 737] <... close resumed>) = 0 [pid 753] chdir("./file0" [pid 744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 740] <... mmap resumed>) = 0x7fc129de4000 [pid 737] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 753] <... chdir resumed>) = 0 [pid 744] <... mmap resumed>) = 0x7fc129de4000 [pid 742] <... mmap resumed>) = 0x7fc129de4000 [pid 740] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 737] <... futex resumed>) = 0 [pid 753] ioctl(5, LOOP_CLR_FD [pid 744] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 742] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 740] <... mprotect resumed>) = 0 [pid 737] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] <... ioctl resumed>) = 0 [pid 744] <... mprotect resumed>) = 0 [pid 742] <... mprotect resumed>) = 0 [pid 740] rt_sigprocmask(SIG_BLOCK, ~[], [pid 753] close(5 [pid 744] rt_sigprocmask(SIG_BLOCK, ~[], [pid 742] rt_sigprocmask(SIG_BLOCK, ~[], [pid 740] <... rt_sigprocmask resumed>[], 8) = 0 [pid 753] <... close resumed>) = 0 [pid 744] <... rt_sigprocmask resumed>[], 8) = 0 [pid 743] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 742] <... rt_sigprocmask resumed>[], 8) = 0 [pid 740] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 753] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 744] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 743] <... mprotect resumed>) = 0 [pid 742] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 753] <... futex resumed>) = 0 [pid 740] <... clone3 resumed> => {parent_tid=[770]}, 88) = 770 [pid 753] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 744] <... clone3 resumed> => {parent_tid=[771]}, 88) = 771 [pid 743] rt_sigprocmask(SIG_BLOCK, ~[], [pid 742] <... clone3 resumed> => {parent_tid=[772]}, 88) = 772 [pid 740] rt_sigprocmask(SIG_SETMASK, [], [pid 744] rt_sigprocmask(SIG_SETMASK, [], [pid 742] rt_sigprocmask(SIG_SETMASK, [], [pid 740] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 740] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 744] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] <... futex resumed>) = 0 [pid 744] <... futex resumed>) = 0 [pid 742] <... futex resumed>) = 0 [pid 740] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 744] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 745] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 7 [pid 745] chdir("./file0") = 0 [pid 745] ioctl(5, LOOP_CLR_FD) = 0 [pid 745] close(5) = 0 [pid 745] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 745] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 772 attached ./strace-static-x86_64: Process 771 attached ./strace-static-x86_64: Process 770 attached [pid 743] <... rt_sigprocmask resumed>[], 8) = 0 [pid 751] <... mount resumed>) = 0 [pid 751] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 7 [pid 751] chdir("./file0") = 0 [pid 751] ioctl(5, LOOP_CLR_FD) = 0 [pid 751] close(5 [pid 772] set_robust_list(0x7fc129e049a0, 24 [pid 771] set_robust_list(0x7fc129e049a0, 24 [pid 770] set_robust_list(0x7fc129e049a0, 24 [pid 752] <... mount resumed>) = 0 [pid 751] <... close resumed>) = 0 [pid 743] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 772] <... set_robust_list resumed>) = 0 [pid 771] <... set_robust_list resumed>) = 0 [pid 770] <... set_robust_list resumed>) = 0 [pid 770] rt_sigprocmask(SIG_SETMASK, [], [pid 771] rt_sigprocmask(SIG_SETMASK, [], [pid 772] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 771] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 770] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 743] <... clone3 resumed> => {parent_tid=[773]}, 88) = 773 [pid 771] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 770] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 772] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 743] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 773 attached [pid 772] <... mmap resumed>) = 0x20000000 [pid 771] <... mmap resumed>) = 0x20000000 [pid 770] <... mmap resumed>) = 0x20000000 [pid 752] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 751] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 743] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 773] set_robust_list(0x7fc129e049a0, 24 [pid 772] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 752] <... openat resumed>) = 3 [pid 743] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 751] <... futex resumed>) = 0 [pid 772] <... futex resumed>) = 1 [pid 771] <... futex resumed>) = 1 [pid 770] <... futex resumed>) = 1 [pid 743] <... futex resumed>) = 0 [pid 744] <... futex resumed>) = 0 [pid 742] <... futex resumed>) = 0 [pid 740] <... futex resumed>) = 0 [pid 751] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 752] chdir("./file0" [pid 773] <... set_robust_list resumed>) = 0 [pid 772] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 771] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 770] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 743] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 744] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 751] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 752] <... chdir resumed>) = 0 [pid 773] rt_sigprocmask(SIG_SETMASK, [], [pid 744] <... futex resumed>) = 1 [pid 742] <... futex resumed>) = 0 [pid 753] <... futex resumed>) = 0 [pid 745] <... futex resumed>) = 0 [pid 740] <... futex resumed>) = 1 [pid 751] memfd_create("syzkaller", 0) = 5 [pid 753] memfd_create("syzkaller", 0 [pid 745] memfd_create("syzkaller", 0 [pid 753] <... memfd_create resumed>) = 5 [pid 745] <... memfd_create resumed>) = 5 [pid 753] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 753] <... mmap resumed>) = 0x7fc1219e4000 [pid 752] ioctl(5, LOOP_CLR_FD [pid 773] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 751] <... mmap resumed>) = 0x7fc1219e4000 [pid 745] <... mmap resumed>) = 0x7fc1219e4000 [pid 752] <... ioctl resumed>) = 0 [pid 752] close(5 [pid 753] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 752] <... close resumed>) = 0 [pid 752] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 752] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 773] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0) = 0x20000000 [pid 745] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 773] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 743] <... futex resumed>) = 0 [pid 743] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 753] <... write resumed>) = 65536 [pid 743] <... futex resumed>) = 1 [pid 752] <... futex resumed>) = 0 [pid 753] munmap(0x7fc1219e4000, 65536 [pid 745] <... write resumed>) = 65536 [pid 752] memfd_create("syzkaller", 0) = 5 [pid 752] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 752] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 745] munmap(0x7fc1219e4000, 65536 [pid 753] <... munmap resumed>) = 0 [pid 753] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 745] <... munmap resumed>) = 0 [pid 753] <... openat resumed>) = 8 [pid 752] <... write resumed>) = 65536 [pid 745] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 752] munmap(0x7fc1219e4000, 65536 [pid 753] ioctl(8, LOOP_SET_FD, 5 [pid 752] <... munmap resumed>) = 0 [pid 745] <... openat resumed>) = 8 [pid 753] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 752] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 745] ioctl(8, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 753] ioctl(8, LOOP_CLR_FD [pid 752] <... openat resumed>) = 8 [pid 745] ioctl(8, LOOP_CLR_FD [pid 753] <... ioctl resumed>) = 0 [pid 773] <... futex resumed>) = 1 [pid 752] ioctl(8, LOOP_SET_FD, 5 [pid 745] <... ioctl resumed>) = 0 [pid 773] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 752] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 752] ioctl(8, LOOP_CLR_FD) = 0 [pid 751] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 751] munmap(0x7fc1219e4000, 65536 [pid 753] ioctl(8, LOOP_SET_FD, 5 [pid 751] <... munmap resumed>) = 0 [pid 753] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 752] ioctl(8, LOOP_SET_FD, 5 [pid 751] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 745] ioctl(8, LOOP_SET_FD, 5 [pid 753] close(8 [pid 745] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 753] <... close resumed>) = 0 [pid 753] close(5 [pid 752] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 751] <... openat resumed>) = 8 [pid 745] close(8 [pid 752] close(8 [pid 751] ioctl(8, LOOP_SET_FD, 5 [pid 752] <... close resumed>) = 0 [pid 753] <... close resumed>) = 0 [pid 752] close(5 [pid 751] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 745] <... close resumed>) = 0 [pid 753] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 752] <... close resumed>) = 0 [pid 751] ioctl(8, LOOP_CLR_FD [pid 745] close(5 [pid 753] <... futex resumed>) = 0 [pid 752] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 751] <... ioctl resumed>) = 0 [pid 753] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 752] <... futex resumed>) = 0 [pid 745] <... close resumed>) = 0 [pid 752] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 745] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 745] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 751] ioctl(8, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 751] close(8) = 0 [pid 751] close(5) = 0 [pid 751] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 32.833805][ T751] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 32.856014][ T752] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 32.866243][ T751] ext4 filesystem being mounted at /root/syzkaller.duxz7m/10/file0 supports timestamps until 2038 (0x7fffffff) [ 32.869211][ T752] ext4 filesystem being mounted at /root/syzkaller.IpShW6/10/file0 supports timestamps until 2038 (0x7fffffff) [pid 751] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 730] exit_group(0 [pid 732] <... futex resumed>) = ? [pid 730] <... exit_group resumed>) = ? [pid 734] <... futex resumed>) = 231 [pid 731] <... futex resumed>) = ? [pid 733] <... recvmmsg resumed> ) = ? [pid 732] +++ exited with 0 +++ [pid 734] +++ exited with 0 +++ [pid 733] +++ exited with 0 +++ [pid 731] +++ exited with 0 +++ [pid 730] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=730, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 297] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 128 [pid 297] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 297] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./10/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./10/bus") = 0 [pid 297] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./10/binderfs") = 0 [pid 297] umount2("./10/ext4", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 735] exit_group(0 [pid 759] <... futex resumed>) = ? [pid 738] <... recvmmsg resumed> ) = ? [pid 735] <... exit_group resumed>) = ? [pid 759] +++ exited with 0 +++ [pid 738] +++ exited with 0 +++ [pid 737] <... futex resumed>) = ? [pid 297] umount2("./10/ext4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 737] +++ exited with 0 +++ [pid 735] +++ exited with 0 +++ [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=735, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 297] newfstatat(AT_FDCWD, "./10/ext4", [pid 293] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] umount2("./10/ext4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... openat resumed>) = 3 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(3, "", [pid 297] openat(AT_FDCWD, "./10/ext4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... openat resumed>) = 4 [pid 293] getdents64(3, [pid 297] newfstatat(4, "", [pid 293] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, [pid 293] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 293] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./11/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./11/bus") = 0 [pid 293] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./11/binderfs") = 0 [pid 293] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./10/ext4") = 0 [pid 297] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./10") = 0 [pid 297] mkdir("./11", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 744] exit_group(0 [pid 756] <... recvmmsg resumed> ) = ? [pid 771] <... futex resumed>) = ? [pid 744] <... exit_group resumed>) = ? [pid 753] <... futex resumed>) = ? [pid 771] +++ exited with 0 +++ [pid 756] +++ exited with 0 +++ [pid 743] exit_group(0 [pid 773] <... futex resumed>) = ? [pid 755] <... recvmmsg resumed>0x20009080, 1, 0, NULL) = -1 (errno 18446744073709551555) [pid 743] <... exit_group resumed>) = ? [pid 752] <... futex resumed>) = ? [pid 773] +++ exited with 0 +++ [pid 755] +++ exited with 0 +++ [pid 752] +++ exited with 0 +++ [pid 742] exit_group(0 [pid 772] <... futex resumed>) = 230 [pid 754] <... recvmmsg resumed> ) = ? [pid 772] +++ exited with 0 +++ [pid 754] +++ exited with 0 +++ [pid 751] <... futex resumed>) = ? [pid 742] <... exit_group resumed>) = ? [pid 751] +++ exited with 0 +++ [pid 740] exit_group(0 [pid 770] <... futex resumed>) = ? [pid 746] <... recvmmsg resumed> ) = ? [pid 745] <... futex resumed>) = ? [pid 740] <... exit_group resumed>) = ? [pid 770] +++ exited with 0 +++ [pid 746] +++ exited with 0 +++ [pid 745] +++ exited with 0 +++ [pid 297] <... openat resumed>) = 3 [pid 293] <... umount2 resumed>) = 0 [pid 753] +++ exited with 0 +++ [pid 744] +++ exited with 0 +++ [pid 743] +++ exited with 0 +++ [pid 742] +++ exited with 0 +++ [pid 740] +++ exited with 0 +++ [pid 297] ioctl(3, LOOP_CLR_FD [pid 293] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=740, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=743, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=742, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=744, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 297] close(3 [pid 293] newfstatat(AT_FDCWD, "./11/file0", [pid 297] <... close resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... clone resumed>, child_tidptr=0x5555563f4690) = 774 [pid 296] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] <... openat resumed>) = 3 [pid 295] <... openat resumed>) = 3 [pid 294] <... openat resumed>) = 3 [pid 293] <... openat resumed>) = 4 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 774 attached [pid 296] newfstatat(3, "", [pid 295] newfstatat(3, "", [pid 294] newfstatat(3, "", [pid 293] newfstatat(4, "", [pid 292] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 774] set_robust_list(0x5555563f46a0, 24 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, [pid 295] getdents64(3, [pid 294] getdents64(3, [pid 293] getdents64(4, [pid 292] <... openat resumed>) = 3 [pid 296] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 294] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 293] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 292] newfstatat(3, "", [pid 296] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] getdents64(4, [pid 296] <... umount2 resumed>) = 0 [pid 295] <... umount2 resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... umount2 resumed>) = 0 [pid 293] close(4 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... close resumed>) = 0 [pid 292] getdents64(3, [pid 774] <... set_robust_list resumed>) = 0 [pid 296] newfstatat(AT_FDCWD, "./10/bus", [pid 295] newfstatat(AT_FDCWD, "./10/bus", [pid 293] rmdir("./11/file0" [pid 296] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... rmdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 774] chdir("./11" [pid 296] unlink("./10/bus" [pid 295] unlink("./10/bus" [pid 294] newfstatat(AT_FDCWD, "./10/bus", [pid 293] getdents64(3, [pid 296] <... unlink resumed>) = 0 [pid 295] <... unlink resumed>) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 292] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] unlink("./10/bus" [pid 293] close(3 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... close resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 295] newfstatat(AT_FDCWD, "./10/binderfs", [pid 293] rmdir("./11" [pid 774] <... chdir resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... unlink resumed>) = 0 [pid 293] <... rmdir resumed>) = 0 [pid 292] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 774] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 296] newfstatat(AT_FDCWD, "./10/binderfs", [pid 295] unlink("./10/binderfs" [pid 294] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] mkdir("./12", 0777 [pid 774] <... prctl resumed>) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... unlink resumed>) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... mkdir resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 774] setpgid(0, 0 [pid 296] unlink("./10/binderfs" [pid 295] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] newfstatat(AT_FDCWD, "./10/binderfs", [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 292] newfstatat(AT_FDCWD, "./11/bus", [pid 293] <... openat resumed>) = 3 [pid 296] <... unlink resumed>) = 0 [pid 293] ioctl(3, LOOP_CLR_FD [pid 774] <... setpgid resumed>) = 0 [pid 296] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 774] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 294] unlink("./10/binderfs" [pid 293] close(3 [pid 294] <... unlink resumed>) = 0 [pid 292] unlink("./11/bus" [pid 294] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] <... unlink resumed>) = 0 [pid 292] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 774] <... openat resumed>) = 3 [pid 292] unlink("./11/binderfs" [pid 774] write(3, "1000", 4) = 4 [pid 774] close(3) = 0 [pid 292] <... unlink resumed>) = 0 [pid 774] symlink("/dev/binderfs", "./binderfs") = 0 [pid 774] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 774] <... futex resumed>) = 0 [pid 774] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 774] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 774] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 774] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 774] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 774] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} => {parent_tid=[775]}, 88) = 775 [pid 774] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 774] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 774] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 774] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 774] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 775 attached [pid 774] rt_sigprocmask(SIG_BLOCK, ~[], [pid 775] set_robust_list(0x7fc1322069a0, 24 [pid 774] <... rt_sigprocmask resumed>[], 8) = 0 [pid 774] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} => {parent_tid=[776]}, 88) = 776 [pid 774] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 774] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 774] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 775] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 776 attached [pid 775] rt_sigprocmask(SIG_SETMASK, [], [pid 776] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 776] rt_sigprocmask(SIG_SETMASK, [], [pid 775] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 776] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 776] creat("./bus", 000) = 3 [pid 776] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] <... futex resumed>) = 0 [pid 774] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 774] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 776] <... futex resumed>) = 1 [pid 776] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 776] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] <... futex resumed>) = 0 [pid 774] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 774] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 776] <... futex resumed>) = 1 [pid 775] memfd_create("syzkaller", 0 [pid 776] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 775] <... memfd_create resumed>) = 4 [pid 775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 [pid 775] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 775] munmap(0x7fc129dc5000, 262144) = 0 [pid 775] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 295] <... umount2 resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 295] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./10/file0", [pid 293] <... clone resumed>, child_tidptr=0x5555563f4690) = 777 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 295] rmdir("./10/file0"./strace-static-x86_64: Process 777 attached ) = 0 [pid 295] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./10") = 0 [pid 295] mkdir("./11", 0777 [pid 777] set_robust_list(0x5555563f46a0, 24 [pid 295] <... mkdir resumed>) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 777] <... set_robust_list resumed>) = 0 [pid 777] chdir("./12") = 0 [pid 777] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 777] setpgid(0, 0) = 0 [pid 777] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 777] write(3, "1000", 4) = 4 [pid 777] close(3) = 0 [pid 777] symlink("/dev/binderfs", "./binderfs") = 0 [pid 777] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 777] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 777] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 777] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 777] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 777] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 777] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0}./strace-static-x86_64: Process 778 attached => {parent_tid=[778]}, 88) = 778 [pid 778] set_robust_list(0x7fc1322069a0, 24) = 0 [pid 778] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 778] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 777] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 777] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 778] <... futex resumed>) = 0 [pid 778] memfd_create("syzkaller", 0) = 3 [pid 778] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129de6000 [pid 777] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 777] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129dc5000 [pid 777] mprotect(0x7fc129dc6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 777] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 777] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129de5990, parent_tid=0x7fc129de5990, exit_signal=0, stack=0x7fc129dc5000, stack_size=0x20300, tls=0x7fc129de56c0} [pid 778] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 777] <... clone3 resumed> => {parent_tid=[779]}, 88) = 779 [pid 777] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 777] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 778] <... write resumed>) = 262144 [pid 778] munmap(0x7fc129de6000, 262144 [pid 777] <... futex resumed>) = 0 [pid 777] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 778] <... munmap resumed>) = 0 [pid 778] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 779 attached [pid 779] set_robust_list(0x7fc129de59a0, 24) = 0 [pid 779] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 779] creat("./bus", 000) = 5 [pid 779] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 779] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 777] <... futex resumed>) = 0 [pid 777] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 777] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 779] <... futex resumed>) = 0 [pid 779] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 779] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 779] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 777] <... futex resumed>) = 0 [pid 777] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 779] <... futex resumed>) = 0 [pid 779] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 777] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 774] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 774] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 774] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 774] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 774] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 774] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129de4000 [pid 774] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 774] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 774] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} => {parent_tid=[780]}, 88) = 780 [pid 774] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 774] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 774] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 780 attached [pid 780] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 780] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 780] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 7 [pid 780] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] <... futex resumed>) = 0 [pid 774] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 774] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 780] <... futex resumed>) = 1 [pid 780] recvmmsg(7, [pid 777] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 777] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 777] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 777] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 777] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129e05000 [pid 777] mprotect(0x7fc129e06000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 777] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 777] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e25990, parent_tid=0x7fc129e25990, exit_signal=0, stack=0x7fc129e05000, stack_size=0x20300, tls=0x7fc129e256c0} => {parent_tid=[781]}, 88) = 781 [pid 777] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 777] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 777] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 781 attached [pid 781] set_robust_list(0x7fc129e259a0, 24) = 0 [pid 781] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 781] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 7 [pid 781] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 777] <... futex resumed>) = 0 [pid 777] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 777] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 781] <... futex resumed>) = 1 [pid 781] recvmmsg(7, [pid 774] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 774] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 774] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 774] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 774] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129dc3000 [pid 774] mprotect(0x7fc129dc4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 774] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 774] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129de3990, parent_tid=0x7fc129de3990, exit_signal=0, stack=0x7fc129dc3000, stack_size=0x20300, tls=0x7fc129de36c0} => {parent_tid=[782]}, 88) = 782 [pid 774] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 774] futex(0x7fc1322d26f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 774] futex(0x7fc1322d26fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 782 attached [pid 782] set_robust_list(0x7fc129de39a0, 24) = 0 [pid 782] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 782] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, -1, 0) = -1 EBADF (Bad file descriptor) [pid 782] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] <... futex resumed>) = 0 [pid 774] futex(0x7fc1322d26f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 782] <... futex resumed>) = 1 [pid 782] memfd_create("syzkaller", 0) = 8 [pid 782] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219c3000 [pid 782] write(8, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 782] munmap(0x7fc1219c3000, 65536) = 0 [pid 782] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 776] <... open resumed>) = 5 [pid 782] <... openat resumed>) = 9 [pid 779] <... open resumed>) = 6 [pid 778] <... openat resumed>) = 4 [pid 777] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 776] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 775] <... openat resumed>) = 6 [pid 296] <... umount2 resumed>) = 0 [pid 295] <... openat resumed>) = 3 [pid 294] <... umount2 resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 782] ioctl(9, LOOP_SET_FD, 8 [pid 779] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 778] ioctl(4, LOOP_SET_FD, 3 [pid 777] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 776] <... futex resumed>) = 0 [pid 775] ioctl(6, LOOP_SET_FD, 4 [pid 296] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] ioctl(3, LOOP_CLR_FD [pid 294] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 779] <... futex resumed>) = 0 [pid 777] <... futex resumed>) = 0 [pid 776] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 779] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 777] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] newfstatat(AT_FDCWD, "./10/file0", [pid 294] newfstatat(AT_FDCWD, "./10/file0", [pid 292] newfstatat(AT_FDCWD, "./11/file0", [pid 779] <... mmap resumed>) = 0x20000000 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 779] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 778] <... ioctl resumed>) = 0 [pid 296] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 779] <... futex resumed>) = 1 [pid 778] close(3 [pid 777] <... futex resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 779] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 778] <... close resumed>) = 0 [pid 777] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 775] <... ioctl resumed>) = 0 [pid 296] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 782] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 779] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 778] mkdir(0x20000000, 0777 [pid 777] <... futex resumed>) = 0 [pid 775] close(4 [pid 296] <... openat resumed>) = 4 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 294] <... openat resumed>) = 4 [pid 292] <... openat resumed>) = 4 [pid 782] ioctl(9, LOOP_CLR_FD [pid 775] <... close resumed>) = 0 [pid 296] newfstatat(4, "", [pid 295] close(3 [pid 294] newfstatat(4, "", [pid 292] newfstatat(4, "", [pid 782] <... ioctl resumed>) = 0 [pid 775] mkdir("ext4", 0777 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... close resumed>) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, [pid 294] getdents64(4, [pid 292] getdents64(4, [pid 296] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 292] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, [pid 294] getdents64(4, [pid 292] getdents64(4, [pid 296] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 294] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 292] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 296] close(4 [pid 294] close(4 [pid 292] close(4 [pid 296] <... close resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 296] rmdir("./10/file0" [pid 294] rmdir("./10/file0" [pid 292] rmdir("./11/file0" [pid 296] <... rmdir resumed>) = 0 [pid 294] <... rmdir resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 296] getdents64(3, [pid 294] getdents64(3, [pid 292] getdents64(3, [pid 779] memfd_create("syzkaller", 0 [pid 778] <... mkdir resumed>) = 0 [pid 775] <... mkdir resumed>) = 0 [pid 296] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 292] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 779] <... memfd_create resumed>) = 3 [pid 778] mount("/dev/loop1", 0x20000000, 0x200005c0, MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"... [pid 775] mount("/dev/loop5", "ext4", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 296] close(3 [pid 294] close(3 [pid 292] close(3 [pid 779] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 296] <... close resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 296] rmdir("./10" [pid 294] rmdir("./10" [pid 292] rmdir("./11" [pid 296] <... rmdir resumed>) = 0 [pid 294] <... rmdir resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 296] mkdir("./11", 0777 [pid 294] mkdir("./11", 0777 [pid 292] mkdir("./12", 0777 [pid 296] <... mkdir resumed>) = 0 [pid 294] <... mkdir resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 296] <... openat resumed>) = 3 [pid 294] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 296] ioctl(3, LOOP_CLR_FD [pid 294] ioctl(3, LOOP_CLR_FD [pid 292] ioctl(3, LOOP_CLR_FD [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] close(3 [pid 294] close(3 [pid 292] close(3 [pid 296] <... close resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] <... clone resumed>, child_tidptr=0x5555563f4690) = 786 [pid 294] <... clone resumed>, child_tidptr=0x5555563f4690) = 787 [pid 292] <... clone resumed>, child_tidptr=0x5555563f4690) = 788 ./strace-static-x86_64: Process 788 attached [pid 788] set_robust_list(0x5555563f46a0, 24) = 0 [pid 788] chdir("./12") = 0 [pid 788] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 788] setpgid(0, 0) = 0 [pid 788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 787 attached [pid 787] set_robust_list(0x5555563f46a0, 24) = 0 [pid 787] chdir("./11" [pid 788] write(3, "1000", 4) = 4 [pid 787] <... chdir resumed>) = 0 [pid 788] close(3) = 0 [pid 787] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 788] symlink("/dev/binderfs", "./binderfs" [pid 787] <... prctl resumed>) = 0 [pid 788] <... symlink resumed>) = 0 [pid 787] setpgid(0, 0) = 0 [pid 787] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 788] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... openat resumed>) = 3 [pid 788] <... futex resumed>) = 0 [pid 788] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 788] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 787] write(3, "1000", 4) = 4 [pid 788] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 787] close(3) = 0 [pid 787] symlink("/dev/binderfs", "./binderfs") = 0 [pid 788] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 787] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 787] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 787] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 787] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 788] <... clone3 resumed> => {parent_tid=[789]}, 88) = 789 [pid 787] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 788] rt_sigprocmask(SIG_SETMASK, [], [pid 787] <... mprotect resumed>) = 0 [pid 788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 788] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] rt_sigprocmask(SIG_BLOCK, ~[], [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 788] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 788] rt_sigprocmask(SIG_BLOCK, ~[], [pid 787] <... rt_sigprocmask resumed>[], 8) = 0 [pid 787] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 788] <... rt_sigprocmask resumed>[], 8) = 0 [pid 788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0}./strace-static-x86_64: Process 786 attached [pid 787] <... clone3 resumed> => {parent_tid=[790]}, 88) = 790 [pid 786] set_robust_list(0x5555563f46a0, 24 [pid 788] <... clone3 resumed> => {parent_tid=[791]}, 88) = 791 [pid 787] rt_sigprocmask(SIG_SETMASK, [], [pid 786] <... set_robust_list resumed>) = 0 [pid 788] rt_sigprocmask(SIG_SETMASK, [], [pid 787] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 786] chdir("./11" [pid 788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 787] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] <... chdir resumed>) = 0 [pid 788] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... futex resumed>) = 0 [pid 786] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 788] <... futex resumed>) = 0 [pid 787] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] <... prctl resumed>) = 0 [pid 788] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 0 [pid 786] setpgid(0, 0 [pid 787] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 786] <... setpgid resumed>) = 0 [pid 787] <... mmap resumed>) = 0x7fc1321c5000 [pid 786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 787] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 786] <... openat resumed>) = 3 [pid 787] <... mprotect resumed>) = 0 [pid 786] write(3, "1000", 4 [pid 787] rt_sigprocmask(SIG_BLOCK, ~[], [pid 786] <... write resumed>) = 4 [pid 787] <... rt_sigprocmask resumed>[], 8) = 0 [pid 786] close(3 [pid 787] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 786] <... close resumed>) = 0 [pid 786] symlink("/dev/binderfs", "./binderfs" [pid 787] <... clone3 resumed> => {parent_tid=[792]}, 88) = 792 [pid 786] <... symlink resumed>) = 0 [pid 787] rt_sigprocmask(SIG_SETMASK, [], [pid 786] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 786] <... futex resumed>) = 0 [pid 787] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 787] <... futex resumed>) = 0 [pid 786] <... rt_sigaction resumed>NULL, 8) = 0 [pid 787] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 786] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 791 attached ) = 0x7fc1321e6000 [pid 791] set_robust_list(0x7fc1321e59a0, 24 [pid 786] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 791] <... set_robust_list resumed>) = 0 [pid 786] <... mprotect resumed>) = 0 [pid 791] rt_sigprocmask(SIG_SETMASK, [], [pid 786] rt_sigprocmask(SIG_BLOCK, ~[], [pid 791] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 786] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 790 attached [pid 791] creat("./bus", 000 [pid 786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 791] <... creat resumed>) = 3 [pid 790] set_robust_list(0x7fc1322069a0, 24 [pid 791] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... set_robust_list resumed>) = 0 [pid 786] <... clone3 resumed> => {parent_tid=[793]}, 88) = 793 ./strace-static-x86_64: Process 789 attached [pid 791] <... futex resumed>) = 1 [pid 790] rt_sigprocmask(SIG_SETMASK, [], [pid 788] <... futex resumed>) = 0 [pid 786] rt_sigprocmask(SIG_SETMASK, [], [pid 791] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 790] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 789] set_robust_list(0x7fc1322069a0, 24 [pid 788] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 786] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 792 attached [pid 791] <... mount resumed>) = 0 [pid 790] memfd_create("syzkaller", 0 [pid 789] <... set_robust_list resumed>) = 0 [pid 788] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 786] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] set_robust_list(0x7fc1321e59a0, 24 [pid 791] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... memfd_create resumed>) = 3 [pid 789] rt_sigprocmask(SIG_SETMASK, [], [pid 786] <... futex resumed>) = 0 [pid 792] <... set_robust_list resumed>) = 0 [pid 791] <... futex resumed>) = 1 [pid 790] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 789] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 788] <... futex resumed>) = 0 [pid 786] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] rt_sigprocmask(SIG_SETMASK, [], [pid 791] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 790] <... mmap resumed>) = 0x7fc129dc5000 [pid 789] memfd_create("syzkaller", 0 [pid 788] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] <... futex resumed>) = 0 [pid 792] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 791] <... open resumed>) = 4 [pid 790] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 789] <... memfd_create resumed>) = 5 [pid 788] <... futex resumed>) = 0 [pid 786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 792] creat("./bus", 000 [pid 791] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... write resumed>) = 262144 [pid 789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 788] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 786] <... mmap resumed>) = 0x7fc1321c5000 [pid 792] <... creat resumed>) = 4 [pid 791] <... futex resumed>) = 0 [pid 789] <... mmap resumed>) = 0x7fc129dc5000 [pid 788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 786] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 793 attached [pid 792] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 791] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 789] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 788] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] <... mprotect resumed>) = 0 [pid 793] set_robust_list(0x7fc1322069a0, 24 [pid 792] <... futex resumed>) = 1 [pid 791] <... socket resumed>) = 6 [pid 790] munmap(0x7fc129dc5000, 262144 [pid 789] <... write resumed>) = 262144 [pid 788] <... futex resumed>) = 0 [pid 787] <... futex resumed>) = 0 [pid 786] rt_sigprocmask(SIG_BLOCK, ~[], [pid 793] <... set_robust_list resumed>) = 0 [pid 792] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 791] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... munmap resumed>) = 0 [pid 788] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] <... rt_sigprocmask resumed>[], 8) = 0 [pid 793] rt_sigprocmask(SIG_SETMASK, [], [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 791] <... futex resumed>) = 0 [pid 790] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 789] munmap(0x7fc129dc5000, 262144 [pid 788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 787] <... futex resumed>) = 0 [pid 786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 793] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 792] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 791] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] <... openat resumed>) = 5 [pid 789] <... munmap resumed>) = 0 [pid 788] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 793] memfd_create("syzkaller", 0 [pid 792] <... mount resumed>) = 0 [pid 791] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 790] ioctl(5, LOOP_SET_FD, 3 [pid 789] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 788] <... futex resumed>) = 0 [pid 786] <... clone3 resumed> => {parent_tid=[794]}, 88) = 794 [pid 793] <... memfd_create resumed>) = 3 [pid 792] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 791] recvmmsg(6, [pid 788] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 786] rt_sigprocmask(SIG_SETMASK, [], [pid 793] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 792] <... futex resumed>) = 1 [pid 787] <... futex resumed>) = 0 [pid 786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 793] <... mmap resumed>) = 0x7fc129dc5000 [pid 792] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 787] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 787] <... futex resumed>) = 0 [pid 786] <... futex resumed>) = 0 [pid 793] <... write resumed>) = 262144 [pid 792] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 787] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 786] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 793] munmap(0x7fc129dc5000, 262144) = 0 [pid 793] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 792] <... open resumed>) = 6 [pid 790] <... ioctl resumed>) = 0 [pid 789] <... openat resumed>) = 7 [pid 793] ioctl(4, LOOP_SET_FD, 3 [pid 792] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 790] close(3 [pid 789] ioctl(7, LOOP_SET_FD, 5 [pid 787] <... futex resumed>) = 0 [pid 792] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] <... close resumed>) = 0 [pid 787] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 790] mkdir("./file0", 0777 [pid 787] <... futex resumed>) = 0 [pid 792] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 790] <... mkdir resumed>) = 0 [pid 787] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 792] <... socket resumed>) = 3 [pid 790] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 792] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 787] <... futex resumed>) = 0 [pid 792] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 787] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 787] <... futex resumed>) = 0 [pid 792] recvmmsg(3, [pid 787] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 779] <... mmap resumed>) = 0x7fc1219c5000 [pid 295] <... clone resumed>, child_tidptr=0x5555563f4690) = 785 ./strace-static-x86_64: Process 794 attached [pid 794] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 794] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 794] creat("./bus", 000) = 5 [pid 782] ioctl(9, LOOP_SET_FD, 8 [pid 779] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 779] munmap(0x7fc1219c5000, 65536 [pid 794] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] <... futex resumed>) = 0 [pid 786] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] <... munmap resumed>) = 0 [pid 786] <... futex resumed>) = 0 [pid 779] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 786] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 794] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 794] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] <... futex resumed>) = 0 [pid 786] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 786] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 778] <... mount resumed>) = -1 ENODEV (No such device) ./strace-static-x86_64: Process 785 attached [pid 793] <... ioctl resumed>) = 0 [pid 794] <... futex resumed>) = 1 [pid 793] close(3 [pid 794] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 793] <... close resumed>) = 0 [pid 793] mkdir("./file0", 0777 [pid 785] set_robust_list(0x5555563f46a0, 24 [pid 778] ioctl(4, LOOP_CLR_FD [pid 793] <... mkdir resumed>) = 0 [pid 793] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 785] <... set_robust_list resumed>) = 0 [pid 785] chdir("./11" [pid 789] <... ioctl resumed>) = 0 [pid 785] <... chdir resumed>) = 0 [pid 789] close(5) = 0 [pid 789] mkdir("./file0", 0777) = 0 [pid 794] <... open resumed>) = 3 [pid 789] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 794] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 786] <... futex resumed>) = 0 [pid 794] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 786] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... socket resumed>) = 6 [pid 786] <... futex resumed>) = 0 [pid 794] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 0 [pid 786] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] recvmmsg(6, [pid 786] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 786] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 785] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 782] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 779] <... openat resumed>) = 8 [pid 778] <... ioctl resumed>) = 0 [pid 785] <... prctl resumed>) = 0 [pid 782] close(9 [pid 779] ioctl(8, LOOP_SET_FD, 3 [pid 778] close(4 [pid 779] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 782] <... close resumed>) = 0 [pid 778] <... close resumed>) = 0 [pid 779] ioctl(8, LOOP_CLR_FD [pid 782] close(8 [pid 785] setpgid(0, 0 [pid 779] <... ioctl resumed>) = 0 [pid 778] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 782] <... close resumed>) = 0 [pid 778] <... futex resumed>) = 0 [pid 785] <... setpgid resumed>) = 0 [pid 778] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 782] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] <... openat resumed>) = 3 [pid 782] futex(0x7fc1322d26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] write(3, "1000", 4) = 4 [pid 779] ioctl(8, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 785] close(3 [pid 779] close(8) = 0 [pid 779] close(3 [pid 785] <... close resumed>) = 0 [pid 779] <... close resumed>) = 0 [pid 785] symlink("/dev/binderfs", "./binderfs" [pid 779] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 779] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] <... symlink resumed>) = 0 [pid 785] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 33.239791][ T778] request_module fs- succeeded, but still no fs? [ 33.245985][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 33.245995][ T24] audit: type=1400 audit(1692557943.400:78): avc: denied { module_request } for pid=777 comm="syz-executor417" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [pid 785] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 785] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 785] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 785] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0}./strace-static-x86_64: Process 804 attached [pid 804] set_robust_list(0x7fc1322069a0, 24) = 0 [pid 785] <... clone3 resumed> => {parent_tid=[804]}, 88) = 804 [pid 785] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 785] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 785] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 785] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 804] rt_sigprocmask(SIG_SETMASK, [], [pid 785] <... clone3 resumed> => {parent_tid=[805]}, 88) = 805 [pid 804] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 785] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 785] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 804] memfd_create("syzkaller", 0) = 3 [pid 804] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 [pid 804] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 788] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 788] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129de4000 [pid 788] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 788] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} => {parent_tid=[806]}, 88) = 806 [pid 788] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 788] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 806 attached ./strace-static-x86_64: Process 805 attached [pid 804] <... write resumed>) = 262144 [pid 787] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 786] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 787] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... futex resumed>) = 0 [pid 786] <... futex resumed>) = 0 [pid 787] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 787] <... mmap resumed>) = 0x7fc129de4000 [pid 786] <... mmap resumed>) = 0x7fc129de4000 [pid 787] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 786] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 787] <... mprotect resumed>) = 0 [pid 786] <... mprotect resumed>) = 0 [pid 787] rt_sigprocmask(SIG_BLOCK, ~[], [pid 786] rt_sigprocmask(SIG_BLOCK, ~[], [pid 787] <... rt_sigprocmask resumed>[], 8) = 0 [pid 786] <... rt_sigprocmask resumed>[], 8) = 0 [pid 787] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 787] <... clone3 resumed> => {parent_tid=[809]}, 88) = 809 [pid 786] <... clone3 resumed> => {parent_tid=[810]}, 88) = 810 [pid 787] rt_sigprocmask(SIG_SETMASK, [], [pid 786] rt_sigprocmask(SIG_SETMASK, [], [pid 787] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 787] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... futex resumed>) = 0 [pid 786] <... futex resumed>) = 0 [pid 787] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 786] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 775] <... mount resumed>) = 0 [pid 775] openat(AT_FDCWD, "ext4", O_RDONLY|O_DIRECTORY) = 4 [pid 775] chdir("ext4") = 0 [pid 775] ioctl(6, LOOP_CLR_FD) = 0 [pid 775] close(6) = 0 [pid 775] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 775] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 806] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 806] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 806] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000 [pid 806] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] <... futex resumed>) = 1 [pid 806] memfd_create("syzkaller", 0) = 5 [pid 806] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 806] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [ 33.295926][ T775] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 33.320146][ T775] ext4 filesystem being mounted at /root/syzkaller.SVIRRC/11/ext4 supports timestamps until 2038 (0x7fffffff) [ 33.325320][ T793] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 806] munmap(0x7fc1219e4000, 65536 [pid 805] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 805] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 805] creat("./bus", 000) = 4 [pid 805] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 785] <... futex resumed>) = 0 [pid 785] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 805] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 805] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 805] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 804] munmap(0x7fc129dc5000, 262144) = 0 [pid 804] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 5 [pid 804] ioctl(5, LOOP_SET_FD, 3./strace-static-x86_64: Process 809 attached [pid 809] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 809] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 809] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 785] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 805] <... futex resumed>) = 0 [pid 804] <... ioctl resumed>) = 0 [pid 785] <... futex resumed>) = 1 [pid 804] close(3) = 0 [pid 805] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 804] mkdir("./file0", 0777 [pid 785] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 805] <... open resumed>) = 3 [pid 804] <... mkdir resumed>) = 0 [pid 805] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 804] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 805] <... futex resumed>) = 1 [pid 785] <... futex resumed>) = 0 [pid 805] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 805] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 785] <... futex resumed>) = 0 [pid 805] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 785] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 805] <... socket resumed>) = 6 [pid 805] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 785] <... futex resumed>) = 0 [pid 805] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 805] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 785] <... futex resumed>) = 0 [pid 805] recvmmsg(6, [pid 785] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 809] <... mmap resumed>) = 0x20000000 [pid 809] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... futex resumed>) = 0 [pid 787] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 809] <... futex resumed>) = 1 [pid 809] memfd_create("syzkaller", 0) = 7 [pid 809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 809] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 809] munmap(0x7fc1219e4000, 65536) = 0 [pid 809] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 8 [pid 809] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 809] ioctl(8, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 810 attached [pid 810] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 810] rt_sigprocmask(SIG_SETMASK, [], [pid 809] ioctl(8, LOOP_SET_FD, 7 [pid 786] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 809] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 786] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 809] close(8 [pid 786] <... futex resumed>) = 0 [pid 809] <... close resumed>) = 0 [pid 786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 809] close(7 [pid 786] <... mmap resumed>) = 0x7fc129dc3000 [pid 810] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 809] <... close resumed>) = 0 [pid 786] mprotect(0x7fc129dc4000, 131072, PROT_READ|PROT_WRITE [pid 810] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 809] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] <... mprotect resumed>) = 0 [pid 810] <... mmap resumed>) = 0x20000000 [pid 809] <... futex resumed>) = 0 [pid 786] rt_sigprocmask(SIG_BLOCK, ~[], [pid 789] <... mount resumed>) = 0 [pid 789] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 786] <... rt_sigprocmask resumed>[], 8) = 0 [pid 789] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129de3990, parent_tid=0x7fc129de3990, exit_signal=0, stack=0x7fc129dc3000, stack_size=0x20300, tls=0x7fc129de36c0}./strace-static-x86_64: Process 814 attached [pid 810] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 809] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] ioctl(7, LOOP_CLR_FD [pid 810] <... futex resumed>) = 0 [pid 789] <... ioctl resumed>) = 0 [pid 814] set_robust_list(0x7fc129de39a0, 24 [pid 786] <... clone3 resumed> => {parent_tid=[814]}, 88) = 814 [pid 810] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] close(7 [ 33.343538][ T789] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 33.355072][ T790] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 33.377526][ T789] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 786] rt_sigprocmask(SIG_SETMASK, [], [pid 814] <... set_robust_list resumed>) = 0 [pid 789] <... close resumed>) = 0 [pid 786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 786] futex(0x7fc1322d26f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] <... munmap resumed>) = 0 [pid 806] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 806] ioctl(7, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 806] ioctl(7, LOOP_CLR_FD) = 0 [pid 814] rt_sigprocmask(SIG_SETMASK, [], [pid 793] <... mount resumed>) = 0 [pid 790] <... mount resumed>) = 0 [pid 789] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY) = -1 ENOENT (No such file or directory) [pid 793] ioctl(4, LOOP_CLR_FD) = 0 [pid 793] close(4) = 0 [pid 793] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 814] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 814] memfd_create("syzkaller", 0) = 4 [pid 814] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219c3000 [pid 814] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 814] munmap(0x7fc1219c3000, 65536) = 0 [pid 814] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 7 [pid 814] ioctl(7, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 814] ioctl(7, LOOP_CLR_FD) = 0 [pid 790] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY) = -1 ENOENT (No such file or directory) [pid 790] ioctl(5, LOOP_CLR_FD) = 0 [pid 790] close(5 [pid 785] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 814] ioctl(7, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 814] close(7) = 0 [pid 814] close(4) = 0 [pid 814] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7fc1322d26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] <... close resumed>) = 0 [pid 806] ioctl(7, LOOP_SET_FD, 5 [pid 785] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = 0 [pid 806] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 789] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] <... futex resumed>) = 0 [pid 806] close(7 [pid 785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 790] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... close resumed>) = 0 [pid 785] <... mmap resumed>) = 0x7fc129de4000 [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 806] close(5 [pid 785] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 806] <... close resumed>) = 0 [pid 785] rt_sigprocmask(SIG_BLOCK, ~[], [pid 806] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] <... rt_sigprocmask resumed>[], 8) = 0 [pid 806] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0}./strace-static-x86_64: Process 815 attached => {parent_tid=[815]}, 88) = 815 [pid 785] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 785] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] set_robust_list(0x7fc129e049a0, 24) = 0 [ 33.399471][ T790] ext4 filesystem being mounted at /root/syzkaller.duxz7m/11/file0 supports timestamps until 2038 (0x7fffffff) [ 33.402058][ T793] ext4 filesystem being mounted at /root/syzkaller.jl33I5/11/file0 supports timestamps until 2038 (0x7fffffff) [ 33.412610][ T804] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 815] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 815] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 804] <... mount resumed>) = 0 [pid 815] <... mmap resumed>) = 0x20000000 [pid 804] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 815] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 804] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 815] <... futex resumed>) = 1 [pid 785] <... futex resumed>) = 0 [pid 785] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 804] ioctl(5, LOOP_CLR_FD) = 0 [pid 804] close(5 [pid 815] memfd_create("syzkaller", 0) = 5 [pid 815] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 815] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 804] <... close resumed>) = 0 [pid 815] <... write resumed>) = 65536 [pid 804] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] munmap(0x7fc1219e4000, 65536) = 0 [pid 815] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 7 [pid 815] ioctl(7, LOOP_SET_FD, 5 [pid 804] <... futex resumed>) = 0 [pid 815] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 815] ioctl(7, LOOP_CLR_FD) = 0 [pid 804] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] ioctl(7, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 815] close(7) = 0 [pid 815] close(5) = 0 [pid 815] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 33.441780][ T804] ext4 filesystem being mounted at /root/syzkaller.IpShW6/11/file0 supports timestamps until 2038 (0x7fffffff) [pid 815] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 774] exit_group(0) = ? [pid 782] <... futex resumed>) = ? [pid 780] <... recvmmsg resumed> ) = ? [pid 776] <... futex resumed>) = ? [pid 775] <... futex resumed>) = ? [pid 782] +++ exited with 0 +++ [pid 780] +++ exited with 0 +++ [pid 776] +++ exited with 0 +++ [pid 775] +++ exited with 0 +++ [pid 774] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=774, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 297] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 128 [pid 297] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 297] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./11/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./11/bus") = 0 [pid 297] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./11/binderfs") = 0 [pid 297] umount2("./11/ext4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 788] exit_group(0 [pid 806] <... futex resumed>) = ? [pid 791] <... recvmmsg resumed> ) = ? [pid 789] <... futex resumed>) = ? [pid 788] <... exit_group resumed>) = ? [pid 791] +++ exited with 0 +++ [pid 806] +++ exited with 0 +++ [pid 789] +++ exited with 0 +++ [pid 777] exit_group(0 [pid 778] <... futex resumed>) = ? [pid 781] <... recvmmsg resumed>0x20009080, 1, 0, NULL) = -1 (errno 18446744073709551555) [pid 777] <... exit_group resumed>) = ? [pid 779] <... futex resumed>) = ? [pid 778] +++ exited with 0 +++ [pid 781] +++ exited with 0 +++ [pid 779] +++ exited with 0 +++ [pid 788] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=788, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] <... umount2 resumed>) = 0 [pid 292] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] umount2("./11/ext4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] getdents64(3, [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 297] newfstatat(AT_FDCWD, "./11/ext4", [pid 292] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] umount2("./11/ext4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] newfstatat(AT_FDCWD, "./12/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] unlink("./12/bus" [pid 297] openat(AT_FDCWD, "./11/ext4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... unlink resumed>) = 0 [pid 297] <... openat resumed>) = 4 [pid 292] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] newfstatat(4, "", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] newfstatat(AT_FDCWD, "./12/binderfs", [pid 297] getdents64(4, [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 292] unlink("./12/binderfs" [pid 297] getdents64(4, [pid 292] <... unlink resumed>) = 0 [pid 297] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 292] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] close(4) = 0 [pid 297] rmdir("./11/ext4") = 0 [pid 297] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./11") = 0 [pid 297] mkdir("./12", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 787] exit_group(0 [pid 809] <... futex resumed>) = ? [pid 792] <... recvmmsg resumed> ) = ? [pid 790] <... futex resumed>) = ? [pid 787] <... exit_group resumed>) = ? [pid 809] +++ exited with 0 +++ [pid 792] +++ exited with 0 +++ [pid 790] +++ exited with 0 +++ [pid 786] exit_group(0 [pid 814] <... futex resumed>) = ? [pid 810] <... futex resumed>) = ? [pid 794] <... recvmmsg resumed> ) = ? [pid 793] <... futex resumed>) = ? [pid 786] <... exit_group resumed>) = ? [pid 814] +++ exited with 0 +++ [pid 810] +++ exited with 0 +++ [pid 794] +++ exited with 0 +++ [pid 793] +++ exited with 0 +++ [pid 777] +++ exited with 0 +++ [pid 292] <... umount2 resumed>) = 0 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=777, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 292] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] newfstatat(AT_FDCWD, "./12/file0", [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... openat resumed>) = 3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(3, "", [pid 292] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... openat resumed>) = 4 [pid 293] getdents64(3, [pid 292] newfstatat(4, "", [pid 293] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 128 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] getdents64(4, [pid 293] <... umount2 resumed>) = 0 [pid 293] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] getdents64(4, [pid 293] newfstatat(AT_FDCWD, "./12/bus", [pid 292] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] close(4 [pid 293] unlink("./12/bus") = 0 [pid 292] <... close resumed>) = 0 [pid 293] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] rmdir("./12/file0" [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./12/binderfs") = 0 [pid 292] <... rmdir resumed>) = 0 [pid 293] umount2("./12/ext4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] getdents64(3, [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./12/ext4", [pid 292] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] close(3 [pid 293] umount2("./12/ext4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 293] openat(AT_FDCWD, "./12/ext4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... close resumed>) = 0 [pid 293] <... openat resumed>) = 4 [pid 292] rmdir("./12" [pid 293] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 293] close(4) = 0 [pid 293] rmdir("./12/ext4") = 0 [pid 292] <... rmdir resumed>) = 0 [pid 293] getdents64(3, [pid 292] mkdir("./13", 0777 [pid 293] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 293] close(3) = 0 [pid 293] rmdir("./12") = 0 [pid 293] mkdir("./13", 0777) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 785] exit_group(0 [pid 815] <... futex resumed>) = ? [pid 805] <... recvmmsg resumed> ) = ? [pid 804] <... futex resumed>) = ? [pid 785] <... exit_group resumed>) = ? [pid 815] +++ exited with 0 +++ [pid 805] +++ exited with 0 +++ [pid 804] +++ exited with 0 +++ [pid 297] <... openat resumed>) = 3 [pid 297] ioctl(3, LOOP_CLR_FD [pid 787] +++ exited with 0 +++ [pid 786] +++ exited with 0 +++ [pid 785] +++ exited with 0 +++ [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 297] close(3 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=786, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=785, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=787, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 293] ioctl(3, LOOP_CLR_FD [pid 292] ioctl(3, LOOP_CLR_FD [pid 297] <... close resumed>) = 0 [pid 294] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] <... restart_syscall resumed>) = 0 [pid 292] close(3 [pid 296] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] <... close resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] close(3 [pid 296] <... openat resumed>) = 3 [pid 295] <... openat resumed>) = 3 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... close resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555563f4690) = 816 [pid 297] <... clone resumed>, child_tidptr=0x5555563f4690) = 817 [pid 296] newfstatat(3, "", [pid 295] newfstatat(3, "", [pid 294] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] <... openat resumed>) = 3 [pid 296] getdents64(3, [pid 295] getdents64(3, [pid 294] newfstatat(3, "", [pid 296] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555563f4690) = 818 [pid 296] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 294] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 816 attached [pid 816] set_robust_list(0x5555563f46a0, 24) = 0 [pid 296] <... umount2 resumed>) = 0 [pid 295] <... umount2 resumed>) = 0 [pid 294] <... umount2 resumed>) = 0 [pid 296] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./11/bus", [pid 295] newfstatat(AT_FDCWD, "./11/bus", [pid 294] newfstatat(AT_FDCWD, "./11/bus", [pid 296] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 818 attached ./strace-static-x86_64: Process 817 attached [pid 296] unlink("./11/bus" [pid 295] unlink("./11/bus" [pid 294] unlink("./11/bus" [pid 296] <... unlink resumed>) = 0 [pid 295] <... unlink resumed>) = 0 [pid 294] <... unlink resumed>) = 0 [pid 296] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 818] set_robust_list(0x5555563f46a0, 24 [pid 817] set_robust_list(0x5555563f46a0, 24 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 818] <... set_robust_list resumed>) = 0 [pid 296] newfstatat(AT_FDCWD, "./11/binderfs", [pid 295] newfstatat(AT_FDCWD, "./11/binderfs", [pid 294] newfstatat(AT_FDCWD, "./11/binderfs", [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 816] chdir("./13" [pid 296] unlink("./11/binderfs" [pid 295] unlink("./11/binderfs" [pid 294] unlink("./11/binderfs" [pid 818] chdir("./13" [pid 817] <... set_robust_list resumed>) = 0 [pid 816] <... chdir resumed>) = 0 [pid 296] <... unlink resumed>) = 0 [pid 295] <... unlink resumed>) = 0 [pid 294] <... unlink resumed>) = 0 [pid 816] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 296] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 816] <... prctl resumed>) = 0 [pid 818] <... chdir resumed>) = 0 [pid 816] setpgid(0, 0 [pid 818] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 817] chdir("./12" [pid 816] <... setpgid resumed>) = 0 [pid 816] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 816] write(3, "1000", 4) = 4 [pid 818] <... prctl resumed>) = 0 [pid 817] <... chdir resumed>) = 0 [pid 816] close(3) = 0 [pid 816] symlink("/dev/binderfs", "./binderfs" [pid 818] setpgid(0, 0 [pid 817] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 816] <... symlink resumed>) = 0 [pid 818] <... setpgid resumed>) = 0 [pid 817] <... prctl resumed>) = 0 [pid 816] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 817] setpgid(0, 0 [pid 816] <... futex resumed>) = 0 [pid 818] <... openat resumed>) = 3 [pid 817] <... setpgid resumed>) = 0 [pid 816] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 818] write(3, "1000", 4) = 4 [pid 817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 816] <... rt_sigaction resumed>NULL, 8) = 0 [pid 818] close(3 [pid 817] <... openat resumed>) = 3 [pid 816] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 818] <... close resumed>) = 0 [pid 817] write(3, "1000", 4 [pid 816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 818] symlink("/dev/binderfs", "./binderfs" [pid 817] <... write resumed>) = 4 [pid 816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 818] <... symlink resumed>) = 0 [pid 817] close(3 [pid 816] <... mmap resumed>) = 0x7fc1321e6000 [pid 818] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] <... close resumed>) = 0 [pid 818] <... futex resumed>) = 0 [pid 817] symlink("/dev/binderfs", "./binderfs" [pid 818] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 817] <... symlink resumed>) = 0 [pid 816] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 818] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 817] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] <... mprotect resumed>) = 0 [pid 818] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 817] <... futex resumed>) = 0 [pid 816] rt_sigprocmask(SIG_BLOCK, ~[], [pid 818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 817] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 816] <... rt_sigprocmask resumed>[], 8) = 0 [pid 818] <... mmap resumed>) = 0x7fc1321e6000 [pid 817] <... rt_sigaction resumed>NULL, 8) = 0 [pid 816] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0}./strace-static-x86_64: Process 819 attached [pid 818] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 817] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 818] <... mprotect resumed>) = 0 [pid 817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 816] <... clone3 resumed> => {parent_tid=[819]}, 88) = 819 [pid 819] set_robust_list(0x7fc1322069a0, 24 [pid 818] rt_sigprocmask(SIG_BLOCK, ~[], [pid 817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 818] <... rt_sigprocmask resumed>[], 8) = 0 [pid 816] rt_sigprocmask(SIG_SETMASK, [], [pid 818] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 817] <... mmap resumed>) = 0x7fc1321e6000 [pid 816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 819] <... set_robust_list resumed>) = 0 [pid 817] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 816] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 818] <... clone3 resumed> => {parent_tid=[820]}, 88) = 820 [pid 817] <... mprotect resumed>) = 0 [pid 816] <... futex resumed>) = 0 [pid 818] rt_sigprocmask(SIG_SETMASK, [], [pid 819] rt_sigprocmask(SIG_SETMASK, [], [pid 818] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 817] rt_sigprocmask(SIG_BLOCK, ~[], [pid 816] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 818] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] <... rt_sigprocmask resumed>[], 8) = 0 [pid 816] <... futex resumed>) = 0 [pid 819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 818] <... futex resumed>) = 0 [pid 817] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 819] memfd_create("syzkaller", 0 [pid 818] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... memfd_create resumed>) = 3 [pid 818] <... futex resumed>) = 0 [pid 817] <... clone3 resumed> => {parent_tid=[821]}, 88) = 821 [pid 816] <... mmap resumed>) = 0x7fc1321c5000 [pid 819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 817] rt_sigprocmask(SIG_SETMASK, [], [pid 816] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 821 attached [pid 819] <... mmap resumed>) = 0x7fc129dc5000 [pid 818] <... mmap resumed>) = 0x7fc1321c5000 [pid 817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 816] <... mprotect resumed>) = 0 [pid 818] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 817] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 818] <... mprotect resumed>) = 0 [pid 817] <... futex resumed>) = 0 [pid 816] rt_sigprocmask(SIG_BLOCK, ~[], [pid 818] rt_sigprocmask(SIG_BLOCK, ~[], [pid 817] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] <... rt_sigprocmask resumed>[], 8) = 0 [pid 821] set_robust_list(0x7fc1322069a0, 24 [pid 819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 818] <... rt_sigprocmask resumed>[], 8) = 0 [pid 817] <... futex resumed>) = 0 [pid 816] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 821] <... set_robust_list resumed>) = 0 [pid 819] <... write resumed>) = 262144 [pid 818] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 819] munmap(0x7fc129dc5000, 262144) = 0 [pid 817] <... mmap resumed>) = 0x7fc1321c5000 [pid 816] <... clone3 resumed> => {parent_tid=[822]}, 88) = 822 [pid 821] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 823 attached [pid 819] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 818] <... clone3 resumed> => {parent_tid=[823]}, 88) = 823 [pid 817] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 816] rt_sigprocmask(SIG_SETMASK, [], [pid 818] rt_sigprocmask(SIG_SETMASK, [], [pid 817] <... mprotect resumed>) = 0 [pid 818] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 818] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] rt_sigprocmask(SIG_BLOCK, ~[], [pid 816] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 818] <... futex resumed>) = 0 [pid 817] <... rt_sigprocmask resumed>[], 8) = 0 [pid 816] <... futex resumed>) = 0 [pid 818] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 817] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 816] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 820 attached [pid 820] set_robust_list(0x7fc1322069a0, 24 [pid 817] <... clone3 resumed> => {parent_tid=[824]}, 88) = 824 [pid 820] <... set_robust_list resumed>) = 0 [pid 817] rt_sigprocmask(SIG_SETMASK, [], [pid 820] rt_sigprocmask(SIG_SETMASK, [], [pid 817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 820] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 817] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 820] memfd_create("syzkaller", 0 [pid 817] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... memfd_create resumed>) = 3 [pid 820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 821] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 820] <... mmap resumed>) = 0x7fc129dc5000 [pid 823] set_robust_list(0x7fc1321e59a0, 24 [pid 821] memfd_create("syzkaller", 0 [pid 820] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 823] <... set_robust_list resumed>) = 0 [pid 821] <... memfd_create resumed>) = 3 [pid 820] <... write resumed>) = 262144 [pid 821] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 [pid 820] munmap(0x7fc129dc5000, 262144) = 0 [pid 820] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 824 attached [pid 824] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 824] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 824] creat("./bus", 000) = 4 [pid 824] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 817] <... futex resumed>) = 0 [pid 824] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 817] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 817] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... mount resumed>) = 0 [pid 824] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 822 attached ) = 1 [pid 817] <... futex resumed>) = 0 [pid 824] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 822] set_robust_list(0x7fc1321e59a0, 24 [pid 817] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... set_robust_list resumed>) = 0 [pid 817] <... futex resumed>) = 0 [pid 823] rt_sigprocmask(SIG_SETMASK, [], [pid 821] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 817] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 822] creat("./bus", 000) = 5 [pid 822] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 816] <... futex resumed>) = 0 [pid 822] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 816] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... mount resumed>) = 0 [pid 816] <... futex resumed>) = 0 [pid 816] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 816] <... futex resumed>) = 0 [pid 822] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 816] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 816] <... futex resumed>) = 0 [pid 823] creat("./bus", 000 [pid 821] <... write resumed>) = 262144 [pid 816] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 821] munmap(0x7fc129dc5000, 262144 [pid 823] <... creat resumed>) = 5 [pid 821] <... munmap resumed>) = 0 [pid 823] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 821] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 818] <... futex resumed>) = 0 [pid 823] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 818] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 818] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 823] <... mount resumed>) = 0 [pid 823] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 818] <... futex resumed>) = 0 [pid 823] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 818] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 818] <... futex resumed>) = 0 [pid 823] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 818] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] <... umount2 resumed>) = 0 [pid 296] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./11/file0") = 0 [pid 296] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./11") = 0 [pid 296] mkdir("./12", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 817] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 817] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129de4000 [pid 817] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 817] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 817] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0}./strace-static-x86_64: Process 825 attached [pid 825] set_robust_list(0x7fc129e049a0, 24 [pid 817] <... clone3 resumed> => {parent_tid=[825]}, 88) = 825 [pid 825] <... set_robust_list resumed>) = 0 [pid 817] rt_sigprocmask(SIG_SETMASK, [], [pid 825] rt_sigprocmask(SIG_SETMASK, [], [pid 817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 825] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 817] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 817] <... futex resumed>) = 0 [pid 816] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 817] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 816] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... socket resumed>) = 7 [pid 816] <... futex resumed>) = 0 [pid 825] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 825] <... futex resumed>) = 1 [pid 817] <... futex resumed>) = 0 [pid 825] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 816] <... mmap resumed>) = 0x7fc129de4000 [pid 817] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 816] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 817] <... futex resumed>) = 0 [pid 817] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 816] <... mprotect resumed>) = 0 [pid 825] recvmmsg(7, [pid 816] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 816] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} => {parent_tid=[826]}, 88) = 826 [pid 816] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 816] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 818] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 816] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 818] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}./strace-static-x86_64: Process 826 attached [pid 826] set_robust_list(0x7fc129e049a0, 24 [pid 818] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 818] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 826] <... set_robust_list resumed>) = 0 [pid 818] <... futex resumed>) = 0 [pid 826] rt_sigprocmask(SIG_SETMASK, [], [pid 818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129de4000 [pid 826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 818] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 826] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 818] <... mprotect resumed>) = 0 [pid 818] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 818] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} => {parent_tid=[827]}, 88) = 827 [pid 818] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 818] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 818] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... socket resumed>) = 7 [pid 826] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 816] <... futex resumed>) = 0 [pid 816] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 816] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] recvmmsg(7, ./strace-static-x86_64: Process 827 attached [pid 827] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 827] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 827] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 7 [pid 827] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 818] <... futex resumed>) = 0 [pid 818] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] <... futex resumed>) = 1 [pid 818] <... futex resumed>) = 0 [pid 818] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 827] recvmmsg(7, [pid 824] <... open resumed>) = 5 [pid 822] <... open resumed>) = 6 [pid 821] <... openat resumed>) = 6 [pid 820] <... openat resumed>) = 4 [pid 819] <... openat resumed>) = 4 [pid 295] <... umount2 resumed>) = 0 [pid 824] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] ioctl(6, LOOP_SET_FD, 3 [pid 820] ioctl(4, LOOP_SET_FD, 3 [pid 819] ioctl(4, LOOP_SET_FD, 3 [pid 295] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 824] <... futex resumed>) = 0 [pid 822] <... futex resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 824] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 295] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 295] close(4 [pid 821] <... ioctl resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 821] close(3 [pid 296] <... openat resumed>) = 3 [pid 295] rmdir("./11/file0" [pid 294] <... umount2 resumed>) = 0 [pid 821] <... close resumed>) = 0 [pid 296] ioctl(3, LOOP_CLR_FD [pid 295] <... rmdir resumed>) = 0 [pid 294] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 821] mkdir("./file0", 0777 [pid 295] getdents64(3, [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 821] <... mkdir resumed>) = 0 [pid 295] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 294] newfstatat(AT_FDCWD, "./11/file0", [pid 821] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 295] close(3 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... close resumed>) = 0 [pid 294] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] rmdir("./11" [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... rmdir resumed>) = 0 [pid 294] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] mkdir("./12", 0777 [pid 294] <... openat resumed>) = 4 [pid 295] <... mkdir resumed>) = 0 [pid 294] newfstatat(4, "", [pid 295] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./11/file0") = 0 [pid 294] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./11") = 0 [pid 294] mkdir("./12", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 820] <... ioctl resumed>) = 0 [pid 820] close(3) = 0 [pid 820] mkdir("./file0", 0777) = 0 [pid 819] <... ioctl resumed>) = 0 [pid 820] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 819] close(3) = 0 [pid 819] mkdir("./file0", 0777) = 0 [pid 819] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 817] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 817] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 817] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 817] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... futex resumed>) = 0 [pid 817] <... futex resumed>) = 1 [pid 824] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 817] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... mmap resumed>) = 0x20000000 [pid 824] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 817] <... futex resumed>) = 0 [pid 824] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 817] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 817] <... futex resumed>) = 0 [pid 824] memfd_create("syzkaller", 0) = 3 [pid 824] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 824] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 824] munmap(0x7fc1219e4000, 65536 [pid 816] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 824] <... munmap resumed>) = 0 [pid 816] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 824] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 816] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 816] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 816] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = 0 [pid 816] <... futex resumed>) = 1 [pid 822] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0) = 0x20000000 [pid 816] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 822] <... futex resumed>) = 0 [pid 818] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 816] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 818] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] <... futex resumed>) = 0 [pid 818] <... futex resumed>) = 0 [pid 818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129dc3000 [pid 818] mprotect(0x7fc129dc4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 818] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 818] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129de3990, parent_tid=0x7fc129de3990, exit_signal=0, stack=0x7fc129dc3000, stack_size=0x20300, tls=0x7fc129de36c0}./strace-static-x86_64: Process 831 attached => {parent_tid=[831]}, 88) = 831 [pid 831] set_robust_list(0x7fc129de39a0, 24 [pid 818] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 818] futex(0x7fc1322d26f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] <... set_robust_list resumed>) = 0 [pid 818] futex(0x7fc1322d26fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 831] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, -1, 0) = -1 EBADF (Bad file descriptor) [pid 831] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] memfd_create("syzkaller", 0) = 3 [pid 822] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 822] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 822] munmap(0x7fc1219e4000, 65536) = 0 [pid 822] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 818] <... futex resumed>) = 0 [pid 818] futex(0x7fc1322d26f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] <... futex resumed>) = 1 [pid 831] memfd_create("syzkaller", 0) = 3 [pid 831] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219c3000 [pid 831] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 831] munmap(0x7fc1219c3000, 65536) = 0 [pid 831] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 8 [pid 824] <... openat resumed>) = 8 [pid 823] <... open resumed>) = 6 [pid 822] <... openat resumed>) = 8 [pid 821] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] <... openat resumed>) = 3 [pid 294] <... openat resumed>) = 3 [pid 831] ioctl(8, LOOP_SET_FD, 3 [pid 823] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 823] <... futex resumed>) = 0 [pid 831] ioctl(8, LOOP_CLR_FD [pid 823] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 831] <... ioctl resumed>) = 0 [pid 831] ioctl(8, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 831] close(8) = 0 [pid 831] close(3) = 0 [pid 831] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7fc1322d26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 824] ioctl(8, LOOP_SET_FD, 3 [pid 822] ioctl(8, LOOP_SET_FD, 3 [pid 821] ioctl(6, LOOP_CLR_FD [pid 296] close(3 [pid 295] ioctl(3, LOOP_CLR_FD [pid 294] ioctl(3, LOOP_CLR_FD [pid 819] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 819] ioctl(4, LOOP_CLR_FD) = 0 [pid 819] close(4) = 0 [pid 819] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 824] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 824] ioctl(8, LOOP_CLR_FD) = 0 [pid 822] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 822] ioctl(8, LOOP_CLR_FD) = 0 [pid 821] <... ioctl resumed>) = 0 [pid 821] close(6) = 0 [pid 820] <... mount resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 824] ioctl(8, LOOP_SET_FD, 3 [pid 822] ioctl(8, LOOP_SET_FD, 3 [pid 821] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] openat(AT_FDCWD, "ext4", O_RDONLY|O_DIRECTORY [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] close(3 [pid 294] close(3 [pid 824] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 822] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 821] <... futex resumed>) = 0 [pid 820] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 295] <... close resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 824] close(8 [pid 822] close(8 [pid 821] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 820] ioctl(4, LOOP_CLR_FD [pid 296] <... clone resumed>, child_tidptr=0x5555563f4690) = 835 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 824] <... close resumed>) = 0 [pid 822] <... close resumed>) = 0 [pid 820] <... ioctl resumed>) = 0 [pid 824] close(3 [pid 822] close(3 [pid 820] close(4 [pid 295] <... clone resumed>, child_tidptr=0x5555563f4690) = 836 [pid 294] <... clone resumed>, child_tidptr=0x5555563f4690) = 837 [pid 824] <... close resumed>) = 0 [pid 820] <... close resumed>) = 0 [pid 824] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... close resumed>) = 0 [pid 820] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 837 attached [pid 824] <... futex resumed>) = 0 [pid 822] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = 0 [pid 824] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] <... futex resumed>) = 0 [pid 820] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 837] set_robust_list(0x5555563f46a0, 24) = 0 [pid 837] chdir("./12") = 0 [pid 837] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 837] setpgid(0, 0) = 0 [pid 837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 835 attached [pid 837] write(3, "1000", 4) = 4 [pid 835] set_robust_list(0x5555563f46a0, 24 [pid 837] close(3 [pid 835] <... set_robust_list resumed>) = 0 [pid 837] <... close resumed>) = 0 [pid 835] chdir("./12" [pid 837] symlink("/dev/binderfs", "./binderfs" [pid 835] <... chdir resumed>) = 0 [pid 837] <... symlink resumed>) = 0 [pid 835] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 837] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 836 attached [pid 837] <... futex resumed>) = 0 [pid 835] setpgid(0, 0 [pid 837] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 836] set_robust_list(0x5555563f46a0, 24 [pid 835] <... setpgid resumed>) = 0 [pid 837] <... rt_sigaction resumed>NULL, 8) = 0 [pid 836] <... set_robust_list resumed>) = 0 [pid 835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 837] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 836] chdir("./12" [pid 835] <... openat resumed>) = 3 [pid 837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 836] <... chdir resumed>) = 0 [pid 835] write(3, "1000", 4 [pid 837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 836] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 835] <... write resumed>) = 4 [pid 837] <... mmap resumed>) = 0x7fc1321e6000 [pid 836] <... prctl resumed>) = 0 [pid 835] close(3 [pid 837] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 836] setpgid(0, 0 [pid 835] <... close resumed>) = 0 [pid 837] <... mprotect resumed>) = 0 [pid 836] <... setpgid resumed>) = 0 [pid 835] symlink("/dev/binderfs", "./binderfs" [pid 837] rt_sigprocmask(SIG_BLOCK, ~[], [pid 836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 835] <... symlink resumed>) = 0 [pid 837] <... rt_sigprocmask resumed>[], 8) = 0 [pid 836] <... openat resumed>) = 3 [pid 835] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 837] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 836] write(3, "1000", 4 [pid 835] <... futex resumed>) = 0 [pid 836] <... write resumed>) = 4 [pid 835] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 837] <... clone3 resumed> => {parent_tid=[838]}, 88) = 838 [pid 836] close(3 [pid 835] <... rt_sigaction resumed>NULL, 8) = 0 [pid 837] rt_sigprocmask(SIG_SETMASK, [], [pid 836] <... close resumed>) = 0 [pid 835] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 836] symlink("/dev/binderfs", "./binderfs" [pid 835] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 837] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] <... symlink resumed>) = 0 [pid 835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 837] <... futex resumed>) = 0 [pid 836] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] <... mmap resumed>) = 0x7fc1321e6000 [pid 837] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] <... futex resumed>) = 0 [pid 835] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 837] <... futex resumed>) = 0 [pid 836] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 835] <... mprotect resumed>) = 0 [pid 837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 836] <... rt_sigaction resumed>NULL, 8) = 0 [pid 835] rt_sigprocmask(SIG_BLOCK, ~[], [pid 837] <... mmap resumed>) = 0x7fc1321c5000 [pid 836] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 835] <... rt_sigprocmask resumed>[], 8) = 0 [pid 837] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 837] <... mprotect resumed>) = 0 [pid 836] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 837] rt_sigprocmask(SIG_BLOCK, ~[], [pid 836] <... mmap resumed>) = 0x7fc1321e6000 [pid 835] <... clone3 resumed> => {parent_tid=[839]}, 88) = 839 [pid 837] <... rt_sigprocmask resumed>[], 8) = 0 [pid 836] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 835] rt_sigprocmask(SIG_SETMASK, [], [pid 837] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 836] <... mprotect resumed>) = 0 [pid 835] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 836] rt_sigprocmask(SIG_BLOCK, ~[], [pid 835] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 837] <... clone3 resumed> => {parent_tid=[840]}, 88) = 840 [pid 836] <... rt_sigprocmask resumed>[], 8) = 0 [pid 835] <... futex resumed>) = 0 [pid 837] rt_sigprocmask(SIG_SETMASK, [], [pid 836] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 835] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 835] <... futex resumed>) = 0 [pid 837] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] <... clone3 resumed> => {parent_tid=[841]}, 88) = 841 [pid 835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 837] <... futex resumed>) = 0 [pid 836] rt_sigprocmask(SIG_SETMASK, [], [pid 835] <... mmap resumed>) = 0x7fc1321c5000 [pid 837] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 835] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 838 attached [pid 836] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] <... mprotect resumed>) = 0 [pid 838] set_robust_list(0x7fc1322069a0, 24 [pid 836] <... futex resumed>) = 0 [pid 835] rt_sigprocmask(SIG_BLOCK, ~[], [pid 838] <... set_robust_list resumed>) = 0 [pid 836] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] <... rt_sigprocmask resumed>[], 8) = 0 [pid 838] rt_sigprocmask(SIG_SETMASK, [], [pid 836] <... futex resumed>) = 0 [pid 835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 836] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 838] memfd_create("syzkaller", 0 [pid 836] <... mmap resumed>) = 0x7fc1321c5000 [pid 835] <... clone3 resumed> => {parent_tid=[842]}, 88) = 842 ./strace-static-x86_64: Process 839 attached [pid 838] <... memfd_create resumed>) = 3 [pid 836] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 835] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 840 attached [pid 839] set_robust_list(0x7fc1322069a0, 24 [pid 838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 836] <... mprotect resumed>) = 0 [pid 835] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 840] set_robust_list(0x7fc1321e59a0, 24 [pid 839] <... set_robust_list resumed>) = 0 [pid 838] <... mmap resumed>) = 0x7fc129dc5000 [pid 836] rt_sigprocmask(SIG_BLOCK, ~[], [pid 835] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... set_robust_list resumed>) = 0 [pid 839] rt_sigprocmask(SIG_SETMASK, [], [pid 838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 836] <... rt_sigprocmask resumed>[], 8) = 0 [pid 835] <... futex resumed>) = 0 [pid 840] rt_sigprocmask(SIG_SETMASK, [], [pid 839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 838] <... write resumed>) = 262144 [pid 836] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 835] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 841 attached [pid 840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 839] memfd_create("syzkaller", 0 [pid 838] munmap(0x7fc129dc5000, 262144 [pid 841] set_robust_list(0x7fc1322069a0, 24 [pid 840] creat("./bus", 000 [pid 839] <... memfd_create resumed>) = 3 [pid 838] <... munmap resumed>) = 0 [pid 836] <... clone3 resumed> => {parent_tid=[843]}, 88) = 843 ./strace-static-x86_64: Process 842 attached [pid 841] <... set_robust_list resumed>) = 0 [pid 840] <... creat resumed>) = 4 [pid 839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 838] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 836] rt_sigprocmask(SIG_SETMASK, [], [pid 842] set_robust_list(0x7fc1321e59a0, 24 [pid 841] rt_sigprocmask(SIG_SETMASK, [], [pid 840] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... mmap resumed>) = 0x7fc129dc5000 [pid 838] <... openat resumed>) = 5 [pid 836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 842] <... set_robust_list resumed>) = 0 [pid 841] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 840] <... futex resumed>) = 1 [pid 839] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 838] ioctl(5, LOOP_SET_FD, 3 [pid 837] <... futex resumed>) = 0 [pid 836] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 842] rt_sigprocmask(SIG_SETMASK, [], [pid 841] memfd_create("syzkaller", 0 [pid 840] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 839] <... write resumed>) = 262144 [pid 837] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] <... futex resumed>) = 0 ./strace-static-x86_64: Process 843 attached [pid 842] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 839] munmap(0x7fc129dc5000, 262144 [pid 837] <... futex resumed>) = 0 [pid 836] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 843] set_robust_list(0x7fc1321e59a0, 24 [pid 842] creat("./bus", 000 [pid 841] <... memfd_create resumed>) = 3 [pid 840] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 839] <... munmap resumed>) = 0 [pid 837] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 843] <... set_robust_list resumed>) = 0 [pid 842] <... creat resumed>) = 4 [pid 841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 840] <... mount resumed>) = 0 [pid 839] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 838] <... ioctl resumed>) = 0 [pid 843] rt_sigprocmask(SIG_SETMASK, [], [pid 842] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 841] <... mmap resumed>) = 0x7fc129dc5000 [ 33.822963][ T821] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 33.831782][ T820] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 33.842311][ T819] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 33.846719][ T820] ext4 filesystem being mounted at /root/syzkaller.zNZ9LH/13/file0 supports timestamps until 2038 (0x7fffffff) [pid 843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 842] <... futex resumed>) = 1 [pid 840] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... openat resumed>) = 5 [pid 838] close(3 [pid 835] <... futex resumed>) = 0 [pid 843] creat("./bus", 000 [pid 842] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 841] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 840] <... futex resumed>) = 1 [pid 837] <... futex resumed>) = 0 [pid 835] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 843] <... creat resumed>) = 4 [pid 842] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 841] <... write resumed>) = 262144 [pid 840] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 839] ioctl(5, LOOP_SET_FD, 3 [pid 838] <... close resumed>) = 0 [pid 837] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 841] munmap(0x7fc129dc5000, 262144 [pid 840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 837] <... futex resumed>) = 0 [pid 835] <... futex resumed>) = 0 [pid 838] mkdir("./file0", 0777 [pid 842] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 841] <... munmap resumed>) = 0 [pid 840] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 837] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 835] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 841] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 838] <... mkdir resumed>) = 0 [pid 842] <... mount resumed>) = 0 [pid 838] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 843] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 836] <... futex resumed>) = 0 [pid 842] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 843] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 836] <... futex resumed>) = 0 [pid 835] <... futex resumed>) = 0 [pid 842] <... futex resumed>) = 1 [pid 836] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 835] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 842] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 835] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 843] <... mount resumed>) = 0 [pid 843] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 836] <... futex resumed>) = 0 [pid 843] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 836] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 836] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 843] <... open resumed>) = 6 [pid 841] <... openat resumed>) = 5 [pid 840] <... open resumed>) = 3 [pid 843] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 841] ioctl(5, LOOP_SET_FD, 3 [pid 840] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 843] <... futex resumed>) = 1 [pid 840] <... futex resumed>) = 1 [pid 837] <... futex resumed>) = 0 [pid 836] <... futex resumed>) = 0 [pid 843] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 840] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 837] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 837] <... futex resumed>) = 0 [pid 836] <... futex resumed>) = 0 [pid 843] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 840] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 837] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 836] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 843] <... socket resumed>) = 7 [pid 840] <... socket resumed>) = 6 [pid 843] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 843] <... futex resumed>) = 1 [pid 840] <... futex resumed>) = 1 [pid 837] <... futex resumed>) = 0 [pid 836] <... futex resumed>) = 0 [pid 843] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 840] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 837] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 837] <... futex resumed>) = 0 [pid 836] <... futex resumed>) = 0 [pid 843] recvmmsg(7, [pid 840] recvmmsg(6, [pid 837] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 836] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 839] <... ioctl resumed>) = 0 [pid 839] close(3) = 0 [pid 839] mkdir("./file0", 0777) = 0 [pid 839] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 842] <... open resumed>) = 6 [pid 841] <... ioctl resumed>) = 0 [pid 842] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 841] close(3 [pid 842] <... futex resumed>) = 1 [pid 841] <... close resumed>) = 0 [pid 842] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 841] mkdir("./file0", 0777) = 0 [pid 835] <... futex resumed>) = 0 [pid 841] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 835] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 842] <... futex resumed>) = 0 [pid 835] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 842] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 3 [pid 842] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 835] <... futex resumed>) = 0 [pid 835] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 842] recvmmsg(3, [pid 835] <... futex resumed>) = 0 [pid 835] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 837] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 837] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 837] <... futex resumed>) = 0 [pid 836] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 836] <... futex resumed>) = 0 [pid 837] <... mmap resumed>) = 0x7fc129de4000 [pid 836] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 837] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 836] <... mmap resumed>) = 0x7fc129de4000 [pid 837] <... mprotect resumed>) = 0 [pid 836] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 837] rt_sigprocmask(SIG_BLOCK, ~[], [pid 836] <... mprotect resumed>) = 0 [pid 837] <... rt_sigprocmask resumed>[], 8) = 0 [pid 836] rt_sigprocmask(SIG_BLOCK, ~[], [pid 837] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 836] <... rt_sigprocmask resumed>[], 8) = 0 [pid 836] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 837] <... clone3 resumed> => {parent_tid=[853]}, 88) = 853 [pid 837] rt_sigprocmask(SIG_SETMASK, [], [pid 836] <... clone3 resumed> => {parent_tid=[854]}, 88) = 854 [pid 837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 836] rt_sigprocmask(SIG_SETMASK, [], [pid 837] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 837] <... futex resumed>) = 0 [pid 836] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 837] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 836] <... futex resumed>) = 0 [pid 836] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 854 attached [pid 854] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 854] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 854] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0) = 0x20000000 [pid 854] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] <... futex resumed>) = 0 [ 33.921949][ T838] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 33.922178][ T841] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 33.934200][ T838] ext4 filesystem being mounted at /root/syzkaller.duxz7m/12/file0 supports timestamps until 2038 (0x7fffffff) [ 33.946662][ T841] ext4 filesystem being mounted at /root/syzkaller.IpShW6/12/file0 supports timestamps until 2038 (0x7fffffff) [pid 836] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] <... futex resumed>) = 1 [pid 854] memfd_create("syzkaller", 0) = 3 [pid 854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536./strace-static-x86_64: Process 853 attached [pid 853] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 853] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 853] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 3, 0 [pid 854] <... write resumed>) = 65536 [pid 853] <... mmap resumed>) = 0x20000000 [pid 853] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 837] <... futex resumed>) = 0 [pid 837] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 853] <... futex resumed>) = 1 [pid 853] memfd_create("syzkaller", 0) = 7 [pid 854] munmap(0x7fc1219e4000, 65536 [pid 853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 854] <... munmap resumed>) = 0 [pid 853] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 854] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 8 [pid 854] ioctl(8, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 854] ioctl(8, LOOP_CLR_FD) = 0 [pid 853] <... write resumed>) = 65536 [pid 853] munmap(0x7fc1219e4000, 65536) = 0 [pid 853] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 8 [pid 853] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 853] ioctl(8, LOOP_CLR_FD) = 0 [pid 841] <... mount resumed>) = 0 [pid 854] ioctl(8, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 854] close(8) = 0 [pid 854] close(3) = 0 [pid 854] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 841] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY [pid 853] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 853] close(8) = 0 [pid 853] close(7) = 0 [pid 853] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 853] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 841] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 841] ioctl(5, LOOP_CLR_FD) = 0 [pid 841] close(5) = 0 [pid 841] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 841] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 838] <... mount resumed>) = 0 [pid 838] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY) = -1 ENOENT (No such file or directory) [pid 838] ioctl(5, LOOP_CLR_FD) = 0 [pid 838] close(5) = 0 [pid 838] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 838] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 835] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 835] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... mount resumed>) = 0 [pid 839] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 7 [pid 839] chdir("./file0") = 0 [pid 839] ioctl(5, LOOP_CLR_FD) = 0 [pid 839] close(5) = 0 [pid 839] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 835] <... futex resumed>) = 0 [pid 835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129de4000 [pid 835] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 835] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0}./strace-static-x86_64: Process 855 attached => {parent_tid=[855]}, 88) = 855 [pid 855] set_robust_list(0x7fc129e049a0, 24 [pid 835] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 855] <... set_robust_list resumed>) = 0 [pid 835] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] rt_sigprocmask(SIG_SETMASK, [], [pid 835] <... futex resumed>) = 0 [pid 855] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 855] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 6, 0 [pid 835] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... mmap resumed>) = 0x20000000 [pid 855] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] <... futex resumed>) = 0 [pid 855] <... futex resumed>) = 1 [pid 835] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 839] <... futex resumed>) = 0 [pid 835] <... futex resumed>) = 1 [pid 839] memfd_create("syzkaller", 0) = 5 [pid 839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 839] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 839] munmap(0x7fc1219e4000, 65536) = 0 [pid 839] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 8 [pid 839] ioctl(8, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 839] ioctl(8, LOOP_CLR_FD) = 0 [pid 839] ioctl(8, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 839] close(8) = 0 [pid 839] close(5) = 0 [pid 839] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 33.971535][ T839] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 33.983792][ T839] ext4 filesystem being mounted at /root/syzkaller.jl33I5/12/file0 supports timestamps until 2038 (0x7fffffff) [pid 839] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 817] exit_group(0 [pid 825] <... recvmmsg resumed> ) = ? [pid 824] <... futex resumed>) = ? [pid 821] <... futex resumed>) = ? [pid 817] <... exit_group resumed>) = ? [pid 825] +++ exited with 0 +++ [pid 824] +++ exited with 0 +++ [pid 821] +++ exited with 0 +++ [pid 816] exit_group(0 [pid 826] <... recvmmsg resumed>0x20009080, 1, 0, NULL) = 230 [pid 822] <... futex resumed>) = ? [pid 819] <... futex resumed>) = ? [pid 826] +++ exited with 0 +++ [pid 819] +++ exited with 0 +++ [pid 822] +++ exited with 0 +++ [pid 816] <... exit_group resumed>) = ? [pid 818] exit_group(0 [pid 831] <... futex resumed>) = ? [pid 818] <... exit_group resumed>) = ? [pid 823] <... futex resumed>) = -1 (errno 18446744073709551555) [pid 831] +++ exited with 0 +++ [pid 827] <... recvmmsg resumed> ) = ? [pid 820] <... futex resumed>) = ? [pid 823] +++ exited with 0 +++ [pid 827] +++ exited with 0 +++ [pid 817] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=817, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 297] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 297] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./12/bus", [pid 836] exit_group(0 [pid 841] <... futex resumed>) = ? [pid 836] <... exit_group resumed>) = ? [pid 854] <... futex resumed>) = ? [pid 843] <... recvmmsg resumed> ) = ? [pid 854] +++ exited with 0 +++ [pid 841] +++ exited with 0 +++ [pid 297] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./12/bus") = 0 [pid 837] exit_group(0 [pid 838] <... futex resumed>) = ? [pid 837] <... exit_group resumed>) = ? [pid 853] <... futex resumed>) = ? [pid 840] <... recvmmsg resumed> ) = ? [pid 853] +++ exited with 0 +++ [pid 838] +++ exited with 0 +++ [pid 297] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./12/binderfs") = 0 [pid 297] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./12/file0") = 0 [pid 297] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./12") = 0 [pid 297] mkdir("./13", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 835] exit_group(0 [pid 855] <... futex resumed>) = ? [pid 842] <... recvmmsg resumed> ) = ? [pid 839] <... futex resumed>) = ? [pid 835] <... exit_group resumed>) = ? [pid 855] +++ exited with 0 +++ [pid 842] +++ exited with 0 +++ [pid 839] +++ exited with 0 +++ [pid 843] +++ exited with 0 +++ [pid 840] +++ exited with 0 +++ [pid 837] +++ exited with 0 +++ [pid 836] +++ exited with 0 +++ [pid 835] +++ exited with 0 +++ [pid 820] +++ exited with 0 +++ [pid 818] +++ exited with 0 +++ [pid 816] +++ exited with 0 +++ [pid 297] <... openat resumed>) = 3 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=835, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=836, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=837, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=816, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=818, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... restart_syscall resumed>) = 0 [pid 297] <... clone resumed>, child_tidptr=0x5555563f4690) = 856 [pid 293] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... openat resumed>) = 3 [pid 293] <... openat resumed>) = 3 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] newfstatat(3, "", [pid 293] newfstatat(3, "", [pid 296] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] <... openat resumed>) = 3 [pid 292] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] <... openat resumed>) = 3 [pid 295] getdents64(3, [pid 294] newfstatat(3, "", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(3, "", [pid 293] getdents64(3, [pid 295] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] getdents64(3, [pid 293] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 296] getdents64(3, [pid 292] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 293] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 295] <... umount2 resumed>) = 0 [pid 294] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = 0 [pid 292] <... openat resumed>) = 3 ./strace-static-x86_64: Process 856 attached [pid 296] <... umount2 resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = 0 [pid 293] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] newfstatat(3, "", [pid 296] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] newfstatat(AT_FDCWD, "./12/bus", [pid 294] umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./13/bus", [pid 296] newfstatat(AT_FDCWD, "./12/bus", [pid 295] unlink("./12/bus" [pid 294] newfstatat(AT_FDCWD, "./12/bus", [pid 292] getdents64(3, [pid 296] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./12/bus" [pid 295] <... unlink resumed>) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] unlink("./13/bus" [pid 292] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 296] <... unlink resumed>) = 0 [pid 294] unlink("./12/bus" [pid 856] set_robust_list(0x5555563f46a0, 24 [pid 293] <... unlink resumed>) = 0 [pid 856] <... set_robust_list resumed>) = 0 [pid 856] chdir("./13" [pid 296] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] <... unlink resumed>) = 0 [pid 293] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./12/binderfs", [pid 295] newfstatat(AT_FDCWD, "./12/binderfs", [pid 292] <... umount2 resumed>) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] newfstatat(AT_FDCWD, "./13/binderfs", [pid 292] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 296] unlink("./12/binderfs" [pid 295] unlink("./12/binderfs" [pid 294] newfstatat(AT_FDCWD, "./12/binderfs", [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... unlink resumed>) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... unlink resumed>) = 0 [pid 294] unlink("./12/binderfs" [pid 296] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] unlink("./13/binderfs" [pid 292] newfstatat(AT_FDCWD, "./13/bus", [pid 295] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 856] <... chdir resumed>) = 0 [pid 294] <... unlink resumed>) = 0 [pid 856] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] <... unlink resumed>) = 0 [pid 294] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 856] <... prctl resumed>) = 0 [pid 856] setpgid(0, 0 [pid 293] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 856] <... setpgid resumed>) = 0 [pid 856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 856] write(3, "1000", 4) = 4 [pid 856] close(3) = 0 [pid 856] symlink("/dev/binderfs", "./binderfs") = 0 [pid 856] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 856] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 856] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 856] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 856] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} => {parent_tid=[857]}, 88) = 857 [pid 856] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 856] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 856] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 856] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 856] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} => {parent_tid=[858]}, 88) = 858 [pid 856] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 856] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./13/bus") = 0 [pid 292] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 858 attached [pid 858] set_robust_list(0x7fc1321e59a0, 24 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 858] <... set_robust_list resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./13/binderfs", [pid 858] rt_sigprocmask(SIG_SETMASK, [], [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./13/binderfs" [pid 858] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 858] creat("./bus", 000 [pid 292] <... unlink resumed>) = 0 [pid 858] <... creat resumed>) = 3 [pid 292] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 857 attached [pid 858] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 856] <... futex resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./13/file0", [pid 856] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 858] <... futex resumed>) = 1 [pid 292] <... openat resumed>) = 4 [pid 858] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 292] newfstatat(4, "", [pid 858] <... mount resumed>) = 0 [pid 857] set_robust_list(0x7fc1322069a0, 24 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 858] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 857] <... set_robust_list resumed>) = 0 [pid 292] getdents64(4, [pid 856] <... futex resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 857] rt_sigprocmask(SIG_SETMASK, [], [pid 856] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] getdents64(4, [pid 856] <... futex resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 857] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 856] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] close(4 [pid 858] <... futex resumed>) = 1 [pid 292] <... close resumed>) = 0 [pid 857] memfd_create("syzkaller", 0 [pid 292] rmdir("./13/file0" [pid 858] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 857] <... memfd_create resumed>) = 5 [pid 292] <... rmdir resumed>) = 0 [pid 857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 292] getdents64(3, [pid 857] <... mmap resumed>) = 0x7fc129dc5000 [pid 292] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./13") = 0 [pid 292] mkdir("./14", 0777 [pid 857] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 292] <... mkdir resumed>) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 857] <... write resumed>) = 262144 [pid 857] munmap(0x7fc129dc5000, 262144) = 0 [pid 857] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 294] <... umount2 resumed>) = 0 [pid 294] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 294] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 294] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] getdents64(4, 0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 294] getdents64(4, 0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 294] close(4) = 0 [pid 294] rmdir("./12/file0") = 0 [pid 294] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 294] close(3) = 0 [pid 294] rmdir("./12") = 0 [pid 294] mkdir("./13", 0777) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 856] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 856] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129de4000 [pid 856] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 856] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 856] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0}./strace-static-x86_64: Process 859 attached [pid 859] set_robust_list(0x7fc129e049a0, 24) = 0 [pid 859] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 859] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] <... clone3 resumed> => {parent_tid=[859]}, 88) = 859 [pid 856] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 856] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 859] <... futex resumed>) = 0 [pid 859] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 7 [pid 859] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 859] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 859] <... futex resumed>) = 0 [pid 856] <... futex resumed>) = 1 [pid 859] recvmmsg(7, [pid 856] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... openat resumed>) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563f4690) = 860 ./strace-static-x86_64: Process 860 attached [pid 860] set_robust_list(0x5555563f46a0, 24) = 0 [pid 860] chdir("./14") = 0 [pid 860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 860] setpgid(0, 0) = 0 [pid 860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 860] write(3, "1000", 4) = 4 [pid 860] close(3) = 0 [pid 860] symlink("/dev/binderfs", "./binderfs") = 0 [pid 860] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 860] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 860] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 860] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 860] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 860] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 860] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} => {parent_tid=[861]}, 88) = 861 [pid 860] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 860] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 860] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 860] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 860] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 860] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 860] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} => {parent_tid=[862]}, 88) = 862 [pid 860] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 860] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 860] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 862 attached [pid 862] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 862] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 862] creat("./bus", 000) = 3 [pid 862] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... futex resumed>) = 0 [pid 860] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 860] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 862] <... futex resumed>) = 1 [pid 862] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 862] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... futex resumed>) = 0 [pid 860] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 860] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 862] <... futex resumed>) = 1 [pid 862] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c./strace-static-x86_64: Process 861 attached [pid 861] set_robust_list(0x7fc1322069a0, 24) = 0 [pid 861] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 861] memfd_create("syzkaller", 0) = 5 [pid 861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 [pid 861] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 861] munmap(0x7fc129dc5000, 262144) = 0 [pid 861] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 856] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 856] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 856] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 856] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 856] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc129dc3000 [pid 856] mprotect(0x7fc129dc4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 856] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 856] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129de3990, parent_tid=0x7fc129de3990, exit_signal=0, stack=0x7fc129dc3000, stack_size=0x20300, tls=0x7fc129de36c0}./strace-static-x86_64: Process 863 attached => {parent_tid=[863]}, 88) = 863 [pid 863] set_robust_list(0x7fc129de39a0, 24 [pid 856] rt_sigprocmask(SIG_SETMASK, [], [pid 863] <... set_robust_list resumed>) = 0 [pid 863] rt_sigprocmask(SIG_SETMASK, [], [pid 856] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 863] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 856] futex(0x7fc1322d26f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 863] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, -1, 0 [pid 856] <... futex resumed>) = 0 [pid 863] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 863] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 863] futex(0x7fc1322d26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7fc1322d26fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] futex(0x7fc1322d26f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 863] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 863] memfd_create("syzkaller", 0) = 8 [pid 863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219c3000 [pid 863] write(8, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 863] munmap(0x7fc1219c3000, 65536) = 0 [pid 863] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 294] <... openat resumed>) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 293] <... umount2 resumed>) = 0 [pid 294] close(3 [pid 295] <... umount2 resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 295] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 862] <... open resumed>) = 4 [pid 861] <... openat resumed>) = 6 [pid 860] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 858] <... open resumed>) = 4 [pid 296] <... umount2 resumed>) = 0 [pid 293] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 862] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 861] ioctl(6, LOOP_SET_FD, 5 [pid 860] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 862] <... futex resumed>) = 0 [pid 860] <... futex resumed>) = 0 [pid 858] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] newfstatat(AT_FDCWD, "./12/file0", [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 862] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 860] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... futex resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... clone resumed>, child_tidptr=0x5555563f4690) = 864 [pid 293] newfstatat(AT_FDCWD, "./13/file0", [pid 862] <... socket resumed>) = 7 [pid 858] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] newfstatat(AT_FDCWD, "./12/file0", [pid 295] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 862] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 862] <... futex resumed>) = 1 [pid 860] <... futex resumed>) = 0 [pid 296] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 862] futex(0x7fc1322d26d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 860] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... openat resumed>) = 4 [pid 293] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 860] <... futex resumed>) = 0 [pid 296] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] newfstatat(4, "", [pid 862] recvmmsg(7, [pid 860] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] <... openat resumed>) = 4 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... openat resumed>) = 4 ./strace-static-x86_64: Process 864 attached [pid 296] newfstatat(4, "", [pid 295] getdents64(4, [pid 293] newfstatat(4, "", [pid 864] set_robust_list(0x5555563f46a0, 24 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 864] <... set_robust_list resumed>) = 0 [pid 296] getdents64(4, [pid 295] getdents64(4, [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 864] chdir("./13" [pid 296] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 293] getdents64(4, [pid 296] getdents64(4, [pid 295] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 296] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 293] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 296] close(4 [pid 295] close(4 [pid 293] getdents64(4, [pid 864] <... chdir resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 293] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 296] rmdir("./12/file0" [pid 295] <... close resumed>) = 0 [pid 293] close(4 [pid 864] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 864] setpgid(0, 0) = 0 [pid 864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 296] <... rmdir resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 864] <... openat resumed>) = 3 [pid 861] <... ioctl resumed>) = 0 [pid 295] rmdir("./12/file0" [pid 864] write(3, "1000", 4 [pid 861] close(5 [pid 857] <... openat resumed>) = 6 [pid 864] <... write resumed>) = 4 [pid 861] <... close resumed>) = 0 [pid 864] close(3 [pid 861] mkdir("./file0", 0777 [pid 864] <... close resumed>) = 0 [pid 861] <... mkdir resumed>) = 0 [pid 864] symlink("/dev/binderfs", "./binderfs" [pid 861] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 864] <... symlink resumed>) = 0 [pid 864] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 864] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, NULL, 8) = 0 [pid 864] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321e6000 [pid 296] getdents64(3, [pid 863] <... openat resumed>) = 9 [pid 293] rmdir("./13/file0" [pid 864] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 863] ioctl(9, LOOP_SET_FD, 8 [pid 864] <... mprotect resumed>) = 0 [pid 864] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 864] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 295] <... rmdir resumed>) = 0 [pid 864] <... clone3 resumed> => {parent_tid=[867]}, 88) = 867 [pid 864] rt_sigprocmask(SIG_SETMASK, [], [pid 293] <... rmdir resumed>) = 0 [pid 296] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 864] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 857] ioctl(6, LOOP_SET_FD, 5 [pid 296] close(3 [pid 295] getdents64(3, [pid 293] getdents64(3, [pid 864] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] <... close resumed>) = 0 [pid 295] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 293] <... getdents64 resumed>0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 864] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] rmdir("./12" [pid 295] close(3 [pid 293] close(3 [pid 864] <... futex resumed>) = 0 [pid 864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc1321c5000 [pid 864] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 864] rt_sigprocmask(SIG_BLOCK, ~[], [pid 296] <... rmdir resumed>) = 0 [pid 293] <... close resumed>) = 0 [pid 864] <... rt_sigprocmask resumed>[], 8) = 0 [pid 296] mkdir("./13", 0777 [pid 295] <... close resumed>) = 0 [pid 293] rmdir("./13" [pid 864] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} => {parent_tid=[868]}, 88) = 868 [pid 864] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 864] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] <... mkdir resumed>) = 0 [pid 295] rmdir("./12" [pid 864] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... rmdir resumed>) = 0 [pid 863] <... ioctl resumed>) = 0 [pid 863] close(8 [pid 295] <... rmdir resumed>) = 0 [pid 863] <... close resumed>) = 0 [pid 863] mkdir("./mnt", 0777) = 0 [pid 863] mount("/dev/loop5", "./mnt", "ext4", MS_SYNCHRONOUS, "noinit_itable,data_err=abort,delalloc,lazytime,nosuid=0x000000000000ee00,errors=continue"./strace-static-x86_64: Process 867 attached [pid 867] set_robust_list(0x7fc1322069a0, 24) = 0 [pid 867] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 867] memfd_create("syzkaller", 0) = 3 [pid 867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc129dc5000 ./strace-static-x86_64: Process 868 attached [pid 868] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 868] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 868] creat("./bus", 000) = 4 [pid 868] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 864] <... futex resumed>) = 0 [pid 864] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 864] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 868] <... futex resumed>) = 1 [pid 868] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 868] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 864] <... futex resumed>) = 0 [pid 864] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 864] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 868] <... futex resumed>) = 1 [pid 868] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 857] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 295] mkdir("./13", 0777 [pid 293] mkdir("./14", 0777 [pid 296] <... openat resumed>) = 3 [pid 868] <... open resumed>) = 5 [pid 868] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... mkdir resumed>) = 0 [pid 868] <... futex resumed>) = 1 [pid 864] <... futex resumed>) = 0 [pid 868] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 864] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] <... socket resumed>) = 6 [pid 864] <... futex resumed>) = 0 [pid 868] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 864] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] ioctl(3, LOOP_CLR_FD [pid 295] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 293] <... mkdir resumed>) = 0 [pid 868] <... futex resumed>) = 0 [pid 864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 857] ioctl(6, LOOP_CLR_FD [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] <... openat resumed>) = 3 [pid 293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 868] recvmmsg(6, [pid 864] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 857] <... ioctl resumed>) = 0 [pid 296] close(3 [pid 864] <... futex resumed>) = 0 [pid 867] <... write resumed>) = 262144 [pid 864] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 867] munmap(0x7fc129dc5000, 262144) = 0 [pid 867] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 7 [pid 867] ioctl(7, LOOP_SET_FD, 3 [pid 295] ioctl(3, LOOP_CLR_FD [pid 867] <... ioctl resumed>) = 0 [pid 867] close(3) = 0 [pid 296] <... close resumed>) = 0 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... openat resumed>) = 3 [pid 295] close(3 [pid 867] mkdir("./file0", 0777) = 0 [pid 295] <... close resumed>) = 0 [pid 293] ioctl(3, LOOP_CLR_FD [pid 296] <... clone resumed>, child_tidptr=0x5555563f4690) = 870 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 867] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 293] close(3 [pid 857] ioctl(6, LOOP_SET_FD, 5 [pid 293] <... close resumed>) = 0 [pid 857] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 295] <... clone resumed>, child_tidptr=0x5555563f4690) = 871 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 857] close(6) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555563f4690) = 872 [pid 857] close(5 [pid 863] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 863] ioctl(9, LOOP_CLR_FD) = 0 [pid 863] close(9) = 0 [pid 863] futex(0x7fc1322d26fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 863] futex(0x7fc1322d26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 857] <... close resumed>) = 0 [pid 857] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 857] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 870 attached ./strace-static-x86_64: Process 871 attached [pid 870] set_robust_list(0x5555563f46a0, 24./strace-static-x86_64: Process 872 attached [pid 871] set_robust_list(0x5555563f46a0, 24 [pid 870] <... set_robust_list resumed>) = 0 [ 34.341107][ T863] EXT4-fs (loop5): Unrecognized mount option "nosuid=0x000000000000ee00" or missing value [ 34.376902][ T867] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [pid 872] set_robust_list(0x5555563f46a0, 24 [pid 871] <... set_robust_list resumed>) = 0 [pid 870] chdir("./13" [pid 860] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 872] <... set_robust_list resumed>) = 0 [pid 871] chdir("./13" [pid 870] <... chdir resumed>) = 0 [pid 867] <... mount resumed>) = 0 [pid 864] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 860] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] chdir("./14" [pid 871] <... chdir resumed>) = 0 [pid 870] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 864] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... futex resumed>) = 0 [pid 872] <... chdir resumed>) = 0 [pid 871] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 870] <... prctl resumed>) = 0 [pid 864] <... futex resumed>) = 0 [pid 860] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 872] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 871] <... prctl resumed>) = 0 [pid 870] setpgid(0, 0 [pid 864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 860] <... mmap resumed>) = 0x7fc129de4000 [pid 872] <... prctl resumed>) = 0 [pid 871] setpgid(0, 0 [pid 870] <... setpgid resumed>) = 0 [pid 864] <... mmap resumed>) = 0x7fc129de4000 [pid 860] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 872] setpgid(0, 0 [pid 871] <... setpgid resumed>) = 0 [pid 870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 864] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 860] <... mprotect resumed>) = 0 [pid 872] <... setpgid resumed>) = 0 [pid 871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 870] <... openat resumed>) = 3 [pid 864] <... mprotect resumed>) = 0 [pid 860] rt_sigprocmask(SIG_BLOCK, ~[], [pid 872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 871] <... openat resumed>) = 3 [pid 870] write(3, "1000", 4 [pid 864] rt_sigprocmask(SIG_BLOCK, ~[], [pid 860] <... rt_sigprocmask resumed>[], 8) = 0 [pid 872] <... openat resumed>) = 3 [pid 871] write(3, "1000", 4 [pid 870] <... write resumed>) = 4 [pid 864] <... rt_sigprocmask resumed>[], 8) = 0 [pid 860] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 872] write(3, "1000", 4 [pid 871] <... write resumed>) = 4 [pid 870] close(3 [pid 864] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 872] <... write resumed>) = 4 [pid 871] close(3 [pid 870] <... close resumed>) = 0 [pid 860] <... clone3 resumed> => {parent_tid=[877]}, 88) = 877 [pid 872] close(3 [pid 871] <... close resumed>) = 0 [pid 870] symlink("/dev/binderfs", "./binderfs" [pid 864] <... clone3 resumed> => {parent_tid=[878]}, 88) = 878 [pid 860] rt_sigprocmask(SIG_SETMASK, [], [pid 872] <... close resumed>) = 0 [pid 871] symlink("/dev/binderfs", "./binderfs" [pid 870] <... symlink resumed>) = 0 [pid 864] rt_sigprocmask(SIG_SETMASK, [], [pid 860] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 872] symlink("/dev/binderfs", "./binderfs" [pid 871] <... symlink resumed>) = 0 [pid 870] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 864] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 860] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... symlink resumed>) = 0 [pid 871] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = 0 [pid 864] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... futex resumed>) = 0 [pid 872] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] <... futex resumed>) = 0 [pid 870] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 864] <... futex resumed>) = 0 [pid 860] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] <... futex resumed>) = 0 [pid 871] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 870] <... rt_sigaction resumed>NULL, 8) = 0 [pid 864] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] rt_sigaction(SIGRT_1, {sa_handler=0x7fc132270320, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc1322614d0}, [pid 871] <... rt_sigaction resumed>NULL, 8) = 0 [pid 870] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 872] <... rt_sigaction resumed>NULL, 8) = 0 [pid 871] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 870] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 872] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 871] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 872] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 870] <... mmap resumed>) = 0x7fc1321e6000 [pid 872] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 871] <... mmap resumed>) = 0x7fc1321e6000 [pid 870] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 872] <... mmap resumed>) = 0x7fc1321e6000 [pid 871] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 870] <... mprotect resumed>) = 0 [pid 872] mprotect(0x7fc1321e7000, 131072, PROT_READ|PROT_WRITE [pid 871] <... mprotect resumed>) = 0 [pid 870] rt_sigprocmask(SIG_BLOCK, ~[], [pid 872] <... mprotect resumed>) = 0 [pid 871] rt_sigprocmask(SIG_BLOCK, ~[], [pid 870] <... rt_sigprocmask resumed>[], 8) = 0 [pid 872] rt_sigprocmask(SIG_BLOCK, ~[], [pid 871] <... rt_sigprocmask resumed>[], 8) = 0 [pid 870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 872] <... rt_sigprocmask resumed>[], 8) = 0 [pid 871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 872] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc132206990, parent_tid=0x7fc132206990, exit_signal=0, stack=0x7fc1321e6000, stack_size=0x20300, tls=0x7fc1322066c0} [pid 870] <... clone3 resumed> => {parent_tid=[879]}, 88) = 879 [pid 871] <... clone3 resumed> => {parent_tid=[880]}, 88) = 880 [pid 870] rt_sigprocmask(SIG_SETMASK, [], [pid 872] <... clone3 resumed> => {parent_tid=[881]}, 88) = 881 [pid 871] rt_sigprocmask(SIG_SETMASK, [], [pid 870] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 872] rt_sigprocmask(SIG_SETMASK, [], [pid 871] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 870] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 871] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = 0 [pid 872] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] <... futex resumed>) = 0 [pid 870] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... futex resumed>) = 0 [pid 871] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = 0 [pid 872] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] <... futex resumed>) = 0 [pid 870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 872] <... futex resumed>) = 0 [pid 871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 870] <... mmap resumed>) = 0x7fc1321c5000 [pid 872] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 871] <... mmap resumed>) = 0x7fc1321c5000 [pid 870] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 872] <... mmap resumed>) = 0x7fc1321c5000 [pid 871] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 870] <... mprotect resumed>) = 0 [pid 872] mprotect(0x7fc1321c6000, 131072, PROT_READ|PROT_WRITE [pid 871] <... mprotect resumed>) = 0 [pid 870] rt_sigprocmask(SIG_BLOCK, ~[], [pid 867] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 881 attached ./strace-static-x86_64: Process 880 attached ./strace-static-x86_64: Process 879 attached ./strace-static-x86_64: Process 878 attached ./strace-static-x86_64: Process 877 attached [pid 872] <... mprotect resumed>) = 0 [pid 871] rt_sigprocmask(SIG_BLOCK, ~[], [pid 870] <... rt_sigprocmask resumed>[], 8) = 0 [pid 867] <... openat resumed>) = 3 [pid 872] rt_sigprocmask(SIG_BLOCK, ~[], [pid 871] <... rt_sigprocmask resumed>[], 8) = 0 [pid 870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 881] set_robust_list(0x7fc1322069a0, 24 [pid 867] chdir("./file0" [pid 880] set_robust_list(0x7fc1322069a0, 24 [pid 879] set_robust_list(0x7fc1322069a0, 24 [pid 878] set_robust_list(0x7fc129e049a0, 24 [pid 877] set_robust_list(0x7fc129e049a0, 24 [pid 861] <... mount resumed>) = 0 [pid 881] <... set_robust_list resumed>) = 0 [pid 872] <... rt_sigprocmask resumed>[], 8) = 0 [pid 871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 867] <... chdir resumed>) = 0 [pid 872] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc1321e5990, parent_tid=0x7fc1321e5990, exit_signal=0, stack=0x7fc1321c5000, stack_size=0x20300, tls=0x7fc1321e56c0} [pid 870] <... clone3 resumed> => {parent_tid=[882]}, 88) = 882 [pid 881] rt_sigprocmask(SIG_SETMASK, [], [pid 880] <... set_robust_list resumed>) = 0 [pid 879] <... set_robust_list resumed>) = 0 [pid 878] <... set_robust_list resumed>) = 0 [pid 877] <... set_robust_list resumed>) = 0 [pid 871] <... clone3 resumed> => {parent_tid=[883]}, 88) = 883 [pid 870] rt_sigprocmask(SIG_SETMASK, [], [pid 867] ioctl(7, LOOP_CLR_FD [pid 861] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 872] <... clone3 resumed> => {parent_tid=[884]}, 88) = 884 [pid 871] rt_sigprocmask(SIG_SETMASK, [], [pid 870] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 867] <... ioctl resumed>) = 0 [pid 872] rt_sigprocmask(SIG_SETMASK, [], [pid 871] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 870] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 867] close(7 [pid 872] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 871] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = 0 [pid 867] <... close resumed>) = 0 [pid 881] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 880] rt_sigprocmask(SIG_SETMASK, [], [pid 879] rt_sigprocmask(SIG_SETMASK, [], [pid 878] rt_sigprocmask(SIG_SETMASK, [], [pid 877] rt_sigprocmask(SIG_SETMASK, [], [pid 872] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] <... futex resumed>) = 0 [pid 870] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 867] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... futex resumed>) = 0 [pid 871] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 867] <... futex resumed>) = 0 [pid 872] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 867] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 882 attached [pid 882] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 882] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 882] creat("./bus", 000) = 3 [pid 882] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 879] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 878] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 881] memfd_create("syzkaller", 0 [pid 880] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 879] memfd_create("syzkaller", 0 [pid 878] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 877] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 881] <... memfd_create resumed>) = 3 [pid 880] memfd_create("syzkaller", 0./strace-static-x86_64: Process 884 attached [pid 878] <... mmap resumed>) = 0x20000000 [pid 877] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 4, 0 [pid 879] <... memfd_create resumed>) = 4 [pid 884] set_robust_list(0x7fc1321e59a0, 24) = 0 [pid 877] <... mmap resumed>) = 0x20000000 [pid 881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 880] <... memfd_create resumed>) = 3 [pid 879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 878] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 884] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 884] creat("./bus", 000 [pid 881] <... mmap resumed>) = 0x7fc129dc5000 [pid 880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 879] <... mmap resumed>) = 0x7fc129dc5000 [pid 878] <... futex resumed>) = 1 [pid 877] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 864] <... futex resumed>) = 0 [pid 884] <... creat resumed>) = 4 [pid 884] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 872] <... futex resumed>) = 0 [pid 884] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 872] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 884] <... mount resumed>) = 0 [pid 872] <... futex resumed>) = 0 [pid 884] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 884] <... futex resumed>) = 0 [pid 872] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 884] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 872] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 884] <... open resumed>) = 5 [pid 881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 872] <... futex resumed>) = 0 [pid 864] futex(0x7fc1322d26c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 884] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 884] <... futex resumed>) = 0 [pid 872] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 884] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 872] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 884] <... socket resumed>) = 6 [pid 872] <... futex resumed>) = 0 [pid 884] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 884] <... futex resumed>) = 0 [pid 872] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 884] recvmmsg(6, [pid 872] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 879] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 880] <... mmap resumed>) = 0x7fc129dc5000 [pid 872] <... futex resumed>) = 0 [pid 878] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 864] <... futex resumed>) = 1 [pid 877] <... futex resumed>) = 1 [pid 860] <... futex resumed>) = 0 [pid 867] <... futex resumed>) = 0 [pid 872] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 883 attached [pid 883] set_robust_list(0x7fc1321e59a0, 24 [pid 860] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 883] <... set_robust_list resumed>) = 0 [pid 883] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 883] creat("./bus", 000) = 4 [pid 883] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 871] <... futex resumed>) = 0 [pid 883] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 871] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 883] <... mount resumed>) = 0 [pid 871] <... futex resumed>) = 0 [pid 883] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 883] <... futex resumed>) = 0 [pid 880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 877] memfd_create("syzkaller", 0 [pid 871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 860] <... futex resumed>) = 0 [pid 867] memfd_create("syzkaller", 0 [pid 883] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 871] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 883] <... open resumed>) = 5 [pid 871] <... futex resumed>) = 0 [pid 883] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 883] <... futex resumed>) = 0 [pid 871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 883] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 871] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... write resumed>) = 262144 [pid 883] <... socket resumed>) = 6 [pid 877] <... memfd_create resumed>) = 5 [pid 871] <... futex resumed>) = 0 [pid 867] <... memfd_create resumed>) = 7 [pid 883] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 883] <... futex resumed>) = 0 [pid 871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 883] recvmmsg(6, [pid 871] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 871] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 861] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 861] ioctl(6, LOOP_CLR_FD [pid 879] <... write resumed>) = 262144 [pid 877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 861] <... ioctl resumed>) = 0 [pid 861] close(6 [pid 877] <... mmap resumed>) = 0x7fc1219e4000 [pid 861] <... close resumed>) = 0 [pid 867] <... mmap resumed>) = 0x7fc1219e4000 [pid 861] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 861] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 870] <... futex resumed>) = 0 [pid 882] <... futex resumed>) = 1 [pid 870] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 882] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 870] <... futex resumed>) = 0 [pid 882] <... mount resumed>) = 0 [pid 877] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 870] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 870] <... futex resumed>) = 0 [pid 867] write(7, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 882] open("./bus", O_RDWR|O_SYNC|O_NOATIME|0x3c [pid 870] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 882] <... open resumed>) = 5 [pid 877] <... write resumed>) = 65536 [pid 870] <... futex resumed>) = 0 [pid 882] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 877] munmap(0x7fc1219e4000, 65536 [pid 870] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 867] <... write resumed>) = 65536 [pid 882] <... futex resumed>) = 0 [pid 870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 882] socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE [pid 870] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 882] <... socket resumed>) = 6 [pid 870] <... futex resumed>) = 0 [pid 882] futex(0x7fc1322d26dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] <... futex resumed>) = 0 [pid 880] <... write resumed>) = 262144 [pid 870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 882] recvmmsg(6, [pid 877] <... munmap resumed>) = 0 [pid 870] futex(0x7fc1322d26d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 867] munmap(0x7fc1219e4000, 65536 [pid 870] <... futex resumed>) = 0 [pid 870] futex(0x7fc1322d26dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 877] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 867] <... munmap resumed>) = 0 [pid 881] munmap(0x7fc129dc5000, 262144) = 0 [pid 881] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 7 [pid 877] <... openat resumed>) = 6 [pid 881] ioctl(7, LOOP_SET_FD, 3 [pid 879] munmap(0x7fc129dc5000, 262144) = 0 [pid 879] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 880] munmap(0x7fc129dc5000, 262144) = 0 [pid 880] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 877] ioctl(6, LOOP_SET_FD, 5 [pid 867] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 877] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 881] <... ioctl resumed>) = 0 [pid 879] <... openat resumed>) = 7 [pid 877] ioctl(6, LOOP_CLR_FD [pid 881] close(3 [pid 879] ioctl(7, LOOP_SET_FD, 4 [pid 881] <... close resumed>) = 0 [pid 881] mkdir("./file0", 0777 [pid 880] <... openat resumed>) = 7 [pid 879] <... ioctl resumed>) = 0 [pid 881] <... mkdir resumed>) = 0 [pid 879] close(4 [pid 881] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 880] ioctl(7, LOOP_SET_FD, 3 [pid 879] <... close resumed>) = 0 [pid 879] mkdir("./file0", 0777 [pid 877] <... ioctl resumed>) = 0 [pid 867] <... openat resumed>) = 8 [pid 879] <... mkdir resumed>) = 0 [pid 879] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 867] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 867] ioctl(8, LOOP_CLR_FD [pid 880] <... ioctl resumed>) = 0 [pid 880] close(3 [pid 867] <... ioctl resumed>) = 0 [pid 880] <... close resumed>) = 0 [pid 880] mkdir("./file0", 0777) = 0 [pid 877] ioctl(6, LOOP_SET_FD, 5 [pid 880] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME, "nodiscard,barrier,nouid32,grpquota,,errors=continue" [pid 877] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 877] close(6) = 0 [pid 877] close(5) = 0 [pid 877] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 877] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 867] ioctl(8, LOOP_SET_FD, 7) = -1 EBUSY (Device or resource busy) [pid 867] close(8) = 0 [pid 867] close(7) = 0 [pid 867] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 34.378400][ T861] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 34.388926][ T867] ext4 filesystem being mounted at /root/syzkaller.duxz7m/13/file0 supports timestamps until 2038 (0x7fffffff) [ 34.404536][ T861] ext4 filesystem being mounted at /root/syzkaller.gpm0iI/14/file0 supports timestamps until 2038 (0x7fffffff) [pid 867] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 872] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 871] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 870] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 872] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... futex resumed>) = 0 [pid 871] <... futex resumed>) = 0 [pid 870] <... futex resumed>) = 0 [pid 872] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 872] <... mmap resumed>) = 0x7fc129de4000 [pid 871] <... mmap resumed>) = 0x7fc129de4000 [pid 870] <... mmap resumed>) = 0x7fc129de4000 [pid 872] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 871] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 870] mprotect(0x7fc129de5000, 131072, PROT_READ|PROT_WRITE [pid 872] <... mprotect resumed>) = 0 [pid 871] <... mprotect resumed>) = 0 [pid 870] <... mprotect resumed>) = 0 [pid 872] rt_sigprocmask(SIG_BLOCK, ~[], [pid 871] rt_sigprocmask(SIG_BLOCK, ~[], [pid 870] rt_sigprocmask(SIG_BLOCK, ~[], [pid 872] <... rt_sigprocmask resumed>[], 8) = 0 [pid 871] <... rt_sigprocmask resumed>[], 8) = 0 [pid 870] <... rt_sigprocmask resumed>[], 8) = 0 [pid 872] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc129e04990, parent_tid=0x7fc129e04990, exit_signal=0, stack=0x7fc129de4000, stack_size=0x20300, tls=0x7fc129e046c0} [pid 872] <... clone3 resumed> => {parent_tid=[892]}, 88) = 892 [pid 871] <... clone3 resumed> => {parent_tid=[893]}, 88) = 893 [pid 870] <... clone3 resumed> => {parent_tid=[894]}, 88) = 894 [pid 872] rt_sigprocmask(SIG_SETMASK, [], [pid 871] rt_sigprocmask(SIG_SETMASK, [], [pid 870] rt_sigprocmask(SIG_SETMASK, [], [pid 872] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 871] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 870] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 872] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... futex resumed>) = 0 [pid 871] <... futex resumed>) = 0 [pid 870] <... futex resumed>) = 0 [pid 872] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 871] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 870] futex(0x7fc1322d26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 894 attached ./strace-static-x86_64: Process 893 attached ./strace-static-x86_64: Process 892 attached [pid 881] <... mount resumed>) = 0 [pid 894] set_robust_list(0x7fc129e049a0, 24 [pid 893] set_robust_list(0x7fc129e049a0, 24 [pid 892] set_robust_list(0x7fc129e049a0, 24 [pid 881] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 894] <... set_robust_list resumed>) = 0 [pid 893] <... set_robust_list resumed>) = 0 [pid 892] <... set_robust_list resumed>) = 0 [pid 894] rt_sigprocmask(SIG_SETMASK, [], [pid 893] rt_sigprocmask(SIG_SETMASK, [], [pid 892] rt_sigprocmask(SIG_SETMASK, [], [pid 881] <... openat resumed>) = 3 [pid 894] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 893] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 892] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 881] chdir("./file0" [pid 894] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 893] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 892] mmap(0x20000000, 6291456, PROT_WRITE|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 5, 0 [pid 881] <... chdir resumed>) = 0 [pid 894] <... mmap resumed>) = 0x20000000 [pid 893] <... mmap resumed>) = 0x20000000 [pid 892] <... mmap resumed>) = 0x20000000 [pid 881] ioctl(7, LOOP_CLR_FD [pid 894] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 893] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 892] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... futex resumed>) = 1 [pid 893] <... futex resumed>) = 1 [pid 892] <... futex resumed>) = 1 [pid 872] <... futex resumed>) = 0 [pid 871] <... futex resumed>) = 0 [pid 870] <... futex resumed>) = 0 [pid 880] <... mount resumed>) = 0 [pid 872] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 892] memfd_create("syzkaller", 0 [pid 870] futex(0x7fc1322d26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] memfd_create("syzkaller", 0 [pid 893] memfd_create("syzkaller", 0 [pid 872] <... futex resumed>) = 0 [pid 871] <... futex resumed>) = 0 [pid 892] <... memfd_create resumed>) = 8 [pid 870] <... futex resumed>) = 0 [pid 893] <... memfd_create resumed>) = 3 [pid 894] <... memfd_create resumed>) = 4 [pid 893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 880] openat(AT_FDCWD, 0x20000000, O_RDONLY|O_DIRECTORY) = -1 ENOENT (No such file or directory) [ 34.467983][ T881] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 34.476426][ T880] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,barrier,nouid32,grpquota,,errors=continue [ 34.480798][ T881] ext4 filesystem being mounted at /root/syzkaller.zNZ9LH/14/file0 supports timestamps until 2038 (0x7fffffff) [ 34.502329][ T880] ext4 filesystem being mounted at /root/syzkaller.IpShW6/13/file0 supports timestamps until 2038 (0x7fffffff) [pid 880] ioctl(7, LOOP_CLR_FD) = 0 [pid 880] close(7) = 0 [pid 880] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 880] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] <... ioctl resumed>) = 0 [pid 881] close(7) = 0 [pid 881] futex(0x7fc1322d26cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7fc1322d26c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1219e4000 [pid 894] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 894] munmap(0x7fc1219e4000, 65536) = 0 [pid 894] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 8 [pid 894] ioctl(8, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy) [pid 894] ioctl(8, LOOP_CLR_FD) = 0 [pid 893] <... mmap resumed>) = 0x7fc1219e4000 [pid 893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 894] ioctl(8, LOOP_SET_FD, 4 [pid 893] <... write resumed>) = 65536 [pid 894] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 893] munmap(0x7fc1219e4000, 65536 [pid 894] close(8 [pid 893] <... munmap resumed>) = 0 [pid 894] <... close resumed>) = 0 [pid 893] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 892] <... mmap resumed>) = 0x7fc1219e4000 [pid 894] close(4 [pid 893] <... openat resumed>) = 7 [pid 894] <... close resumed>) = 0 [pid 893] ioctl(7, LOOP_SET_FD, 3 [pid 894] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 893] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 894] <... futex resumed>) = 0 [pid 893] ioctl(7, LOOP_CLR_FD [pid 892] write(8, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 [pid 894] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 893] <... ioctl resumed>) = 0 [pid 892] <... write resumed>) = 65536 [pid 893] ioctl(7, LOOP_SET_FD, 3 [pid 892] munmap(0x7fc1219e4000, 65536 [pid 893] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 892] <... munmap resumed>) = 0 [pid 893] close(7 [pid 892] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 893] <... close resumed>) = 0 [pid 892] <... openat resumed>) = 7 [pid 893] close(3 [pid 892] ioctl(7, LOOP_SET_FD, 8 [pid 856] exit_group(0 [pid 893] <... close resumed>) = 0 [pid 892] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 863] <... futex resumed>) = ? [pid 859] <... recvmmsg resumed> ) = ? [pid 858] <... futex resumed>) = ? [pid 857] <... futex resumed>) = ? [pid 856] <... exit_group resumed>) = ? [pid 893] futex(0x7fc1322d26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 892] ioctl(7, LOOP_CLR_FD [pid 863] +++ exited with 0 +++ [pid 859] +++ exited with 0 +++ [pid 858] +++ exited with 0 +++ [pid 857] +++ exited with 0 +++ [pid 893] <... futex resumed>) = 0 [ 34.517688][ T879] ------------[ cut here ]------------ [ 34.533116][ T879] kernel BUG at fs/ext4/super.c:6399! [ 34.544571][ T879] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 34.550448][ T879] CPU: 1 PID: 879 Comm: syz-executor417 Not tainted 5.10.187-syzkaller-00057-g8a427269c016 #0 [ 34.560508][ T879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 34.570425][ T879] RIP: 0010:ext4_enable_quotas+0x9e1/0x9f0 [ 34.576044][ T879] Code: 38 c1 0f 8c d1 f8 ff ff 49 89 f6 48 89 df e8 a6 eb bb ff 4c 89 f6 48 ba 00 00 00 00 00 fc ff df e9 b4 f8 ff ff e8 df bc 7e ff <0f> 0b e8 d8 bc 7e ff 0f 0b e8 41 07 be 02 90 55 48 89 e5 41 57 41 [ 34.595491][ T879] RSP: 0018:ffffc900029677c0 EFLAGS: 00010293 [ 34.601392][ T879] RAX: ffffffff81ebd0c1 RBX: 0000000000000000 RCX: ffff88810ffae2c0 [ 34.609200][ T879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [pid 893] futex(0x7fc1322d26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 864] exit_group(0 [pid 878] <... futex resumed>) = ? [pid 868] <... recvmmsg resumed> ) = ? [pid 867] <... futex resumed>) = ? [pid 864] <... exit_group resumed>) = ? [pid 878] +++ exited with 0 +++ [pid 868] +++ exited with 0 +++ [pid 867] +++ exited with 0 +++ [pid 860] exit_group(0 [pid 877] <... futex resumed>) = ? [pid 862] <... recvmmsg resumed> ) = ? [pid 861] <... futex resumed>) = ? [pid 860] <... exit_group resumed>) = ? [pid 877] +++ exited with 0 +++ [pid 862] +++ exited with 0 +++ [pid 861] +++ exited with 0 +++ [ 34.617023][ T879] RBP: ffffc90002967930 R08: ffffffff81ebcb60 R09: ffffed10238267c4 [ 34.624825][ T879] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 34.632636][ T879] R13: 0000000000000004 R14: ffffc90002967848 R15: ffff8881198af464 [ 34.640446][ T879] FS: 00007fc1322066c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 34.649210][ T879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.655638][ T879] CR2: 00007fc13229da18 CR3: 0000000117d8c000 CR4: 00000000003506a0 [pid 872] exit_group(0 [pid 892] <... ioctl resumed>) = ? [pid 884] <... recvmmsg resumed> ) = ? [pid 881] <... futex resumed>) = ? [pid 872] <... exit_group resumed>) = ? [pid 892] +++ exited with 0 +++ [pid 884] +++ exited with 0 +++ [pid 881] +++ exited with 0 +++ [pid 871] exit_group(0 [pid 870] exit_group(0 [pid 894] <... futex resumed>) = ? [pid 893] <... futex resumed>) = ? [pid 883] <... recvmmsg resumed> ) = ? [pid 882] <... recvmmsg resumed> ) = ? [pid 880] <... futex resumed>) = ? [pid 871] <... exit_group resumed>) = ? [pid 870] <... exit_group resumed>) = ? [pid 894] +++ exited with 0 +++ [pid 893] +++ exited with 0 +++ [pid 883] +++ exited with 0 +++ [pid 882] +++ exited with 0 +++ [pid 880] +++ exited with 0 +++ [ 34.663445][ T879] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.671259][ T879] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.679066][ T879] Call Trace: [ 34.682207][ T879] ? __die_body+0x62/0xb0 [ 34.686366][ T879] ? die+0x88/0xb0 [ 34.689916][ T879] ? do_trap+0x1a4/0x310 [ 34.693999][ T879] ? ext4_enable_quotas+0x9e1/0x9f0 [ 34.699030][ T879] ? handle_invalid_op+0x95/0xc0 [ 34.703891][ T879] ? ext4_enable_quotas+0x9e1/0x9f0 [ 34.708935][ T879] ? exc_invalid_op+0x32/0x50 [ 34.713438][ T879] ? asm_exc_invalid_op+0x12/0x20 [ 34.718307][ T879] ? ext4_enable_quotas+0x480/0x9f0 [ 34.723349][ T879] ? ext4_enable_quotas+0x9e1/0x9f0 [ 34.728392][ T879] ? ext4_enable_quotas+0x9e1/0x9f0 [ 34.733402][ T879] ? ext4_fill_flex_info+0x5b0/0x5b0 [ 34.738530][ T879] ? proc_create_single_data+0x1de/0x240 [ 34.744006][ T879] ? proc_create_seq_private+0x280/0x280 [ 34.749457][ T879] ? __kasan_check_write+0x14/0x20 [ 34.754412][ T879] ? ext4_register_sysfs+0x253/0x290 [ 34.759526][ T879] ext4_fill_super+0x87e7/0x9280 [ 34.764302][ T879] ? ext4_mount+0x40/0x40 [ 34.768465][ T879] ? vscnprintf+0x80/0x80 [ 34.772630][ T879] ? sb_set_blocksize+0xa8/0xf0 [ 34.777333][ T879] mount_bdev+0x262/0x370 [ 34.781484][ T879] ? ext4_mount+0x40/0x40 [ 34.785651][ T879] ext4_mount+0x34/0x40 [ 34.789641][ T879] legacy_get_tree+0xf1/0x190 [ 34.794155][ T879] ? ext4_chksum+0x210/0x210 [ 34.798587][ T879] vfs_get_tree+0x88/0x290 [ 34.802840][ T879] do_new_mount+0x28b/0xad0 [ 34.807176][ T879] ? do_move_mount_old+0x160/0x160 [ 34.812152][ T879] ? security_capable+0x87/0xb0 [ 34.816809][ T879] ? ns_capable+0x89/0xe0 [ 34.820976][ T879] path_mount+0x56f/0xcb0 [ 34.825159][ T879] __se_sys_mount+0x2c4/0x3b0 [ 34.829652][ T879] ? __x64_sys_mount+0xd0/0xd0 [ 34.834265][ T879] ? fpu__clear_all+0x20/0x20 [ 34.838774][ T879] __x64_sys_mount+0xbf/0xd0 [ 34.843196][ T879] do_syscall_64+0x34/0x70 [ 34.847456][ T879] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 34.853177][ T879] RIP: 0033:0x7fc13224b35a [ 34.857428][ T879] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 34.876866][ T879] RSP: 002b:00007fc132206038 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 34.885111][ T879] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fc13224b35a [ 34.892921][ T879] RDX: 00000000200005c0 RSI: 0000000020000000 RDI: 00007fc132206090 [ 34.900740][ T879] RBP: 00000000200005c0 R08: 00007fc1322060d0 R09: 00000000000004d4 [ 34.908549][ T879] R10: 0000000000200810 R11: 0000000000000206 R12: 00007fc132206090 [ 34.916354][ T879] R13: 0000000020000000 R14: 00000000000004da R15: 00007fc1322060d0 [ 34.924167][ T879] Modules linked in: [ 34.928062][ T879] ---[ end trace ddd9eeb0fecebd4e ]--- [ 34.933354][ T879] RIP: 0010:ext4_enable_quotas+0x9e1/0x9f0 [ 34.938975][ T879] Code: 38 c1 0f 8c d1 f8 ff ff 49 89 f6 48 89 df e8 a6 eb bb ff 4c 89 f6 48 ba 00 00 00 00 00 fc ff df e9 b4 f8 ff ff e8 df bc 7e ff <0f> 0b e8 d8 bc 7e ff 0f 0b e8 41 07 be 02 90 55 48 89 e5 41 57 41 [ 34.958434][ T879] RSP: 0018:ffffc900029677c0 EFLAGS: 00010293 [pid 872] +++ exited with 0 +++ [pid 871] +++ exited with 0 +++ [pid 864] +++ exited with 0 +++ [pid 860] +++ exited with 0 +++ [pid 856] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=856, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=871, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=864, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=872, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=860, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 297] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 294] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 293] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... openat resumed>) = 3 [pid 295] <... openat resumed>) = 3 [pid 294] <... openat resumed>) = 3 [pid 293] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 297] newfstatat(3, "", [pid 295] newfstatat(3, "", [pid 294] newfstatat(3, "", [pid 293] newfstatat(3, "", [pid 292] newfstatat(3, "", [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, [pid 295] getdents64(3, [pid 294] getdents64(3, [pid 293] getdents64(3, [pid 292] getdents64(3, [pid 297] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 128 [pid 295] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 294] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 293] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 292] <... getdents64 resumed>0x5555563f5730 /* 5 entries */, 32768) = 136 [pid 297] umount2("./13/mnt", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = 0 [pid 294] <... umount2 resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./13/mnt", [pid 295] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... umount2 resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 297] umount2("./13/mnt", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] newfstatat(AT_FDCWD, "./13/bus", [ 34.964565][ T879] RAX: ffffffff81ebd0c1 RBX: 0000000000000000 RCX: ffff88810ffae2c0 [pid 294] newfstatat(AT_FDCWD, "./13/bus", [pid 293] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./13/mnt", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] unlink("./13/bus" [pid 294] unlink("./13/bus" [pid 293] newfstatat(AT_FDCWD, "./14/bus", [pid 292] newfstatat(AT_FDCWD, "./14/bus", [pid 297] <... openat resumed>) = 4 [pid 295] <... unlink resumed>) = 0 [pid 294] <... unlink resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] newfstatat(4, "", [pid 295] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] unlink("./14/bus" [pid 292] unlink("./14/bus" [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 294] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 293] <... unlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 297] getdents64(4, [pid 295] newfstatat(AT_FDCWD, "./13/binderfs", [pid 294] newfstatat(AT_FDCWD, "./13/binderfs", [pid 293] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... getdents64 resumed>0x5555563fd770 /* 2 entries */, 32768) = 48 [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 294] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 293] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] getdents64(4, [pid 295] unlink("./13/binderfs" [pid 294] unlink("./13/binderfs" [pid 293] newfstatat(AT_FDCWD, "./14/binderfs", [pid 292] newfstatat(AT_FDCWD, "./14/binderfs", [pid 297] <... getdents64 resumed>0x5555563fd770 /* 0 entries */, 32768) = 0 [pid 295] <... unlink resumed>) = 0 [pid 294] <... unlink resumed>) = 0 [pid 293] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] close(4 [pid 295] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 294] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 293] unlink("./14/binderfs" [pid 292] unlink("./14/binderfs" [pid 297] <... close resumed>) = 0 [pid 293] <... unlink resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 297] rmdir("./13/mnt" [pid 293] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 292] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] <... rmdir resumed>) = 0 [pid 297] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 297] umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./13/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./13/bus") = 0 [pid 297] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./13/binderfs") = 0 [pid 297] getdents64(3, 0x5555563f5730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./13") = 0 [pid 297] mkdir("./14", 0777) = 0 [ 34.994885][ T879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.002717][ T879] RBP: ffffc90002967930 R08: ffffffff81ebcb60 R09: ffffed10238267c4 [ 35.011781][ T879] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 35.019739][ T879] R13: 0000000000000004 R14: ffffc90002967848 R15: ffff8881198af464 [ 35.027522][ T879] FS: 00007fc1322066c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.036340][ T879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.042731][ T879] CR2: 00007fc13229da18 CR3: 0000000117d8c000 CR4: 00000000003506a0 [ 35.050546][ T879] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.058331][ T879] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.066163][ T879] Kernel panic - not syncing: Fatal exception [ 35.072290][ T879] Kernel Offset: disabled [ 35.076421][ T879] Rebooting in 86400 seconds..