./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4001727678 <...> Warning: Permanently added '10.128.10.5' (ECDSA) to the list of known hosts. execve("./syz-executor4001727678", ["./syz-executor4001727678"], 0x7ffe4374bbc0 /* 10 vars */) = 0 brk(NULL) = 0x555557456000 brk(0x555557456c40) = 0x555557456c40 arch_prctl(ARCH_SET_FS, 0x555557456300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555574565d0) = 294 set_robust_list(0x5555574565e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7fb6cd8d9990, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fb6cd8da060}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7fb6cd8d9a30, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb6cd8da060}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4001727678", 4096) = 28 brk(0x555557477c40) = 0x555557477c40 brk(0x555557478000) = 0x555557478000 mprotect(0x7fb6cd99b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 295 ./strace-static-x86_64: Process 295 attached [pid 295] set_robust_list(0x5555574565e0, 24) = 0 [pid 295] getpid() = 295 [pid 295] mkdir("./syzkaller.k6WUTv", 0700 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... mkdir resumed>) = 0 [pid 295] chmod("./syzkaller.k6WUTv", 0777) = 0 [pid 295] chdir("./syzkaller.k6WUTv") = 0 [pid 295] mkdir("./0", 0777) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 297 [pid 294] <... clone resumed>, child_tidptr=0x5555574565d0) = 298 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 299 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 300 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 301 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 302 ./strace-static-x86_64: Process 302 attached ./strace-static-x86_64: Process 300 attached [pid 300] set_robust_list(0x5555574565e0, 24 [pid 302] set_robust_list(0x5555574565e0, 24) = 0 [pid 302] getpid( [pid 300] <... set_robust_list resumed>) = 0 [pid 300] getpid( [pid 302] <... getpid resumed>) = 302 [pid 302] mkdir("./syzkaller.GZveE1", 0700 [pid 300] <... getpid resumed>) = 300 [pid 300] mkdir("./syzkaller.GWGYpS", 0700 [pid 302] <... mkdir resumed>) = 0 [pid 300] <... mkdir resumed>) = 0 [pid 300] chmod("./syzkaller.GWGYpS", 0777 [pid 302] chmod("./syzkaller.GZveE1", 0777 [pid 300] <... chmod resumed>) = 0 [pid 302] <... chmod resumed>) = 0 [pid 302] chdir("./syzkaller.GZveE1" [pid 300] chdir("./syzkaller.GWGYpS" [pid 302] <... chdir resumed>) = 0 [pid 300] <... chdir resumed>) = 0 [pid 302] mkdir("./0", 0777 [pid 300] mkdir("./0", 0777) = 0 [pid 302] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 301 attached [pid 301] set_robust_list(0x5555574565e0, 24) = 0 [pid 301] getpid( [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 301] <... getpid resumed>) = 301 [pid 301] mkdir("./syzkaller.UXrimW", 0700 [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 300] <... openat resumed>) = 3 [pid 302] <... openat resumed>) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3 [pid 302] close(3) = 0 [pid 300] <... close resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... mkdir resumed>) = 0 [pid 301] chmod("./syzkaller.UXrimW", 0777) = 0 [pid 301] chdir("./syzkaller.UXrimW") = 0 [pid 301] mkdir("./0", 0777 [pid 302] <... clone resumed>, child_tidptr=0x5555574565d0) = 305 [pid 300] <... clone resumed>, child_tidptr=0x5555574565d0) = 304 [pid 301] <... mkdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 297 attached ./strace-static-x86_64: Process 299 attached ./strace-static-x86_64: Process 298 attached [pid 298] set_robust_list(0x5555574565e0, 24 [pid 297] set_robust_list(0x5555574565e0, 24 [pid 301] <... clone resumed>, child_tidptr=0x5555574565d0) = 306 [pid 298] <... set_robust_list resumed>) = 0 [pid 299] set_robust_list(0x5555574565e0, 24 [pid 298] getpid( [pid 297] <... set_robust_list resumed>) = 0 [pid 299] <... set_robust_list resumed>) = 0 [pid 298] <... getpid resumed>) = 298 [pid 297] chdir("./0"./strace-static-x86_64: Process 305 attached ) = 0 [pid 298] mkdir("./syzkaller.QDJVhK", 0700 [pid 297] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] getpid( [pid 305] set_robust_list(0x5555574565e0, 24) = 0 [pid 305] chdir("./0" [pid 297] <... prctl resumed>) = 0 [pid 299] <... getpid resumed>) = 299 [pid 297] setpgid(0, 0 [pid 305] <... chdir resumed>) = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 305] setpgid(0, 0) = 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 297] <... setpgid resumed>) = 0 [pid 299] mkdir("./syzkaller.ztPMZO", 0700 [pid 297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 298] <... mkdir resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x5555574565e0, 24) = 0 [pid 297] <... openat resumed>) = 3 [pid 304] chdir("./0" [pid 298] chmod("./syzkaller.QDJVhK", 0777 [pid 299] chmod("./syzkaller.ztPMZO", 0777 [pid 297] write(3, "1000", 4 [pid 304] <... chdir resumed>) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... openat resumed>) = 3 [pid 304] <... prctl resumed>) = 0 [pid 304] setpgid(0, 0 [pid 298] <... chmod resumed>) = 0 [pid 299] <... chmod resumed>) = 0 [pid 298] chdir("./syzkaller.QDJVhK" [pid 297] <... write resumed>) = 4 [pid 304] <... setpgid resumed>) = 0 [pid 305] write(3, "1000", 4 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... write resumed>) = 4 [pid 305] close(3) = 0 [pid 305] symlink("/dev/binderfs", "./binderfs" [pid 304] <... openat resumed>) = 3 [pid 299] chdir("./syzkaller.ztPMZO" [pid 298] <... chdir resumed>) = 0 [pid 297] close(3 [pid 304] write(3, "1000", 4) = 4 [pid 304] close(3) = 0 [pid 304] symlink("/dev/binderfs", "./binderfs" [pid 305] <... symlink resumed>) = 0 [pid 305] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 304] <... symlink resumed>) = 0 [pid 305] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 304] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 305] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 304] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 299] <... chdir resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 298] mkdir("./0", 0777 [pid 304] <... mprotect resumed>) = 0 [pid 299] mkdir("./0", 0777 [pid 297] symlink("/dev/binderfs", "./binderfs" [pid 304] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 298] <... mkdir resumed>) = 0 [pid 297] <... symlink resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 297] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 305] <... clone resumed>, parent_tid=[308], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 308 [pid 305] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 304] <... clone resumed>, parent_tid=[309], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 309 [pid 304] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 297] <... futex resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 3 [pid 298] ioctl(3, LOOP_CLR_FD [pid 297] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 306 attached ./strace-static-x86_64: Process 308 attached [pid 306] set_robust_list(0x5555574565e0, 24 [pid 299] ioctl(3, LOOP_CLR_FD [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 308] set_robust_list(0x7fb6cd8c89e0, 24 [pid 306] <... set_robust_list resumed>) = 0 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] close(3 [pid 297] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 308] <... set_robust_list resumed>) = 0 [pid 306] chdir("./0" [pid 299] close(3 [pid 298] <... close resumed>) = 0 [pid 297] <... mprotect resumed>) = 0 [pid 308] memfd_create("syzkaller", 0 [pid 306] <... chdir resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 309 attached [pid 309] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 309] memfd_create("syzkaller", 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... clone resumed>, child_tidptr=0x5555574565d0) = 310 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 297] <... clone resumed>, parent_tid=[311], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 311 [pid 308] <... memfd_create resumed>) = 3 [pid 297] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 306] <... prctl resumed>) = 0 [pid 299] <... clone resumed>, child_tidptr=0x5555574565d0) = 312 [pid 309] <... memfd_create resumed>) = 3 [pid 309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 297] <... futex resumed>) = 0 [pid 306] setpgid(0, 0 [pid 297] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 308] <... mmap resumed>) = 0x7fb6c54a8000 [pid 306] <... setpgid resumed>) = 0 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 306] write(3, "1000", 4) = 4 [pid 306] close(3) = 0 [pid 306] symlink("/dev/binderfs", "./binderfs") = 0 [pid 306] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 306] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 312 attached ) = 0 [pid 312] set_robust_list(0x5555574565e0, 24) = 0 [pid 306] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 312] chdir("./0"./strace-static-x86_64: Process 310 attached [pid 310] set_robust_list(0x5555574565e0, 24 [pid 312] <... chdir resumed>) = 0 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 312] setpgid(0, 0 [pid 310] <... set_robust_list resumed>) = 0 [pid 310] chdir("./0" [pid 312] <... setpgid resumed>) = 0 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 306] <... clone resumed>, parent_tid=[313], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 313 [pid 306] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... chdir resumed>) = 0 [pid 306] <... futex resumed>) = 0 [pid 312] <... openat resumed>) = 3 [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 310] setpgid(0, 0) = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 312] write(3, "1000", 4) = 4 [pid 312] close(3) = 0 [pid 312] symlink("/dev/binderfs", "./binderfs" [pid 306] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 312] <... symlink resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 312] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] write(3, "1000", 4 [pid 312] <... futex resumed>) = 0 [pid 310] <... write resumed>) = 4 [pid 312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 310] close(3 [pid 312] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 310] <... close resumed>) = 0 [ 21.134463][ T28] audit: type=1400 audit(1685789617.026:66): avc: denied { execmem } for pid=294 comm="syz-executor400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.140729][ T28] audit: type=1400 audit(1685789617.026:67): avc: denied { read write } for pid=295 comm="syz-executor400" name="loop0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.146165][ T28] audit: type=1400 audit(1685789617.026:68): avc: denied { open } for pid=295 comm="syz-executor400" path="/dev/loop0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.151094][ T28] audit: type=1400 audit(1685789617.026:69): avc: denied { ioctl } for pid=295 comm="syz-executor400" path="/dev/loop0" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 ./strace-static-x86_64: Process 311 attached [pid 312] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 310] symlink("/dev/binderfs", "./binderfs" [pid 309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 312] <... mprotect resumed>) = 0 [pid 311] set_robust_list(0x7fb6cd8c89e0, 24 [pid 310] <... symlink resumed>) = 0 [pid 312] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 310] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] <... clone resumed>, parent_tid=[315], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 315 [pid 310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 312] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 312] <... futex resumed>) = 0 [pid 310] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 312] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 311] <... set_robust_list resumed>) = 0 [pid 310] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 313 attached [pid 310] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 313] set_robust_list(0x7fb6cd8c89e0, 24 [pid 311] memfd_create("syzkaller", 0 [pid 313] <... set_robust_list resumed>) = 0 [pid 311] <... memfd_create resumed>) = 3 [pid 310] <... clone resumed>, parent_tid=[316], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 316 [pid 313] memfd_create("syzkaller", 0 [pid 310] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... memfd_create resumed>) = 3 [pid 310] <... futex resumed>) = 0 [pid 313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 310] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 313] <... mmap resumed>) = 0x7fb6c54a8000 [pid 311] <... mmap resumed>) = 0x7fb6c54a8000 [pid 313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 315 attached [pid 315] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 315] memfd_create("syzkaller", 0) = 3 [pid 315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 316 attached ) = 0x7fb6c54a8000 [pid 316] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 316] memfd_create("syzkaller", 0) = 3 [pid 316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 309] <... write resumed>) = 1048576 [pid 308] <... write resumed>) = 1048576 [pid 308] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 311] <... write resumed>) = 1048576 [pid 308] <... openat resumed>) = 4 [pid 309] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 311] munmap(0x7fb6c54a8000, 1048576 [pid 308] ioctl(4, LOOP_SET_FD, 3 [pid 309] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 309] ioctl(4, LOOP_SET_FD, 3 [pid 316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 313] <... write resumed>) = 1048576 [pid 311] <... munmap resumed>) = 0 [pid 308] <... ioctl resumed>) = 0 [pid 309] <... ioctl resumed>) = 0 [pid 309] close(3) = 0 [pid 309] mkdir("./file0", 0777 [pid 311] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 313] munmap(0x7fb6c54a8000, 1048576 [pid 308] close(3 [pid 309] <... mkdir resumed>) = 0 [pid 309] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 316] <... write resumed>) = 1048576 [pid 315] <... write resumed>) = 1048576 [pid 313] <... munmap resumed>) = 0 [pid 311] <... openat resumed>) = 4 [pid 308] <... close resumed>) = 0 [pid 311] ioctl(4, LOOP_SET_FD, 3 [pid 316] munmap(0x7fb6c54a8000, 1048576 [pid 315] munmap(0x7fb6c54a8000, 1048576 [pid 313] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 311] <... ioctl resumed>) = 0 [pid 308] mkdir("./file0", 0777 [pid 316] <... munmap resumed>) = 0 [pid 315] <... munmap resumed>) = 0 [pid 313] <... openat resumed>) = 4 [pid 316] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 315] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 313] ioctl(4, LOOP_SET_FD, 3 [pid 311] close(3 [pid 308] <... mkdir resumed>) = 0 [pid 316] <... openat resumed>) = 4 [pid 315] <... openat resumed>) = 4 [pid 311] <... close resumed>) = 0 [ 21.215245][ T308] loop5: detected capacity change from 0 to 2048 [ 21.216788][ T309] loop3: detected capacity change from 0 to 2048 [ 21.229046][ T28] audit: type=1400 audit(1685789617.116:70): avc: denied { mounton } for pid=304 comm="syz-executor400" path="/root/syzkaller.GWGYpS/0/file0" dev="sda1" ino=1945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 21.235372][ T311] loop0: detected capacity change from 0 to 2048 [pid 308] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 316] ioctl(4, LOOP_SET_FD, 3 [pid 315] ioctl(4, LOOP_SET_FD, 3 [pid 313] <... ioctl resumed>) = 0 [pid 311] mkdir("./file0", 0777 [pid 316] <... ioctl resumed>) = 0 [pid 313] close(3 [pid 315] <... ioctl resumed>) = 0 [pid 311] <... mkdir resumed>) = 0 [pid 315] close(3 [pid 313] <... close resumed>) = 0 [pid 313] mkdir("./file0", 0777 [pid 316] close(3 [pid 311] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 313] <... mkdir resumed>) = 0 [pid 315] <... close resumed>) = 0 [pid 315] mkdir("./file0", 0777 [pid 313] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue" [pid 315] <... mkdir resumed>) = 0 [pid 315] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 316] <... close resumed>) = 0 [pid 316] mkdir("./file0", 0777 [pid 309] <... mount resumed>) = 0 [pid 309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 309] chdir("./file0") = 0 [pid 309] ioctl(4, LOOP_CLR_FD) = 0 [pid 309] close(4) = 0 [pid 309] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 309] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 316] <... mkdir resumed>) = 0 [pid 316] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue" [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 0 [pid 309] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [ 21.260791][ T313] loop4: detected capacity change from 0 to 2048 [ 21.261763][ T315] loop2: detected capacity change from 0 to 2048 [ 21.267881][ T316] loop1: detected capacity change from 0 to 2048 [ 21.282914][ T309] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 21.291845][ T28] audit: type=1400 audit(1685789617.186:71): avc: denied { mount } for pid=304 comm="syz-executor400" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [pid 309] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... mount resumed>) = 0 [pid 309] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 308] chdir("./file0") = 0 [pid 308] ioctl(4, LOOP_CLR_FD) = 0 [pid 308] close(4) = 0 [pid 308] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 308] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 308] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 308] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 308] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 308] ftruncate(5, 33587195) = 0 [pid 308] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 308] sendfile(4, 5, NULL, 4) = 4 [pid 308] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 308] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 1 [pid 309] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 304] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... open resumed>) = 5 [pid 309] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] <... futex resumed>) = 0 [pid 309] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 1 [pid 309] ftruncate(5, 33587195) = 0 [pid 309] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 309] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [ 21.314116][ T28] audit: type=1400 audit(1685789617.186:72): avc: denied { write } for pid=304 comm="syz-executor400" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.314261][ T308] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 21.335849][ T28] audit: type=1400 audit(1685789617.186:73): avc: denied { add_name } for pid=304 comm="syz-executor400" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.372625][ T28] audit: type=1400 audit(1685789617.186:74): avc: denied { create } for pid=304 comm="syz-executor400" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 21.372850][ T311] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [pid 305] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 304] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 1 [pid 305] <... futex resumed>) = 0 [pid 304] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 305] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 305] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[329], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 329 [pid 305] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 0 [pid 313] <... mount resumed>) = 0 [pid 309] sendfile(4, 5, NULL, 4) = 4 ./strace-static-x86_64: Process 329 attached [pid 315] <... mount resumed>) = 0 [pid 313] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 311] <... mount resumed>) = 0 [pid 309] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] set_robust_list(0x7fb6c55a79e0, 24 [pid 315] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 313] <... openat resumed>) = 3 [pid 311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 309] <... futex resumed>) = 1 [pid 329] <... set_robust_list resumed>) = 0 [pid 315] <... openat resumed>) = 3 [pid 313] chdir("./file0" [pid 311] <... openat resumed>) = 3 [pid 309] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] sendfile(4, 5, NULL, 4 [pid 315] chdir("./file0" [pid 313] <... chdir resumed>) = 0 [pid 311] chdir("./file0" [pid 304] <... futex resumed>) = 0 [pid 329] <... sendfile resumed>) = 4 [pid 315] <... chdir resumed>) = 0 [pid 313] ioctl(4, LOOP_CLR_FD [pid 311] <... chdir resumed>) = 0 [pid 329] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] ioctl(4, LOOP_CLR_FD [pid 313] <... ioctl resumed>) = 0 [pid 311] ioctl(4, LOOP_CLR_FD [pid 329] <... futex resumed>) = 1 [pid 315] <... ioctl resumed>) = 0 [pid 313] close(4 [pid 311] <... ioctl resumed>) = 0 [pid 329] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 315] close(4 [pid 313] <... close resumed>) = 0 [pid 311] close(4 [pid 315] <... close resumed>) = 0 [pid 313] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... close resumed>) = 0 [pid 315] <... futex resumed>) = 1 [pid 313] <... futex resumed>) = 1 [pid 312] <... futex resumed>) = 0 [pid 311] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 1 [pid 315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] <... futex resumed>) = 0 [pid 311] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 315] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 312] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... open resumed>) = 4 [pid 306] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 0 [pid 304] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... futex resumed>) = 0 [pid 315] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 312] <... futex resumed>) = 0 [pid 315] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] <... futex resumed>) = 0 [pid 315] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 312] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... open resumed>) = 5 [pid 309] <... futex resumed>) = 0 [pid 306] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 1 [pid 297] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 315] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = 0 [pid 311] <... futex resumed>) = 0 [ 21.392834][ T28] audit: type=1400 audit(1685789617.186:75): avc: denied { read write open } for pid=304 comm="syz-executor400" path="/root/syzkaller.GWGYpS/0/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 21.402226][ T315] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 21.434962][ T313] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 21.456623][ T329] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 309] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 306] <... futex resumed>) = 1 [pid 305] <... futex resumed>) = 1 [pid 304] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 316] <... mount resumed>) = 0 [pid 315] <... futex resumed>) = 1 [pid 313] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 312] <... futex resumed>) = 0 [pid 311] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 306] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 316] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 315] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] <... open resumed>) = 4 [pid 312] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... open resumed>) = 4 [pid 316] <... openat resumed>) = 3 [pid 315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 313] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 311] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] chdir("./file0" [pid 315] ftruncate(5, 33587195 [pid 313] <... futex resumed>) = 1 [pid 312] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 306] <... futex resumed>) = 0 [pid 297] <... futex resumed>) = 0 [pid 316] <... chdir resumed>) = 0 [pid 315] <... ftruncate resumed>) = 0 [pid 313] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 306] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] ioctl(4, LOOP_CLR_FD [pid 315] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] <... futex resumed>) = 0 [pid 297] <... futex resumed>) = 0 [pid 316] <... ioctl resumed>) = 0 [pid 315] <... futex resumed>) = 1 [pid 313] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 312] <... futex resumed>) = 0 [pid 311] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 306] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 316] close(4 [pid 315] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] <... open resumed>) = 5 [pid 312] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... open resumed>) = 5 [pid 316] <... close resumed>) = 0 [pid 315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 313] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 311] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] sendfile(4, 5, NULL, 4 [pid 313] <... futex resumed>) = 1 [pid 312] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 306] <... futex resumed>) = 0 [pid 297] <... futex resumed>) = 0 [pid 316] <... futex resumed>) = 1 [pid 315] <... sendfile resumed>) = 4 [pid 313] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... futex resumed>) = 0 [pid 306] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 315] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 297] <... futex resumed>) = 0 [pid 316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 315] <... futex resumed>) = 1 [pid 313] ftruncate(5, 33587195 [pid 312] <... futex resumed>) = 0 [pid 311] ftruncate(5, 33587195 [pid 310] <... futex resumed>) = 0 [pid 306] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 316] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 315] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] <... ftruncate resumed>) = 0 [pid 312] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... ftruncate resumed>) = 0 [pid 310] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 316] <... open resumed>) = 4 [pid 315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 313] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 311] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 313] <... futex resumed>) = 1 [pid 312] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 306] <... futex resumed>) = 0 [pid 297] <... futex resumed>) = 0 [pid 316] <... futex resumed>) = 1 [pid 313] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... futex resumed>) = 0 [pid 306] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] <... futex resumed>) = 0 [pid 297] <... futex resumed>) = 0 [pid 313] sendfile(4, 5, NULL, 4 [pid 311] sendfile(4, 5, NULL, 4 [pid 306] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... sendfile resumed>) = 4 [pid 311] <... sendfile resumed>) = 4 [pid 313] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = 1 [pid 311] <... futex resumed>) = 1 [pid 306] <... futex resumed>) = 0 [pid 297] <... futex resumed>) = 0 [pid 316] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 313] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... open resumed>) = 5 [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... futex resumed>) = 0 [pid 306] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 297] <... futex resumed>) = 0 [ 21.457317][ T316] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [pid 316] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 311] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 310] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 316] <... futex resumed>) = 0 [pid 310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... futex resumed>) = 0 [pid 316] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... futex resumed>) = 0 [pid 316] ftruncate(5, 33587195 [pid 310] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 316] <... ftruncate resumed>) = 0 [pid 316] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 310] <... futex resumed>) = 0 [pid 316] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... futex resumed>) = 0 [pid 316] sendfile(4, 5, NULL, 4 [pid 310] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 316] <... sendfile resumed>) = 4 [pid 316] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 310] <... futex resumed>) = 0 [pid 316] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... futex resumed>) = 0 [pid 316] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 310] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = ? [pid 329] +++ killed by SIGBUS +++ [pid 308] <... mmap resumed>) = ? [pid 304] <... mmap resumed>) = 0x7fb6c5587000 [pid 304] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 304] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[332], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 332 [pid 304] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] +++ killed by SIGBUS +++ [pid 305] +++ killed by SIGBUS +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=305, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7} --- [pid 302] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 302] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 302] unlink("./0/binderfs") = 0 [pid 302] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 312] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 312] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 312] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 312] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 332 attached , parent_tid=[333], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 333 [pid 312] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 332] sendfile(4, 5, NULL, 4) = 4 [pid 332] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] <... futex resumed>) = 1 [pid 306] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] <... umount2 resumed>) = 0 [pid 297] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 306] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... futex resumed>) = 0 [pid 306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] lstat("./0/file0", [pid 297] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 297] <... mmap resumed>) = 0x7fb6c5587000 [pid 302] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 297] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... mprotect resumed>) = 0 [pid 302] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 302] <... openat resumed>) = 4 [pid 302] fstat(4, [pid 297] <... clone resumed>, parent_tid=[334], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 334 [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 297] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] getdents64(4, [pid 297] <... futex resumed>) = 0 [pid 302] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 297] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] getdents64(4, ./strace-static-x86_64: Process 334 attached 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 334] set_robust_list(0x7fb6c55a79e0, 24 [pid 302] close(4 [pid 334] <... set_robust_list resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 334] sendfile(4, 5, NULL, 4 [pid 302] rmdir("./0/file0" [pid 306] <... mmap resumed>) = 0x7fb6c5587000 [pid 302] <... rmdir resumed>) = 0 [pid 334] <... sendfile resumed>) = 4 [pid 306] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 302] getdents64(3, [pid 306] <... mprotect resumed>) = 0 [pid 302] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 334] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 306] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 302] close(3 [pid 334] <... futex resumed>) = 1 [pid 310] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... close resumed>) = 0 [pid 297] <... futex resumed>) = 0 [pid 334] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... futex resumed>) = 0 [pid 306] <... clone resumed>, parent_tid=[335], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 335 [pid 302] rmdir("./0" [pid 297] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 306] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... futex resumed>) = 0 [pid 306] <... futex resumed>) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 297] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 333 attached [ 21.578114][ T302] EXT4-fs (loop5): unmounting filesystem. [ 21.587445][ T332] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 306] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 333] sendfile(4, 5, NULL, 4) = 4 [pid 333] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 333] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 335] sendfile(4, 5, NULL, 4) = 4 [pid 335] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 306] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 312] <... futex resumed>) = 0 [pid 310] <... mmap resumed>) = 0x7fb6c5587000 [pid 304] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] mkdir("./1", 0777 [pid 312] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 333] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = 1 [pid 310] <... mprotect resumed>) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 312] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 336 attached [pid 334] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 302] <... openat resumed>) = 3 [pid 336] set_robust_list(0x7fb6c55a79e0, 24 [pid 310] <... clone resumed>, parent_tid=[336], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 336 [pid 302] ioctl(3, LOOP_CLR_FD [pid 336] <... set_robust_list resumed>) = 0 [pid 310] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 336] sendfile(4, 5, NULL, 4 [pid 310] <... futex resumed>) = 0 [pid 302] close(3 [pid 336] <... sendfile resumed>) = 4 [pid 311] <... mmap resumed>) = ? [pid 310] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... close resumed>) = 0 [pid 297] <... futex resumed>) = ? [pid 336] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] +++ killed by SIGBUS +++ [pid 310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 336] <... futex resumed>) = 0 [ 21.626459][ T334] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.631033][ T335] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.657199][ T333] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 310] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 306] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 306] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 332] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 333] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 310] <... futex resumed>) = 0 [pid 309] <... mmap resumed>) = ? [pid 302] <... clone resumed>, child_tidptr=0x5555574565d0) = 337 [pid 310] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 337 attached [pid 336] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 332] +++ killed by SIGBUS +++ [pid 311] +++ killed by SIGBUS +++ [pid 335] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 304] +++ killed by SIGBUS +++ [pid 297] +++ killed by SIGBUS +++ [pid 337] set_robust_list(0x5555574565e0, 24 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=304, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=297, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 337] <... set_robust_list resumed>) = 0 [pid 337] chdir("./1" [pid 300] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 337] <... chdir resumed>) = 0 [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 337] <... prctl resumed>) = 0 [pid 300] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 337] setpgid(0, 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 337] <... setpgid resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 295] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] fstat(3, [pid 295] <... openat resumed>) = 3 [pid 337] <... openat resumed>) = 3 [pid 300] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] fstat(3, [pid 337] write(3, "1000", 4) = 4 [pid 300] getdents64(3, [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 337] close(3 [pid 313] <... mmap resumed>) = ? [pid 300] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 337] <... close resumed>) = 0 [pid 335] +++ killed by SIGBUS +++ [pid 300] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 313] +++ killed by SIGBUS +++ [pid 295] getdents64(3, [pid 337] symlink("/dev/binderfs", "./binderfs" [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 337] <... symlink resumed>) = 0 [pid 316] <... mmap resumed>) = ? [pid 315] <... mmap resumed>) = ? [pid 310] <... futex resumed>) = ? [pid 300] lstat("./0/binderfs", [pid 295] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 337] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] +++ killed by SIGBUS +++ [pid 315] +++ killed by SIGBUS +++ [pid 300] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 337] <... futex resumed>) = 0 [pid 333] +++ killed by SIGBUS +++ [pid 312] <... futex resumed>) = ? [pid 306] +++ killed by SIGBUS +++ [pid 300] unlink("./0/binderfs" [pid 295] lstat("./0/binderfs", [pid 337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] <... unlink resumed>) = 0 [pid 295] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 337] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=306, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8} --- [pid 300] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] unlink("./0/binderfs" [pid 337] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 316] +++ killed by SIGBUS +++ [pid 312] +++ killed by SIGBUS +++ [pid 310] +++ killed by SIGBUS +++ [pid 301] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... unlink resumed>) = 0 [pid 295] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 337] <... mprotect resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 337] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 301] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=312, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=310, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7} --- [pid 301] <... openat resumed>) = 3 [pid 337] <... clone resumed>, parent_tid=[338], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 338 [pid 301] fstat(3, [pid 337] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 337] <... futex resumed>) = 0 [pid 301] getdents64(3, [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 337] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 301] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 299] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] <... openat resumed>) = 3 [pid 298] <... openat resumed>) = 3 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] fstat(3, [pid 298] fstat(3, [pid 301] lstat("./0/binderfs", [pid 299] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 299] getdents64(3, [pid 298] getdents64(3, [pid 301] unlink("./0/binderfs" [pid 299] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 298] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 301] <... unlink resumed>) = 0 [pid 299] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] lstat("./0/binderfs", [pid 298] lstat("./0/binderfs", [pid 299] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 298] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 299] unlink("./0/binderfs" [pid 298] unlink("./0/binderfs" [pid 299] <... unlink resumed>) = 0 [pid 298] <... unlink resumed>) = 0 [pid 299] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 21.678063][ T336] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.705577][ T300] EXT4-fs (loop3): unmounting filesystem. [ 21.708507][ T295] EXT4-fs (loop0): unmounting filesystem. [ 21.719344][ T298] EXT4-fs (loop1): unmounting filesystem. [pid 298] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 338 attached [pid 300] <... umount2 resumed>) = 0 [pid 338] set_robust_list(0x7fb6cd8c89e0, 24 [pid 300] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 338] <... set_robust_list resumed>) = 0 [pid 338] memfd_create("syzkaller", 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 338] <... memfd_create resumed>) = 3 [pid 300] lstat("./0/file0", [pid 338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 300] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 338] <... mmap resumed>) = 0x7fb6c54a8000 [pid 300] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 300] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./0/file0") = 0 [pid 300] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./0") = 0 [pid 300] mkdir("./1", 0777 [pid 298] <... umount2 resumed>) = 0 [pid 300] <... mkdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3 [pid 338] <... write resumed>) = 1048576 [pid 300] <... close resumed>) = 0 [pid 298] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 338] munmap(0x7fb6c54a8000, 1048576 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] rmdir("./0/file0" [pid 338] <... munmap resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 298] getdents64(3, [pid 338] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 298] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 300] <... clone resumed>, child_tidptr=0x5555574565d0) = 339 [pid 338] <... openat resumed>) = 4 [pid 298] close(3 [pid 338] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x5555574565e0, 24 [pid 299] <... umount2 resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 298] rmdir("./0") = 0 [pid 339] <... set_robust_list resumed>) = 0 [pid 339] chdir("./1") = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 298] mkdir("./1", 0777 [pid 339] write(3, "1000", 4) = 4 [pid 339] close(3) = 0 [pid 339] symlink("/dev/binderfs", "./binderfs") = 0 [pid 298] <... mkdir resumed>) = 0 [pid 339] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 339] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 298] <... openat resumed>) = 3 [pid 298] ioctl(3, LOOP_CLR_FD [pid 301] <... umount2 resumed>) = 0 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 339] <... mprotect resumed>) = 0 [pid 339] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 298] close(3) = 0 [pid 339] <... clone resumed>, parent_tid=[340], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 340 [pid 339] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 301] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./0/file0") = 0 [pid 301] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./0") = 0 [pid 301] mkdir("./1", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 341 ./strace-static-x86_64: Process 340 attached [pid 340] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 340] memfd_create("syzkaller", 0) = 3 [pid 340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... umount2 resumed>) = 0 [pid 298] <... clone resumed>, child_tidptr=0x5555574565d0) = 342 [pid 340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 342 attached [pid 299] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 340] <... write resumed>) = 1048576 [pid 340] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 340] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 21.721451][ T299] EXT4-fs (loop2): unmounting filesystem. [ 21.731498][ T301] EXT4-fs (loop4): unmounting filesystem. [ 21.755844][ T338] loop5: detected capacity change from 0 to 2048 [pid 340] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 341 attached [pid 342] set_robust_list(0x5555574565e0, 24 [pid 338] <... ioctl resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 342] <... set_robust_list resumed>) = 0 [pid 342] chdir("./1" [pid 299] rmdir("./0/file0") = 0 [pid 342] <... chdir resumed>) = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 342] <... prctl resumed>) = 0 [pid 341] set_robust_list(0x5555574565e0, 24 [pid 295] lstat("./0/file0", [pid 341] <... set_robust_list resumed>) = 0 [pid 340] <... ioctl resumed>) = 0 [pid 338] close(3 [pid 299] getdents64(3, [pid 342] setpgid(0, 0) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 295] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 342] <... openat resumed>) = 3 [pid 342] write(3, "1000", 4) = 4 [pid 342] close(3) = 0 [pid 342] symlink("/dev/binderfs", "./binderfs") = 0 [pid 299] close(3 [pid 295] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] <... close resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 342] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 342] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 338] <... close resumed>) = 0 [pid 299] rmdir("./0" [pid 295] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 342] <... clone resumed>, parent_tid=[343], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 343 [pid 342] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 343 attached [pid 343] set_robust_list(0x7fb6cd8c89e0, 24 [pid 299] <... rmdir resumed>) = 0 [pid 299] mkdir("./1", 0777 [pid 295] <... openat resumed>) = 4 [pid 338] mkdir("./file0", 0777 [pid 343] <... set_robust_list resumed>) = 0 [pid 343] memfd_create("syzkaller", 0 [pid 295] fstat(4, [pid 343] <... memfd_create resumed>) = 3 [pid 343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 299] <... mkdir resumed>) = 0 [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 295] getdents64(4, [pid 299] <... openat resumed>) = 3 [pid 338] <... mkdir resumed>) = 0 [pid 295] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 299] ioctl(3, LOOP_CLR_FD [pid 338] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 295] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] close(3 [pid 295] close(4) = 0 [pid 299] <... close resumed>) = 0 [pid 295] rmdir("./0/file0" [pid 343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 341] chdir("./1" [pid 340] close(3 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... rmdir resumed>) = 0 [pid 295] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./0") = 0 [pid 295] mkdir("./1", 0777) = 0 [pid 299] <... clone resumed>, child_tidptr=0x5555574565d0) = 344 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 345 [pid 340] <... close resumed>) = 0 [pid 340] mkdir("./file0", 0777) = 0 [pid 341] <... chdir resumed>) = 0 [pid 341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 341] setpgid(0, 0) = 0 [pid 341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 340] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 341] write(3, "1000", 4) = 4 [pid 341] close(3) = 0 [pid 341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 341] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 341] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 341] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[347], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 347 [pid 341] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 343] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 345 attached ./strace-static-x86_64: Process 347 attached ./strace-static-x86_64: Process 344 attached [pid 343] munmap(0x7fb6c54a8000, 1048576 [pid 345] set_robust_list(0x5555574565e0, 24) = 0 [pid 345] chdir("./1") = 0 [pid 345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 345] setpgid(0, 0) = 0 [pid 345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 345] write(3, "1000", 4) = 4 [pid 345] close(3) = 0 [pid 345] symlink("/dev/binderfs", "./binderfs") = 0 [pid 345] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 345] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 345] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[349], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 349 [pid 345] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 345] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 349 attached [pid 349] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 349] memfd_create("syzkaller", 0) = 3 [pid 349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 343] <... munmap resumed>) = 0 [pid 344] set_robust_list(0x5555574565e0, 24) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 347] set_robust_list(0x7fb6cd8c89e0, 24 [pid 344] chdir("./1" [pid 343] <... openat resumed>) = 4 [pid 343] ioctl(4, LOOP_SET_FD, 3 [pid 344] <... chdir resumed>) = 0 [pid 349] <... write resumed>) = 1048576 [pid 349] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 349] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 349] ioctl(4, LOOP_SET_FD, 3 [pid 347] <... set_robust_list resumed>) = 0 [pid 344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 343] <... ioctl resumed>) = 0 [pid 338] <... mount resumed>) = 0 [pid 347] memfd_create("syzkaller", 0 [pid 344] <... prctl resumed>) = 0 [pid 347] <... memfd_create resumed>) = 3 [pid 344] setpgid(0, 0 [pid 347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 344] <... setpgid resumed>) = 0 [pid 347] <... mmap resumed>) = 0x7fb6c54a8000 [pid 344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 344] <... openat resumed>) = 3 [pid 344] write(3, "1000", 4) = 4 [pid 344] close(3) = 0 [ 21.782205][ T340] loop3: detected capacity change from 0 to 2048 [ 21.809567][ T338] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 21.820293][ T343] loop1: detected capacity change from 0 to 2048 [ 21.825577][ T349] loop0: detected capacity change from 0 to 2048 [pid 344] symlink("/dev/binderfs", "./binderfs" [pid 349] <... ioctl resumed>) = 0 [pid 347] <... write resumed>) = 1048576 [pid 344] <... symlink resumed>) = 0 [pid 343] close(3 [pid 338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 343] <... close resumed>) = 0 [pid 343] mkdir("./file0", 0777) = 0 [pid 343] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue" [pid 338] <... openat resumed>) = 3 [pid 338] chdir("./file0") = 0 [pid 338] ioctl(4, LOOP_CLR_FD) = 0 [pid 338] close(4) = 0 [pid 338] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = 0 [pid 337] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] <... futex resumed>) = 1 [pid 338] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 349] close(3) = 0 [pid 349] mkdir("./file0", 0777) = 0 [pid 347] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 349] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 347] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 347] ioctl(4, LOOP_SET_FD, 3 [pid 344] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... mount resumed>) = 0 [pid 344] <... futex resumed>) = 0 [pid 338] <... open resumed>) = 4 [pid 344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 338] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] <... futex resumed>) = 0 [pid 337] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 340] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 338] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 344] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 338] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] <... futex resumed>) = 0 [pid 337] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] ftruncate(5, 33587195) = 0 [pid 338] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] <... futex resumed>) = 0 [pid 337] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... mprotect resumed>) = 0 [pid 338] sendfile(4, 5, NULL, 4 [pid 344] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 338] <... sendfile resumed>) = 4 [pid 338] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] <... futex resumed>) = 0 [pid 344] <... clone resumed>, parent_tid=[352], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 352 [pid 337] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000./strace-static-x86_64: Process 352 attached [pid 347] <... ioctl resumed>) = 0 [pid 344] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 340] <... openat resumed>) = 3 [pid 340] chdir("./file0") = 0 [pid 340] ioctl(4, LOOP_CLR_FD) = 0 [pid 340] close(4) = 0 [pid 340] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 339] <... futex resumed>) = 0 [pid 340] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 339] <... futex resumed>) = 0 [pid 340] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 339] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 339] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 339] <... futex resumed>) = 0 [pid 340] <... open resumed>) = 5 [pid 339] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] ftruncate(5, 33587195 [pid 339] <... futex resumed>) = 0 [pid 349] <... mount resumed>) = 0 [pid 340] <... ftruncate resumed>) = 0 [pid 339] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... mount resumed>) = 0 [pid 340] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 339] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] sendfile(4, 5, NULL, 4 [pid 339] <... futex resumed>) = 0 [pid 340] <... sendfile resumed>) = 4 [pid 339] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] close(3 [pid 340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 339] <... futex resumed>) = 0 [pid 347] <... close resumed>) = 0 [pid 340] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 339] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] mkdir("./file0", 0777) = 0 [pid 347] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue" [pid 352] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 352] memfd_create("syzkaller", 0) = 3 [pid 352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 337] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 337] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 337] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 337] <... mprotect resumed>) = 0 [pid 337] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 349] <... openat resumed>) = 3 [pid 337] <... clone resumed>, parent_tid=[357], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 357 [pid 337] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] chdir("./file0" [pid 343] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 349] <... chdir resumed>) = 0 [pid 343] <... openat resumed>) = 3 [pid 349] ioctl(4, LOOP_CLR_FD) = 0 [pid 343] chdir("./file0") = 0 [ 21.834027][ T340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 21.839226][ T347] loop4: detected capacity change from 0 to 2048 [ 21.864769][ T349] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 21.874368][ T343] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [pid 349] close(4 [pid 343] ioctl(4, LOOP_CLR_FD [pid 349] <... close resumed>) = 0 [pid 343] <... ioctl resumed>) = 0 [pid 343] close(4 [pid 349] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 343] <... close resumed>) = 0 [pid 349] <... futex resumed>) = 1 [pid 345] <... futex resumed>) = 0 [pid 343] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 345] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 343] <... futex resumed>) = 1 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... write resumed>) = 1048576 [pid 349] <... open resumed>) = 4 [pid 343] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 349] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... open resumed>) = 4 [pid 349] <... futex resumed>) = 1 [pid 345] <... futex resumed>) = 0 [pid 345] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 345] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 343] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] <... open resumed>) = 5 [pid 343] <... futex resumed>) = 1 [pid 342] <... futex resumed>) = 0 [pid 349] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] <... futex resumed>) = 1 [pid 345] <... futex resumed>) = 0 [pid 343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] <... futex resumed>) = 0 [pid 349] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 345] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 342] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 345] <... futex resumed>) = 0 [pid 343] <... open resumed>) = 5 [pid 339] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] ftruncate(5, 33587195 [pid 345] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 352] munmap(0x7fb6c54a8000, 1048576 [pid 349] <... ftruncate resumed>) = 0 [pid 343] <... futex resumed>) = 1 [pid 342] <... futex resumed>) = 0 [pid 339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 349] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... munmap resumed>) = 0 [pid 349] <... futex resumed>) = 1 [pid 345] <... futex resumed>) = 0 [pid 343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] <... futex resumed>) = 0 [pid 339] <... mmap resumed>) = 0x7fb6c5587000 ./strace-static-x86_64: Process 357 attached [pid 352] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 349] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 345] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] ftruncate(5, 33587195 [pid 342] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 357] set_robust_list(0x7fb6c55a79e0, 24 [pid 352] <... openat resumed>) = 4 [pid 349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... ftruncate resumed>) = 0 [pid 337] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 357] <... set_robust_list resumed>) = 0 [pid 352] ioctl(4, LOOP_SET_FD, 3 [pid 349] sendfile(4, 5, NULL, 4 [pid 345] <... futex resumed>) = 0 [pid 343] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... mprotect resumed>) = 0 [pid 337] futex(0x7fb6cd9a17cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] sendfile(4, 5, NULL, 4 [pid 349] <... sendfile resumed>) = 4 [pid 343] <... futex resumed>) = 1 [pid 342] <... futex resumed>) = 0 [pid 357] <... sendfile resumed>) = 4 [pid 349] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] <... futex resumed>) = 0 [pid 343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] <... futex resumed>) = 0 [pid 357] <... futex resumed>) = 0 [pid 349] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] sendfile(4, 5, NULL, 4 [pid 342] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 345] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... sendfile resumed>) = 4 [pid 339] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 337] <... futex resumed>) = 0 [pid 343] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 343] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] <... futex resumed>) = 0 [pid 343] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 342] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 345] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... clone resumed>, parent_tid=[360], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 360 [pid 337] <... mmap resumed>) = 0x7fb6c5566000 [pid 349] <... futex resumed>) = 0 [pid 345] <... futex resumed>) = 1 [pid 349] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 345] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] mprotect(0x7fb6c5567000, 131072, PROT_READ|PROT_WRITE [pid 339] <... futex resumed>) = 0 [pid 337] <... mprotect resumed>) = 0 [pid 339] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] clone(child_stack=0x7fb6c55863f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 347] <... mount resumed>) = 0 [pid 347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 337] <... clone resumed>, parent_tid=[361], tls=0x7fb6c5586700, child_tidptr=0x7fb6c55869d0) = 361 [pid 347] chdir("./file0") = 0 [pid 347] ioctl(4, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 360 attached [pid 360] set_robust_list(0x7fb6c55a79e0, 24 [pid 347] close(4./strace-static-x86_64: Process 361 attached [pid 337] futex(0x7fb6cd9a17c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] set_robust_list(0x7fb6c55869e0, 24 [pid 337] <... futex resumed>) = 0 [pid 361] <... set_robust_list resumed>) = 0 [pid 337] futex(0x7fb6cd9a17cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... set_robust_list resumed>) = 0 [pid 360] sendfile(4, 5, NULL, 4 [pid 347] <... close resumed>) = 0 [pid 360] <... sendfile resumed>) = 4 [pid 347] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 347] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 21.956342][ T352] loop2: detected capacity change from 0 to 2048 [ 21.985507][ T347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [pid 360] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 360] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] <... ioctl resumed>) = 0 [pid 352] close(3) = 0 [pid 352] mkdir("./file0", 0777) = 0 [pid 352] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 342] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 341] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = 0 [pid 342] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = 0 [pid 347] <... futex resumed>) = 0 [pid 342] <... futex resumed>) = 0 [pid 341] <... futex resumed>) = 1 [pid 339] <... futex resumed>) = 1 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 341] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 345] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 338] <... mmap resumed>) = 0x20000000 [pid 361] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 347] <... open resumed>) = 4 [pid 345] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... mmap resumed>) = 0x7fb6c5587000 [pid 338] syscall_0x7fb6c5587000(0x7fb6cd9a1700, 0x81, 0xf4240, 0x7ffc24d92080, 0x7ffc24d920b0, 0 [pid 357] <... futex resumed>) = ? [pid 347] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = 0 [pid 342] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 338] +++ killed by SIGBUS +++ [pid 337] <... futex resumed>) = ? [pid 361] +++ killed by SIGBUS +++ [pid 357] +++ killed by SIGBUS +++ [pid 347] <... futex resumed>) = 1 [pid 345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 342] <... mprotect resumed>) = 0 [pid 341] <... futex resumed>) = 0 [pid 337] +++ killed by SIGBUS +++ [pid 347] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 345] <... mmap resumed>) = 0x7fb6c5587000 [pid 342] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 341] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 345] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 341] <... futex resumed>) = 0 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=337, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=18} --- [pid 347] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 345] <... mprotect resumed>) = 0 [pid 342] <... clone resumed>, parent_tid=[363], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 363 [pid 341] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 347] <... open resumed>) = 5 [ 22.010345][ T361] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.029604][ T360] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 345] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 342] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... restart_syscall resumed>) = 0 [pid 347] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 347] <... futex resumed>) = 1 [pid 345] <... clone resumed>, parent_tid=[365], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 365 [pid 342] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = 0 [pid 347] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 345] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 345] <... futex resumed>) = 0 [pid 341] <... futex resumed>) = 0 [pid 302] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 347] ftruncate(5, 33587195 [pid 345] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... ftruncate resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 347] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] <... futex resumed>) = 0 [pid 302] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 347] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 341] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 341] <... futex resumed>) = 0 [pid 302] <... openat resumed>) = 3 [pid 347] sendfile(4, 5, NULL, 4 [pid 341] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] fstat(3, [pid 347] <... sendfile resumed>) = 4 [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 347] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] getdents64(3, [pid 347] <... futex resumed>) = 1 [pid 341] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 347] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 341] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 341] <... futex resumed>) = 0 [pid 302] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 347] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 341] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 365 attached [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 302] unlink("./1/binderfs"./strace-static-x86_64: Process 363 attached [pid 365] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 363] set_robust_list(0x7fb6c55a79e0, 24 [pid 302] <... unlink resumed>) = 0 [pid 302] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 365] sendfile(4, 5, NULL, 4 [pid 363] <... set_robust_list resumed>) = 0 [pid 365] <... sendfile resumed>) = 4 [pid 363] sendfile(4, 5, NULL, 4 [pid 365] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 363] <... sendfile resumed>) = 4 [pid 365] <... futex resumed>) = 1 [pid 363] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = 0 [pid 345] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 345] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 22.067859][ T352] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 22.098122][ T365] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 342] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... mount resumed>) = 0 [pid 352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 352] chdir("./file0") = 0 [pid 352] ioctl(4, LOOP_CLR_FD) = 0 [pid 352] close(4) = 0 [pid 352] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 352] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 352] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] ftruncate(5, 33587195) = 0 [pid 352] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] sendfile(4, 5, NULL, 4) = 4 [pid 352] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 365] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 363] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 345] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] <... umount2 resumed>) = 0 [pid 343] <... mmap resumed>) = ? [pid 342] <... futex resumed>) = ? [pid 341] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 363] +++ killed by SIGBUS +++ [pid 341] <... futex resumed>) = 0 [pid 341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 341] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 302] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 341] <... mprotect resumed>) = 0 [pid 343] +++ killed by SIGBUS +++ [pid 342] +++ killed by SIGBUS +++ [pid 341] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 349] <... mmap resumed>) = ? [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=342, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 365] +++ killed by SIGBUS +++ [pid 341] <... clone resumed>, parent_tid=[366], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 366 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 341] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] lstat("./1/file0", [pid 298] <... restart_syscall resumed>) = 0 [pid 341] <... futex resumed>) = 0 [pid 349] +++ killed by SIGBUS +++ [pid 345] +++ killed by SIGBUS +++ [pid 341] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=345, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7} --- [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 298] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 366 attached [pid 360] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 302] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... openat resumed>) = 3 [pid 295] <... restart_syscall resumed>) = 0 [pid 366] set_robust_list(0x7fb6c55a79e0, 24 [pid 298] fstat(3, [pid 366] <... set_robust_list resumed>) = 0 [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(3, [pid 366] sendfile(4, 5, NULL, 4 [pid 295] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 366] <... sendfile resumed>) = 4 [pid 340] <... mmap resumed>) = ? [pid 302] <... openat resumed>) = 4 [pid 298] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 366] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] +++ killed by SIGBUS +++ [pid 340] +++ killed by SIGBUS +++ [pid 339] +++ killed by SIGBUS +++ [pid 302] fstat(4, [pid 298] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 366] <... futex resumed>) = 1 [pid 341] <... futex resumed>) = 0 [pid 341] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... openat resumed>) = 3 [pid 341] <... futex resumed>) = 0 [ 22.114267][ T363] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.122419][ T302] EXT4-fs (loop5): unmounting filesystem. [pid 302] getdents64(4, [pid 341] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./1/file0") = 0 [pid 302] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./1") = 0 [pid 302] mkdir("./2", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3 [pid 366] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 302] <... close resumed>) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=339, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7} --- [pid 298] lstat("./1/binderfs", [pid 295] fstat(3, [pid 300] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 347] <... mmap resumed>) = ? [pid 341] <... futex resumed>) = ? [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] unlink("./1/binderfs" [pid 295] getdents64(3, [pid 366] +++ killed by SIGBUS +++ [pid 347] +++ killed by SIGBUS +++ [pid 341] +++ killed by SIGBUS +++ [pid 300] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... unlink resumed>) = 0 [pid 295] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=341, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 300] <... openat resumed>) = 3 [pid 298] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 344] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] <... clone resumed>, child_tidptr=0x5555574565d0) = 367 [pid 300] fstat(3, [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 344] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] lstat("./1/binderfs", [pid 344] <... futex resumed>) = 0 [pid 301] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 300] getdents64(3, [pid 295] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 295] unlink("./1/binderfs" [pid 344] <... mmap resumed>) = 0x7fb6c5587000 [pid 301] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... unlink resumed>) = 0 [pid 344] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 301] <... openat resumed>) = 3 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 344] <... mprotect resumed>) = 0 [pid 301] fstat(3, [pid 300] lstat("./1/binderfs", ./strace-static-x86_64: Process 367 attached [pid 344] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 301] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 367] set_robust_list(0x5555574565e0, 24 [pid 301] getdents64(3, [pid 300] unlink("./1/binderfs" [pid 367] <... set_robust_list resumed>) = 0 [pid 344] <... clone resumed>, parent_tid=[369], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 369 [pid 301] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 300] <... unlink resumed>) = 0 [pid 367] chdir("./2" [pid 344] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 22.167916][ T366] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.192071][ T298] EXT4-fs (loop1): unmounting filesystem. [ 22.203727][ T295] EXT4-fs (loop0): unmounting filesystem. [pid 300] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 367] <... chdir resumed>) = 0 [pid 344] <... futex resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 344] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 301] unlink("./1/binderfs") = 0 [pid 301] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 367] setpgid(0, 0) = 0 [pid 367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 367] write(3, "1000", 4) = 4 [pid 367] close(3) = 0 [pid 367] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 369 attached [pid 367] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] set_robust_list(0x7fb6c55a79e0, 24 [pid 367] <... futex resumed>) = 0 [pid 369] <... set_robust_list resumed>) = 0 [pid 367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 369] sendfile(4, 5, NULL, 4 [pid 367] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 369] <... sendfile resumed>) = 4 [pid 367] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 369] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... mprotect resumed>) = 0 [pid 369] <... futex resumed>) = 1 [pid 367] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 344] <... futex resumed>) = 0 [pid 295] <... umount2 resumed>) = 0 [pid 344] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 370 attached [pid 295] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 367] <... clone resumed>, parent_tid=[370], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 370 [pid 367] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 367] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 369] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 344] <... futex resumed>) = ? [pid 369] +++ killed by SIGBUS +++ [pid 352] <... mmap resumed>) = ? [pid 352] +++ killed by SIGBUS +++ [pid 344] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=344, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 370] set_robust_list(0x7fb6cd8c89e0, 24 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] <... set_robust_list resumed>) = 0 [pid 295] lstat("./1/file0", [pid 370] memfd_create("syzkaller", 0 [pid 295] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 370] <... memfd_create resumed>) = 3 [pid 295] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] <... mmap resumed>) = 0x7fb6c54a8000 [pid 295] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 301] <... umount2 resumed>) = 0 [pid 299] <... restart_syscall resumed>) = 0 [pid 295] <... openat resumed>) = 4 [pid 301] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] fstat(4, [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] lstat("./1/file0", [pid 299] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] getdents64(4, [pid 301] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 299] <... openat resumed>) = 3 [pid 295] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 295] close(4 [pid 299] fstat(3, [pid 295] <... close resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] getdents64(3, [pid 295] rmdir("./1/file0" [pid 301] <... openat resumed>) = 4 [pid 299] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 295] <... rmdir resumed>) = 0 [pid 301] fstat(4, [pid 299] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] getdents64(3, [pid 301] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 301] getdents64(4, [pid 299] lstat("./1/binderfs", [pid 295] close(3 [pid 301] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 299] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 295] <... close resumed>) = 0 [pid 299] unlink("./1/binderfs" [pid 301] getdents64(4, [pid 295] rmdir("./1" [pid 301] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 299] <... unlink resumed>) = 0 [pid 301] close(4 [pid 299] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... rmdir resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 295] mkdir("./2", 0777) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 371 [pid 370] <... write resumed>) = 1048576 [pid 301] rmdir("./1/file0" [pid 370] munmap(0x7fb6c54a8000, 1048576 [pid 301] <... rmdir resumed>) = 0 [pid 301] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./1") = 0 [pid 301] mkdir("./2", 0777 [pid 370] <... munmap resumed>) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 370] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 370] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 371 attached [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 371] set_robust_list(0x5555574565e0, 24) = 0 [pid 371] chdir("./2") = 0 [pid 371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 371] setpgid(0, 0) = 0 [pid 371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 371] write(3, "1000", 4) = 4 [pid 300] <... umount2 resumed>) = 0 [ 22.218252][ T300] EXT4-fs (loop3): unmounting filesystem. [ 22.227097][ T301] EXT4-fs (loop4): unmounting filesystem. [ 22.243412][ T369] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 301] <... openat resumed>) = 3 [pid 300] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] ioctl(3, LOOP_CLR_FD [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] lstat("./1/file0", [pid 301] close(3 [pid 300] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] <... close resumed>) = 0 [pid 371] close(3 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 371] <... close resumed>) = 0 [pid 371] symlink("/dev/binderfs", "./binderfs") = 0 [pid 371] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 371] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 371] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 300] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... clone resumed>, child_tidptr=0x5555574565d0) = 372 [pid 300] <... openat resumed>) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, [pid 371] <... clone resumed>, parent_tid=[373], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 373 [pid 300] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 371] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 370] <... ioctl resumed>) = 0 [pid 370] close(3) = 0 [pid 370] mkdir("./file0", 0777) = 0 ./strace-static-x86_64: Process 373 attached [pid 373] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 373] memfd_create("syzkaller", 0 [pid 300] close(4) = 0 [pid 300] rmdir("./1/file0" [pid 373] <... memfd_create resumed>) = 3 [pid 300] <... rmdir resumed>) = 0 [pid 300] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 300] close(3 [pid 373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 370] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 300] <... close resumed>) = 0 [pid 300] rmdir("./1") = 0 [pid 300] mkdir("./2", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 374 [pid 298] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 374 attached [pid 298] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] set_robust_list(0x5555574565e0, 24 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... set_robust_list resumed>) = 0 [pid 298] lstat("./1/file0", ./strace-static-x86_64: Process 372 attached [pid 374] chdir("./2" [pid 372] set_robust_list(0x5555574565e0, 24 [pid 298] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... chdir resumed>) = 0 [pid 372] <... set_robust_list resumed>) = 0 [pid 298] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 372] chdir("./2" [pid 298] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] setpgid(0, 0 [pid 372] <... chdir resumed>) = 0 [pid 298] fstat(4, [pid 374] <... setpgid resumed>) = 0 [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] getdents64(4, [pid 374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 372] <... prctl resumed>) = 0 [pid 298] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 374] <... openat resumed>) = 3 [pid 298] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 374] write(3, "1000", 4 [pid 372] setpgid(0, 0 [pid 298] close(4 [pid 374] <... write resumed>) = 4 [pid 374] close(3 [pid 372] <... setpgid resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 298] rmdir("./1/file0" [pid 374] symlink("/dev/binderfs", "./binderfs" [pid 372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 298] <... rmdir resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 374] <... symlink resumed>) = 0 [pid 372] write(3, "1000", 4 [pid 374] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(3, [pid 372] <... write resumed>) = 4 [pid 374] <... futex resumed>) = 0 [pid 374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 372] close(3 [pid 298] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 372] <... close resumed>) = 0 [pid 298] close(3 [pid 374] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 372] symlink("/dev/binderfs", "./binderfs" [pid 298] <... close resumed>) = 0 [pid 372] <... symlink resumed>) = 0 [pid 374] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 298] rmdir("./1" [pid 374] <... mprotect resumed>) = 0 [pid 372] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... rmdir resumed>) = 0 [pid 374] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 372] <... futex resumed>) = 0 [pid 298] mkdir("./2", 0777 [pid 372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 374] <... clone resumed>, parent_tid=[377], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 377 [pid 298] <... mkdir resumed>) = 0 [pid 372] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 374] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] <... mprotect resumed>) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 374] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 372] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 298] <... openat resumed>) = 3 [pid 298] ioctl(3, LOOP_CLR_FD [pid 372] <... clone resumed>, parent_tid=[378], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 378 [pid 372] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... futex resumed>) = 0 [pid 298] close(3 [pid 372] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 298] <... close resumed>) = 0 [pid 373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 379 attached ./strace-static-x86_64: Process 378 attached ./strace-static-x86_64: Process 377 attached [ 22.285921][ T370] loop5: detected capacity change from 0 to 2048 [ 22.324108][ T299] EXT4-fs (loop2): unmounting filesystem. , child_tidptr=0x5555574565d0) = 379 [pid 379] set_robust_list(0x5555574565e0, 24 [pid 378] set_robust_list(0x7fb6cd8c89e0, 24 [pid 377] set_robust_list(0x7fb6cd8c89e0, 24 [pid 373] <... write resumed>) = 1048576 [pid 379] <... set_robust_list resumed>) = 0 [pid 378] <... set_robust_list resumed>) = 0 [pid 377] <... set_robust_list resumed>) = 0 [pid 373] munmap(0x7fb6c54a8000, 1048576 [pid 379] chdir("./2" [pid 378] memfd_create("syzkaller", 0 [pid 377] memfd_create("syzkaller", 0 [pid 373] <... munmap resumed>) = 0 [pid 379] <... chdir resumed>) = 0 [pid 378] <... memfd_create resumed>) = 3 [pid 377] <... memfd_create resumed>) = 3 [pid 373] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 379] <... prctl resumed>) = 0 [pid 378] <... mmap resumed>) = 0x7fb6c54a8000 [pid 377] <... mmap resumed>) = 0x7fb6c54a8000 [pid 373] <... openat resumed>) = 4 [pid 379] setpgid(0, 0 [pid 378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 373] ioctl(4, LOOP_SET_FD, 3 [pid 370] <... mount resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 379] <... setpgid resumed>) = 0 [pid 299] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./1/file0") = 0 [pid 299] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 378] <... write resumed>) = 1048576 [pid 299] rmdir("./1" [pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... rmdir resumed>) = 0 [pid 299] mkdir("./2", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 379] <... openat resumed>) = 3 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 379] write(3, "1000", 4 [pid 378] munmap(0x7fb6c54a8000, 1048576 [pid 379] <... write resumed>) = 4 [pid 299] <... clone resumed>, child_tidptr=0x5555574565d0) = 380 [pid 379] close(3 [pid 378] <... munmap resumed>) = 0 [pid 379] <... close resumed>) = 0 [pid 378] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 379] symlink("/dev/binderfs", "./binderfs" [pid 378] <... openat resumed>) = 4 [pid 377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 373] <... ioctl resumed>) = 0 [pid 370] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 380 attached [pid 379] <... symlink resumed>) = 0 [pid 378] ioctl(4, LOOP_SET_FD, 3 [pid 373] close(3) = 0 [pid 373] mkdir("./file0", 0777) = 0 [pid 373] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 370] <... openat resumed>) = 3 [pid 370] chdir("./file0") = 0 [pid 370] ioctl(4, LOOP_CLR_FD [pid 379] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... write resumed>) = 1048576 [pid 370] <... ioctl resumed>) = 0 [pid 370] close(4) = 0 [pid 370] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] <... futex resumed>) = 0 [pid 380] set_robust_list(0x5555574565e0, 24 [pid 379] <... futex resumed>) = 0 [pid 377] munmap(0x7fb6c54a8000, 1048576 [pid 367] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... ioctl resumed>) = 0 [pid 379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 370] <... futex resumed>) = 0 [pid 367] <... futex resumed>) = 1 [pid 379] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 370] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 367] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... set_robust_list resumed>) = 0 [pid 379] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 378] close(3 [pid 377] <... munmap resumed>) = 0 [pid 370] <... open resumed>) = 4 [pid 380] chdir("./2" [pid 379] <... mprotect resumed>) = 0 [pid 378] <... close resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 370] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... chdir resumed>) = 0 [pid 379] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 378] mkdir("./file0", 0777 [pid 377] <... openat resumed>) = 4 [pid 370] <... futex resumed>) = 1 [pid 367] <... futex resumed>) = 0 [pid 380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 377] ioctl(4, LOOP_SET_FD, 3 [pid 370] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... prctl resumed>) = 0 [pid 379] <... clone resumed>, parent_tid=[381], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 381 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 367] <... futex resumed>) = 0 [pid 370] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 367] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... open resumed>) = 5 [pid 370] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 367] <... futex resumed>) = 0 [pid 370] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 367] <... futex resumed>) = 0 [pid 370] ftruncate(5, 33587195 [pid 367] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... ftruncate resumed>) = 0 [pid 370] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 367] <... futex resumed>) = 0 [pid 370] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 367] <... futex resumed>) = 0 [pid 370] sendfile(4, 5, NULL, 4 [pid 367] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... sendfile resumed>) = 4 [pid 370] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 367] <... futex resumed>) = 0 [pid 370] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 367] <... futex resumed>) = 0 [pid 370] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 367] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 381 attached [pid 380] setpgid(0, 0 [pid 379] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... mkdir resumed>) = 0 [pid 377] <... ioctl resumed>) = 0 [pid 381] set_robust_list(0x7fb6cd8c89e0, 24 [pid 380] <... setpgid resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 378] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue" [pid 377] close(3 [pid 381] <... set_robust_list resumed>) = 0 [pid 380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 379] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 381] memfd_create("syzkaller", 0 [pid 380] <... openat resumed>) = 3 [pid 377] mkdir("./file0", 0777 [pid 381] <... memfd_create resumed>) = 3 [pid 380] write(3, "1000", 4 [pid 377] <... mkdir resumed>) = 0 [pid 381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 380] <... write resumed>) = 4 [pid 377] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 381] <... mmap resumed>) = 0x7fb6c54a8000 [pid 380] close(3) = 0 [pid 380] symlink("/dev/binderfs", "./binderfs") = 0 [pid 380] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 380] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [ 22.325083][ T370] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 22.349423][ T373] loop0: detected capacity change from 0 to 2048 [ 22.361076][ T378] loop4: detected capacity change from 0 to 2048 [ 22.370439][ T377] loop3: detected capacity change from 0 to 2048 [pid 380] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[387], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 387 [pid 380] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 381] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 381] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 381] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 381] close(3) = 0 [pid 381] mkdir("./file0", 0777) = 0 [pid 381] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 387 attached [pid 387] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 387] memfd_create("syzkaller", 0) = 3 [pid 387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 387] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 387] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 387] ioctl(4, LOOP_SET_FD, 3 [pid 367] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 367] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 367] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 367] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[389], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 389 [pid 367] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 367] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 389 attached [pid 389] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 389] sendfile(4, 5, NULL, 4) = 4 [pid 389] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = 0 [pid 367] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... mount resumed>) = 0 [pid 367] <... futex resumed>) = 0 [pid 373] <... mount resumed>) = 0 [pid 377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 373] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 367] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] chdir("./file0" [pid 373] chdir("./file0" [pid 377] <... chdir resumed>) = 0 [pid 373] <... chdir resumed>) = 0 [pid 377] ioctl(4, LOOP_CLR_FD [pid 373] ioctl(4, LOOP_CLR_FD [pid 377] <... ioctl resumed>) = 0 [pid 373] <... ioctl resumed>) = 0 [pid 377] close(4 [pid 373] close(4 [pid 389] <... futex resumed>) = 1 [ 22.388523][ T373] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 22.394602][ T381] loop1: detected capacity change from 0 to 2048 [ 22.397888][ T378] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 22.412434][ T377] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 22.418389][ T387] loop2: detected capacity change from 0 to 2048 [pid 378] <... mount resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 378] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... openat resumed>) = 3 [pid 377] <... futex resumed>) = 1 [pid 373] <... futex resumed>) = 1 [pid 378] chdir("./file0" [pid 377] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] <... futex resumed>) = 0 [pid 378] <... chdir resumed>) = 0 [pid 371] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] ioctl(4, LOOP_CLR_FD [pid 373] <... futex resumed>) = 0 [pid 371] <... futex resumed>) = 1 [pid 378] <... ioctl resumed>) = 0 [pid 373] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 371] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] close(4) = 0 [pid 374] <... futex resumed>) = 0 [pid 373] <... open resumed>) = 4 [pid 378] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 1 [pid 377] <... futex resumed>) = 0 [pid 374] <... futex resumed>) = 1 [pid 373] <... futex resumed>) = 1 [pid 372] <... futex resumed>) = 0 [pid 371] <... futex resumed>) = 0 [pid 378] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 374] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... open resumed>) = 4 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... futex resumed>) = 0 [pid 371] <... futex resumed>) = 0 [pid 378] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 377] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 372] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 374] <... futex resumed>) = 0 [pid 377] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... open resumed>) = 5 [pid 378] <... open resumed>) = 4 [pid 377] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... futex resumed>) = 0 [pid 373] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 374] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 371] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 1 [pid 377] <... open resumed>) = 5 [pid 373] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... futex resumed>) = 0 [pid 371] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... futex resumed>) = 1 [pid 374] <... futex resumed>) = 0 [pid 373] ftruncate(5, 33587195 [pid 372] <... futex resumed>) = 0 [pid 371] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 377] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... ftruncate resumed>) = 0 [pid 372] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] <... open resumed>) = 5 [pid 377] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... futex resumed>) = 0 [pid 373] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] ftruncate(5, 33587195 [pid 374] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 371] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 1 [pid 377] <... ftruncate resumed>) = 0 [pid 372] <... futex resumed>) = 0 [pid 378] ftruncate(5, 33587195 [pid 377] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... ftruncate resumed>) = 0 [pid 377] <... futex resumed>) = 1 [pid 374] <... futex resumed>) = 0 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... futex resumed>) = 0 [pid 371] <... futex resumed>) = 0 [pid 378] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] sendfile(4, 5, NULL, 4 [pid 372] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] <... futex resumed>) = 0 [pid 377] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... futex resumed>) = 0 [pid 373] <... sendfile resumed>) = 4 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 378] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] sendfile(4, 5, NULL, 4 [pid 374] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... sendfile resumed>) = 4 [pid 373] <... futex resumed>) = 1 [pid 372] <... futex resumed>) = 0 [pid 371] <... futex resumed>) = 0 [pid 378] sendfile(4, 5, NULL, 4 [pid 377] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... sendfile resumed>) = 4 [pid 377] <... futex resumed>) = 1 [pid 374] <... futex resumed>) = 0 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 378] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 371] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 387] <... ioctl resumed>) = 0 [pid 378] <... futex resumed>) = 1 [pid 377] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... futex resumed>) = 0 [pid 372] <... futex resumed>) = 0 [pid 370] <... mmap resumed>) = 0x20000000 [ 22.433820][ T389] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 377] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 374] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] close(3 [pid 378] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 372] <... futex resumed>) = 0 [pid 367] <... futex resumed>) = ? [pid 389] +++ killed by SIGBUS +++ [pid 372] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... close resumed>) = 0 [pid 370] +++ killed by SIGBUS +++ [pid 367] +++ killed by SIGBUS +++ [pid 387] mkdir("./file0", 0777) = 0 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=367, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6} --- [pid 302] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 387] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 302] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 302] unlink("./2/binderfs") = 0 [pid 302] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 381] <... mount resumed>) = 0 [pid 381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 381] chdir("./file0") = 0 [pid 381] ioctl(4, LOOP_CLR_FD) = 0 [pid 381] close(4) = 0 [pid 381] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = 0 [pid 379] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 371] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 371] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 371] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 381] <... futex resumed>) = 1 [pid 371] <... clone resumed>, parent_tid=[393], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 393 [pid 371] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 381] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = 0 [pid 379] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 1 [pid 381] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 381] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = 0 [pid 379] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 1 [pid 381] ftruncate(5, 33587195) = 0 [ 22.485183][ T381] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [pid 374] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 374] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 374] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 374] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[394], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 394 [pid 374] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 372] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 372] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 372] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 394 attached [pid 381] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... mmap resumed>) = 0x7fb6c5587000 [pid 394] set_robust_list(0x7fb6c55a79e0, 24 [pid 372] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 394] <... set_robust_list resumed>) = 0 [pid 372] <... mprotect resumed>) = 0 [pid 394] sendfile(4, 5, NULL, 4 [pid 372] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 394] <... sendfile resumed>) = 4 [pid 394] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... clone resumed>, parent_tid=[395], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 395 [pid 394] <... futex resumed>) = 1 [pid 374] <... futex resumed>) = 0 [pid 372] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 374] <... futex resumed>) = 0 [pid 372] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 1 [pid 379] <... futex resumed>) = 0 [pid 374] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] sendfile(4, 5, NULL, 4) = 4 [pid 381] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] <... futex resumed>) = 0 [pid 379] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000./strace-static-x86_64: Process 395 attached ./strace-static-x86_64: Process 393 attached [pid 393] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 393] sendfile(4, 5, NULL, 4) = 4 [pid 393] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 1 [pid 395] set_robust_list(0x7fb6c55a79e0, 24 [pid 394] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 387] <... mount resumed>) = 0 [pid 395] <... set_robust_list resumed>) = 0 [pid 387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 395] sendfile(4, 5, NULL, 4 [pid 387] <... openat resumed>) = 3 [pid 395] <... sendfile resumed>) = 4 [pid 387] chdir("./file0" [pid 395] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... chdir resumed>) = 0 [pid 395] <... futex resumed>) = 1 [pid 387] ioctl(4, LOOP_CLR_FD [pid 372] <... futex resumed>) = 0 [pid 395] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 387] <... ioctl resumed>) = 0 [pid 372] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 387] close(4 [pid 372] <... futex resumed>) = 0 [ 22.556975][ T394] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.575805][ T387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 22.578400][ T393] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 379] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 387] <... close resumed>) = 0 [pid 374] <... futex resumed>) = ? [pid 372] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] +++ killed by SIGBUS +++ [pid 387] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 387] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] <... futex resumed>) = 0 [pid 379] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... mmap resumed>) = ? [pid 380] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = 0 [pid 379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 380] <... futex resumed>) = 1 [pid 387] <... futex resumed>) = 0 [pid 387] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 380] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... mmap resumed>) = 0x7fb6c5587000 [pid 387] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 387] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 380] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 1 [pid 387] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 380] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... mprotect resumed>) = 0 [pid 387] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 387] <... futex resumed>) = 0 [pid 387] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 387] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 1 [pid 387] ftruncate(5, 33587195) = 0 [pid 380] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 387] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] <... clone resumed>, parent_tid=[397], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 397 [pid 380] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 1 [pid 371] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 387] sendfile(4, 5, NULL, 4 [pid 380] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 0 [pid 387] <... sendfile resumed>) = 4 [pid 387] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 387] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 380] <... futex resumed>) = 0 [pid 387] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 380] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] +++ killed by SIGBUS +++ [pid 374] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=374, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7} --- [pid 300] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 397 attached [pid 397] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 397] sendfile(4, 5, NULL, 4 [pid 300] getdents64(3, [pid 397] <... sendfile resumed>) = 4 [pid 397] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 379] <... futex resumed>) = 0 [pid 300] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 379] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 379] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] lstat("./2/binderfs", [pid 397] <... futex resumed>) = 1 [pid 300] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 300] unlink("./2/binderfs") = 0 [ 22.602607][ T395] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.630978][ T302] EXT4-fs (loop5): unmounting filesystem. [ 22.639695][ T397] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 300] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 372] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] <... umount2 resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 302] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 300] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] lstat("./2/file0", [pid 302] lstat("./2/file0", [pid 300] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... openat resumed>) = 4 [pid 302] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, [pid 302] <... openat resumed>) = 4 [pid 300] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, [pid 302] fstat(4, [pid 300] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] close(4 [pid 302] getdents64(4, [pid 300] <... close resumed>) = 0 [pid 300] rmdir("./2/file0" [pid 380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 380] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 380] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 380] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[398], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 398 [pid 380] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, [pid 300] <... rmdir resumed>) = 0 [pid 302] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 300] getdents64(3, [pid 302] close(4) = 0 [pid 300] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 302] rmdir("./2/file0" [pid 300] close(3 [pid 302] <... rmdir resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 302] getdents64(3, [pid 300] rmdir("./2" [pid 302] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 302] close(3 [pid 300] mkdir("./3", 0777 [pid 379] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 379] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 302] <... close resumed>) = 0 [pid 302] rmdir("./2" [pid 300] <... mkdir resumed>) = 0 [pid 373] <... mmap resumed>) = 0x20000000 [pid 373] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] <... rmdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 398 attached [pid 398] set_robust_list(0x7fb6c55a79e0, 24 [pid 302] mkdir("./3", 0777 [pid 300] <... openat resumed>) = 3 [pid 395] +++ killed by SIGBUS +++ [pid 398] <... set_robust_list resumed>) = 0 [pid 398] sendfile(4, 5, NULL, 4) = 4 [pid 398] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 398] <... futex resumed>) = 1 [ 22.656980][ T300] EXT4-fs (loop3): unmounting filesystem. [pid 398] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 397] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 393] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 381] <... mmap resumed>) = 0x20000000 [pid 378] <... mmap resumed>) = ? [pid 302] <... mkdir resumed>) = 0 [pid 300] ioctl(3, LOOP_CLR_FD [pid 378] +++ killed by SIGBUS +++ [pid 373] <... futex resumed>) = ? [pid 372] +++ killed by SIGBUS +++ [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] +++ killed by SIGBUS +++ [pid 397] +++ killed by SIGBUS +++ [pid 381] +++ killed by SIGBUS +++ [pid 379] +++ killed by SIGBUS +++ [pid 302] <... openat resumed>) = 3 [pid 300] close(3 [pid 302] ioctl(3, LOOP_CLR_FD [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=372, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8} --- [pid 300] <... close resumed>) = 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=379, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] close(3 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... close resumed>) = 0 [pid 301] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... clone resumed>, child_tidptr=0x5555574565d0) = 399 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... openat resumed>) = 3 [pid 301] fstat(3, [pid 302] <... clone resumed>, child_tidptr=0x5555574565d0) = 400 [pid 301] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(3, [pid 298] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... openat resumed>) = 3 [pid 301] lstat("./2/binderfs", [pid 298] fstat(3, [pid 301] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] unlink("./2/binderfs" [pid 298] getdents64(3, [pid 393] +++ killed by SIGBUS +++ [pid 371] +++ killed by SIGBUS +++ [pid 301] <... unlink resumed>) = 0 [pid 298] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 301] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=371, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- ./strace-static-x86_64: Process 400 attached ./strace-static-x86_64: Process 399 attached [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 400] set_robust_list(0x5555574565e0, 24 [pid 399] set_robust_list(0x5555574565e0, 24 [pid 298] lstat("./2/binderfs", [pid 295] <... restart_syscall resumed>) = 0 [pid 400] <... set_robust_list resumed>) = 0 [pid 399] <... set_robust_list resumed>) = 0 [pid 298] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 400] chdir("./3" [pid 399] chdir("./3" [pid 298] unlink("./2/binderfs" [pid 400] <... chdir resumed>) = 0 [pid 399] <... chdir resumed>) = 0 [pid 298] <... unlink resumed>) = 0 [pid 295] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 400] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 399] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 400] <... prctl resumed>) = 0 [pid 399] <... prctl resumed>) = 0 [pid 295] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 400] setpgid(0, 0 [pid 399] setpgid(0, 0 [pid 380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 295] <... openat resumed>) = 3 [pid 400] <... setpgid resumed>) = 0 [pid 399] <... setpgid resumed>) = 0 [pid 295] fstat(3, [pid 400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 400] <... openat resumed>) = 3 [pid 399] <... openat resumed>) = 3 [pid 295] getdents64(3, [pid 400] write(3, "1000", 4 [pid 399] write(3, "1000", 4 [pid 295] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 400] <... write resumed>) = 4 [pid 399] <... write resumed>) = 4 [pid 295] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 400] close(3 [pid 399] close(3 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 400] <... close resumed>) = 0 [pid 399] <... close resumed>) = 0 [pid 295] lstat("./2/binderfs", [pid 400] symlink("/dev/binderfs", "./binderfs" [pid 399] symlink("/dev/binderfs", "./binderfs" [pid 295] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 400] <... symlink resumed>) = 0 [pid 399] <... symlink resumed>) = 0 [pid 295] unlink("./2/binderfs" [pid 400] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... unlink resumed>) = 0 [pid 400] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = 0 [ 22.703621][ T398] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 295] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 400] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 399] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 400] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 399] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 400] <... mprotect resumed>) = 0 [pid 400] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 399] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 401 attached [pid 399] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 387] <... mmap resumed>) = ? [pid 401] set_robust_list(0x7fb6cd8c89e0, 24 [pid 400] <... clone resumed>, parent_tid=[401], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 401 [pid 387] +++ killed by SIGBUS +++ [pid 401] <... set_robust_list resumed>) = 0 [pid 400] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... clone resumed>, parent_tid=[402], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 402 [pid 401] memfd_create("syzkaller", 0 [pid 400] <... futex resumed>) = 0 [pid 399] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] +++ killed by SIGBUS +++ [pid 380] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 402 attached [pid 401] <... memfd_create resumed>) = 3 [pid 400] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 399] <... futex resumed>) = 0 [pid 402] set_robust_list(0x7fb6cd8c89e0, 24 [pid 401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 399] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=380, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 402] <... set_robust_list resumed>) = 0 [pid 401] <... mmap resumed>) = 0x7fb6c54a8000 [pid 299] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 299] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 301] <... umount2 resumed>) = 0 [pid 299] unlink("./2/binderfs") = 0 [pid 299] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 402] memfd_create("syzkaller", 0) = 3 [pid 401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 401] <... write resumed>) = 1048576 [pid 301] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 402] <... mmap resumed>) = 0x7fb6c54a8000 [pid 401] munmap(0x7fb6c54a8000, 1048576 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 401] <... munmap resumed>) = 0 [pid 301] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 401] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 301] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 401] ioctl(4, LOOP_SET_FD, 3 [pid 301] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 301] <... openat resumed>) = 4 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, [pid 401] <... ioctl resumed>) = 0 [pid 301] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./2/file0") = 0 [pid 402] <... write resumed>) = 1048576 [pid 401] close(3 [pid 301] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 402] munmap(0x7fb6c54a8000, 1048576 [pid 401] <... close resumed>) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./2" [pid 402] <... munmap resumed>) = 0 [pid 401] mkdir("./file0", 0777 [pid 301] <... rmdir resumed>) = 0 [pid 299] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 295] <... umount2 resumed>) = 0 [pid 301] mkdir("./3", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 402] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 401] <... mkdir resumed>) = 0 [pid 301] ioctl(3, LOOP_CLR_FD [pid 299] getdents64(4, [pid 295] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 402] <... openat resumed>) = 4 [pid 401] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [ 22.776930][ T301] EXT4-fs (loop4): unmounting filesystem. [ 22.794139][ T295] EXT4-fs (loop0): unmounting filesystem. [ 22.799856][ T299] EXT4-fs (loop2): unmounting filesystem. [ 22.803381][ T298] EXT4-fs (loop1): unmounting filesystem. [ 22.818009][ T401] loop5: detected capacity change from 0 to 2048 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 403 [pid 402] ioctl(4, LOOP_SET_FD, 3 [pid 299] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 299] close(4./strace-static-x86_64: Process 403 attached ) = 0 [pid 299] rmdir("./2/file0" [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 295] rmdir("./2/file0") = 0 [pid 295] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./2" [pid 299] <... rmdir resumed>) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 295] mkdir("./3", 0777 [pid 299] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 403] set_robust_list(0x5555574565e0, 24 [pid 295] <... mkdir resumed>) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 403] <... set_robust_list resumed>) = 0 [pid 299] close(3 [pid 295] <... openat resumed>) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 404 ./strace-static-x86_64: Process 404 attached [pid 404] set_robust_list(0x5555574565e0, 24 [pid 402] <... ioctl resumed>) = 0 [pid 402] close(3 [pid 404] <... set_robust_list resumed>) = 0 [pid 402] <... close resumed>) = 0 [pid 404] chdir("./3" [pid 402] mkdir("./file0", 0777) = 0 [pid 404] <... chdir resumed>) = 0 [pid 404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 404] setpgid(0, 0) = 0 [pid 404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 404] write(3, "1000", 4) = 4 [pid 402] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 404] close(3) = 0 [pid 404] symlink("/dev/binderfs", "./binderfs") = 0 [pid 404] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 404] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 404] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[406], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 406 [pid 404] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 406 attached [pid 406] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 406] memfd_create("syzkaller", 0) = 3 [pid 406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 299] <... close resumed>) = 0 [pid 299] rmdir("./2") = 0 [pid 299] mkdir("./3", 0777 [pid 403] chdir("./3" [pid 299] <... mkdir resumed>) = 0 [pid 403] <... chdir resumed>) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] <... openat resumed>) = 3 [pid 403] <... prctl resumed>) = 0 [pid 299] ioctl(3, LOOP_CLR_FD [pid 403] setpgid(0, 0 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 403] <... setpgid resumed>) = 0 [pid 299] close(3 [pid 403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... close resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 408 [pid 406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 403] <... openat resumed>) = 3 [pid 403] write(3, "1000", 4) = 4 [pid 403] close(3) = 0 [pid 403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 403] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 403] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 403] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[410], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 410 [pid 403] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 406] <... write resumed>) = 1048576 [pid 406] munmap(0x7fb6c54a8000, 1048576) = 0 ./strace-static-x86_64: Process 408 attached [pid 402] <... mount resumed>) = 0 [pid 406] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 298] <... umount2 resumed>) = 0 [pid 408] set_robust_list(0x5555574565e0, 24 [pid 402] <... openat resumed>) = 3 [pid 408] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 410 attached [pid 402] chdir("./file0" [pid 298] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 408] chdir("./3" [pid 402] <... chdir resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 410] set_robust_list(0x7fb6cd8c89e0, 24 [pid 408] <... chdir resumed>) = 0 [pid 402] ioctl(4, LOOP_CLR_FD [pid 410] <... set_robust_list resumed>) = 0 [pid 408] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 402] <... ioctl resumed>) = 0 [pid 298] lstat("./2/file0", [pid 408] <... prctl resumed>) = 0 [pid 402] close(4 [pid 298] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 402] <... close resumed>) = 0 [pid 408] setpgid(0, 0 [pid 402] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 410] memfd_create("syzkaller", 0 [pid 408] <... setpgid resumed>) = 0 [pid 402] <... futex resumed>) = 1 [pid 399] <... futex resumed>) = 0 [pid 402] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 399] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... openat resumed>) = 3 [pid 408] write(3, "1000", 4 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 402] <... open resumed>) = 4 [pid 408] <... write resumed>) = 4 [pid 402] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 402] <... futex resumed>) = 1 [pid 408] close(3 [pid 399] <... futex resumed>) = 0 [pid 408] <... close resumed>) = 0 [pid 402] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... openat resumed>) = 4 [pid 410] <... memfd_create resumed>) = 3 [pid 408] symlink("/dev/binderfs", "./binderfs" [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 408] <... symlink resumed>) = 0 [pid 410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 408] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] fstat(4, [pid 408] <... futex resumed>) = 0 [pid 402] <... futex resumed>) = 1 [pid 399] <... futex resumed>) = 0 [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 410] <... mmap resumed>) = 0x7fb6c54a8000 [pid 408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 402] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] <... futex resumed>) = 0 [pid 298] getdents64(4, [pid 408] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 402] ftruncate(5, 33587195 [pid 399] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... ftruncate resumed>) = 0 [pid 408] <... mprotect resumed>) = 0 [pid 402] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 402] sendfile(4, 5, NULL, 4 [pid 399] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 399] <... futex resumed>) = 0 [pid 402] <... sendfile resumed>) = 4 [pid 399] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] getdents64(4, [pid 408] <... clone resumed>, parent_tid=[412], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 412 [pid 402] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 408] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 399] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] close(4 [pid 408] <... futex resumed>) = 0 [pid 402] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... close resumed>) = 0 [pid 408] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 298] rmdir("./2/file0") = 0 [pid 406] <... openat resumed>) = 4 [pid 406] ioctl(4, LOOP_SET_FD, 3 [pid 410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./2") = 0 [pid 298] mkdir("./3", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 413 ./strace-static-x86_64: Process 412 attached [ 22.834040][ T402] loop3: detected capacity change from 0 to 2048 [ 22.860988][ T402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 22.876853][ T406] loop0: detected capacity change from 0 to 2048 [pid 412] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 412] memfd_create("syzkaller", 0) = 3 [pid 412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 410] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 413 attached [pid 413] set_robust_list(0x5555574565e0, 24) = 0 [pid 413] chdir("./3" [pid 410] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 413] <... chdir resumed>) = 0 [pid 413] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 410] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 413] <... prctl resumed>) = 0 [pid 410] <... openat resumed>) = 4 [pid 413] setpgid(0, 0 [pid 410] ioctl(4, LOOP_SET_FD, 3 [pid 413] <... setpgid resumed>) = 0 [pid 410] <... ioctl resumed>) = 0 [pid 413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 410] close(3 [pid 406] <... ioctl resumed>) = 0 [pid 401] <... mount resumed>) = 0 [pid 399] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 413] write(3, "1000", 4 [pid 410] <... close resumed>) = 0 [pid 406] close(3 [pid 401] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 399] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] mkdir("./file0", 0777 [pid 406] <... close resumed>) = 0 [pid 401] <... openat resumed>) = 3 [pid 399] <... futex resumed>) = 0 [pid 413] <... write resumed>) = 4 [pid 410] <... mkdir resumed>) = 0 [pid 406] mkdir("./file0", 0777 [pid 401] chdir("./file0" [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 413] close(3 [pid 410] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue" [pid 406] <... mkdir resumed>) = 0 [pid 401] <... chdir resumed>) = 0 [pid 399] <... mmap resumed>) = 0x7fb6c5587000 [pid 413] <... close resumed>) = 0 [pid 412] <... write resumed>) = 1048576 [pid 406] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 401] ioctl(4, LOOP_CLR_FD [pid 399] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 413] symlink("/dev/binderfs", "./binderfs" [pid 412] munmap(0x7fb6c54a8000, 1048576 [pid 401] <... ioctl resumed>) = 0 [pid 399] <... mprotect resumed>) = 0 [pid 401] close(4 [pid 399] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 413] <... symlink resumed>) = 0 [pid 401] <... close resumed>) = 0 [pid 401] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... clone resumed>, parent_tid=[414], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 414 [pid 401] <... futex resumed>) = 1 [pid 400] <... futex resumed>) = 0 [pid 399] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] <... futex resumed>) = 0 [pid 399] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 400] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... open resumed>) = 4 [pid 401] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 401] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] <... futex resumed>) = 0 [pid 401] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 400] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... open resumed>) = 5 [pid 401] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 401] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] <... futex resumed>) = 0 [pid 401] ftruncate(5, 33587195 [pid 400] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... ftruncate resumed>) = 0 [pid 401] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 401] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] <... futex resumed>) = 0 [pid 413] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] sendfile(4, 5, NULL, 4 [pid 400] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... sendfile resumed>) = 4 [pid 413] <... futex resumed>) = 0 [pid 401] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 401] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] <... futex resumed>) = 0 [pid 401] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 400] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 413] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 413] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[418], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 418 [pid 413] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 22.889705][ T401] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 22.916194][ T410] loop4: detected capacity change from 0 to 2048 [pid 413] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 418 attached ./strace-static-x86_64: Process 414 attached [pid 412] <... munmap resumed>) = 0 [pid 418] set_robust_list(0x7fb6cd8c89e0, 24 [pid 414] set_robust_list(0x7fb6c55a79e0, 24 [pid 412] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 418] <... set_robust_list resumed>) = 0 [pid 414] <... set_robust_list resumed>) = 0 [pid 412] <... openat resumed>) = 4 [pid 418] memfd_create("syzkaller", 0 [pid 414] sendfile(4, 5, NULL, 4 [pid 412] ioctl(4, LOOP_SET_FD, 3 [pid 418] <... memfd_create resumed>) = 3 [pid 414] <... sendfile resumed>) = 4 [pid 412] <... ioctl resumed>) = 0 [pid 410] <... mount resumed>) = 0 [pid 418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 414] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 410] chdir("./file0") = 0 [pid 410] ioctl(4, LOOP_CLR_FD) = 0 [pid 410] close(4) = 0 [pid 410] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] <... futex resumed>) = 0 [pid 414] <... futex resumed>) = 1 [pid 399] <... futex resumed>) = 0 [pid 414] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... mmap resumed>) = 0x7fb6c54a8000 [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 403] <... futex resumed>) = 1 [pid 399] <... futex resumed>) = 0 [pid 410] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 399] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] <... open resumed>) = 4 [pid 410] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 403] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = 0 [pid 403] <... futex resumed>) = 1 [pid 410] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 403] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 400] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 400] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 400] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[420], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 420 [pid 400] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] <... open resumed>) = 5 [pid 410] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 410] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] ftruncate(5, 33587195 [pid 403] <... futex resumed>) = 0 [pid 410] <... ftruncate resumed>) = 0 [pid 403] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] sendfile(4, 5, NULL, 4 [pid 403] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] <... sendfile resumed>) = 4 [pid 410] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 410] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] <... futex resumed>) = 0 [pid 410] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 403] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] close(3) = 0 [pid 412] mkdir("./file0", 0777) = 0 [pid 418] <... write resumed>) = 1048576 [pid 418] munmap(0x7fb6c54a8000, 1048576 [pid 412] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 418] <... munmap resumed>) = 0 [pid 418] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 22.948485][ T410] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 22.957515][ T412] loop2: detected capacity change from 0 to 2048 [ 22.972609][ T414] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.988162][ T406] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [pid 418] ioctl(4, LOOP_SET_FD, 3 [pid 399] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 406] <... mount resumed>) = 0 ./strace-static-x86_64: Process 420 attached [pid 406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 420] set_robust_list(0x7fb6c55a79e0, 24 [pid 406] <... openat resumed>) = 3 [pid 420] <... set_robust_list resumed>) = 0 [pid 420] sendfile(4, 5, NULL, 4 [pid 406] chdir("./file0" [pid 420] <... sendfile resumed>) = 4 [pid 420] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... chdir resumed>) = 0 [pid 406] ioctl(4, LOOP_CLR_FD [pid 420] <... futex resumed>) = 1 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] <... ioctl resumed>) = 0 [pid 400] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] close(4 [pid 402] <... mmap resumed>) = 0x20000000 [pid 402] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 403] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 403] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 403] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[422], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 422 [pid 403] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... close resumed>) = 0 [pid 406] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 422 attached [pid 406] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 422] set_robust_list(0x7fb6c55a79e0, 24 [pid 406] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... set_robust_list resumed>) = 0 [pid 406] <... futex resumed>) = 1 [pid 422] sendfile(4, 5, NULL, 4 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 404] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... open resumed>) = 5 [pid 406] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 422] <... sendfile resumed>) = 4 [pid 404] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] ftruncate(5, 33587195 [pid 422] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [ 23.016217][ T418] loop1: detected capacity change from 0 to 2048 [ 23.028364][ T420] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 404] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... mmap resumed>) = 0x20000000 [pid 401] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 414] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 402] <... futex resumed>) = ? [pid 402] +++ killed by SIGBUS +++ [pid 406] <... ftruncate resumed>) = 0 [pid 422] <... futex resumed>) = 1 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 406] <... futex resumed>) = 1 [pid 404] <... futex resumed>) = 0 [pid 403] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] sendfile(4, 5, NULL, 4 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... sendfile resumed>) = 4 [pid 406] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 406] <... futex resumed>) = 1 [pid 404] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 414] +++ killed by SIGBUS +++ [pid 399] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=399, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 418] <... ioctl resumed>) = 0 [pid 418] close(3) = 0 [pid 418] mkdir("./file0", 0777 [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 300] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] lstat("./3/binderfs", [pid 418] <... mkdir resumed>) = 0 [pid 300] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 300] unlink("./3/binderfs" [pid 418] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue" [pid 300] <... unlink resumed>) = 0 [pid 300] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 420] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 401] <... futex resumed>) = ? [pid 401] +++ killed by SIGBUS +++ [pid 420] +++ killed by SIGBUS +++ [pid 412] <... mount resumed>) = 0 [pid 412] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 412] chdir("./file0") = 0 [pid 412] ioctl(4, LOOP_CLR_FD) = 0 [pid 412] close(4) = 0 [pid 412] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... futex resumed>) = 1 [pid 412] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 406] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 400] <... futex resumed>) = ? [pid 412] <... open resumed>) = 4 [pid 412] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... futex resumed>) = 1 [pid 412] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 412] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... futex resumed>) = 1 [pid 412] ftruncate(5, 33587195) = 0 [pid 412] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... futex resumed>) = 1 [pid 412] sendfile(4, 5, NULL, 4) = 4 [pid 412] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... futex resumed>) = 1 [pid 412] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 400] +++ killed by SIGBUS +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=400, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8} --- [pid 302] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 302] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 302] unlink("./3/binderfs") = 0 [ 23.067397][ T412] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 23.082120][ T422] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 302] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 404] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 404] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 404] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 404] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[426], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 426 [pid 404] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... mount resumed>) = 0 [pid 418] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 418] chdir("./file0") = 0 [pid 418] ioctl(4, LOOP_CLR_FD) = 0 [pid 418] close(4) = 0 [pid 418] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 413] <... futex resumed>) = 0 [pid 413] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] <... futex resumed>) = 0 [pid 413] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 418] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 413] <... futex resumed>) = 0 [pid 418] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 413] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... open resumed>) = 5 [pid 413] <... futex resumed>) = 0 [pid 418] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 418] ftruncate(5, 33587195 [pid 413] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... ftruncate resumed>) = 0 [pid 413] <... futex resumed>) = 0 [pid 418] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 418] sendfile(4, 5, NULL, 4 [pid 413] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... sendfile resumed>) = 4 [pid 413] <... futex resumed>) = 0 [pid 418] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 418] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 413] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] +++ killed by SIGBUS +++ [pid 410] <... mmap resumed>) = ? [pid 410] +++ killed by SIGBUS +++ [pid 403] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=403, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 408] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 408] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 301] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 408] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] <... openat resumed>) = 3 [pid 408] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 301] fstat(3, [pid 408] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 408] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 301] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 408] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 408] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 301] getdents64(3, [pid 408] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 408] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 301] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 408] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 408] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 301] lstat("./3/binderfs", [pid 408] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 301] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 408] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 301] unlink("./3/binderfs" [pid 408] <... clone resumed>, parent_tid=[427], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 427 [pid 408] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... unlink resumed>) = 0 [pid 301] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 426 attached [pid 426] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 426] sendfile(4, 5, NULL, 4) = 4 [pid 426] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 426] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] <... futex resumed>) = 0 [ 23.120765][ T418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 23.155652][ T301] EXT4-fs (loop4): unmounting filesystem. [pid 404] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 427 attached [pid 427] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 427] sendfile(4, 5, NULL, 4) = 4 [pid 427] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... umount2 resumed>) = 0 [pid 427] <... futex resumed>) = 1 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 408] <... futex resumed>) = 0 [pid 301] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 413] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 413] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 413] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[429], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 429 [pid 413] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./3/file0") = 0 [pid 301] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./3") = 0 [pid 301] mkdir("./4", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 404] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 429 attached [pid 429] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 429] sendfile(4, 5, NULL, 4) = 4 [pid 429] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] <... futex resumed>) = 0 [pid 413] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... clone resumed>, child_tidptr=0x5555574565d0) = 430 [pid 429] <... futex resumed>) = 1 [ 23.163290][ T426] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.184837][ T427] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.186744][ T300] EXT4-fs (loop3): unmounting filesystem. ./strace-static-x86_64: Process 430 attached [pid 427] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 430] set_robust_list(0x5555574565e0, 24) = 0 [pid 430] chdir("./4") = 0 [pid 430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 430] setpgid(0, 0) = 0 [pid 408] <... futex resumed>) = ? [pid 427] +++ killed by SIGBUS +++ [pid 430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 412] <... mmap resumed>) = ? [pid 430] write(3, "1000", 4) = 4 [pid 426] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 412] +++ killed by SIGBUS +++ [pid 408] +++ killed by SIGBUS +++ [pid 430] close(3 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=408, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8} --- [pid 430] <... close resumed>) = 0 [pid 430] symlink("/dev/binderfs", "./binderfs" [pid 299] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 430] <... symlink resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 430] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 430] <... futex resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 426] +++ killed by SIGBUS +++ [pid 299] fstat(3, [pid 430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 430] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 299] getdents64(3, [pid 430] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 299] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 430] <... mprotect resumed>) = 0 [pid 299] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] lstat("./3/binderfs", [pid 430] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 299] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 299] unlink("./3/binderfs" [pid 430] <... clone resumed>, parent_tid=[431], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 431 [pid 299] <... unlink resumed>) = 0 [pid 430] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 430] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./3/file0") = 0 [pid 300] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./3") = 0 [pid 300] mkdir("./4", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 432 ./strace-static-x86_64: Process 432 attached [pid 432] set_robust_list(0x5555574565e0, 24) = 0 [pid 432] chdir("./4") = 0 [pid 432] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 432] setpgid(0, 0) = 0 [pid 432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 432] write(3, "1000", 4) = 4 [pid 432] close(3) = 0 [pid 432] symlink("/dev/binderfs", "./binderfs") = 0 [pid 432] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 432] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 432] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[433], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 433 [pid 432] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 433 attached [pid 433] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 433] memfd_create("syzkaller", 0./strace-static-x86_64: Process 431 attached [pid 429] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 406] <... mmap resumed>) = ? [pid 433] <... memfd_create resumed>) = 3 [pid 431] set_robust_list(0x7fb6cd8c89e0, 24 [pid 406] +++ killed by SIGBUS +++ [pid 404] +++ killed by SIGBUS +++ [pid 431] <... set_robust_list resumed>) = 0 [pid 431] memfd_create("syzkaller", 0) = 3 [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=404, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 295] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 431] <... mmap resumed>) = 0x7fb6c54a8000 [pid 302] <... umount2 resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 413] <... futex resumed>) = ? [pid 295] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 418] <... mmap resumed>) = ? [pid 418] +++ killed by SIGBUS +++ [pid 433] <... mmap resumed>) = 0x7fb6c54a8000 [pid 431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 295] <... openat resumed>) = 3 [pid 295] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 431] <... write resumed>) = 1048576 [pid 302] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 431] munmap(0x7fb6c54a8000, 1048576 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 431] <... munmap resumed>) = 0 [pid 302] lstat("./3/file0", [pid 295] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 431] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 302] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 431] <... openat resumed>) = 4 [pid 302] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] lstat("./3/binderfs", [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 295] unlink("./3/binderfs" [pid 431] ioctl(4, LOOP_SET_FD, 3 [pid 302] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] <... unlink resumed>) = 0 [pid 299] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] <... openat resumed>) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 23.215476][ T429] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.232912][ T302] EXT4-fs (loop5): unmounting filesystem. [ 23.253744][ T299] EXT4-fs (loop2): unmounting filesystem. [pid 299] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 433] <... write resumed>) = 1048576 [pid 431] <... ioctl resumed>) = 0 [pid 429] +++ killed by SIGBUS +++ [pid 413] +++ killed by SIGBUS +++ [pid 302] fstat(4, [pid 299] getdents64(4, [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(4, [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=413, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 302] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 302] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 302] close(4 [pid 298] <... restart_syscall resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 302] rmdir("./3/file0" [pid 433] munmap(0x7fb6c54a8000, 1048576 [pid 431] close(3 [pid 302] <... rmdir resumed>) = 0 [pid 299] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 298] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 433] <... munmap resumed>) = 0 [pid 431] <... close resumed>) = 0 [pid 302] getdents64(3, [pid 299] close(4 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 433] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 433] ioctl(4, LOOP_SET_FD, 3 [pid 431] mkdir("./file0", 0777 [pid 302] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 299] <... close resumed>) = 0 [pid 298] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... umount2 resumed>) = 0 [pid 302] close(3 [pid 299] rmdir("./3/file0" [pid 298] <... openat resumed>) = 3 [pid 302] <... close resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 298] fstat(3, [pid 302] rmdir("./3" [pid 299] getdents64(3, [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 299] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 298] getdents64(3, [pid 302] mkdir("./4", 0777 [pid 299] close(3 [pid 298] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 302] <... mkdir resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 298] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 431] <... mkdir resumed>) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 299] rmdir("./3" [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... openat resumed>) = 3 [pid 299] <... rmdir resumed>) = 0 [pid 298] lstat("./3/binderfs", [pid 302] ioctl(3, LOOP_CLR_FD [pid 299] mkdir("./4", 0777 [pid 298] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 431] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue" [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] <... mkdir resumed>) = 0 [pid 298] unlink("./3/binderfs" [pid 302] close(3 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 298] <... unlink resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 298] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] <... clone resumed>, child_tidptr=0x5555574565d0) = 435 [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 436 ./strace-static-x86_64: Process 435 attached [pid 435] set_robust_list(0x5555574565e0, 24) = 0 [pid 435] chdir("./4") = 0 [pid 435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 435] setpgid(0, 0) = 0 [pid 435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 435] write(3, "1000", 4) = 4 [pid 435] close(3 [pid 295] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 435] <... close resumed>) = 0 [pid 435] symlink("/dev/binderfs", "./binderfs") = 0 [pid 435] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 435] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 435] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[437], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 437 [pid 435] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 437 attached [pid 437] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 437] memfd_create("syzkaller", 0) = 3 [pid 437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 436 attached ) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 436] set_robust_list(0x5555574565e0, 24 [pid 433] <... ioctl resumed>) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 295] fstat(4, [pid 436] <... set_robust_list resumed>) = 0 [pid 433] close(3 [pid 298] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 436] chdir("./4" [pid 295] getdents64(4, [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 436] <... chdir resumed>) = 0 [pid 433] <... close resumed>) = 0 [pid 298] lstat("./3/file0", [pid 295] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 436] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 433] mkdir("./file0", 0777 [pid 298] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] getdents64(4, [pid 436] <... prctl resumed>) = 0 [pid 298] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 436] setpgid(0, 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] close(4 [pid 436] <... setpgid resumed>) = 0 [pid 298] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... close resumed>) = 0 [pid 436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 298] <... openat resumed>) = 4 [pid 295] rmdir("./3/file0" [pid 433] <... mkdir resumed>) = 0 [pid 436] <... openat resumed>) = 3 [pid 433] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 298] fstat(4, [pid 295] <... rmdir resumed>) = 0 [pid 436] write(3, "1000", 4 [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] getdents64(3, [pid 436] <... write resumed>) = 4 [pid 298] getdents64(4, [pid 295] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 436] close(3 [pid 295] close(3 [pid 298] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 436] <... close resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 298] getdents64(4, [pid 436] symlink("/dev/binderfs", "./binderfs" [pid 295] rmdir("./3" [pid 298] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 436] <... symlink resumed>) = 0 [pid 298] close(4 [pid 295] mkdir("./4", 0777 [pid 436] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] <... close resumed>) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] rmdir("./3/file0" [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 436] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 295] <... openat resumed>) = 3 [pid 436] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 298] <... rmdir resumed>) = 0 [pid 295] ioctl(3, LOOP_CLR_FD [pid 436] <... mprotect resumed>) = 0 [pid 298] getdents64(3, [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 436] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 298] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [ 23.282532][ T431] loop4: detected capacity change from 0 to 2048 [ 23.286802][ T295] EXT4-fs (loop0): unmounting filesystem. [ 23.296004][ T433] loop3: detected capacity change from 0 to 2048 [ 23.318033][ T298] EXT4-fs (loop1): unmounting filesystem. [pid 295] close(3./strace-static-x86_64: Process 440 attached [pid 437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] close(3 [pid 295] <... close resumed>) = 0 [pid 437] <... write resumed>) = 1048576 [pid 436] <... clone resumed>, parent_tid=[440], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 440 [pid 298] <... close resumed>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 436] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] rmdir("./3" [pid 436] <... futex resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 295] <... clone resumed>, child_tidptr=0x5555574565d0) = 443 [pid 436] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 298] mkdir("./4", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 444 [pid 437] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 437] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 437] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 444 attached ./strace-static-x86_64: Process 443 attached [pid 440] set_robust_list(0x7fb6cd8c89e0, 24 [pid 431] <... mount resumed>) = 0 [pid 440] <... set_robust_list resumed>) = 0 [pid 431] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 443] set_robust_list(0x5555574565e0, 24 [pid 440] memfd_create("syzkaller", 0 [pid 431] <... openat resumed>) = 3 [pid 443] <... set_robust_list resumed>) = 0 [pid 440] <... memfd_create resumed>) = 3 [pid 431] chdir("./file0" [pid 443] chdir("./4" [pid 440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 431] <... chdir resumed>) = 0 [pid 443] <... chdir resumed>) = 0 [pid 440] <... mmap resumed>) = 0x7fb6c54a8000 [pid 431] ioctl(4, LOOP_CLR_FD [pid 443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 431] <... ioctl resumed>) = 0 [pid 443] <... prctl resumed>) = 0 [pid 431] close(4 [pid 444] set_robust_list(0x5555574565e0, 24 [pid 443] setpgid(0, 0 [pid 440] <... write resumed>) = 1048576 [pid 437] <... ioctl resumed>) = 0 [pid 433] <... mount resumed>) = 0 [pid 431] <... close resumed>) = 0 [pid 444] <... set_robust_list resumed>) = 0 [pid 437] close(3 [pid 433] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 431] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] chdir("./4" [pid 437] <... close resumed>) = 0 [pid 433] <... openat resumed>) = 3 [pid 444] <... chdir resumed>) = 0 [pid 437] mkdir("./file0", 0777 [pid 433] chdir("./file0" [pid 431] <... futex resumed>) = 1 [pid 430] <... futex resumed>) = 0 [pid 444] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 443] <... setpgid resumed>) = 0 [pid 440] munmap(0x7fb6c54a8000, 1048576 [pid 437] <... mkdir resumed>) = 0 [pid 433] <... chdir resumed>) = 0 [pid 431] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... prctl resumed>) = 0 [pid 443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 437] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 433] ioctl(4, LOOP_CLR_FD [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... futex resumed>) = 0 [pid 440] <... munmap resumed>) = 0 [pid 444] setpgid(0, 0 [pid 443] <... openat resumed>) = 3 [pid 433] <... ioctl resumed>) = 0 [pid 431] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 430] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... setpgid resumed>) = 0 [pid 433] close(4 [pid 444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 433] <... close resumed>) = 0 [pid 431] <... open resumed>) = 4 [pid 444] <... openat resumed>) = 3 [pid 433] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] write(3, "1000", 4 [pid 433] <... futex resumed>) = 1 [pid 432] <... futex resumed>) = 0 [pid 444] <... write resumed>) = 4 [pid 433] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] close(3 [pid 433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 432] <... futex resumed>) = 0 [pid 444] <... close resumed>) = 0 [pid 433] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 432] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] symlink("/dev/binderfs", "./binderfs" [pid 433] <... open resumed>) = 4 [pid 444] <... symlink resumed>) = 0 [pid 433] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = 1 [pid 432] <... futex resumed>) = 0 [pid 444] <... futex resumed>) = 0 [pid 433] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 432] <... futex resumed>) = 0 [pid 444] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 433] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 432] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 433] <... open resumed>) = 5 [pid 444] <... mprotect resumed>) = 0 [pid 433] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 433] <... futex resumed>) = 1 [pid 432] <... futex resumed>) = 0 [pid 433] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... clone resumed>, parent_tid=[445], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 445 [pid 433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 432] <... futex resumed>) = 0 [pid 444] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] ftruncate(5, 33587195 [pid 432] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = 0 [pid 433] <... ftruncate resumed>) = 0 [pid 431] <... futex resumed>) = 1 [pid 430] <... futex resumed>) = 0 [pid 444] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 433] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = 1 [pid 432] <... futex resumed>) = 0 [pid 431] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 430] <... futex resumed>) = 0 [pid 433] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 432] <... futex resumed>) = 0 [pid 431] <... open resumed>) = 5 [pid 433] sendfile(4, 5, NULL, 4 [pid 432] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... sendfile resumed>) = 4 [pid 433] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 431] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 432] <... futex resumed>) = 0 [pid 431] <... futex resumed>) = 1 [pid 430] <... futex resumed>) = 0 [pid 433] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 432] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] ftruncate(5, 33587195./strace-static-x86_64: Process 445 attached [pid 443] write(3, "1000", 4 [pid 440] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 431] <... ftruncate resumed>) = 0 [pid 430] <... futex resumed>) = 0 [pid 445] set_robust_list(0x7fb6cd8c89e0, 24 [pid 443] <... write resumed>) = 4 [pid 440] <... openat resumed>) = 4 [pid 431] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... set_robust_list resumed>) = 0 [pid 443] close(3 [pid 440] ioctl(4, LOOP_SET_FD, 3 [pid 431] <... futex resumed>) = 0 [pid 430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 445] memfd_create("syzkaller", 0 [pid 443] <... close resumed>) = 0 [pid 431] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... memfd_create resumed>) = 3 [pid 443] symlink("/dev/binderfs", "./binderfs" [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... futex resumed>) = 0 [pid 445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 443] <... symlink resumed>) = 0 [pid 431] sendfile(4, 5, NULL, 4 [pid 430] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... mmap resumed>) = 0x7fb6c54a8000 [pid 443] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... sendfile resumed>) = 4 [pid 445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 443] <... futex resumed>) = 0 [pid 431] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 440] <... ioctl resumed>) = 0 [pid 431] <... futex resumed>) = 1 [pid 430] <... futex resumed>) = 0 [pid 440] close(3) = 0 [pid 443] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 430] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 431] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 430] <... futex resumed>) = 0 [pid 440] mkdir("./file0", 0777 [pid 443] <... mprotect resumed>) = 0 [pid 440] <... mkdir resumed>) = 0 [pid 440] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 430] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[449], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 449 [pid 443] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 449 attached [pid 449] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 449] memfd_create("syzkaller", 0) = 3 [pid 449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 445] <... write resumed>) = 1048576 [pid 445] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 445] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 23.338286][ T431] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 23.341637][ T437] loop5: detected capacity change from 0 to 2048 [ 23.353998][ T433] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 23.377199][ T440] loop2: detected capacity change from 0 to 2048 [pid 445] ioctl(4, LOOP_SET_FD, 3 [pid 449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 432] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 432] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 432] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 432] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[451], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 451 [pid 432] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... ioctl resumed>) = 0 [pid 445] close(3) = 0 [pid 445] mkdir("./file0", 0777) = 0 [pid 445] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 451 attached [pid 451] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 451] sendfile(4, 5, NULL, 4) = 4 [pid 451] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 437] <... mount resumed>) = 0 [pid 437] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 440] <... mount resumed>) = 0 [pid 437] chdir("./file0") = 0 [pid 440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 437] ioctl(4, LOOP_CLR_FD [pid 440] chdir("./file0" [pid 437] <... ioctl resumed>) = 0 [pid 440] <... chdir resumed>) = 0 [pid 437] close(4 [pid 430] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 430] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 430] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 430] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[453], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 453 [pid 430] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] ioctl(4, LOOP_CLR_FD) = 0 [pid 437] <... close resumed>) = 0 [pid 440] close(4 [pid 433] <... mmap resumed>) = ? [pid 432] <... futex resumed>) = ? [pid 451] +++ killed by SIGBUS +++ [pid 449] <... write resumed>) = 1048576 [pid 433] +++ killed by SIGBUS +++ [pid 432] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=432, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 449] munmap(0x7fb6c54a8000, 1048576) = 0 [ 23.413261][ T445] loop1: detected capacity change from 0 to 2048 [ 23.420445][ T440] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 23.429676][ T437] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 23.441351][ T451] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 449] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 300] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 449] <... openat resumed>) = 4 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 449] ioctl(4, LOOP_SET_FD, 3 [pid 300] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 300] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 300] unlink("./4/binderfs") = 0 [pid 300] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 437] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... close resumed>) = 0 [pid 437] <... futex resumed>) = 1 [pid 437] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 440] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 440] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] <... open resumed>) = 4 [pid 437] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 436] <... futex resumed>) = 0 [pid 437] <... open resumed>) = 5 [pid 437] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] ftruncate(5, 33587195) = 0 [pid 437] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 437] sendfile(4, 5, NULL, 4 [pid 435] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... sendfile resumed>) = 4 [pid 435] <... futex resumed>) = 0 [pid 437] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 435] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 436] <... futex resumed>) = 1 [pid 440] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 449] <... ioctl resumed>) = 0 [pid 436] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... open resumed>) = 4 [pid 449] close(3 [pid 440] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... close resumed>) = 0 [pid 440] <... futex resumed>) = 1 [pid 436] <... futex resumed>) = 0 [pid 449] mkdir("./file0", 0777 [pid 440] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] <... futex resumed>) = 0 [pid 440] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 436] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... open resumed>) = 5 ./strace-static-x86_64: Process 453 attached [pid 449] <... mkdir resumed>) = 0 [pid 440] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 453] set_robust_list(0x7fb6c55a79e0, 24 [pid 449] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 440] <... futex resumed>) = 1 [pid 436] <... futex resumed>) = 0 [pid 440] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] <... futex resumed>) = 0 [pid 440] ftruncate(5, 33587195 [pid 436] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... set_robust_list resumed>) = 0 [pid 440] <... ftruncate resumed>) = 0 [pid 453] sendfile(4, 5, NULL, 4 [pid 440] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 453] <... sendfile resumed>) = 4 [pid 440] <... futex resumed>) = 1 [pid 436] <... futex resumed>) = 0 [pid 453] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... mount resumed>) = 0 [pid 440] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 453] <... futex resumed>) = 1 [pid 445] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 440] sendfile(4, 5, NULL, 4 [pid 436] <... futex resumed>) = 0 [pid 430] <... futex resumed>) = 0 [pid 436] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... sendfile resumed>) = 4 [pid 430] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 430] <... futex resumed>) = 0 [pid 436] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... openat resumed>) = 3 [pid 445] chdir("./file0") = 0 [pid 445] ioctl(4, LOOP_CLR_FD) = 0 [pid 445] close(4) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 445] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 444] <... futex resumed>) = 0 [pid 300] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 445] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 444] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 444] <... futex resumed>) = 0 [pid 445] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 444] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... open resumed>) = 4 [pid 300] lstat("./4/file0", [pid 445] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 445] <... futex resumed>) = 1 [pid 444] <... futex resumed>) = 0 [pid 300] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 445] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 444] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 444] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 445] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 444] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 445] <... open resumed>) = 5 [pid 445] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... openat resumed>) = 4 [pid 445] <... futex resumed>) = 1 [pid 444] <... futex resumed>) = 0 [pid 445] ftruncate(5, 33587195 [pid 444] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... ftruncate resumed>) = 0 [pid 444] <... futex resumed>) = 0 [pid 445] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... futex resumed>) = 0 [pid 444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 445] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 444] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] fstat(4, [pid 445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 444] <... futex resumed>) = 0 [pid 445] sendfile(4, 5, NULL, 4 [pid 444] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 445] <... sendfile resumed>) = 4 [pid 300] getdents64(4, [pid 445] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 445] <... futex resumed>) = 1 [pid 444] <... futex resumed>) = 0 [pid 300] getdents64(4, [pid 445] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 444] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 444] <... futex resumed>) = 0 [pid 300] close(4 [pid 445] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 444] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... close resumed>) = 0 [pid 300] rmdir("./4/file0" [pid 435] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 435] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 435] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 435] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[457], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 457 [ 23.466442][ T445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 23.480887][ T449] loop0: detected capacity change from 0 to 2048 [ 23.489903][ T300] EXT4-fs (loop3): unmounting filesystem. [ 23.500130][ T453] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 435] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 457 attached [pid 457] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 457] sendfile(4, 5, NULL, 4) = 4 [pid 457] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 449] <... mount resumed>) = 0 [pid 436] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 430] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... rmdir resumed>) = 0 [pid 449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 436] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] getdents64(3, [pid 449] <... openat resumed>) = 3 [pid 436] <... futex resumed>) = 0 [pid 300] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 449] chdir("./file0" [pid 436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] close(3 [pid 449] <... chdir resumed>) = 0 [pid 436] <... mmap resumed>) = 0x7fb6c5587000 [pid 300] <... close resumed>) = 0 [pid 449] ioctl(4, LOOP_CLR_FD [pid 436] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 300] rmdir("./4" [pid 436] <... mprotect resumed>) = 0 [pid 449] <... ioctl resumed>) = 0 [pid 436] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 300] <... rmdir resumed>) = 0 [pid 449] close(4 [pid 300] mkdir("./5", 0777 [pid 449] <... close resumed>) = 0 [pid 436] <... clone resumed>, parent_tid=[458], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 458 [pid 300] <... mkdir resumed>) = 0 [pid 449] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 458 attached [pid 453] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 449] <... futex resumed>) = 1 [pid 443] <... futex resumed>) = 0 [pid 436] <... futex resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 449] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 443] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] ioctl(3, LOOP_CLR_FD [pid 449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 443] <... futex resumed>) = 0 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 449] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 443] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] close(3 [pid 449] <... open resumed>) = 4 [pid 300] <... close resumed>) = 0 [pid 458] set_robust_list(0x7fb6c55a79e0, 24 [pid 449] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 458] <... set_robust_list resumed>) = 0 [pid 449] <... futex resumed>) = 1 [pid 443] <... futex resumed>) = 0 [pid 449] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 443] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... clone resumed>, child_tidptr=0x5555574565d0) = 459 [pid 449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 443] <... futex resumed>) = 0 [pid 449] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 443] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 458] sendfile(4, 5, NULL, 4 [pid 449] <... open resumed>) = 5 [pid 444] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 431] <... mmap resumed>) = ? [pid 449] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... sendfile resumed>) = 4 [pid 453] +++ killed by SIGBUS +++ [pid 449] <... futex resumed>) = 1 [pid 444] <... futex resumed>) = 0 [pid 443] <... futex resumed>) = 0 [pid 449] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 443] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 444] <... mmap resumed>) = 0x7fb6c5587000 [pid 443] <... futex resumed>) = 0 [pid 449] ftruncate(5, 33587195 [pid 444] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 443] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... ftruncate resumed>) = 0 [pid 444] <... mprotect resumed>) = 0 [pid 449] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 458] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = 1 [pid 443] <... futex resumed>) = 0 [pid 449] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 444] <... clone resumed>, parent_tid=[460], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 460 [pid 443] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 460 attached ./strace-static-x86_64: Process 459 attached [pid 458] <... futex resumed>) = 1 [pid 449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 444] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 436] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 431] +++ killed by SIGBUS +++ [pid 430] +++ killed by SIGBUS +++ [pid 460] set_robust_list(0x7fb6c55a79e0, 24 [pid 459] set_robust_list(0x5555574565e0, 24 [pid 458] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 449] sendfile(4, 5, NULL, 4 [pid 444] <... futex resumed>) = 0 [pid 443] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=430, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [ 23.552081][ T449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 23.555899][ T457] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 460] <... set_robust_list resumed>) = 0 [pid 459] <... set_robust_list resumed>) = 0 [pid 458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 449] <... sendfile resumed>) = 4 [pid 444] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 0 [pid 460] sendfile(4, 5, NULL, 4 [pid 459] chdir("./5" [pid 449] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] <... sendfile resumed>) = 4 [pid 449] <... futex resumed>) = 1 [pid 443] <... futex resumed>) = 0 [pid 460] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 443] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 1 [pid 449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 444] <... futex resumed>) = 0 [pid 443] <... futex resumed>) = 0 [pid 460] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 449] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 444] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 444] <... futex resumed>) = 0 [pid 444] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... chdir resumed>) = 0 [pid 459] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 459] setpgid(0, 0) = 0 [pid 459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 459] write(3, "1000", 4) = 4 [pid 459] close(3) = 0 [pid 459] symlink("/dev/binderfs", "./binderfs") = 0 [pid 459] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 459] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 459] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[462], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 462 [pid 459] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 462 attached [pid 462] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 462] memfd_create("syzkaller", 0) = 3 [pid 462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 301] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 301] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 301] unlink("./4/binderfs") = 0 [pid 462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 301] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 460] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 458] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 440] <... mmap resumed>) = -1 (errno 18446744073709551555) [pid 440] +++ killed by SIGBUS +++ [pid 436] <... futex resumed>) = ? [pid 458] +++ killed by SIGBUS +++ [pid 445] <... mmap resumed>) = ? [pid 444] <... futex resumed>) = ? [pid 437] <... mmap resumed>) = ? [pid 436] +++ killed by SIGBUS +++ [pid 460] +++ killed by SIGBUS +++ [pid 457] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=436, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 299] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 445] +++ killed by SIGBUS +++ [pid 444] +++ killed by SIGBUS +++ [pid 437] +++ killed by SIGBUS +++ [pid 435] +++ killed by SIGBUS +++ [pid 299] lstat("./4/binderfs", [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=435, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 299] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 299] unlink("./4/binderfs" [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=444, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 302] <... restart_syscall resumed>) = 0 [pid 299] <... unlink resumed>) = 0 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 299] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] <... restart_syscall resumed>) = 0 [pid 302] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 443] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 443] <... futex resumed>) = 0 [pid 302] <... openat resumed>) = 3 [pid 298] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] fstat(3, [pid 443] <... mmap resumed>) = 0x7fb6c5587000 [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 443] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 302] getdents64(3, [pid 443] <... mprotect resumed>) = 0 [pid 302] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 298] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 443] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 302] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] <... openat resumed>) = 3 [pid 443] <... clone resumed>, parent_tid=[463], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 463 [pid 302] lstat("./4/binderfs", [pid 443] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 298] fstat(3, [pid 443] <... futex resumed>) = 0 [pid 302] unlink("./4/binderfs" [pid 443] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... unlink resumed>) = 0 [ 23.608817][ T458] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.634649][ T460] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 463 attached [pid 298] getdents64(3, [pid 463] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 298] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 463] sendfile(4, 5, NULL, 4 [pid 298] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 463] <... sendfile resumed>) = 4 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 463] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] lstat("./4/binderfs", [pid 463] <... futex resumed>) = 1 [pid 443] <... futex resumed>) = 0 [pid 463] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 443] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 443] <... futex resumed>) = 0 [pid 298] unlink("./4/binderfs" [pid 443] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... write resumed>) = 1048576 [pid 298] <... unlink resumed>) = 0 [pid 298] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 462] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 462] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 462] ioctl(4, LOOP_SET_FD, 3 [pid 463] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 449] <... mmap resumed>) = ? [pid 443] <... futex resumed>) = ? [pid 463] +++ killed by SIGBUS +++ [pid 449] +++ killed by SIGBUS +++ [pid 443] +++ killed by SIGBUS +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=443, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 295] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 295] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 462] <... ioctl resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] fstat(3, [pid 462] close(3 [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 462] <... close resumed>) = 0 [pid 295] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 462] mkdir("./file0", 0777 [pid 295] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 295] unlink("./4/binderfs" [pid 298] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 462] <... mkdir resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... unlink resumed>) = 0 [pid 298] lstat("./4/file0", [pid 295] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 462] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 298] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./4/file0") = 0 [pid 298] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./4") = 0 [pid 298] mkdir("./5", 0777) = 0 [ 23.696261][ T302] EXT4-fs (loop5): unmounting filesystem. [ 23.704977][ T463] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.707304][ T301] EXT4-fs (loop4): unmounting filesystem. [ 23.727310][ T462] loop3: detected capacity change from 0 to 2048 [ 23.727999][ T298] EXT4-fs (loop1): unmounting filesystem. [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 301] <... umount2 resumed>) = 0 [pid 302] <... umount2 resumed>) = 0 [pid 301] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./4/file0") = 0 [pid 298] <... openat resumed>) = 3 [pid 298] ioctl(3, LOOP_CLR_FD [pid 301] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./4") = 0 [pid 302] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] mkdir("./5", 0777 [pid 302] fstat(4, [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] close(3) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... clone resumed>, child_tidptr=0x5555574565d0) = 465 [pid 299] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] <... mkdir resumed>) = 0 [pid 302] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 465 attached [pid 299] getdents64(4, [pid 295] <... umount2 resumed>) = 0 [pid 302] rmdir("./4/file0" [pid 299] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 295] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] getdents64(4, [pid 465] set_robust_list(0x5555574565e0, 24 [pid 299] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 465] <... set_robust_list resumed>) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 299] close(4 [pid 295] lstat("./4/file0", [pid 299] <... close resumed>) = 0 [pid 299] rmdir("./4/file0" [pid 295] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] <... rmdir resumed>) = 0 [pid 465] chdir("./5" [pid 299] getdents64(3, [pid 295] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] close(3 [pid 465] <... chdir resumed>) = 0 [pid 295] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 465] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] <... close resumed>) = 0 [pid 465] <... prctl resumed>) = 0 [pid 299] rmdir("./4" [pid 295] <... openat resumed>) = 4 [pid 302] getdents64(3, [pid 301] close(3 [pid 299] <... rmdir resumed>) = 0 [pid 465] setpgid(0, 0 [pid 301] <... close resumed>) = 0 [pid 299] mkdir("./5", 0777 [pid 295] fstat(4, [pid 465] <... setpgid resumed>) = 0 [pid 302] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... mkdir resumed>) = 0 [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 295] getdents64(4, [pid 465] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 3 [pid 295] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 465] write(3, "1000", 4 [pid 299] ioctl(3, LOOP_CLR_FD [pid 295] getdents64(4, [pid 465] <... write resumed>) = 4 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 465] close(3 [pid 299] close(3 [pid 295] close(4 [pid 465] <... close resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 465] symlink("/dev/binderfs", "./binderfs" [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] rmdir("./4/file0" [pid 465] <... symlink resumed>) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 465] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... clone resumed>, child_tidptr=0x5555574565d0) = 467 [pid 295] getdents64(3, [pid 465] <... futex resumed>) = 0 [pid 295] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 295] close(3 [pid 465] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 295] <... close resumed>) = 0 [pid 465] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 295] rmdir("./4" [pid 465] <... mprotect resumed>) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 465] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 295] mkdir("./5", 0777) = 0 [pid 465] <... clone resumed>, parent_tid=[468], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 468 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 465] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... openat resumed>) = 3 [pid 465] <... futex resumed>) = 0 [pid 295] ioctl(3, LOOP_CLR_FD [pid 465] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 469 ./strace-static-x86_64: Process 469 attached [pid 469] set_robust_list(0x5555574565e0, 24./strace-static-x86_64: Process 467 attached [pid 467] set_robust_list(0x5555574565e0, 24 [pid 469] <... set_robust_list resumed>) = 0 [pid 469] chdir("./5" [pid 467] <... set_robust_list resumed>) = 0 [pid 467] chdir("./5" [pid 469] <... chdir resumed>) = 0 [pid 469] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 467] <... chdir resumed>) = 0 [pid 469] <... prctl resumed>) = 0 [pid 469] setpgid(0, 0 [pid 467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 467] setpgid(0, 0 [pid 469] <... setpgid resumed>) = 0 [pid 469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 467] <... setpgid resumed>) = 0 [pid 467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 469] <... openat resumed>) = 3 [pid 469] write(3, "1000", 4) = 4 [pid 467] write(3, "1000", 4 [pid 469] close(3 [pid 467] <... write resumed>) = 4 [pid 469] <... close resumed>) = 0 [pid 467] close(3) = 0 [pid 469] symlink("/dev/binderfs", "./binderfs" [pid 467] symlink("/dev/binderfs", "./binderfs" [pid 469] <... symlink resumed>) = 0 [pid 467] <... symlink resumed>) = 0 [pid 467] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 469] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 467] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 469] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 467] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 469] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 467] <... clone resumed>, parent_tid=[470], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 470 [pid 467] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... clone resumed>, parent_tid=[471], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 471 [pid 469] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 469] <... futex resumed>) = 0 [pid 467] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 469] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 302] close(3./strace-static-x86_64: Process 471 attached [pid 471] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 471] memfd_create("syzkaller", 0) = 3 [pid 471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 302] <... close resumed>) = 0 [pid 471] <... mmap resumed>) = 0x7fb6c54a8000 [pid 302] rmdir("./4" [pid 301] <... clone resumed>, child_tidptr=0x5555574565d0) = 472 [pid 302] <... rmdir resumed>) = 0 [pid 302] mkdir("./5", 0777./strace-static-x86_64: Process 472 attached ./strace-static-x86_64: Process 468 attached ) = 0 [pid 472] set_robust_list(0x5555574565e0, 24 [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD [pid 472] <... set_robust_list resumed>) = 0 [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 468] set_robust_list(0x7fb6cd8c89e0, 24./strace-static-x86_64: Process 470 attached [pid 472] chdir("./5" [pid 302] close(3 [pid 468] <... set_robust_list resumed>) = 0 [pid 470] set_robust_list(0x7fb6cd8c89e0, 24 [pid 302] <... close resumed>) = 0 [pid 472] <... chdir resumed>) = 0 [pid 472] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 468] memfd_create("syzkaller", 0 [pid 472] <... prctl resumed>) = 0 [pid 302] <... clone resumed>, child_tidptr=0x5555574565d0) = 473 [pid 468] <... memfd_create resumed>) = 3 [pid 472] setpgid(0, 0 [pid 470] <... set_robust_list resumed>) = 0 [pid 468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 472] <... setpgid resumed>) = 0 [pid 468] <... mmap resumed>) = 0x7fb6c54a8000 [pid 472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 472] write(3, "1000", 4) = 4 [pid 472] close(3) = 0 [pid 472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 472] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 470] memfd_create("syzkaller", 0 [pid 472] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 470] <... memfd_create resumed>) = 3 [pid 472] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[474], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 474 [pid 472] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 470] <... mmap resumed>) = 0x7fb6c54a8000 [pid 468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 462] <... mount resumed>) = 0 [pid 462] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 462] chdir("./file0") = 0 [pid 462] ioctl(4, LOOP_CLR_FD) = 0 [pid 462] close(4) = 0 [pid 462] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 459] <... futex resumed>) = 0 ./strace-static-x86_64: Process 474 attached [pid 459] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] set_robust_list(0x7fb6cd8c89e0, 24 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] <... set_robust_list resumed>) = 0 [pid 462] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 462] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] memfd_create("syzkaller", 0) = 3 [pid 474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 470] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 474] <... mmap resumed>) = 0x7fb6c54a8000 [pid 462] <... futex resumed>) = 1 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 462] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 473 attached ) = 1 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] ftruncate(5, 33587195 [pid 473] set_robust_list(0x5555574565e0, 24 [pid 462] <... ftruncate resumed>) = 0 [pid 462] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... set_robust_list resumed>) = 0 [pid 462] <... futex resumed>) = 1 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] sendfile(4, 5, NULL, 4 [pid 473] chdir("./5") = 0 [pid 462] <... sendfile resumed>) = 4 [pid 462] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 470] <... write resumed>) = 1048576 [pid 468] <... write resumed>) = 1048576 [pid 462] <... futex resumed>) = 1 [pid 459] <... futex resumed>) = 0 [pid 462] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 459] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] setpgid(0, 0) = 0 [pid 473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 473] write(3, "1000", 4) = 4 [pid 468] munmap(0x7fb6c54a8000, 1048576 [pid 473] close(3 [pid 468] <... munmap resumed>) = 0 [pid 473] <... close resumed>) = 0 [pid 470] munmap(0x7fb6c54a8000, 1048576 [pid 473] symlink("/dev/binderfs", "./binderfs" [pid 468] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 473] <... symlink resumed>) = 0 [pid 468] <... openat resumed>) = 4 [pid 473] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... munmap resumed>) = 0 [pid 468] ioctl(4, LOOP_SET_FD, 3 [pid 473] <... futex resumed>) = 0 [ 23.764807][ T299] EXT4-fs (loop2): unmounting filesystem. [ 23.771107][ T295] EXT4-fs (loop0): unmounting filesystem. [ 23.792099][ T462] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [pid 474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 470] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 473] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 471] <... write resumed>) = 1048576 [pid 470] <... openat resumed>) = 4 [pid 473] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 471] munmap(0x7fb6c54a8000, 1048576 [pid 473] <... mprotect resumed>) = 0 [pid 470] ioctl(4, LOOP_SET_FD, 3 [pid 473] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 474] <... write resumed>) = 1048576 [pid 473] <... clone resumed>, parent_tid=[475], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 475 [pid 473] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] <... munmap resumed>) = 0 [pid 473] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 471] ioctl(4, LOOP_SET_FD, 3 [pid 474] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 474] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 474] ioctl(4, LOOP_SET_FD, 3 [pid 470] <... ioctl resumed>) = 0 [pid 468] <... ioctl resumed>) = 0 [pid 471] <... ioctl resumed>) = 0 [pid 470] close(3 [pid 468] close(3 [pid 471] close(3 [pid 470] <... close resumed>) = 0 [pid 468] <... close resumed>) = 0 [pid 471] <... close resumed>) = 0 [pid 470] mkdir("./file0", 0777 [pid 468] mkdir("./file0", 0777 [pid 471] mkdir("./file0", 0777 [pid 468] <... mkdir resumed>) = 0 [pid 468] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 475 attached [pid 470] <... mkdir resumed>) = 0 [pid 470] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 471] <... mkdir resumed>) = 0 [pid 471] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 475] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 475] memfd_create("syzkaller", 0) = 3 [pid 475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 475] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 475] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 23.838119][ T468] loop1: detected capacity change from 0 to 2048 [ 23.846152][ T470] loop2: detected capacity change from 0 to 2048 [ 23.854220][ T471] loop0: detected capacity change from 0 to 2048 [ 23.855955][ T474] loop4: detected capacity change from 0 to 2048 [pid 475] ioctl(4, LOOP_SET_FD, 3 [pid 459] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 471] <... mount resumed>) = 0 [pid 468] <... mount resumed>) = 0 [pid 459] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 468] chdir("./file0") = 0 [pid 468] ioctl(4, LOOP_CLR_FD) = 0 [pid 468] close(4) = 0 [pid 468] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] <... futex resumed>) = 0 [pid 468] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 465] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... open resumed>) = 4 [pid 465] <... futex resumed>) = 0 [pid 468] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 468] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 465] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... open resumed>) = 5 [pid 465] <... futex resumed>) = 0 [pid 471] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 468] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 0 [pid 471] <... openat resumed>) = 3 [pid 459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 471] chdir("./file0") = 0 [pid 468] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 459] <... mmap resumed>) = 0x7fb6c5587000 [pid 471] ioctl(4, LOOP_CLR_FD [pid 459] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 471] <... ioctl resumed>) = 0 [pid 471] close(4 [pid 468] ftruncate(5, 33587195 [pid 465] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... mprotect resumed>) = 0 [pid 471] <... close resumed>) = 0 [pid 459] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 471] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 469] <... futex resumed>) = 0 [pid 468] <... ftruncate resumed>) = 0 [pid 465] <... futex resumed>) = 0 [pid 471] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 469] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... clone resumed>, parent_tid=[482], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 482 [pid 471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] <... futex resumed>) = 0 [pid 459] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 469] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 0 [pid 471] <... open resumed>) = 4 [pid 470] <... mount resumed>) = 0 [pid 468] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 471] <... futex resumed>) = 1 [pid 470] <... openat resumed>) = 3 [pid 469] <... futex resumed>) = 0 [pid 471] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] chdir("./file0" [pid 469] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = 1 [pid 465] <... futex resumed>) = 0 [pid 471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 470] <... chdir resumed>) = 0 [pid 469] <... futex resumed>) = 0 [pid 468] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 470] ioctl(4, LOOP_CLR_FD [pid 469] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] <... futex resumed>) = 0 [pid 471] <... open resumed>) = 5 [pid 470] <... ioctl resumed>) = 0 [pid 468] sendfile(4, 5, NULL, 4 [pid 465] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] close(4 [pid 468] <... sendfile resumed>) = 4 [pid 471] <... futex resumed>) = 1 [pid 470] <... close resumed>) = 0 [pid 469] <... futex resumed>) = 0 [pid 468] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = 1 [pid 465] <... futex resumed>) = 0 [pid 471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 470] <... futex resumed>) = 1 [pid 469] <... futex resumed>) = 0 [pid 468] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] <... futex resumed>) = 0 [pid 465] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] ftruncate(5, 33587195 [pid 470] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 469] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = 0 [pid 471] <... ftruncate resumed>) = 0 [pid 470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 468] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 467] <... futex resumed>) = 0 [pid 465] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 467] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 470] <... open resumed>) = 4 [pid 469] <... futex resumed>) = 0 [pid 471] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] <... futex resumed>) = 0 [pid 471] sendfile(4, 5, NULL, 4 [pid 469] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... sendfile resumed>) = 4 [pid 471] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 469] <... futex resumed>) = 0 [pid 471] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 469] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] <... futex resumed>) = 0 [pid 471] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 469] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 470] <... futex resumed>) = 1 [pid 467] <... futex resumed>) = 0 [pid 470] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] <... futex resumed>) = 0 [pid 470] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 467] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 470] <... open resumed>) = 5 [pid 470] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 470] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] <... futex resumed>) = 0 [pid 470] ftruncate(5, 33587195 [pid 467] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 470] <... ftruncate resumed>) = 0 [pid 474] <... ioctl resumed>) = 0 [ 23.883000][ T471] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 23.885813][ T475] loop5: detected capacity change from 0 to 2048 [ 23.898341][ T470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [pid 470] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 470] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] <... futex resumed>) = 0 [pid 470] sendfile(4, 5, NULL, 4 [pid 467] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] close(3 [pid 470] <... sendfile resumed>) = 4 [pid 474] <... close resumed>) = 0 [pid 470] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] mkdir("./file0", 0777 [pid 470] <... futex resumed>) = 1 [pid 467] <... futex resumed>) = 0 [pid 470] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] <... mkdir resumed>) = 0 [pid 470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] <... futex resumed>) = 0 [pid 474] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue" [pid 470] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 467] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 482 attached [pid 482] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 482] sendfile(4, 5, NULL, 4) = 4 [pid 482] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 475] <... ioctl resumed>) = 0 [pid 475] close(3) = 0 [pid 475] mkdir("./file0", 0777) = 0 [pid 475] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 459] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 459] <... futex resumed>) = 1 [pid 465] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 465] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 465] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 465] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[483], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 483 [pid 465] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 469] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 469] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 469] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[484], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 484 [pid 469] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 469] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 484 attached [pid 484] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 484] sendfile(4, 5, NULL, 4./strace-static-x86_64: Process 483 attached ) = 4 [pid 484] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] set_robust_list(0x7fb6c55a79e0, 24 [pid 484] <... futex resumed>) = 1 [pid 469] <... futex resumed>) = 0 [pid 483] <... set_robust_list resumed>) = 0 [pid 469] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 469] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] sendfile(4, 5, NULL, 4) = 4 [pid 483] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] <... futex resumed>) = 0 [pid 483] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] <... futex resumed>) = 0 [ 23.973960][ T482] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.002385][ T484] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 465] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... mmap resumed>) = 0x20000000 [pid 462] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 482] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 467] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 467] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 474] <... mount resumed>) = 0 [pid 467] <... mmap resumed>) = 0x7fb6c5587000 [pid 474] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 467] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 459] <... futex resumed>) = ? [pid 474] <... openat resumed>) = 3 [pid 462] <... futex resumed>) = ? [pid 482] +++ killed by SIGBUS +++ [pid 474] chdir("./file0" [pid 467] <... mprotect resumed>) = 0 [pid 474] <... chdir resumed>) = 0 [pid 467] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 462] +++ killed by SIGBUS +++ [pid 459] +++ killed by SIGBUS +++ [pid 474] ioctl(4, LOOP_CLR_FD [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=459, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=14} --- [pid 467] <... clone resumed>, parent_tid=[489], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 489 [pid 474] <... ioctl resumed>) = 0 [pid 474] close(4 [pid 467] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 475] <... mount resumed>) = 0 [pid 467] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 474] <... close resumed>) = 0 [pid 467] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 474] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] fstat(3, [pid 474] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 300] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 474] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 300] getdents64(3, [pid 474] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 472] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 300] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 474] <... open resumed>) = 4 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 474] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 300] unlink("./5/binderfs") = 0 [pid 474] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 300] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 474] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 475] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 474] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 474] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... openat resumed>) = 3 [pid 474] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 475] chdir("./file0" [pid 474] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... chdir resumed>) = 0 [pid 474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 475] ioctl(4, LOOP_CLR_FD [pid 474] ftruncate(5, 33587195 [pid 472] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... ioctl resumed>) = 0 [pid 474] <... ftruncate resumed>) = 0 [pid 475] close(4 [pid 474] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... close resumed>) = 0 [pid 474] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 474] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 474] sendfile(4, 5, NULL, 4 [pid 472] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] <... sendfile resumed>) = 4 [pid 474] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 474] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 474] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 472] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 475] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 473] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 473] <... futex resumed>) = 0 [pid 475] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 473] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... open resumed>) = 4 [pid 475] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 475] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 475] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 475] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 473] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 473] <... futex resumed>) = 0 [pid 475] ftruncate(5, 33587195 [pid 473] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... ftruncate resumed>) = 0 [pid 475] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 475] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 473] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 473] <... futex resumed>) = 0 [pid 475] sendfile(4, 5, NULL, 4 [pid 473] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... sendfile resumed>) = 4 [pid 475] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 475] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 473] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 473] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 475] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 473] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 24.018906][ T483] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters ./strace-static-x86_64: Process 489 attached [pid 489] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 489] sendfile(4, 5, NULL, 4) = 4 [pid 489] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 489] <... futex resumed>) = 1 [pid 467] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... mmap resumed>) = 0x20000000 [pid 468] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 468] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 468] <... futex resumed>) = ? [pid 468] +++ killed by SIGBUS +++ [pid 483] +++ killed by SIGBUS +++ [pid 465] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=465, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 298] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 298] unlink("./5/binderfs") = 0 [pid 298] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 489] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 472] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 472] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 470] <... mmap resumed>) = ? [pid 467] <... futex resumed>) = ? [pid 489] +++ killed by SIGBUS +++ [pid 472] <... mmap resumed>) = 0x7fb6c5587000 [pid 472] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 470] +++ killed by SIGBUS +++ [pid 467] +++ killed by SIGBUS +++ [pid 472] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=467, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 472] <... clone resumed>, parent_tid=[490], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 490 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 472] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... restart_syscall resumed>) = 0 [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 490 attached [pid 299] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(3, [pid 490] set_robust_list(0x7fb6c55a79e0, 24 [pid 299] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 490] <... set_robust_list resumed>) = 0 [pid 299] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 490] sendfile(4, 5, NULL, 4 [pid 473] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 490] <... sendfile resumed>) = 4 [pid 473] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] lstat("./5/binderfs", [pid 490] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = 0 [pid 299] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 490] <... futex resumed>) = 1 [pid 473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 472] <... futex resumed>) = 0 [pid 299] unlink("./5/binderfs" [pid 473] <... mmap resumed>) = 0x7fb6c5587000 [pid 472] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... unlink resumed>) = 0 [pid 472] <... futex resumed>) = 0 [pid 299] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 472] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] +++ killed by SIGBUS +++ [pid 471] <... mmap resumed>) = ? [pid 471] +++ killed by SIGBUS +++ [pid 469] +++ killed by SIGBUS +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=469, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6} --- [pid 295] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 295] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 295] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 295] unlink("./5/binderfs") = 0 [pid 295] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 473] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 473] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[491], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 491 [pid 473] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 491 attached [pid 490] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 491] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 491] sendfile(4, 5, NULL, 4) = 4 [pid 474] <... mmap resumed>) = ? [pid 472] <... futex resumed>) = ? [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 490] +++ killed by SIGBUS +++ [pid 491] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 4 [pid 491] <... futex resumed>) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] fstat(4, [pid 473] <... futex resumed>) = 0 [ 24.092998][ T489] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.121445][ T490] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 473] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./5/file0") = 0 [pid 299] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./5") = 0 [pid 491] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 474] +++ killed by SIGBUS +++ [pid 472] +++ killed by SIGBUS +++ [pid 299] mkdir("./6", 0777 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=472, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 299] <... mkdir resumed>) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 301] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] ioctl(3, LOOP_CLR_FD [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] <... openat resumed>) = 3 [pid 299] close(3 [pid 301] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] <... close resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 492 [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 300] close(4 [pid 301] getdents64(3, [pid 300] <... close resumed>) = 0 [pid 475] <... mmap resumed>) = ? [pid 473] <... futex resumed>) = ? [pid 301] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 300] rmdir("./5/file0" [pid 491] +++ killed by SIGBUS +++ [pid 475] +++ killed by SIGBUS +++ [pid 473] +++ killed by SIGBUS +++ [pid 301] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=473, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 300] <... rmdir resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] getdents64(3, [pid 301] lstat("./5/binderfs", [pid 302] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 300] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 302] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] unlink("./5/binderfs" [pid 302] <... openat resumed>) = 3 [pid 300] close(3 [pid 302] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] <... unlink resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 302] getdents64(3, [pid 301] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 300] rmdir("./5" [pid 302] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 300] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 492 attached [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] mkdir("./6", 0777 [pid 492] set_robust_list(0x5555574565e0, 24 [pid 302] lstat("./5/binderfs", [pid 300] <... mkdir resumed>) = 0 [pid 492] <... set_robust_list resumed>) = 0 [pid 302] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 492] chdir("./6" [pid 302] unlink("./5/binderfs" [pid 492] <... chdir resumed>) = 0 [pid 302] <... unlink resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 492] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 302] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 492] <... prctl resumed>) = 0 [pid 300] ioctl(3, LOOP_CLR_FD [pid 492] setpgid(0, 0 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 492] <... setpgid resumed>) = 0 [pid 300] close(3 [pid 492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] <... close resumed>) = 0 [pid 492] <... openat resumed>) = 3 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 492] write(3, "1000", 4) = 4 [pid 300] <... clone resumed>, child_tidptr=0x5555574565d0) = 493 [pid 492] close(3) = 0 [pid 492] symlink("/dev/binderfs", "./binderfs") = 0 [pid 492] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 492] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 492] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[494], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 494 [pid 492] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 493 attached [pid 302] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 493] set_robust_list(0x5555574565e0, 24) = 0 [pid 493] chdir("./6" [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 493] <... chdir resumed>) = 0 [pid 493] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 302] <... openat resumed>) = 4 [pid 493] setpgid(0, 0) = 0 [pid 493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 493] write(3, "1000", 4) = 4 [pid 493] close(3) = 0 [pid 493] symlink("/dev/binderfs", "./binderfs" [pid 302] fstat(4, [pid 493] <... symlink resumed>) = 0 [pid 493] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 493] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 493] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 301] <... umount2 resumed>) = 0 [pid 493] <... clone resumed>, parent_tid=[495], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 495 [pid 493] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 495 attached [pid 495] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 495] memfd_create("syzkaller", 0) = 3 [pid 495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(4, [pid 298] <... umount2 resumed>) = 0 [pid 302] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 298] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] close(4 [pid 298] lstat("./5/file0", [pid 302] <... close resumed>) = 0 [pid 301] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] rmdir("./5/file0" [pid 298] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... rmdir resumed>) = 0 [pid 302] getdents64(3, [pid 298] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] lstat("./5/file0", [pid 302] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] close(3 [pid 298] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] <... close resumed>) = 0 [pid 301] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] rmdir("./5" [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... openat resumed>) = 4 [pid 302] <... rmdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] fstat(4, [pid 302] mkdir("./6", 0777 [pid 301] <... openat resumed>) = 4 [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 301] fstat(4, [pid 298] getdents64(4, [pid 495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 301] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 302] <... openat resumed>) = 3 [ 24.147599][ T491] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 295] <... umount2 resumed>) = 0 [pid 302] ioctl(3, LOOP_CLR_FD [pid 301] getdents64(4, [pid 298] getdents64(4, [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 302] close(3 [pid 301] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 298] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 495] <... write resumed>) = 1048576 [pid 495] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 495] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 495] ioctl(4, LOOP_SET_FD, 3 [pid 302] <... close resumed>) = 0 ./strace-static-x86_64: Process 494 attached [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] getdents64(4, [pid 298] close(4 [pid 295] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] <... clone resumed>, child_tidptr=0x5555574565d0) = 496 [pid 298] <... close resumed>) = 0 [pid 298] rmdir("./5/file0") = 0 [pid 495] <... ioctl resumed>) = 0 [pid 301] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 301] close(4 [pid 298] getdents64(3, [pid 301] <... close resumed>) = 0 [pid 298] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 301] rmdir("./5/file0" [pid 298] close(3 [pid 495] close(3./strace-static-x86_64: Process 496 attached [pid 298] <... close resumed>) = 0 [pid 495] <... close resumed>) = 0 [pid 298] rmdir("./5" [pid 495] mkdir("./file0", 0777 [pid 298] <... rmdir resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 301] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./5" [pid 298] mkdir("./6", 0777 [pid 495] <... mkdir resumed>) = 0 [pid 495] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 496] set_robust_list(0x5555574565e0, 24 [pid 301] <... rmdir resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 301] mkdir("./6", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 496] <... set_robust_list resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 496] chdir("./6" [pid 298] <... clone resumed>, child_tidptr=0x5555574565d0) = 497 [pid 496] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 497 attached [pid 496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] <... clone resumed>, child_tidptr=0x5555574565d0) = 498 [pid 496] <... prctl resumed>) = 0 [pid 496] setpgid(0, 0 [pid 497] set_robust_list(0x5555574565e0, 24 [pid 496] <... setpgid resumed>) = 0 [pid 497] <... set_robust_list resumed>) = 0 [pid 496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 496] write(3, "1000", 4 [pid 497] chdir("./6" [pid 496] <... write resumed>) = 4 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] lstat("./5/file0", [pid 497] <... chdir resumed>) = 0 [pid 496] close(3 [pid 497] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 496] <... close resumed>) = 0 [pid 496] symlink("/dev/binderfs", "./binderfs" [pid 497] <... prctl resumed>) = 0 [pid 295] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] getdents64(4, [pid 494] set_robust_list(0x7fb6cd8c89e0, 24 [pid 295] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 494] <... set_robust_list resumed>) = 0 [pid 496] <... symlink resumed>) = 0 [pid 496] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] setpgid(0, 0 [pid 295] getdents64(4, [pid 496] <... futex resumed>) = 0 [pid 497] <... setpgid resumed>) = 0 [pid 295] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 494] memfd_create("syzkaller", 0 [pid 295] rmdir("./5/file0" [pid 496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 494] <... memfd_create resumed>) = 3 [pid 496] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 295] <... rmdir resumed>) = 0 [pid 494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 496] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 494] <... mmap resumed>) = 0x7fb6c54a8000 [pid 497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 496] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 295] getdents64(3, ./strace-static-x86_64: Process 499 attached [pid 497] write(3, "1000", 4 [pid 295] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./5") = 0 [pid 295] mkdir("./6", 0777 [pid 499] set_robust_list(0x7fb6cd8c89e0, 24 [pid 497] <... write resumed>) = 4 [pid 496] <... clone resumed>, parent_tid=[499], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 499 [pid 499] <... set_robust_list resumed>) = 0 [pid 497] close(3 [pid 496] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] memfd_create("syzkaller", 0 [pid 497] <... close resumed>) = 0 [pid 496] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 295] <... mkdir resumed>) = 0 [pid 497] symlink("/dev/binderfs", "./binderfs" [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 499] <... memfd_create resumed>) = 3 [pid 497] <... symlink resumed>) = 0 [pid 495] <... mount resumed>) = 0 [pid 494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 295] <... openat resumed>) = 3 [pid 497] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 295] ioctl(3, LOOP_CLR_FD [pid 495] chdir("./file0") = 0 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 495] ioctl(4, LOOP_CLR_FD) = 0 [pid 295] close(3 [pid 495] close(4) = 0 [pid 295] <... close resumed>) = 0 [pid 495] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 495] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 497] <... futex resumed>) = 0 [pid 495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 495] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 493] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 502 attached [pid 497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 499] <... mmap resumed>) = 0x7fb6c54a8000 [pid 495] <... open resumed>) = 4 [pid 295] <... clone resumed>, child_tidptr=0x5555574565d0) = 502 ./strace-static-x86_64: Process 498 attached [pid 497] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 495] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 495] <... futex resumed>) = 1 [pid 493] <... futex resumed>) = 0 [pid 495] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... mprotect resumed>) = 0 [pid 493] <... futex resumed>) = 0 [pid 495] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 493] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] <... open resumed>) = 5 [pid 495] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 495] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 495] ftruncate(5, 33587195 [pid 493] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] <... ftruncate resumed>) = 0 [pid 495] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 495] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 495] sendfile(4, 5, NULL, 4 [pid 493] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] <... sendfile resumed>) = 4 [pid 495] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 495] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 495] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 493] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] set_robust_list(0x5555574565e0, 24 [pid 499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 498] set_robust_list(0x5555574565e0, 24 [pid 497] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 494] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 503 attached [pid 503] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 503] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] <... set_robust_list resumed>) = 0 [pid 499] <... write resumed>) = 1048576 [pid 498] <... set_robust_list resumed>) = 0 [pid 497] <... clone resumed>, parent_tid=[503], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 503 [pid 494] munmap(0x7fb6c54a8000, 1048576 [pid 497] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] chdir("./6" [pid 497] <... futex resumed>) = 1 [pid 503] <... futex resumed>) = 0 [pid 503] memfd_create("syzkaller", 0) = 3 [pid 497] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 502] <... chdir resumed>) = 0 [pid 499] munmap(0x7fb6c54a8000, 1048576 [pid 498] chdir("./6" [pid 494] <... munmap resumed>) = 0 [pid 502] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 498] <... chdir resumed>) = 0 [pid 502] <... prctl resumed>) = 0 [pid 499] <... munmap resumed>) = 0 [pid 498] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 494] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 502] setpgid(0, 0 [pid 499] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 498] <... prctl resumed>) = 0 [pid 502] <... setpgid resumed>) = 0 [pid 499] <... openat resumed>) = 4 [pid 498] setpgid(0, 0 [pid 494] <... openat resumed>) = 4 [pid 502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 24.212836][ T495] loop3: detected capacity change from 0 to 2048 [pid 499] ioctl(4, LOOP_SET_FD, 3 [pid 498] <... setpgid resumed>) = 0 [pid 494] ioctl(4, LOOP_SET_FD, 3 [pid 502] <... openat resumed>) = 3 [pid 499] <... ioctl resumed>) = 0 [pid 498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 502] write(3, "1000", 4 [pid 503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 502] <... write resumed>) = 4 [pid 498] write(3, "1000", 4 [pid 502] close(3) = 0 [pid 499] close(3 [pid 498] <... write resumed>) = 4 [pid 494] <... ioctl resumed>) = 0 [pid 502] symlink("/dev/binderfs", "./binderfs" [pid 499] <... close resumed>) = 0 [pid 498] close(3 [pid 494] close(3 [pid 499] mkdir("./file0", 0777 [pid 502] <... symlink resumed>) = 0 [pid 498] <... close resumed>) = 0 [pid 499] <... mkdir resumed>) = 0 [pid 498] symlink("/dev/binderfs", "./binderfs") = 0 [pid 502] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 498] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = 0 [pid 498] <... futex resumed>) = 0 [pid 494] <... close resumed>) = 0 [pid 502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 494] mkdir("./file0", 0777 [pid 502] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 498] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 502] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 498] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 494] <... mkdir resumed>) = 0 [pid 502] <... mprotect resumed>) = 0 [pid 498] <... mprotect resumed>) = 0 [pid 502] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 498] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 494] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 498] <... clone resumed>, parent_tid=[506], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 506 [pid 502] <... clone resumed>, parent_tid=[507], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 507 [pid 498] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 503] <... write resumed>) = 1048576 [pid 503] munmap(0x7fb6c54a8000, 1048576) = 0 ./strace-static-x86_64: Process 506 attached [pid 506] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 506] memfd_create("syzkaller", 0) = 3 [pid 503] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 503] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 507 attached [pid 507] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 507] memfd_create("syzkaller", 0) = 3 [pid 507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 499] <... mount resumed>) = 0 [pid 499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 499] chdir("./file0") = 0 [pid 499] ioctl(4, LOOP_CLR_FD) = 0 [pid 499] close(4 [pid 507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 503] <... ioctl resumed>) = 0 [pid 499] <... close resumed>) = 0 [pid 493] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 499] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] <... futex resumed>) = 1 [pid 496] <... futex resumed>) = 0 [pid 493] <... futex resumed>) = 0 [pid 499] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 493] <... mmap resumed>) = 0x7fb6c5587000 [pid 499] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 496] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 499] <... open resumed>) = 4 [pid 493] <... mprotect resumed>) = 0 [pid 499] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 499] <... futex resumed>) = 1 [pid 496] <... futex resumed>) = 0 [pid 499] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... clone resumed>, parent_tid=[511], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 511 [pid 499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 493] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 496] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 0 [pid 499] <... open resumed>) = 5 [pid 493] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 499] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 499] ftruncate(5, 33587195 [pid 496] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] <... ftruncate resumed>) = 0 [pid 499] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 499] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 499] sendfile(4, 5, NULL, 4 [pid 496] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] <... sendfile resumed>) = 4 [pid 499] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 499] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 499] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 496] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... write resumed>) = 1048576 [pid 506] <... write resumed>) = 1048576 [pid 503] close(3 [pid 494] <... mount resumed>) = 0 [pid 494] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 494] chdir("./file0") = 0 [pid 494] ioctl(4, LOOP_CLR_FD) = 0 [pid 494] close(4 [pid 507] munmap(0x7fb6c54a8000, 1048576 [pid 506] munmap(0x7fb6c54a8000, 1048576 [pid 503] <... close resumed>) = 0 [pid 494] <... close resumed>) = 0 [pid 494] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 494] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 511 attached [pid 511] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 511] sendfile(4, 5, NULL, 4) = 4 [pid 511] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = 0 [pid 493] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [ 24.266243][ T499] loop5: detected capacity change from 0 to 2048 [ 24.273165][ T494] loop2: detected capacity change from 0 to 2048 [ 24.291165][ T503] loop1: detected capacity change from 0 to 2048 [pid 507] <... munmap resumed>) = 0 [pid 506] <... munmap resumed>) = 0 [pid 503] mkdir("./file0", 0777 [pid 492] <... futex resumed>) = 0 [pid 507] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 506] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 507] <... openat resumed>) = 4 [pid 506] <... openat resumed>) = 4 [pid 503] <... mkdir resumed>) = 0 [pid 492] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] ioctl(4, LOOP_SET_FD, 3 [pid 506] ioctl(4, LOOP_SET_FD, 3 [pid 492] <... futex resumed>) = 1 [pid 494] <... futex resumed>) = 0 [pid 494] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 492] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 494] <... open resumed>) = 4 [pid 494] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue" [pid 494] <... futex resumed>) = 1 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... open resumed>) = 5 [pid 494] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [pid 494] ftruncate(5, 33587195 [pid 492] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] <... ftruncate resumed>) = 0 [pid 494] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... futex resumed>) = 0 [pid 492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 494] sendfile(4, 5, NULL, 4 [pid 492] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] <... sendfile resumed>) = 4 [pid 492] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 494] <... futex resumed>) = 0 [pid 494] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 492] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... ioctl resumed>) = 0 [pid 506] <... ioctl resumed>) = 0 [pid 493] <... futex resumed>) = ? [pid 511] +++ killed by SIGBUS +++ [pid 507] close(3 [pid 506] close(3) = 0 [pid 507] <... close resumed>) = 0 [pid 507] mkdir("./file0", 0777 [pid 506] mkdir("./file0", 0777) = 0 [pid 507] <... mkdir resumed>) = 0 [pid 495] <... mmap resumed>) = ? [pid 496] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 496] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 496] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 496] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[513], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 513 [pid 496] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 506] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 513 attached [pid 513] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 513] sendfile(4, 5, NULL, 4) = 4 [pid 513] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = 0 [pid 496] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [ 24.338824][ T511] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.355151][ T506] loop4: detected capacity change from 0 to 2048 [ 24.361496][ T507] loop0: detected capacity change from 0 to 2048 [pid 513] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 503] <... mount resumed>) = 0 [pid 503] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 503] chdir("./file0") = 0 [pid 503] ioctl(4, LOOP_CLR_FD) = 0 [pid 503] close(4) = 0 [pid 495] +++ killed by SIGBUS +++ [pid 493] +++ killed by SIGBUS +++ [pid 496] <... futex resumed>) = ? [pid 513] +++ killed by SIGBUS +++ [pid 499] <... mmap resumed>) = ? [pid 499] +++ killed by SIGBUS +++ [pid 496] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=493, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7} --- [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=496, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8} --- [pid 503] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 300] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 503] <... futex resumed>) = 1 [pid 497] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 497] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 503] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 497] <... futex resumed>) = 0 [pid 300] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 497] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... openat resumed>) = 3 [pid 503] <... open resumed>) = 4 [pid 302] <... openat resumed>) = 3 [pid 300] fstat(3, [pid 302] fstat(3, [pid 300] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(3, [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 503] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] getdents64(3, [pid 300] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 302] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 300] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 503] <... futex resumed>) = 1 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 503] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 302] lstat("./6/binderfs", [pid 300] lstat("./6/binderfs", [pid 503] <... open resumed>) = 5 [pid 302] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 300] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 302] unlink("./6/binderfs" [pid 503] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] unlink("./6/binderfs" [pid 302] <... unlink resumed>) = 0 [pid 300] <... unlink resumed>) = 0 [pid 302] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 300] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 503] <... futex resumed>) = 1 [pid 497] <... futex resumed>) = 0 [pid 503] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 503] ftruncate(5, 33587195) = 0 [pid 503] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 503] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... futex resumed>) = 0 [pid 503] sendfile(4, 5, NULL, 4 [pid 497] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] <... sendfile resumed>) = 4 [pid 503] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 503] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... futex resumed>) = 0 [pid 503] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 497] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 492] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 492] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 492] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 492] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 492] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[516], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 516 [pid 492] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 516 attached [pid 516] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 516] sendfile(4, 5, NULL, 4) = 4 [pid 516] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 516] <... futex resumed>) = 1 [pid 492] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 24.385245][ T513] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 492] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./6/file0") = 0 [pid 302] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./6") = 0 [pid 302] mkdir("./7", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 497] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 497] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] <... clone resumed>, child_tidptr=0x5555574565d0) = 519 [pid 497] <... mmap resumed>) = 0x7fb6c5587000 [pid 497] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 497] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[520], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 520 [pid 497] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... mount resumed>) = 0 [pid 507] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 507] chdir("./file0") = 0 [pid 507] ioctl(4, LOOP_CLR_FD) = 0 [pid 507] close(4) = 0 [pid 507] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... open resumed>) = 4 [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 507] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 507] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 502] <... futex resumed>) = 0 [pid 507] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 502] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... open resumed>) = 5 [pid 507] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 507] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 502] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] ftruncate(5, 33587195 [pid 502] <... futex resumed>) = 0 [pid 507] <... ftruncate resumed>) = 0 [pid 502] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 507] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 502] <... futex resumed>) = 0 [pid 507] sendfile(4, 5, NULL, 4 [pid 502] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... sendfile resumed>) = 4 [pid 507] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 507] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 502] <... futex resumed>) = 0 [pid 507] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 502] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 519 attached [pid 300] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, [pid 506] <... mount resumed>) = 0 [pid 300] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 300] close(4 [pid 506] <... openat resumed>) = 3 [pid 506] chdir("./file0") = 0 [pid 506] ioctl(4, LOOP_CLR_FD) = 0 [pid 506] close(4) = 0 [pid 506] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 506] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 498] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 498] <... futex resumed>) = 0 [pid 506] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 498] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... close resumed>) = 0 [pid 300] rmdir("./6/file0" [pid 506] <... open resumed>) = 4 [pid 300] <... rmdir resumed>) = 0 [pid 506] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 506] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 498] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 506] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 498] <... futex resumed>) = 0 [pid 506] <... open resumed>) = 5 [pid 498] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 506] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 506] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 498] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 498] <... futex resumed>) = 0 [pid 506] ftruncate(5, 33587195 [pid 498] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] set_robust_list(0x5555574565e0, 24 [pid 506] <... ftruncate resumed>) = 0 [pid 519] <... set_robust_list resumed>) = 0 [pid 519] chdir("./7" [pid 506] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 519] <... chdir resumed>) = 0 [pid 506] <... futex resumed>) = 1 [pid 498] <... futex resumed>) = 0 [pid 300] getdents64(3, [pid 506] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 498] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 498] <... futex resumed>) = 0 [pid 506] sendfile(4, 5, NULL, 4 [pid 498] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 506] <... sendfile resumed>) = 4 [pid 300] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 519] <... prctl resumed>) = 0 [pid 300] close(3 [pid 519] setpgid(0, 0 [pid 300] <... close resumed>) = 0 [pid 519] <... setpgid resumed>) = 0 [pid 300] rmdir("./6" [pid 519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] <... rmdir resumed>) = 0 [pid 519] <... openat resumed>) = 3 [pid 300] mkdir("./7", 0777 [pid 519] write(3, "1000", 4 [pid 300] <... mkdir resumed>) = 0 [pid 519] <... write resumed>) = 4 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 519] close(3 [pid 300] <... openat resumed>) = 3 [pid 519] <... close resumed>) = 0 [pid 300] ioctl(3, LOOP_CLR_FD [pid 519] symlink("/dev/binderfs", "./binderfs" [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 519] <... symlink resumed>) = 0 [pid 506] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] close(3 [pid 506] <... futex resumed>) = 1 [pid 498] <... futex resumed>) = 0 [pid 506] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 498] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 498] <... futex resumed>) = 0 [pid 506] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 498] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... close resumed>) = 0 [pid 519] <... futex resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 519] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 300] <... clone resumed>, child_tidptr=0x5555574565d0) = 522 [pid 519] <... mprotect resumed>) = 0 [ 24.448689][ T516] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 519] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[523], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 523 [pid 492] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 519] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 494] <... mmap resumed>) = 0x20000000 [pid 494] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 516] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 494] <... futex resumed>) = ? [pid 494] +++ killed by SIGBUS +++ [pid 516] +++ killed by SIGBUS +++ [pid 492] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=492, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 520 attached [pid 520] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 299] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 299] unlink("./6/binderfs") = 0 [pid 299] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 520] sendfile(4, 5, NULL, 4) = 4 [pid 520] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 522 attached [pid 522] set_robust_list(0x5555574565e0, 24) = 0 [pid 522] chdir("./7") = 0 [pid 522] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 522] setpgid(0, 0) = 0 [pid 522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 522] write(3, "1000", 4) = 4 [pid 522] close(3) = 0 [pid 522] symlink("/dev/binderfs", "./binderfs") = 0 [pid 522] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 522] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 522] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[524], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 524 [pid 522] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 524 attached [pid 524] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 524] memfd_create("syzkaller", 0) = 3 [pid 524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] <... futex resumed>) = 0 [pid 497] <... futex resumed>) = 1 [pid 524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 524] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 524] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 524] ioctl(4, LOOP_SET_FD, 3 [pid 502] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 498] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 497] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = 0 [pid 498] <... futex resumed>) = 0 [pid 502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 502] <... mmap resumed>) = 0x7fb6c5587000 [pid 498] <... mmap resumed>) = 0x7fb6c5587000 [pid 502] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 498] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 502] <... mprotect resumed>) = 0 [pid 502] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 498] <... mprotect resumed>) = 0 [pid 498] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 502] <... clone resumed>, parent_tid=[525], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 525 [pid 498] <... clone resumed>, parent_tid=[526], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 526 [pid 502] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 526 attached [pid 526] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 526] sendfile(4, 5, NULL, 4) = 4 ./strace-static-x86_64: Process 523 attached [pid 523] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 523] memfd_create("syzkaller", 0 [pid 526] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] <... futex resumed>) = 1 ./strace-static-x86_64: Process 525 attached [pid 525] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 525] sendfile(4, 5, NULL, 4) = 4 [pid 525] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 525] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... memfd_create resumed>) = 3 [pid 523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 524] <... ioctl resumed>) = 0 [pid 524] close(3) = 0 [pid 524] mkdir("./file0", 0777) = 0 [ 24.535201][ T520] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.543181][ T524] loop3: detected capacity change from 0 to 2048 [ 24.561130][ T526] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 524] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 523] <... write resumed>) = 1048576 [pid 523] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 523] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 523] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 523] close(3) = 0 [pid 523] mkdir("./file0", 0777) = 0 [pid 523] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 498] <... futex resumed>) = ? [pid 497] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 524] <... mount resumed>) = 0 [pid 506] <... mmap resumed>) = ? [pid 526] +++ killed by SIGBUS +++ [pid 524] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 524] chdir("./file0") = 0 [pid 524] ioctl(4, LOOP_CLR_FD) = 0 [pid 524] close(4) = 0 [pid 524] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 524] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 522] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 506] +++ killed by SIGBUS +++ [pid 498] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=498, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 520] +++ killed by SIGBUS +++ [pid 524] <... open resumed>) = 4 [pid 301] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 524] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... mmap resumed>) = ? [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 524] <... futex resumed>) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 522] <... futex resumed>) = 0 [pid 301] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 522] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... open resumed>) = 5 [pid 524] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... openat resumed>) = 3 [pid 524] <... futex resumed>) = 1 [pid 522] <... futex resumed>) = 0 [pid 301] fstat(3, [pid 524] ftruncate(5, 33587195 [pid 522] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 522] <... futex resumed>) = 0 [pid 524] <... ftruncate resumed>) = 0 [pid 522] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] getdents64(3, [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 524] <... futex resumed>) = 0 [pid 522] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 503] +++ killed by SIGBUS +++ [pid 497] +++ killed by SIGBUS +++ [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 522] <... futex resumed>) = 0 [pid 301] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 524] sendfile(4, 5, NULL, 4 [pid 522] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=497, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7} --- [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 524] <... sendfile resumed>) = 4 [pid 301] lstat("./6/binderfs", [pid 524] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 524] <... futex resumed>) = 1 [pid 522] <... futex resumed>) = 0 [pid 301] unlink("./6/binderfs" [pid 524] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 522] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... unlink resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 524] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 522] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./6/file0") = 0 [pid 299] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./6") = 0 [pid 299] mkdir("./7", 0777) = 0 [pid 298] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 531 ./strace-static-x86_64: Process 531 attached [pid 531] set_robust_list(0x5555574565e0, 24) = 0 [pid 298] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 298] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 298] unlink("./6/binderfs") = 0 [pid 298] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 531] chdir("./7") = 0 [pid 531] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 531] setpgid(0, 0) = 0 [pid 531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 531] write(3, "1000", 4) = 4 [pid 531] close(3) = 0 [pid 531] symlink("/dev/binderfs", "./binderfs") = 0 [pid 531] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 531] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 531] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 531] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[532], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 532 [pid 531] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 531] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 532 attached [pid 532] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [ 24.577611][ T525] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.596228][ T523] loop5: detected capacity change from 0 to 2048 [pid 532] memfd_create("syzkaller", 0) = 3 [pid 532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 301] <... umount2 resumed>) = 0 [pid 532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 532] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 532] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 532] ioctl(4, LOOP_SET_FD, 3 [pid 502] <... futex resumed>) = ? [pid 301] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 525] +++ killed by SIGBUS +++ [pid 507] <... mmap resumed>) = ? [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] lstat("./6/file0", [pid 507] +++ killed by SIGBUS +++ [pid 502] +++ killed by SIGBUS +++ [pid 301] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=502, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7} --- [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] fstat(4, [pid 295] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] getdents64(4, [pid 295] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 532] <... ioctl resumed>) = 0 [pid 295] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 295] getdents64(3, [pid 301] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 295] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 301] close(4 [pid 295] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] <... close resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] rmdir("./6/file0" [pid 295] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 295] unlink("./6/binderfs" [pid 301] getdents64(3, [pid 295] <... unlink resumed>) = 0 [pid 295] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 532] close(3) = 0 [pid 532] mkdir("./file0", 0777) = 0 [pid 532] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 301] close(3) = 0 [pid 301] rmdir("./6") = 0 [pid 301] mkdir("./7", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 523] <... mount resumed>) = 0 [pid 523] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 523] chdir("./file0") = 0 [pid 523] ioctl(4, LOOP_CLR_FD) = 0 [pid 523] close(4) = 0 [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 523] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 519] <... futex resumed>) = 0 [pid 523] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 519] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... open resumed>) = 4 [pid 523] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 519] <... futex resumed>) = 0 [pid 523] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 519] <... futex resumed>) = 0 [pid 523] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 519] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... open resumed>) = 5 [pid 523] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 519] <... futex resumed>) = 0 [pid 523] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 519] <... futex resumed>) = 0 [pid 523] ftruncate(5, 33587195 [pid 519] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... ftruncate resumed>) = 0 [pid 523] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 519] <... futex resumed>) = 0 [pid 523] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 523] sendfile(4, 5, NULL, 4 [pid 519] <... futex resumed>) = 0 [pid 523] <... sendfile resumed>) = 4 [pid 522] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 519] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 519] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 519] <... futex resumed>) = 0 [pid 301] <... clone resumed>, child_tidptr=0x5555574565d0) = 533 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 519] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./6/file0") = 0 [pid 298] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./6") = 0 [pid 298] mkdir("./7", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 534 ./strace-static-x86_64: Process 534 attached [pid 534] set_robust_list(0x5555574565e0, 24) = 0 [pid 522] <... mmap resumed>) = 0x7fb6c5587000 [pid 522] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 522] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[535], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 535 [pid 522] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] chdir("./7") = 0 [pid 534] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 534] <... prctl resumed>) = 0 [pid 534] setpgid(0, 0) = 0 [pid 534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 534] write(3, "1000", 4) = 4 [pid 534] close(3) = 0 [pid 534] symlink("/dev/binderfs", "./binderfs") = 0 [pid 534] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 534] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 534] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[537], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 537 [pid 534] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 537 attached [pid 537] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 537] memfd_create("syzkaller", 0) = 3 [pid 537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 ./strace-static-x86_64: Process 535 attached [pid 535] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 295] <... umount2 resumed>) = 0 [pid 535] sendfile(4, 5, NULL, 4 [pid 537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 535] <... sendfile resumed>) = 4 [pid 535] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 535] <... futex resumed>) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 24.659190][ T532] loop2: detected capacity change from 0 to 2048 [pid 522] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... write resumed>) = 1048576 [pid 537] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 537] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 537] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 533 attached [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 533] set_robust_list(0x5555574565e0, 24 [pid 295] lstat("./6/file0", [pid 537] <... ioctl resumed>) = 0 [pid 537] close(3) = 0 [pid 537] mkdir("./file0", 0777) = 0 [pid 537] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue" [pid 519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 519] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 519] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 519] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[539], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 539 [pid 519] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 533] <... set_robust_list resumed>) = 0 [pid 295] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 533] chdir("./7" [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 533] <... chdir resumed>) = 0 [pid 533] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 295] <... openat resumed>) = 4 [pid 533] <... prctl resumed>) = 0 [pid 295] fstat(4, [pid 533] setpgid(0, 0 [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 533] <... setpgid resumed>) = 0 [pid 533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 295] getdents64(4, [pid 533] <... openat resumed>) = 3 [pid 295] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 533] write(3, "1000", 4 [pid 295] getdents64(4, [pid 533] <... write resumed>) = 4 [pid 295] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 533] close(3 [pid 295] close(4 [pid 533] <... close resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 533] symlink("/dev/binderfs", "./binderfs" [pid 295] rmdir("./6/file0" [pid 533] <... symlink resumed>) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 533] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] getdents64(3, [pid 533] <... futex resumed>) = 0 [pid 295] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 532] <... mount resumed>) = 0 [pid 533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 295] close(3 [pid 532] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 532] chdir("./file0") = 0 [pid 532] ioctl(4, LOOP_CLR_FD [pid 295] <... close resumed>) = 0 [pid 532] <... ioctl resumed>) = 0 [pid 533] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 532] close(4 [pid 295] rmdir("./6" [pid 533] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 532] <... close resumed>) = 0 [pid 532] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 532] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 531] <... futex resumed>) = 0 [pid 531] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... rmdir resumed>) = 0 [pid 533] <... mprotect resumed>) = 0 [pid 532] <... futex resumed>) = 0 [pid 531] <... futex resumed>) = 1 [pid 532] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 531] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 295] mkdir("./7", 0777 [pid 532] <... open resumed>) = 4 [pid 532] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 531] <... futex resumed>) = 0 [pid 532] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 531] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... mkdir resumed>) = 0 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] <... futex resumed>) = 0 [pid 533] <... clone resumed>, parent_tid=[541], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 541 [pid 532] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 531] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 533] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... open resumed>) = 5 [pid 532] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 531] <... futex resumed>) = 0 [pid 532] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 531] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] <... futex resumed>) = 0 [pid 532] ftruncate(5, 33587195 [pid 533] <... futex resumed>) = 0 [pid 531] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 532] <... ftruncate resumed>) = 0 ./strace-static-x86_64: Process 539 attached [pid 532] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... openat resumed>) = 3 [pid 539] set_robust_list(0x7fb6c55a79e0, 24 [pid 532] <... futex resumed>) = 1 [pid 531] <... futex resumed>) = 0 [pid 295] ioctl(3, LOOP_CLR_FD [pid 539] <... set_robust_list resumed>) = 0 [pid 532] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 531] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] <... futex resumed>) = 0 [pid 539] sendfile(4, 5, NULL, 4 [pid 532] sendfile(4, 5, NULL, 4 [pid 531] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 539] <... sendfile resumed>) = 4 [pid 532] <... sendfile resumed>) = 4 [pid 295] close(3 [pid 539] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... close resumed>) = 0 [pid 539] <... futex resumed>) = 1 [pid 532] <... futex resumed>) = 1 [pid 531] <... futex resumed>) = 0 [pid 519] <... futex resumed>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 539] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 531] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 519] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] <... futex resumed>) = 0 [pid 519] <... futex resumed>) = 0 [pid 532] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 531] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 295] <... clone resumed>, child_tidptr=0x5555574565d0) = 542 [ 24.712508][ T535] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.716371][ T537] loop1: detected capacity change from 0 to 2048 [pid 537] <... mount resumed>) = 0 [pid 537] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 537] chdir("./file0") = 0 ./strace-static-x86_64: Process 541 attached [pid 537] ioctl(4, LOOP_CLR_FD [pid 541] set_robust_list(0x7fb6cd8c89e0, 24 [pid 537] <... ioctl resumed>) = 0 [pid 537] close(4) = 0 [pid 537] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 534] <... futex resumed>) = 0 [pid 537] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 534] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... open resumed>) = 4 [pid 537] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 534] <... futex resumed>) = 0 [pid 537] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 534] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 534] <... futex resumed>) = 0 [pid 541] <... set_robust_list resumed>) = 0 [pid 537] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 534] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... open resumed>) = 5 ./strace-static-x86_64: Process 542 attached [pid 541] memfd_create("syzkaller", 0 [pid 537] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 537] <... futex resumed>) = 1 [pid 534] <... futex resumed>) = 0 [pid 541] <... memfd_create resumed>) = 3 [pid 537] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 534] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 534] <... futex resumed>) = 0 [pid 542] set_robust_list(0x5555574565e0, 24 [pid 541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 537] ftruncate(5, 33587195 [pid 534] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... set_robust_list resumed>) = 0 [pid 541] <... mmap resumed>) = 0x7fb6c54a8000 [pid 537] <... ftruncate resumed>) = 0 [pid 537] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 534] <... futex resumed>) = 0 [pid 537] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 534] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 534] <... futex resumed>) = 0 [pid 537] sendfile(4, 5, NULL, 4 [pid 534] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... sendfile resumed>) = 4 [pid 537] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 534] <... futex resumed>) = 0 [pid 537] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 534] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 534] <... futex resumed>) = 0 [pid 537] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 534] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] chdir("./7") = 0 [pid 542] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 542] setpgid(0, 0) = 0 [pid 542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 542] write(3, "1000", 4) = 4 [pid 542] close(3 [pid 531] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 531] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... close resumed>) = 0 [pid 531] <... futex resumed>) = 0 [pid 542] symlink("/dev/binderfs", "./binderfs" [pid 531] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 531] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 542] <... symlink resumed>) = 0 [pid 531] <... mprotect resumed>) = 0 [pid 542] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 531] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 531] <... clone resumed>, parent_tid=[544], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 544 [pid 542] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 531] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 531] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... mprotect resumed>) = 0 [pid 542] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 539] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 542] <... clone resumed>, parent_tid=[545], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 545 [pid 542] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 535] +++ killed by SIGBUS +++ [pid 524] <... mmap resumed>) = ? [pid 524] +++ killed by SIGBUS +++ [pid 522] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=522, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 523] <... mmap resumed>) = ? [pid 300] <... restart_syscall resumed>) = 0 [pid 539] +++ killed by SIGBUS +++ [pid 300] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 300] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 300] unlink("./7/binderfs") = 0 ./strace-static-x86_64: Process 545 attached [pid 545] set_robust_list(0x7fb6cd8c89e0, 24 [pid 300] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 544 attached [pid 545] <... set_robust_list resumed>) = 0 [ 24.764440][ T539] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 545] memfd_create("syzkaller", 0 [pid 544] set_robust_list(0x7fb6c55a79e0, 24 [pid 545] <... memfd_create resumed>) = 3 [pid 544] <... set_robust_list resumed>) = 0 [pid 545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 544] sendfile(4, 5, NULL, 4 [pid 545] <... mmap resumed>) = 0x7fb6c54a8000 [pid 544] <... sendfile resumed>) = 4 [pid 544] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 531] <... futex resumed>) = 0 [pid 531] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... write resumed>) = 1048576 [pid 541] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 541] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 541] ioctl(4, LOOP_SET_FD, 3 [pid 531] <... futex resumed>) = 0 [pid 531] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] +++ killed by SIGBUS +++ [pid 519] +++ killed by SIGBUS +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=519, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 302] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 302] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 302] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 302] unlink("./7/binderfs") = 0 [pid 302] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 534] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 534] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 534] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 534] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 534] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[546], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 546 [pid 534] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... ioctl resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 541] close(3) = 0 [pid 300] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 541] mkdir("./file0", 0777 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 541] <... mkdir resumed>) = 0 [pid 541] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue" [pid 300] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./7/file0") = 0 [pid 300] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./7") = 0 [pid 300] mkdir("./8", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 548 ./strace-static-x86_64: Process 548 attached [pid 548] set_robust_list(0x5555574565e0, 24) = 0 [pid 548] chdir("./8") = 0 [pid 548] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 548] setpgid(0, 0) = 0 [pid 548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 548] <... openat resumed>) = 3 [pid 548] write(3, "1000", 4) = 4 [pid 548] close(3./strace-static-x86_64: Process 546 attached ) = 0 [pid 546] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 546] sendfile(4, 5, NULL, 4) = 4 [pid 548] symlink("/dev/binderfs", "./binderfs" [pid 546] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... futex resumed>) = 1 [pid 548] <... symlink resumed>) = 0 [pid 548] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 24.828471][ T544] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.833210][ T541] loop4: detected capacity change from 0 to 2048 [pid 548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 532] <... mmap resumed>) = 0x20000000 [pid 531] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 548] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 532] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] <... mprotect resumed>) = 0 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 548] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[550], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 550 [pid 548] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 541] <... mount resumed>) = 0 [pid 541] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 541] chdir("./file0") = 0 [pid 541] ioctl(4, LOOP_CLR_FD) = 0 [pid 541] close(4) = 0 [pid 541] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 533] <... futex resumed>) = 0 [pid 541] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 541] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 533] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... open resumed>) = 4 [pid 541] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 533] <... futex resumed>) = 0 [pid 541] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 541] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 533] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... open resumed>) = 5 [pid 541] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 533] <... futex resumed>) = 0 [pid 541] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 541] ftruncate(5, 33587195 [pid 533] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... ftruncate resumed>) = 0 [pid 541] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 533] <... futex resumed>) = 0 [pid 541] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 541] sendfile(4, 5, NULL, 4 [pid 533] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... sendfile resumed>) = 4 [pid 541] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 533] <... futex resumed>) = 0 [pid 541] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 541] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 533] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 550 attached [pid 546] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 545] <... write resumed>) = 1048576 [pid 544] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 537] <... mmap resumed>) = 0x100000 [pid 302] <... umount2 resumed>) = 0 [pid 550] set_robust_list(0x7fb6cd8c89e0, 24 [pid 545] munmap(0x7fb6c54a8000, 1048576 [pid 537] +++ killed by SIGBUS +++ [pid 534] <... futex resumed>) = ? [pid 532] <... futex resumed>) = ? [pid 302] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 550] <... set_robust_list resumed>) = 0 [pid 546] +++ killed by SIGBUS +++ [pid 545] <... munmap resumed>) = 0 [pid 544] +++ killed by SIGBUS +++ [pid 534] +++ killed by SIGBUS +++ [pid 532] +++ killed by SIGBUS +++ [pid 531] +++ killed by SIGBUS +++ [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 550] memfd_create("syzkaller", 0 [pid 545] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 302] lstat("./7/file0", [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=531, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=534, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8} --- [pid 550] <... memfd_create resumed>) = 3 [pid 545] <... openat resumed>) = 4 [pid 302] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 24.886484][ T546] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 545] ioctl(4, LOOP_SET_FD, 3 [pid 302] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 550] <... mmap resumed>) = 0x7fb6c54a8000 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 302] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 550] <... write resumed>) = 1048576 [pid 545] <... ioctl resumed>) = 0 [pid 302] <... openat resumed>) = 4 [pid 545] close(3 [pid 302] fstat(4, [pid 550] munmap(0x7fb6c54a8000, 1048576 [pid 545] <... close resumed>) = 0 [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 550] <... munmap resumed>) = 0 [pid 545] mkdir("./file0", 0777 [pid 302] getdents64(4, [pid 550] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 545] <... mkdir resumed>) = 0 [pid 302] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 550] <... openat resumed>) = 4 [pid 545] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 302] getdents64(4, [pid 299] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 550] ioctl(4, LOOP_SET_FD, 3 [pid 302] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] close(4 [pid 299] <... openat resumed>) = 3 [pid 298] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] <... close resumed>) = 0 [pid 299] fstat(3, [pid 298] <... openat resumed>) = 3 [pid 302] rmdir("./7/file0" [pid 299] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] fstat(3, [pid 299] getdents64(3, [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 299] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 298] getdents64(3, [pid 302] getdents64(3, [pid 299] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 302] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] close(3 [pid 299] lstat("./7/binderfs", [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... close resumed>) = 0 [pid 299] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 298] lstat("./7/binderfs", [pid 550] <... ioctl resumed>) = 0 [pid 302] rmdir("./7" [pid 299] unlink("./7/binderfs" [pid 298] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 299] <... unlink resumed>) = 0 [pid 298] unlink("./7/binderfs" [pid 550] close(3 [pid 302] <... rmdir resumed>) = 0 [pid 299] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] <... unlink resumed>) = 0 [pid 550] <... close resumed>) = 0 [pid 533] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] mkdir("./8", 0777 [pid 298] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 550] mkdir("./file0", 0777 [pid 533] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... mkdir resumed>) = 0 [pid 533] <... futex resumed>) = 0 [pid 533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 550] <... mkdir resumed>) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 550] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 545] <... mount resumed>) = 0 [pid 533] <... mmap resumed>) = 0x7fb6c5587000 [pid 302] <... openat resumed>) = 3 [pid 545] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 533] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 545] <... openat resumed>) = 3 [pid 533] <... mprotect resumed>) = 0 [pid 545] chdir("./file0" [pid 533] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 302] ioctl(3, LOOP_CLR_FD [pid 545] <... chdir resumed>) = 0 [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 545] ioctl(4, LOOP_CLR_FD [pid 533] <... clone resumed>, parent_tid=[553], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 553 [pid 545] <... ioctl resumed>) = 0 [pid 533] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] close(4 [pid 533] <... futex resumed>) = 0 [pid 302] close(3 [pid 545] <... close resumed>) = 0 [pid 533] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 542] <... futex resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 545] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 542] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] <... futex resumed>) = 0 [pid 545] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 542] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... open resumed>) = 4 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 545] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 542] <... futex resumed>) = 0 [pid 545] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 542] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] <... futex resumed>) = 0 [pid 545] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 542] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... open resumed>) = 5 [pid 545] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 542] <... futex resumed>) = 0 [pid 545] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 542] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] <... futex resumed>) = 0 [pid 545] ftruncate(5, 33587195 [pid 542] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... ftruncate resumed>) = 0 [pid 545] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 542] <... futex resumed>) = 0 [pid 545] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 542] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] <... futex resumed>) = 0 [pid 545] sendfile(4, 5, NULL, 4 [pid 542] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... sendfile resumed>) = 4 [pid 302] <... clone resumed>, child_tidptr=0x5555574565d0) = 555 [pid 545] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 542] <... futex resumed>) = 0 [pid 545] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 542] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] <... futex resumed>) = 0 [ 24.942881][ T545] loop0: detected capacity change from 0 to 2048 [ 24.962453][ T550] loop3: detected capacity change from 0 to 2048 [pid 545] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 542] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 553 attached [pid 553] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 553] sendfile(4, 5, NULL, 4) = 4 [pid 553] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] <... futex resumed>) = 0 [pid 533] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 533] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 553] <... futex resumed>) = 1 ./strace-static-x86_64: Process 555 attached [pid 553] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 555] set_robust_list(0x5555574565e0, 24 [pid 550] <... mount resumed>) = 0 [pid 550] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 555] <... set_robust_list resumed>) = 0 [pid 550] <... openat resumed>) = 3 [pid 298] <... umount2 resumed>) = 0 [pid 555] chdir("./8" [pid 550] chdir("./file0" [pid 298] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 555] <... chdir resumed>) = 0 [pid 550] <... chdir resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 555] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 550] ioctl(4, LOOP_CLR_FD [pid 298] lstat("./7/file0", [pid 555] <... prctl resumed>) = 0 [pid 550] <... ioctl resumed>) = 0 [pid 555] setpgid(0, 0 [pid 550] close(4 [pid 541] <... mmap resumed>) = ? [pid 533] <... futex resumed>) = ? [pid 298] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 555] <... setpgid resumed>) = 0 [pid 553] +++ killed by SIGBUS +++ [pid 550] <... close resumed>) = 0 [pid 298] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 550] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 555] <... openat resumed>) = 3 [pid 550] <... futex resumed>) = 1 [pid 548] <... futex resumed>) = 0 [pid 298] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 548] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... openat resumed>) = 4 [pid 548] <... futex resumed>) = 0 [pid 555] write(3, "1000", 4 [pid 550] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 548] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] fstat(4, [pid 550] <... open resumed>) = 4 [pid 555] <... write resumed>) = 4 [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 555] close(3 [pid 550] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(4, [pid 555] <... close resumed>) = 0 [pid 298] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 555] symlink("/dev/binderfs", "./binderfs" [pid 550] <... futex resumed>) = 1 [pid 548] <... futex resumed>) = 0 [pid 298] getdents64(4, [pid 548] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 555] <... symlink resumed>) = 0 [pid 548] <... futex resumed>) = 0 [pid 298] close(4 [pid 550] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 548] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... close resumed>) = 0 [pid 550] <... open resumed>) = 5 [pid 555] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] rmdir("./7/file0" [pid 550] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... rmdir resumed>) = 0 [pid 555] <... futex resumed>) = 0 [pid 550] <... futex resumed>) = 1 [pid 548] <... futex resumed>) = 0 [pid 555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 550] ftruncate(5, 33587195 [pid 548] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(3, [pid 548] <... futex resumed>) = 0 [pid 555] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 548] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 555] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 550] <... ftruncate resumed>) = 0 [pid 298] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 555] <... mprotect resumed>) = 0 [pid 550] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] close(3 [pid 550] <... futex resumed>) = 1 [pid 548] <... futex resumed>) = 0 [pid 555] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 298] <... close resumed>) = 0 [pid 550] sendfile(4, 5, NULL, 4 [pid 548] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] <... sendfile resumed>) = 4 [pid 555] <... clone resumed>, parent_tid=[557], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 557 [pid 550] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] rmdir("./7" [pid 548] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... rmdir resumed>) = 0 [pid 548] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... futex resumed>) = 0 [pid 555] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] mkdir("./8", 0777 [pid 550] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 548] <... futex resumed>) = 0 [pid 555] <... futex resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 548] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 555] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 542] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 542] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] <... openat resumed>) = 3 [pid 542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 542] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 542] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[558], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 558 [pid 542] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... umount2 resumed>) = 0 [pid 298] <... clone resumed>, child_tidptr=0x5555574565d0) = 559 ./strace-static-x86_64: Process 559 attached [pid 559] set_robust_list(0x5555574565e0, 24) = 0 [pid 559] chdir("./8") = 0 [pid 559] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 559] setpgid(0, 0) = 0 [pid 559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 559] write(3, "1000", 4) = 4 [pid 559] close(3) = 0 [pid 559] symlink("/dev/binderfs", "./binderfs") = 0 [pid 559] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 559] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 559] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 299] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 559] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[560], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 560 [pid 559] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 559] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 25.034237][ T553] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 299] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./7/file0") = 0 [pid 299] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./7") = 0 [pid 299] mkdir("./8", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 557 attached [pid 541] +++ killed by SIGBUS +++ [pid 533] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=533, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 557] set_robust_list(0x7fb6cd8c89e0, 24 [pid 299] <... clone resumed>, child_tidptr=0x5555574565d0) = 561 [pid 301] <... restart_syscall resumed>) = 0 [pid 557] <... set_robust_list resumed>) = 0 [pid 301] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(3, [pid 557] memfd_create("syzkaller", 0 [pid 301] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 301] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 301] unlink("./7/binderfs") = 0 [pid 301] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 557] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 561 attached [pid 561] set_robust_list(0x5555574565e0, 24) = 0 [pid 561] chdir("./8") = 0 [pid 561] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 561] setpgid(0, 0) = 0 [pid 561] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 561] write(3, "1000", 4) = 4 [pid 561] close(3) = 0 [pid 561] symlink("/dev/binderfs", "./binderfs") = 0 [pid 561] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 561] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 561] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[562], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 562 [pid 561] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 561] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 557] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 ./strace-static-x86_64: Process 560 attached ./strace-static-x86_64: Process 558 attached [pid 560] set_robust_list(0x7fb6cd8c89e0, 24 [pid 558] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 560] <... set_robust_list resumed>) = 0 [pid 558] sendfile(4, 5, NULL, 4 [pid 560] memfd_create("syzkaller", 0 [pid 558] <... sendfile resumed>) = 4 [pid 558] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = 0 [pid 560] <... memfd_create resumed>) = 3 [pid 542] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 558] <... futex resumed>) = 1 [pid 548] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 548] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 548] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 548] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[563], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 563 [pid 548] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] <... mmap resumed>) = 0x7fb6c54a8000 [pid 557] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 563 attached [pid 563] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 563] sendfile(4, 5, NULL, 4) = 4 [pid 563] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 548] <... futex resumed>) = 0 [pid 548] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 562 attached [pid 560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 557] <... write resumed>) = 1048576 [pid 562] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 562] memfd_create("syzkaller", 0) = 3 [pid 562] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 562] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 557] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 557] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 542] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 560] <... write resumed>) = 1048576 [pid 557] <... openat resumed>) = 4 [ 25.121102][ T558] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.141926][ T563] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 557] ioctl(4, LOOP_SET_FD, 3 [pid 563] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 545] <... mmap resumed>) = 0x20000000 [pid 545] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 558] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 548] <... futex resumed>) = ? [pid 563] +++ killed by SIGBUS +++ [pid 550] <... mmap resumed>) = ? [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 550] +++ killed by SIGBUS +++ [pid 548] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=548, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 560] munmap(0x7fb6c54a8000, 1048576 [pid 300] <... restart_syscall resumed>) = 0 [pid 301] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] fstat(4, [pid 300] getdents64(3, [pid 301] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 300] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 301] getdents64(4, [pid 300] unlink("./8/binderfs" [pid 301] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 300] <... unlink resumed>) = 0 [pid 300] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 560] <... munmap resumed>) = 0 [pid 560] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 560] ioctl(4, LOOP_SET_FD, 3 [pid 562] <... write resumed>) = 1048576 [pid 557] <... ioctl resumed>) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./7/file0" [pid 560] <... ioctl resumed>) = 0 [pid 545] <... futex resumed>) = ? [pid 301] <... rmdir resumed>) = 0 [pid 301] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./7" [pid 545] +++ killed by SIGBUS +++ [pid 301] <... rmdir resumed>) = 0 [pid 562] munmap(0x7fb6c54a8000, 1048576 [pid 301] mkdir("./8", 0777 [pid 562] <... munmap resumed>) = 0 [pid 562] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 560] close(3 [pid 301] <... mkdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3 [pid 562] <... openat resumed>) = 4 [pid 562] ioctl(4, LOOP_SET_FD, 3 [pid 301] <... close resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 564 ./strace-static-x86_64: Process 564 attached [pid 562] <... ioctl resumed>) = 0 [pid 560] <... close resumed>) = 0 [pid 558] +++ killed by SIGBUS +++ [pid 557] close(3 [pid 542] +++ killed by SIGBUS +++ [pid 560] mkdir("./file0", 0777 [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=542, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 560] <... mkdir resumed>) = 0 [pid 560] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue" [pid 295] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] getdents64(3, [pid 564] set_robust_list(0x5555574565e0, 24 [pid 562] close(3 [pid 557] <... close resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 295] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 564] <... set_robust_list resumed>) = 0 [pid 562] <... close resumed>) = 0 [pid 557] mkdir("./file0", 0777 [pid 300] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] unlink("./7/binderfs" [pid 564] chdir("./8" [pid 562] mkdir("./file0", 0777 [pid 300] lstat("./8/file0", [pid 295] <... unlink resumed>) = 0 [pid 295] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 564] <... chdir resumed>) = 0 [pid 562] <... mkdir resumed>) = 0 [pid 557] <... mkdir resumed>) = 0 [pid 300] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 564] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 300] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 564] setpgid(0, 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 564] <... setpgid resumed>) = 0 [pid 300] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] <... openat resumed>) = 4 [pid 564] <... openat resumed>) = 3 [pid 564] write(3, "1000", 4 [pid 300] fstat(4, [pid 564] <... write resumed>) = 4 [pid 564] close(3 [pid 300] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 564] <... close resumed>) = 0 [pid 300] getdents64(4, [pid 564] symlink("/dev/binderfs", "./binderfs" [pid 300] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 564] <... symlink resumed>) = 0 [pid 300] getdents64(4, [pid 564] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 564] <... futex resumed>) = 0 [pid 300] close(4 [pid 564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 557] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 564] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 300] <... close resumed>) = 0 [pid 564] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 562] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 300] rmdir("./8/file0" [pid 564] <... mprotect resumed>) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 564] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 300] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 564] <... clone resumed>, parent_tid=[566], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 566 [pid 300] close(3 [pid 564] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... close resumed>) = 0 [pid 564] <... futex resumed>) = 0 [pid 300] rmdir("./8" [pid 564] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 300] <... rmdir resumed>) = 0 [pid 300] mkdir("./9", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3./strace-static-x86_64: Process 566 attached [pid 560] <... mount resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 566] set_robust_list(0x7fb6cd8c89e0, 24 [pid 560] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 566] <... set_robust_list resumed>) = 0 [pid 560] <... openat resumed>) = 3 [pid 566] memfd_create("syzkaller", 0 [pid 560] chdir("./file0" [pid 300] <... clone resumed>, child_tidptr=0x5555574565d0) = 568 [pid 566] <... memfd_create resumed>) = 3 [pid 560] <... chdir resumed>) = 0 [pid 566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 560] ioctl(4, LOOP_CLR_FD [pid 566] <... mmap resumed>) = 0x7fb6c54a8000 [pid 560] <... ioctl resumed>) = 0 [pid 560] close(4 [pid 566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 560] <... close resumed>) = 0 [pid 560] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 559] <... futex resumed>) = 0 [pid 560] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 559] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 559] <... futex resumed>) = 0 [pid 560] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 559] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 560] <... futex resumed>) = 0 [pid 559] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 568 attached [pid 566] <... write resumed>) = 1048576 [pid 560] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 559] <... futex resumed>) = 0 [pid 568] set_robust_list(0x5555574565e0, 24 [pid 566] munmap(0x7fb6c54a8000, 1048576 [pid 560] <... open resumed>) = 5 [pid 559] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] <... set_robust_list resumed>) = 0 [pid 566] <... munmap resumed>) = 0 [pid 560] <... futex resumed>) = 0 [pid 559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 566] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 560] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 559] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] chdir("./9") = 0 [pid 566] <... openat resumed>) = 4 [pid 560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 559] <... futex resumed>) = 0 [ 25.174433][ T557] loop5: detected capacity change from 0 to 2048 [ 25.187357][ T560] loop1: detected capacity change from 0 to 2048 [ 25.199304][ T562] loop2: detected capacity change from 0 to 2048 [pid 568] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 566] ioctl(4, LOOP_SET_FD, 3 [pid 560] ftruncate(5, 33587195 [pid 559] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... umount2 resumed>) = 0 [pid 560] <... ftruncate resumed>) = 0 [pid 560] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 559] <... futex resumed>) = 0 [pid 560] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 559] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 559] <... futex resumed>) = 0 [pid 560] sendfile(4, 5, NULL, 4 [pid 559] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] <... sendfile resumed>) = 4 [pid 560] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 559] <... futex resumed>) = 0 [pid 560] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 559] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 559] <... futex resumed>) = 0 [pid 560] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 559] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 568] <... prctl resumed>) = 0 [pid 566] <... ioctl resumed>) = 0 [pid 562] <... mount resumed>) = 0 [pid 557] <... mount resumed>) = 0 [pid 295] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 568] setpgid(0, 0 [pid 566] close(3 [pid 562] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 557] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 568] <... setpgid resumed>) = 0 [pid 566] <... close resumed>) = 0 [pid 562] <... openat resumed>) = 3 [pid 557] <... openat resumed>) = 3 [pid 295] lstat("./7/file0", [pid 568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 566] mkdir("./file0", 0777 [pid 562] chdir("./file0" [pid 557] chdir("./file0" [pid 295] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 568] <... openat resumed>) = 3 [pid 566] <... mkdir resumed>) = 0 [pid 562] <... chdir resumed>) = 0 [pid 557] <... chdir resumed>) = 0 [pid 295] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 568] write(3, "1000", 4 [pid 566] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue" [pid 562] ioctl(4, LOOP_CLR_FD [pid 557] ioctl(4, LOOP_CLR_FD [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 568] <... write resumed>) = 4 [pid 562] <... ioctl resumed>) = 0 [pid 557] <... ioctl resumed>) = 0 [pid 295] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 568] close(3 [pid 557] close(4 [pid 562] close(4 [pid 295] <... openat resumed>) = 4 [pid 568] <... close resumed>) = 0 [pid 557] <... close resumed>) = 0 [pid 295] fstat(4, [pid 568] symlink("/dev/binderfs", "./binderfs" [pid 562] <... close resumed>) = 0 [pid 557] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 568] <... symlink resumed>) = 0 [pid 562] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 1 [pid 555] <... futex resumed>) = 0 [pid 295] getdents64(4, [pid 568] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 1 [pid 561] <... futex resumed>) = 0 [pid 557] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 555] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 568] <... futex resumed>) = 0 [pid 562] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 561] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 555] <... futex resumed>) = 0 [pid 295] getdents64(4, [pid 568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 561] <... futex resumed>) = 0 [pid 557] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 555] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 568] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 562] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 561] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] close(4 [pid 568] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 295] <... close resumed>) = 0 [pid 568] <... mprotect resumed>) = 0 [pid 557] <... open resumed>) = 4 [pid 295] rmdir("./7/file0" [pid 568] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 562] <... open resumed>) = 4 [pid 557] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... rmdir resumed>) = 0 [pid 562] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 1 [pid 555] <... futex resumed>) = 0 [pid 295] getdents64(3, [pid 568] <... clone resumed>, parent_tid=[573], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 573 [pid 562] <... futex resumed>) = 1 [pid 561] <... futex resumed>) = 0 [pid 557] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 555] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 568] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 561] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 555] <... futex resumed>) = 0 [pid 295] close(3 [pid 568] <... futex resumed>) = 0 [pid 562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 561] <... futex resumed>) = 0 [pid 557] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 555] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... close resumed>) = 0 [pid 568] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 562] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 561] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... open resumed>) = 5 [pid 295] rmdir("./7" [pid 562] <... open resumed>) = 5 [pid 557] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... rmdir resumed>) = 0 [pid 562] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 1 [pid 555] <... futex resumed>) = 0 [pid 295] mkdir("./8", 0777 [pid 562] <... futex resumed>) = 1 [pid 561] <... futex resumed>) = 0 [pid 557] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 555] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... mkdir resumed>) = 0 [pid 562] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 561] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 555] <... futex resumed>) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 561] <... futex resumed>) = 0 [pid 557] ftruncate(5, 33587195 [pid 555] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... openat resumed>) = 3 ./strace-static-x86_64: Process 573 attached [pid 562] ftruncate(5, 33587195 [pid 561] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... ftruncate resumed>) = 0 [pid 295] ioctl(3, LOOP_CLR_FD [pid 562] <... ftruncate resumed>) = 0 [pid 557] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 562] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 1 [pid 555] <... futex resumed>) = 0 [pid 295] close(3 [pid 562] <... futex resumed>) = 1 [pid 561] <... futex resumed>) = 0 [pid 557] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 555] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... close resumed>) = 0 [pid 562] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 561] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 555] <... futex resumed>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 561] <... futex resumed>) = 0 [pid 557] sendfile(4, 5, NULL, 4 [pid 555] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 562] sendfile(4, 5, NULL, 4 [pid 561] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... clone resumed>, child_tidptr=0x5555574565d0) = 574 [pid 562] <... sendfile resumed>) = 4 [pid 573] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 557] <... sendfile resumed>) = 4 [pid 562] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 1 [pid 561] <... futex resumed>) = 0 [pid 557] <... futex resumed>) = 1 [pid 555] <... futex resumed>) = 0 [pid 562] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 561] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 555] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 561] <... futex resumed>) = 0 [pid 562] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 561] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 555] <... futex resumed>) = 0 [pid 573] memfd_create("syzkaller", 0) = 3 [pid 573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 555] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 573] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 573] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 573] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 574 attached ) = 4 [pid 574] set_robust_list(0x5555574565e0, 24) = 0 [ 25.246464][ T566] loop4: detected capacity change from 0 to 2048 [pid 573] ioctl(4, LOOP_SET_FD, 3 [pid 559] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 559] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 559] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 559] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 559] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[578], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 578 [pid 559] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 559] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] chdir("./8") = 0 [pid 566] <... mount resumed>) = 0 [pid 566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 566] chdir("./file0") = 0 [pid 566] ioctl(4, LOOP_CLR_FD) = 0 [pid 566] close(4) = 0 [pid 566] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 566] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] <... open resumed>) = 4 [pid 566] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 566] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [pid 566] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 564] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] <... open resumed>) = 5 [pid 566] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 566] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [pid 566] ftruncate(5, 33587195 [pid 564] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] <... ftruncate resumed>) = 0 [pid 566] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 566] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 566] <... futex resumed>) = 0 [pid 564] <... futex resumed>) = 1 [pid 566] sendfile(4, 5, NULL, 4 [pid 564] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] <... sendfile resumed>) = 4 [pid 566] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 566] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 566] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 555] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 561] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 555] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 561] <... futex resumed>) = 0 [pid 561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 555] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 555] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 555] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 555] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[579], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 579 [pid 555] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 555] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 579 attached [pid 574] setpgid(0, 0 [pid 579] set_robust_list(0x7fb6c55a79e0, 24 [pid 574] <... setpgid resumed>) = 0 [pid 579] <... set_robust_list resumed>) = 0 [pid 579] sendfile(4, 5, NULL, 4) = 4 [pid 579] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 555] <... futex resumed>) = 0 [pid 555] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 555] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 579] <... futex resumed>) = 1 [pid 574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 561] <... mmap resumed>) = 0x7fb6c5587000 [pid 561] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 561] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[580], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 580 [pid 561] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] write(3, "1000", 4 [pid 561] <... futex resumed>) = 0 [pid 561] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] <... write resumed>) = 4 ./strace-static-x86_64: Process 578 attached [pid 574] close(3) = 0 [pid 578] set_robust_list(0x7fb6c55a79e0, 24 [pid 574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 578] <... set_robust_list resumed>) = 0 [pid 574] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 574] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 574] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 578] sendfile(4, 5, NULL, 4 [pid 574] <... clone resumed>, parent_tid=[581], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 581 [pid 574] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 578] <... sendfile resumed>) = 4 [pid 578] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 580 attached [pid 578] <... futex resumed>) = 1 [pid 559] <... futex resumed>) = 0 [pid 559] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 25.300074][ T573] loop3: detected capacity change from 0 to 2048 [ 25.324276][ T579] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 559] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 579] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 580] set_robust_list(0x7fb6c55a79e0, 24 [pid 564] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 564] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 564] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 564] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 564] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[582], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 582 [pid 564] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... set_robust_list resumed>) = 0 [pid 580] sendfile(4, 5, NULL, 4) = 4 ./strace-static-x86_64: Process 581 attached [pid 580] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] set_robust_list(0x7fb6cd8c89e0, 24 [pid 561] <... futex resumed>) = 0 [pid 580] <... futex resumed>) = 1 [pid 581] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 582 attached [pid 561] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 561] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] memfd_create("syzkaller", 0 [pid 582] set_robust_list(0x7fb6c55a79e0, 24 [pid 581] <... memfd_create resumed>) = 3 [pid 582] <... set_robust_list resumed>) = 0 [pid 573] <... ioctl resumed>) = 0 [pid 581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 582] sendfile(4, 5, NULL, 4 [pid 573] close(3 [pid 581] <... mmap resumed>) = 0x7fb6c54a8000 [pid 582] <... sendfile resumed>) = 4 [pid 560] <... mmap resumed>) = 0x20000000 [pid 560] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 560] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 582] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... close resumed>) = 0 [pid 582] <... futex resumed>) = 1 [pid 573] mkdir("./file0", 0777 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 25.348307][ T578] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.371246][ T580] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 564] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 555] <... futex resumed>) = ? [pid 579] +++ killed by SIGBUS +++ [pid 557] <... mmap resumed>) = ? [pid 557] +++ killed by SIGBUS +++ [pid 555] +++ killed by SIGBUS +++ [pid 581] <... write resumed>) = 1048576 [pid 581] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 581] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 581] ioctl(4, LOOP_SET_FD, 3 [pid 573] <... mkdir resumed>) = 0 [pid 559] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=555, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6} --- [pid 302] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(3, [pid 578] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 302] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 302] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 560] <... futex resumed>) = ? [pid 302] lstat("./8/binderfs", [pid 560] +++ killed by SIGBUS +++ [pid 302] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 302] unlink("./8/binderfs") = 0 [pid 302] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 580] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 578] +++ killed by SIGBUS +++ [pid 559] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=559, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 581] <... ioctl resumed>) = 0 [pid 581] close(3) = 0 [pid 581] mkdir("./file0", 0777 [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 298] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 573] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 298] unlink("./8/binderfs" [pid 581] <... mkdir resumed>) = 0 [pid 298] <... unlink resumed>) = 0 [pid 298] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 581] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 582] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 564] <... futex resumed>) = ? [pid 582] +++ killed by SIGBUS +++ [pid 566] <... mmap resumed>) = ? [pid 562] <... mmap resumed>) = ? [pid 561] <... futex resumed>) = ? [pid 580] +++ killed by SIGBUS +++ [pid 566] +++ killed by SIGBUS +++ [pid 564] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=564, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 301] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 301] unlink("./8/binderfs") = 0 [ 25.393656][ T582] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.401449][ T581] loop0: detected capacity change from 0 to 2048 [pid 301] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 562] +++ killed by SIGBUS +++ [pid 561] +++ killed by SIGBUS +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=561, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./8/file0") = 0 [pid 302] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 302] close(3 [pid 581] <... mount resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 581] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 299] <... restart_syscall resumed>) = 0 [pid 302] rmdir("./8" [pid 581] <... openat resumed>) = 3 [pid 581] chdir("./file0") = 0 [pid 581] ioctl(4, LOOP_CLR_FD) = 0 [pid 299] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 581] close(4 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 581] <... close resumed>) = 0 [pid 581] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 581] <... futex resumed>) = 1 [pid 574] <... futex resumed>) = 0 [pid 581] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... openat resumed>) = 3 [pid 574] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 574] <... futex resumed>) = 0 [pid 299] fstat(3, [pid 581] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 574] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 581] <... open resumed>) = 4 [pid 299] getdents64(3, [pid 581] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 581] <... futex resumed>) = 1 [pid 574] <... futex resumed>) = 0 [pid 581] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 574] <... futex resumed>) = 0 [pid 581] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 574] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... open resumed>) = 5 [pid 299] lstat("./8/binderfs", [pid 581] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 581] <... futex resumed>) = 1 [pid 574] <... futex resumed>) = 0 [pid 299] unlink("./8/binderfs" [pid 581] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... rmdir resumed>) = 0 [pid 302] mkdir("./9", 0777 [pid 574] <... futex resumed>) = 0 [pid 299] <... unlink resumed>) = 0 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 574] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] ftruncate(5, 33587195 [pid 299] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 581] <... ftruncate resumed>) = 0 [pid 581] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] sendfile(4, 5, NULL, 4) = 4 [pid 581] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 581] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 574] <... futex resumed>) = 0 [pid 581] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 574] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... mkdir resumed>) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 587 ./strace-static-x86_64: Process 587 attached [pid 587] set_robust_list(0x5555574565e0, 24) = 0 [pid 587] chdir("./9") = 0 [pid 587] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 587] setpgid(0, 0) = 0 [pid 587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 587] write(3, "1000", 4) = 4 [pid 587] close(3) = 0 [pid 587] symlink("/dev/binderfs", "./binderfs") = 0 [pid 587] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 587] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 587] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[588], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 588 [pid 587] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 587] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 588 attached [pid 588] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 588] memfd_create("syzkaller", 0) = 3 [pid 588] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 588] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 588] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 588] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 588] ioctl(4, LOOP_SET_FD, 3 [pid 573] <... mount resumed>) = 0 [pid 573] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 573] chdir("./file0") = 0 [pid 573] ioctl(4, LOOP_CLR_FD) = 0 [pid 573] close(4) = 0 [pid 573] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] <... futex resumed>) = 0 [pid 568] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 568] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... futex resumed>) = 1 [pid 573] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./8/file0") = 0 [pid 301] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./8") = 0 [pid 301] mkdir("./9", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 589 ./strace-static-x86_64: Process 589 attached [pid 589] set_robust_list(0x5555574565e0, 24) = 0 [pid 589] chdir("./9") = 0 [pid 589] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] <... umount2 resumed>) = 0 [pid 589] <... prctl resumed>) = 0 [pid 589] setpgid(0, 0 [pid 573] <... open resumed>) = 4 [pid 299] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 589] <... setpgid resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 573] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] lstat("./8/file0", [pid 589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 573] <... futex resumed>) = 1 [pid 568] <... futex resumed>) = 0 [pid 573] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 568] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 573] <... open resumed>) = 5 [pid 568] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 568] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 573] <... futex resumed>) = 0 [pid 568] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 568] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 568] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... openat resumed>) = 4 [pid 573] ftruncate(5, 33587195) = 0 [pid 299] fstat(4, [pid 589] <... openat resumed>) = 3 [pid 589] write(3, "1000", 4 [pid 573] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 573] <... futex resumed>) = 1 [pid 568] <... futex resumed>) = 0 [pid 568] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] sendfile(4, 5, NULL, 4 [pid 568] <... futex resumed>) = 0 [pid 299] getdents64(4, [pid 568] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 573] <... sendfile resumed>) = 4 [pid 589] <... write resumed>) = 4 [pid 589] close(3) = 0 [pid 589] symlink("/dev/binderfs", "./binderfs" [pid 299] getdents64(4, [pid 573] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 568] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 573] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 568] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(4 [pid 568] <... futex resumed>) = 0 [pid 568] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... close resumed>) = 0 [pid 589] <... symlink resumed>) = 0 [pid 589] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] rmdir("./8/file0") = 0 [pid 589] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 589] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 299] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 299] close(3 [pid 589] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 298] <... umount2 resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 299] rmdir("./8") = 0 [pid 589] <... clone resumed>, parent_tid=[590], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 590 [pid 589] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 590 attached [pid 590] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 590] memfd_create("syzkaller", 0) = 3 [pid 299] mkdir("./9", 0777 [pid 298] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 299] <... mkdir resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 590] <... mmap resumed>) = 0x7fb6c54a8000 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 298] lstat("./8/file0", [pid 299] <... openat resumed>) = 3 [pid 298] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] ioctl(3, LOOP_CLR_FD [pid 298] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] close(3 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... close resumed>) = 0 [pid 298] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... openat resumed>) = 4 [pid 299] <... clone resumed>, child_tidptr=0x5555574565d0) = 591 [pid 298] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(4, ./strace-static-x86_64: Process 591 attached [pid 591] set_robust_list(0x5555574565e0, 24 [pid 298] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, [pid 574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 574] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 298] close(4) = 0 [pid 298] rmdir("./8/file0" [pid 574] <... mmap resumed>) = 0x7fb6c5587000 [pid 574] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 574] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[592], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 592 [pid 574] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... rmdir resumed>) = 0 [pid 298] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./8") = 0 [pid 298] mkdir("./9", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 593 [pid 591] <... set_robust_list resumed>) = 0 [pid 591] chdir("./9") = 0 [pid 591] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 591] setpgid(0, 0) = 0 [pid 591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 593 attached ) = 3 [pid 591] write(3, "1000", 4 [pid 593] set_robust_list(0x5555574565e0, 24) = 0 [pid 591] <... write resumed>) = 4 [pid 591] close(3) = 0 [pid 591] symlink("/dev/binderfs", "./binderfs") = 0 [pid 593] chdir("./9") = 0 [pid 593] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 593] setpgid(0, 0) = 0 [pid 591] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 591] <... futex resumed>) = 0 [pid 593] <... openat resumed>) = 3 [pid 590] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 593] write(3, "1000", 4 [pid 591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 593] <... write resumed>) = 4 [pid 593] close(3 [pid 591] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 591] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[594], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 594 [pid 591] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] <... close resumed>) = 0 [pid 591] <... futex resumed>) = 0 [pid 593] symlink("/dev/binderfs", "./binderfs" [pid 591] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 593] <... symlink resumed>) = 0 [pid 590] <... write resumed>) = 1048576 [pid 593] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 592 attached ) = 0x7fb6cd8a8000 [ 25.477724][ T588] loop5: detected capacity change from 0 to 2048 [pid 593] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 592] set_robust_list(0x7fb6c55a79e0, 24 [pid 588] <... ioctl resumed>) = 0 [pid 568] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 568] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 568] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 593] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 568] <... mprotect resumed>) = 0 [pid 568] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 593] <... clone resumed>, parent_tid=[596], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 596 [pid 568] <... clone resumed>, parent_tid=[595], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 595 [pid 568] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 568] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 594 attached [pid 592] <... set_robust_list resumed>) = 0 [pid 588] close(3 [pid 594] set_robust_list(0x7fb6cd8c89e0, 24 [pid 592] sendfile(4, 5, NULL, 4 [pid 588] <... close resumed>) = 0 [pid 593] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 594] <... set_robust_list resumed>) = 0 [pid 593] <... futex resumed>) = 0 [pid 592] <... sendfile resumed>) = 4 [pid 588] mkdir("./file0", 0777 [pid 593] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 594] memfd_create("syzkaller", 0 [pid 592] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... mkdir resumed>) = 0 [pid 594] <... memfd_create resumed>) = 3 [pid 592] <... futex resumed>) = 1 [pid 588] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 595 attached [pid 594] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 595] set_robust_list(0x7fb6c55a79e0, 24 [pid 594] <... mmap resumed>) = 0x7fb6c54a8000 [pid 595] <... set_robust_list resumed>) = 0 [pid 594] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 595] sendfile(4, 5, NULL, 4) = 4 [pid 590] munmap(0x7fb6c54a8000, 1048576 [pid 595] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... munmap resumed>) = 0 [pid 595] <... futex resumed>) = 1 [pid 568] <... futex resumed>) = 0 [pid 568] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 568] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 590] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 581] <... mmap resumed>) = 0x20000000 [pid 581] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... openat resumed>) = 4 [pid 588] <... mount resumed>) = 0 [pid 581] <... futex resumed>) = 0 [pid 588] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 581] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 588] chdir("./file0") = 0 [pid 588] ioctl(4, LOOP_CLR_FD) = 0 [pid 588] close(4) = 0 [pid 588] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 596 attached [pid 590] ioctl(4, LOOP_SET_FD, 3 [pid 588] <... futex resumed>) = 1 [pid 587] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 588] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [ 25.544265][ T592] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.565913][ T595] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 588] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 587] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] set_robust_list(0x7fb6cd8c89e0, 24 [pid 594] <... write resumed>) = 1048576 [pid 588] <... open resumed>) = 4 [pid 588] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... set_robust_list resumed>) = 0 [pid 588] <... futex resumed>) = 1 [pid 587] <... futex resumed>) = 0 [pid 588] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [pid 588] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 587] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... open resumed>) = 5 [pid 588] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] memfd_create("syzkaller", 0 [pid 588] <... futex resumed>) = 1 [pid 587] <... futex resumed>) = 0 [pid 588] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [pid 588] ftruncate(5, 33587195 [pid 587] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... ftruncate resumed>) = 0 [pid 588] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... memfd_create resumed>) = 3 [pid 588] <... futex resumed>) = 1 [pid 587] <... futex resumed>) = 0 [pid 588] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [pid 588] sendfile(4, 5, NULL, 4 [pid 587] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 588] <... sendfile resumed>) = 4 [pid 596] <... mmap resumed>) = 0x7fb6c54a8000 [pid 588] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 588] <... futex resumed>) = 1 [pid 587] <... futex resumed>) = 0 [pid 568] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 588] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [pid 588] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 587] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 595] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 596] <... write resumed>) = 1048576 [pid 594] munmap(0x7fb6c54a8000, 1048576 [pid 592] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 590] <... ioctl resumed>) = 0 [pid 573] <... mmap resumed>) = 0 [pid 596] munmap(0x7fb6c54a8000, 1048576 [pid 594] <... munmap resumed>) = 0 [pid 590] close(3 [pid 581] <... futex resumed>) = ? [pid 573] +++ killed by SIGBUS +++ [pid 595] +++ killed by SIGBUS +++ [pid 596] <... munmap resumed>) = 0 [pid 594] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 592] +++ killed by SIGBUS +++ [pid 590] <... close resumed>) = 0 [pid 581] +++ killed by SIGBUS +++ [pid 574] +++ killed by SIGBUS +++ [pid 568] +++ killed by SIGBUS +++ [pid 596] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 594] <... openat resumed>) = 4 [pid 590] mkdir("./file0", 0777 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=568, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=574, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 596] <... openat resumed>) = 4 [pid 594] ioctl(4, LOOP_SET_FD, 3 [pid 590] <... mkdir resumed>) = 0 [pid 596] ioctl(4, LOOP_SET_FD, 3 [ 25.597330][ T590] loop4: detected capacity change from 0 to 2048 [ 25.637436][ T594] loop2: detected capacity change from 0 to 2048 [pid 590] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue" [pid 295] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... openat resumed>) = 3 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] fstat(3, [pid 300] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 594] <... ioctl resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 295] getdents64(3, [pid 594] close(3 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 300] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 300] unlink("./9/binderfs") = 0 [pid 300] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 594] <... close resumed>) = 0 [pid 594] mkdir("./file0", 0777 [pid 295] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 594] <... mkdir resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 594] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 590] <... mount resumed>) = 0 [pid 295] lstat("./8/binderfs", [pid 590] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 590] chdir("./file0") = 0 [pid 590] ioctl(4, LOOP_CLR_FD) = 0 [pid 590] close(4) = 0 [pid 587] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 295] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 590] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... futex resumed>) = 1 [pid 589] <... futex resumed>) = 0 [pid 587] <... futex resumed>) = 0 [pid 590] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 589] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 590] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 589] <... futex resumed>) = 0 [pid 587] <... mmap resumed>) = 0x7fb6c5587000 [pid 295] unlink("./8/binderfs" [pid 590] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 589] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 590] <... open resumed>) = 4 [pid 587] <... mprotect resumed>) = 0 [pid 295] <... unlink resumed>) = 0 [pid 590] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 590] <... futex resumed>) = 1 [pid 589] <... futex resumed>) = 0 [pid 590] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 589] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] <... clone resumed>, parent_tid=[602], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 602 [pid 590] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 589] <... futex resumed>) = 0 [pid 587] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 589] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... futex resumed>) = 0 [pid 590] <... open resumed>) = 5 [pid 587] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 590] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 589] <... futex resumed>) = 0 [pid 590] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 589] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 589] <... futex resumed>) = 0 [pid 590] ftruncate(5, 33587195 [pid 589] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 590] <... ftruncate resumed>) = 0 [pid 590] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 589] <... futex resumed>) = 0 [pid 590] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 589] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 589] <... futex resumed>) = 0 [pid 590] sendfile(4, 5, NULL, 4 [pid 589] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 590] <... sendfile resumed>) = 4 [pid 590] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 589] <... futex resumed>) = 0 [pid 590] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 589] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 589] <... futex resumed>) = 0 [pid 590] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [ 25.644674][ T596] loop1: detected capacity change from 0 to 2048 [pid 589] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 596] <... ioctl resumed>) = 0 [pid 596] close(3) = 0 [pid 596] mkdir("./file0", 0777) = 0 [pid 596] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 602 attached [pid 602] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 602] sendfile(4, 5, NULL, 4) = 4 [pid 602] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] <... futex resumed>) = 0 [pid 587] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 587] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... futex resumed>) = 1 [pid 594] <... mount resumed>) = 0 [pid 594] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 594] chdir("./file0") = 0 [pid 594] ioctl(4, LOOP_CLR_FD) = 0 [pid 594] close(4) = 0 [pid 594] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 591] <... futex resumed>) = 0 [pid 594] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 591] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 594] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 591] <... futex resumed>) = 0 [pid 594] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 591] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 594] <... open resumed>) = 4 [pid 594] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 591] <... futex resumed>) = 0 [pid 594] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 591] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 594] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 591] <... futex resumed>) = 0 [pid 594] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 591] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 594] <... open resumed>) = 5 [pid 594] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 591] <... futex resumed>) = 0 [pid 594] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 591] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 594] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 591] <... futex resumed>) = 0 [pid 594] ftruncate(5, 33587195 [pid 591] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... umount2 resumed>) = 0 [pid 594] <... ftruncate resumed>) = 0 [pid 594] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 591] <... futex resumed>) = 0 [pid 295] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 594] sendfile(4, 5, NULL, 4 [pid 591] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 594] <... sendfile resumed>) = 4 [pid 591] <... futex resumed>) = 0 [pid 594] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 591] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 594] <... futex resumed>) = 0 [pid 591] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 594] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 591] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 594] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 591] <... futex resumed>) = 0 [pid 594] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 591] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 295] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 589] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] getdents64(4, [pid 589] <... futex resumed>) = 0 [pid 589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 295] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 589] <... mmap resumed>) = 0x7fb6c5587000 [pid 295] getdents64(4, [pid 589] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 295] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 589] <... mprotect resumed>) = 0 [pid 589] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 295] close(4 [pid 596] <... mount resumed>) = 0 [pid 587] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 596] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 589] <... clone resumed>, parent_tid=[606], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 606 [pid 295] <... close resumed>) = 0 [pid 596] <... openat resumed>) = 3 [pid 589] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] chdir("./file0") = 0 [pid 589] <... futex resumed>) = 0 [pid 596] ioctl(4, LOOP_CLR_FD) = 0 [pid 589] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] close(4 [pid 295] rmdir("./8/file0" [pid 596] <... close resumed>) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 596] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 593] <... futex resumed>) = 0 [pid 295] getdents64(3, [pid 596] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 593] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 596] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 593] <... futex resumed>) = 0 [pid 295] close(3 [pid 596] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 593] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... close resumed>) = 0 [pid 295] rmdir("./8" [pid 596] <... open resumed>) = 4 [pid 295] <... rmdir resumed>) = 0 [pid 295] mkdir("./9", 0777) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 607 ./strace-static-x86_64: Process 606 attached [pid 596] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] set_robust_list(0x7fb6c55a79e0, 24 [pid 596] <... futex resumed>) = 1 [pid 593] <... futex resumed>) = 0 [ 25.697307][ T602] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 606] <... set_robust_list resumed>) = 0 [pid 596] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 593] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] sendfile(4, 5, NULL, 4 [pid 596] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 593] <... futex resumed>) = 0 [pid 606] <... sendfile resumed>) = 4 [pid 596] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 593] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 606] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... open resumed>) = 5 [pid 606] <... futex resumed>) = 1 [pid 596] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] <... futex resumed>) = 0 [pid 596] <... futex resumed>) = 1 [pid 593] <... futex resumed>) = 0 [pid 589] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 593] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] <... futex resumed>) = 0 [pid 596] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 593] <... futex resumed>) = 0 [pid 589] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] ftruncate(5, 33587195 [pid 593] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... ftruncate resumed>) = 0 [pid 596] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 593] <... futex resumed>) = 0 [pid 596] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 593] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 607 attached [pid 596] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 593] <... futex resumed>) = 0 [pid 596] sendfile(4, 5, NULL, 4 [pid 593] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] set_robust_list(0x5555574565e0, 24 [pid 596] <... sendfile resumed>) = 4 [pid 607] <... set_robust_list resumed>) = 0 [pid 596] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 593] <... futex resumed>) = 0 [pid 596] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 593] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 593] <... futex resumed>) = 0 [pid 596] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 593] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] chdir("./9") = 0 [pid 607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 607] setpgid(0, 0 [pid 602] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 607] <... setpgid resumed>) = 0 [pid 607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 607] write(3, "1000", 4 [pid 591] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 591] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 591] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 591] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[608], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 608 [pid 591] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 591] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... write resumed>) = 4 [pid 607] close(3) = 0 [pid 607] symlink("/dev/binderfs", "./binderfs") = 0 [pid 607] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 607] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 602] +++ killed by SIGBUS +++ [pid 588] <... mmap resumed>) = ? [pid 300] <... umount2 resumed>) = 0 [pid 607] <... mprotect resumed>) = 0 [pid 607] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 588] +++ killed by SIGBUS +++ [pid 587] +++ killed by SIGBUS +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=587, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 302] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 302] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 608 attached ) = 3 [pid 300] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 608] set_robust_list(0x7fb6c55a79e0, 24 [pid 607] <... clone resumed>, parent_tid=[609], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 609 [pid 607] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] fstat(3, [pid 607] <... futex resumed>) = 0 [pid 607] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 302] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 302] unlink("./9/binderfs") = 0 [pid 302] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 609 attached [pid 608] <... set_robust_list resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 609] set_robust_list(0x7fb6cd8c89e0, 24 [pid 608] sendfile(4, 5, NULL, 4 [pid 609] <... set_robust_list resumed>) = 0 [pid 608] <... sendfile resumed>) = 4 [pid 300] lstat("./9/file0", [pid 609] memfd_create("syzkaller", 0 [pid 608] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 609] <... memfd_create resumed>) = 3 [pid 591] <... futex resumed>) = 0 [pid 300] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 608] <... futex resumed>) = 1 [pid 609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 591] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 591] <... futex resumed>) = 0 [ 25.760251][ T606] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 591] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 589] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 609] <... mmap resumed>) = 0x7fb6c54a8000 [pid 300] <... openat resumed>) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./9/file0") = 0 [pid 300] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./9") = 0 [pid 593] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] mkdir("./10", 0777 [pid 593] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 300] <... mkdir resumed>) = 0 [pid 593] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 593] <... mprotect resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 593] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 300] ioctl(3, LOOP_CLR_FD [pid 593] <... clone resumed>, parent_tid=[610], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 610 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 606] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 593] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] close(3 [pid 593] <... futex resumed>) = 0 [pid 593] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 610 attached [pid 610] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 610] sendfile(4, 5, NULL, 4) = 4 [pid 610] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] <... close resumed>) = 0 [pid 593] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 608] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 300] <... clone resumed>, child_tidptr=0x5555574565d0) = 611 [pid 590] <... mmap resumed>) = ? [pid 590] +++ killed by SIGBUS +++ [pid 302] <... umount2 resumed>) = 0 [pid 606] +++ killed by SIGBUS +++ [pid 589] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=589, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- ./strace-static-x86_64: Process 611 attached [pid 611] set_robust_list(0x5555574565e0, 24) = 0 [pid 611] chdir("./10" [pid 301] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 611] <... chdir resumed>) = 0 [pid 611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 611] setpgid(0, 0) = 0 [pid 611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 611] <... openat resumed>) = 3 [pid 301] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 611] write(3, "1000", 4) = 4 [pid 611] close(3 [pid 301] <... openat resumed>) = 3 [pid 301] fstat(3, [pid 611] <... close resumed>) = 0 [pid 611] symlink("/dev/binderfs", "./binderfs") = 0 [pid 301] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 611] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 301] getdents64(3, [pid 611] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 302] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 611] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 302] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 611] <... clone resumed>, parent_tid=[612], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 612 [pid 302] getdents64(4, [pid 611] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 611] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 302] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./9/file0") = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 609] <... write resumed>) = 1048576 [pid 301] lstat("./9/binderfs", [pid 302] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./9" [pid 301] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 301] unlink("./9/binderfs" [pid 302] <... rmdir resumed>) = 0 [pid 301] <... unlink resumed>) = 0 [pid 609] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 301] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 25.815172][ T608] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.839444][ T610] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 302] mkdir("./10", 0777 [pid 609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 302] <... mkdir resumed>) = 0 [pid 609] ioctl(4, LOOP_SET_FD, 3 [pid 593] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 593] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 593] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 613 ./strace-static-x86_64: Process 612 attached [pid 612] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 612] memfd_create("syzkaller", 0) = 3 [pid 612] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 612] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 613 attached [pid 613] set_robust_list(0x5555574565e0, 24) = 0 [pid 613] chdir("./10") = 0 [pid 613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 613] setpgid(0, 0) = 0 [pid 613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 613] write(3, "1000", 4) = 4 [pid 613] close(3) = 0 [pid 613] symlink("/dev/binderfs", "./binderfs") = 0 [pid 613] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 613] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 613] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[614], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 614 [pid 613] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 591] <... futex resumed>) = ? [pid 608] +++ killed by SIGBUS +++ [pid 594] <... mmap resumed>) = ? [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 609] <... ioctl resumed>) = 0 [pid 609] close(3) = 0 [pid 609] mkdir("./file0", 0777 [pid 301] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 609] <... mkdir resumed>) = 0 [pid 301] <... openat resumed>) = 4 [pid 609] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 301] fstat(4, ./strace-static-x86_64: Process 614 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(4, [pid 614] set_robust_list(0x7fb6cd8c89e0, 24 [pid 594] +++ killed by SIGBUS +++ [pid 591] +++ killed by SIGBUS +++ [pid 614] <... set_robust_list resumed>) = 0 [pid 301] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=591, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 301] getdents64(4, [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 614] memfd_create("syzkaller", 0 [pid 301] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 299] <... restart_syscall resumed>) = 0 [pid 301] close(4 [pid 299] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 614] <... memfd_create resumed>) = 3 [pid 301] <... close resumed>) = 0 [pid 614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 612] <... write resumed>) = 1048576 [pid 301] rmdir("./9/file0" [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 612] munmap(0x7fb6c54a8000, 1048576 [pid 299] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 612] <... munmap resumed>) = 0 [pid 612] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 612] ioctl(4, LOOP_SET_FD, 3 [pid 614] <... mmap resumed>) = 0x7fb6c54a8000 [pid 596] <... mmap resumed>) = 0x20000000 [pid 301] <... rmdir resumed>) = 0 [pid 299] getdents64(3, [pid 612] <... ioctl resumed>) = 0 [pid 612] close(3) = 0 [pid 612] mkdir("./file0", 0777) = 0 [pid 612] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 610] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 596] +++ killed by SIGBUS +++ [pid 614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 301] getdents64(3, [pid 299] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 301] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 299] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] close(3 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... close resumed>) = 0 [pid 299] lstat("./9/binderfs", [pid 301] rmdir("./9" [pid 299] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 299] unlink("./9/binderfs") = 0 [pid 301] mkdir("./10", 0777 [pid 299] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] <... mkdir resumed>) = 0 [pid 610] +++ killed by SIGBUS +++ [pid 593] +++ killed by SIGBUS +++ [pid 614] <... write resumed>) = 1048576 [pid 614] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 614] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 25.882613][ T609] loop0: detected capacity change from 0 to 2048 [ 25.916003][ T612] loop3: detected capacity change from 0 to 2048 [pid 614] ioctl(4, LOOP_SET_FD, 3 [pid 609] <... mount resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 609] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 301] <... openat resumed>) = 3 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=593, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 614] <... ioctl resumed>) = 0 [pid 614] close(3 [pid 609] <... openat resumed>) = 3 [pid 301] ioctl(3, LOOP_CLR_FD [pid 614] <... close resumed>) = 0 [pid 614] mkdir("./file0", 0777 [pid 609] chdir("./file0" [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] close(3 [pid 609] <... chdir resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 614] <... mkdir resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 612] <... mount resumed>) = 0 [pid 609] ioctl(4, LOOP_CLR_FD [pid 299] <... umount2 resumed>) = 0 [pid 298] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 612] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 609] <... ioctl resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 612] <... openat resumed>) = 3 [pid 609] close(4 [pid 298] fstat(3, [pid 612] chdir("./file0" [pid 609] <... close resumed>) = 0 [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 619 attached [pid 612] <... chdir resumed>) = 0 [pid 609] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... clone resumed>, child_tidptr=0x5555574565d0) = 619 [pid 298] getdents64(3, [pid 612] ioctl(4, LOOP_CLR_FD [pid 609] <... futex resumed>) = 1 [pid 607] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 612] <... ioctl resumed>) = 0 [pid 609] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 607] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 612] close(4 [pid 607] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 612] <... close resumed>) = 0 [pid 607] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] lstat("./9/binderfs", [pid 612] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 612] <... futex resumed>) = 1 [pid 611] <... futex resumed>) = 0 [pid 298] unlink("./9/binderfs" [pid 614] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 612] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 611] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... open resumed>) = 4 [pid 298] <... unlink resumed>) = 0 [pid 619] set_robust_list(0x5555574565e0, 24 [pid 298] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 611] <... futex resumed>) = 0 [pid 611] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 607] <... futex resumed>) = 0 [pid 612] <... open resumed>) = 4 [pid 609] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 607] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... open resumed>) = 5 [pid 607] <... futex resumed>) = 0 [pid 609] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 0 [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 609] ftruncate(5, 33587195 [pid 607] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... ftruncate resumed>) = 0 [pid 607] <... futex resumed>) = 0 [pid 609] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 0 [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 609] sendfile(4, 5, NULL, 4 [pid 607] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... sendfile resumed>) = 4 [pid 607] <... futex resumed>) = 0 [pid 609] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 0 [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 609] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 607] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] <... futex resumed>) = 1 [pid 611] <... futex resumed>) = 0 [pid 607] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 612] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 611] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 611] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 612] <... open resumed>) = 5 [pid 612] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 611] <... futex resumed>) = 0 [pid 612] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 611] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] ftruncate(5, 33587195 [pid 611] <... futex resumed>) = 0 [pid 612] <... ftruncate resumed>) = 0 [pid 611] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 612] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 611] <... futex resumed>) = 0 [pid 611] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] sendfile(4, 5, NULL, 4 [pid 611] <... futex resumed>) = 0 [pid 611] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 612] <... sendfile resumed>) = 4 [pid 612] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 611] <... futex resumed>) = 0 [pid 611] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 611] <... futex resumed>) = 0 [pid 611] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... set_robust_list resumed>) = 0 [pid 299] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 619] chdir("./10" [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 619] <... chdir resumed>) = 0 [pid 299] lstat("./9/file0", [pid 619] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 619] <... prctl resumed>) = 0 [pid 299] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 619] setpgid(0, 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 619] <... setpgid resumed>) = 0 [pid 619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 619] <... openat resumed>) = 3 [pid 299] getdents64(4, [pid 619] write(3, "1000", 4 [pid 299] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 619] <... write resumed>) = 4 [pid 299] getdents64(4, [pid 619] close(3 [pid 299] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 619] <... close resumed>) = 0 [pid 299] close(4 [pid 619] symlink("/dev/binderfs", "./binderfs" [pid 299] <... close resumed>) = 0 [pid 619] <... symlink resumed>) = 0 [pid 299] rmdir("./9/file0") = 0 [pid 619] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] getdents64(3, [pid 619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 619] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 299] close(3 [pid 619] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 299] <... close resumed>) = 0 [ 25.934429][ T614] loop5: detected capacity change from 0 to 2048 [pid 619] <... mprotect resumed>) = 0 [pid 299] rmdir("./9" [pid 619] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 299] <... rmdir resumed>) = 0 [pid 299] mkdir("./10", 0777 [pid 619] <... clone resumed>, parent_tid=[621], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 621 [pid 619] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 619] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 621 attached [pid 621] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 621] memfd_create("syzkaller", 0) = 3 [pid 621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 299] <... clone resumed>, child_tidptr=0x5555574565d0) = 622 ./strace-static-x86_64: Process 622 attached [pid 622] set_robust_list(0x5555574565e0, 24 [pid 621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 622] <... set_robust_list resumed>) = 0 [pid 622] chdir("./10") = 0 [pid 622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 622] setpgid(0, 0) = 0 [pid 622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 607] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 622] <... openat resumed>) = 3 [pid 607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 607] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 607] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 607] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 607] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 622] write(3, "1000", 4 [pid 607] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 607] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 622] <... write resumed>) = 4 [pid 607] <... clone resumed>, parent_tid=[624], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 624 [pid 607] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 607] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 622] close(3) = 0 [pid 622] symlink("/dev/binderfs", "./binderfs") = 0 [pid 622] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 622] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 622] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 614] <... mount resumed>) = 0 [pid 614] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 614] chdir("./file0") = 0 [pid 614] ioctl(4, LOOP_CLR_FD) = 0 [pid 614] close(4) = 0 [pid 611] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 614] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 1 [pid 613] <... futex resumed>) = 0 [pid 611] <... futex resumed>) = 0 [pid 614] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 613] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... open resumed>) = 4 [pid 613] <... futex resumed>) = 0 [pid 611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 614] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 614] <... futex resumed>) = 0 [pid 613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 614] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 613] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... clone resumed>, parent_tid=[625], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 625 [pid 614] <... open resumed>) = 5 [pid 613] <... futex resumed>) = 0 [pid 614] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 614] <... futex resumed>) = 0 [pid 613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 614] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 613] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 613] <... futex resumed>) = 0 [pid 614] ftruncate(5, 33587195 [pid 613] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 614] <... ftruncate resumed>) = 0 [pid 614] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 613] <... futex resumed>) = 0 [pid 614] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 613] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 613] <... futex resumed>) = 0 [pid 614] sendfile(4, 5, NULL, 4 [pid 613] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 614] <... sendfile resumed>) = 4 [pid 614] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 613] <... futex resumed>) = 0 [pid 614] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 613] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 613] <... futex resumed>) = 0 [pid 614] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 613] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 624 attached [pid 622] <... futex resumed>) = 0 [pid 611] <... mmap resumed>) = 0x7fb6c5587000 [pid 611] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 622] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 621] <... write resumed>) = 1048576 [pid 621] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 624] set_robust_list(0x7fb6c55a79e0, 24 [pid 621] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 624] <... set_robust_list resumed>) = 0 [pid 621] <... openat resumed>) = 4 [pid 621] ioctl(4, LOOP_SET_FD, 3 [pid 624] sendfile(4, 5, NULL, 4 [pid 611] <... mprotect resumed>) = 0 [pid 624] <... sendfile resumed>) = 4 [pid 611] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 626 attached [pid 624] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 621] <... ioctl resumed>) = 0 [pid 624] <... futex resumed>) = 1 [pid 611] <... clone resumed>, parent_tid=[626], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 626 [pid 607] <... futex resumed>) = 0 [pid 621] close(3 [pid 626] set_robust_list(0x7fb6c55a79e0, 24 [pid 624] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 611] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] <... set_robust_list resumed>) = 0 [pid 624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 621] <... close resumed>) = 0 [pid 611] <... futex resumed>) = 0 [pid 607] <... futex resumed>) = 0 [pid 626] sendfile(4, 5, NULL, 4 [pid 621] mkdir("./file0", 0777 [pid 611] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 626] <... sendfile resumed>) = 4 [pid 621] <... mkdir resumed>) = 0 [pid 626] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 621] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue" [pid 613] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... umount2 resumed>) = 0 [pid 626] <... futex resumed>) = 1 [pid 613] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... futex resumed>) = 0 [pid 613] <... futex resumed>) = 0 [pid 611] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 625 attached [pid 625] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [ 26.039456][ T621] loop4: detected capacity change from 0 to 2048 [ 26.050471][ T624] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 625] memfd_create("syzkaller", 0) = 3 [pid 625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 298] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./9/file0") = 0 [pid 298] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 298] close(3) = 0 [pid 298] rmdir("./9") = 0 [pid 298] mkdir("./10", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 611] <... futex resumed>) = 0 [pid 298] close(3 [pid 611] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... close resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 628 [pid 621] <... mount resumed>) = 0 [pid 621] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 626] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 621] chdir("./file0" [pid 607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 628 attached [pid 624] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 621] <... chdir resumed>) = 0 [pid 613] <... mmap resumed>) = 0x7fb6c5587000 [pid 612] <... mmap resumed>) = ? [pid 611] <... futex resumed>) = ? [pid 607] syscall_0x7fb6c5587000(0, 0, 0x7ffc24cde7b0, 0, 0x7ffc24d92080, 0x7ffc24d920b0 [pid 628] set_robust_list(0x5555574565e0, 24 [pid 626] +++ killed by SIGBUS +++ [pid 621] ioctl(4, LOOP_CLR_FD [pid 613] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 612] +++ killed by SIGBUS +++ [pid 609] <... mmap resumed>) = ? [pid 628] <... set_robust_list resumed>) = 0 [pid 624] +++ killed by SIGBUS +++ [pid 621] <... ioctl resumed>) = 0 [pid 613] <... mprotect resumed>) = 0 [pid 611] +++ killed by SIGBUS +++ [pid 628] chdir("./10" [pid 621] close(4 [pid 613] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 628] <... chdir resumed>) = 0 [pid 621] <... close resumed>) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=611, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 628] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 621] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... clone resumed>, parent_tid=[630], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 630 [pid 300] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 628] <... prctl resumed>) = 0 [pid 625] <... write resumed>) = 1048576 [pid 621] <... futex resumed>) = 1 [pid 619] <... futex resumed>) = 0 [pid 613] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] +++ killed by SIGBUS +++ [pid 607] +++ killed by SIGBUS +++ [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 628] setpgid(0, 0 [pid 625] munmap(0x7fb6c54a8000, 1048576 [pid 621] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 619] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [pid 300] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=607, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6} --- [pid 628] <... setpgid resumed>) = 0 [pid 625] <... munmap resumed>) = 0 [pid 621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 619] <... futex resumed>) = 0 [pid 613] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... openat resumed>) = 3 [pid 628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 625] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 621] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 619] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] fstat(3, [pid 628] <... openat resumed>) = 3 [pid 625] <... openat resumed>) = 4 [pid 621] <... open resumed>) = 4 [pid 300] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 628] write(3, "1000", 4 [pid 625] ioctl(4, LOOP_SET_FD, 3 [pid 621] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [ 26.095280][ T626] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 300] getdents64(3, [pid 295] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 628] <... write resumed>) = 4 [pid 621] <... futex resumed>) = 1 [pid 619] <... futex resumed>) = 0 [pid 300] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 628] close(3 [pid 621] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 619] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 628] <... close resumed>) = 0 [pid 621] <... open resumed>) = 5 [pid 619] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 628] symlink("/dev/binderfs", "./binderfs" [pid 621] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] lstat("./10/binderfs", [pid 295] <... openat resumed>) = 3 [pid 628] <... symlink resumed>) = 0 [pid 621] <... futex resumed>) = 0 [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 295] fstat(3, [pid 628] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 621] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 619] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] unlink("./10/binderfs" [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 628] <... futex resumed>) = 0 [pid 621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 619] <... futex resumed>) = 0 [pid 300] <... unlink resumed>) = 0 [pid 628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 621] ftruncate(5, 33587195 [pid 619] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] getdents64(3, [pid 628] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 621] <... ftruncate resumed>) = 0 [pid 628] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 621] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 628] <... mprotect resumed>) = 0 [pid 621] <... futex resumed>) = 1 [pid 619] <... futex resumed>) = 0 [pid 295] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 630 attached [pid 628] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 621] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 619] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 630] set_robust_list(0x7fb6c55a79e0, 24 [pid 621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 619] <... futex resumed>) = 0 [pid 295] lstat("./9/binderfs", [pid 630] <... set_robust_list resumed>) = 0 [pid 628] <... clone resumed>, parent_tid=[631], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 631 [pid 621] sendfile(4, 5, NULL, 4 [pid 619] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 630] sendfile(4, 5, NULL, 4 [pid 628] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 621] <... sendfile resumed>) = 4 [pid 295] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 631 attached [pid 630] <... sendfile resumed>) = 4 [pid 628] <... futex resumed>) = 0 [pid 621] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] unlink("./9/binderfs" [pid 630] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 628] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 621] <... futex resumed>) = 1 [pid 619] <... futex resumed>) = 0 [pid 631] set_robust_list(0x7fb6cd8c89e0, 24 [pid 630] <... futex resumed>) = 1 [pid 621] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 619] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [pid 295] <... unlink resumed>) = 0 [pid 631] <... set_robust_list resumed>) = 0 [pid 630] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 619] <... futex resumed>) = 0 [pid 613] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 631] memfd_create("syzkaller", 0 [pid 630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 621] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 619] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... futex resumed>) = 0 [pid 631] <... memfd_create resumed>) = 3 [pid 613] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... umount2 resumed>) = 0 [pid 631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 300] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 631] <... mmap resumed>) = 0x7fb6c54a8000 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 631] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 625] <... ioctl resumed>) = 0 [pid 300] getdents64(4, [pid 625] close(3 [pid 300] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 631] <... write resumed>) = 1048576 [pid 625] <... close resumed>) = 0 [pid 300] close(4 [pid 625] mkdir("./file0", 0777 [pid 300] <... close resumed>) = 0 [pid 625] <... mkdir resumed>) = 0 [pid 300] rmdir("./10/file0" [pid 625] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 300] <... rmdir resumed>) = 0 [pid 300] getdents64(3, [pid 631] munmap(0x7fb6c54a8000, 1048576 [pid 300] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 631] <... munmap resumed>) = 0 [pid 300] close(3 [pid 631] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 300] <... close resumed>) = 0 [pid 631] <... openat resumed>) = 4 [pid 300] rmdir("./10" [ 26.146098][ T625] loop2: detected capacity change from 0 to 2048 [ 26.180950][ T630] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 631] ioctl(4, LOOP_SET_FD, 3 [pid 300] <... rmdir resumed>) = 0 [pid 300] mkdir("./11", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 632 ./strace-static-x86_64: Process 632 attached [pid 631] <... ioctl resumed>) = 0 [pid 630] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 295] <... umount2 resumed>) = 0 [pid 632] set_robust_list(0x5555574565e0, 24 [pid 631] close(3 [pid 295] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 632] <... set_robust_list resumed>) = 0 [pid 631] <... close resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 632] chdir("./11" [pid 631] mkdir("./file0", 0777 [pid 295] lstat("./9/file0", [pid 632] <... chdir resumed>) = 0 [pid 631] <... mkdir resumed>) = 0 [pid 295] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 632] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 631] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue" [pid 295] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 632] <... prctl resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 632] setpgid(0, 0 [pid 295] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 632] <... setpgid resumed>) = 0 [pid 295] <... openat resumed>) = 4 [pid 632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 295] fstat(4, [pid 632] <... openat resumed>) = 3 [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 632] write(3, "1000", 4 [pid 295] getdents64(4, [pid 632] <... write resumed>) = 4 [pid 295] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 632] close(3 [pid 295] getdents64(4, [pid 632] <... close resumed>) = 0 [pid 295] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 632] symlink("/dev/binderfs", "./binderfs" [pid 295] close(4 [pid 632] <... symlink resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 632] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] rmdir("./9/file0" [pid 632] <... futex resumed>) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 295] getdents64(3, [pid 632] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 295] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 632] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 295] close(3 [pid 632] <... mprotect resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 632] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 295] rmdir("./9") = 0 [pid 632] <... clone resumed>, parent_tid=[636], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 636 [pid 295] mkdir("./10", 0777 [pid 632] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... mmap resumed>) = ? [pid 613] <... futex resumed>) = ? [pid 295] <... mkdir resumed>) = 0 [pid 632] <... futex resumed>) = 0 [pid 630] +++ killed by SIGBUS +++ [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 632] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 295] <... openat resumed>) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 637 ./strace-static-x86_64: Process 636 attached [pid 636] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 636] memfd_create("syzkaller", 0) = 3 [pid 636] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 625] <... mount resumed>) = 0 [pid 625] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 625] chdir("./file0") = 0 [pid 625] ioctl(4, LOOP_CLR_FD) = 0 [pid 625] close(4) = 0 [pid 636] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 636] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 636] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 636] ioctl(4, LOOP_SET_FD, 3 [pid 625] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 619] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 619] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 619] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[639], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 639 [pid 619] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 636] <... ioctl resumed>) = 0 [pid 636] close(3./strace-static-x86_64: Process 637 attached ) = 0 [pid 637] set_robust_list(0x5555574565e0, 24 [pid 636] mkdir("./file0", 0777 [pid 631] <... mount resumed>) = 0 [pid 637] <... set_robust_list resumed>) = 0 [pid 631] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 636] <... mkdir resumed>) = 0 [pid 631] <... openat resumed>) = 3 [pid 636] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 637] chdir("./10" [pid 631] chdir("./file0" [pid 637] <... chdir resumed>) = 0 [pid 631] <... chdir resumed>) = 0 [pid 637] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 614] +++ killed by SIGBUS +++ [pid 613] +++ killed by SIGBUS +++ [pid 637] <... prctl resumed>) = 0 [pid 637] setpgid(0, 0 [pid 631] ioctl(4, LOOP_CLR_FD [pid 637] <... setpgid resumed>) = 0 [pid 631] <... ioctl resumed>) = 0 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=613, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7} --- [pid 637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 631] close(4 [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 631] <... close resumed>) = 0 [pid 637] <... openat resumed>) = 3 [pid 637] write(3, "1000", 4 [pid 631] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... restart_syscall resumed>) = 0 [pid 637] <... write resumed>) = 4 [pid 631] <... futex resumed>) = 1 [pid 628] <... futex resumed>) = 0 [pid 637] close(3 [pid 631] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 628] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... close resumed>) = 0 [pid 631] <... open resumed>) = 4 [pid 628] <... futex resumed>) = 0 [pid 302] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 637] symlink("/dev/binderfs", "./binderfs" [pid 631] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 628] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 631] <... futex resumed>) = 0 [pid 628] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 637] <... symlink resumed>) = 0 [pid 631] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 628] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... openat resumed>) = 3 [pid 637] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... open resumed>) = 5 [pid 628] <... futex resumed>) = 0 [pid 302] fstat(3, [pid 637] <... futex resumed>) = 0 [pid 631] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 628] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 631] <... futex resumed>) = 0 [pid 628] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] getdents64(3, [pid 637] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 631] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 628] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 637] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 628] <... futex resumed>) = 0 [pid 625] <... open resumed>) = 4 [pid 302] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 637] <... mprotect resumed>) = 0 [pid 631] ftruncate(5, 33587195 [pid 628] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 637] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 631] <... ftruncate resumed>) = 0 [pid 625] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] lstat("./10/binderfs", [pid 631] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 625] <... futex resumed>) = 1 [pid 622] <... futex resumed>) = 0 [pid 302] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 637] <... clone resumed>, parent_tid=[640], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 640 [pid 631] <... futex resumed>) = 1 [pid 628] <... futex resumed>) = 0 [pid 625] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 622] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] unlink("./10/binderfs" [pid 637] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 628] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 625] <... open resumed>) = 5 [pid 622] <... futex resumed>) = 0 [pid 302] <... unlink resumed>) = 0 [pid 637] <... futex resumed>) = 0 [pid 631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 628] <... futex resumed>) = 0 [pid 622] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 637] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 631] sendfile(4, 5, NULL, 4 [pid 628] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... sendfile resumed>) = 4 [pid 631] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 628] <... futex resumed>) = 0 [pid 631] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 628] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 628] <... futex resumed>) = 0 [pid 631] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [ 26.222457][ T631] loop1: detected capacity change from 0 to 2048 [ 26.250011][ T636] loop3: detected capacity change from 0 to 2048 [pid 628] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 625] ftruncate(5, 33587195 [pid 622] <... futex resumed>) = 0 [pid 625] <... ftruncate resumed>) = 0 [pid 622] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 625] <... futex resumed>) = 0 [pid 622] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 625] sendfile(4, 5, NULL, 4 [pid 622] <... futex resumed>) = 0 [pid 625] <... sendfile resumed>) = 4 [pid 622] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 625] <... futex resumed>) = 0 [pid 622] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 625] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 639 attached [pid 639] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 639] sendfile(4, 5, NULL, 4) = 4 [pid 619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 619] futex(0x7fb6cd9a17cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5566000 [pid 619] mprotect(0x7fb6c5567000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 640 attached [pid 639] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... mprotect resumed>) = 0 [pid 302] <... umount2 resumed>) = 0 [pid 640] set_robust_list(0x7fb6cd8c89e0, 24 [pid 619] clone(child_stack=0x7fb6c55863f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 640] <... set_robust_list resumed>) = 0 [pid 619] <... clone resumed>, parent_tid=[644], tls=0x7fb6c5586700, child_tidptr=0x7fb6c55869d0) = 644 [pid 640] memfd_create("syzkaller", 0) = 3 [pid 619] futex(0x7fb6cd9a17c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7fb6cd9a17cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 640] <... mmap resumed>) = 0x7fb6c54a8000 [pid 639] <... futex resumed>) = 0 [pid 302] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 639] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] lstat("./10/file0", [pid 640] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 302] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./10/file0") = 0 [pid 302] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 640] <... write resumed>) = 1048576 [pid 302] rmdir("./10" [pid 640] munmap(0x7fb6c54a8000, 1048576 [pid 302] <... rmdir resumed>) = 0 [pid 302] mkdir("./11", 0777./strace-static-x86_64: Process 644 attached [pid 640] <... munmap resumed>) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 640] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 644] set_robust_list(0x7fb6c55869e0, 24 [pid 640] <... openat resumed>) = 4 [pid 636] <... mount resumed>) = 0 [pid 302] <... openat resumed>) = 3 [pid 644] <... set_robust_list resumed>) = 0 [pid 640] ioctl(4, LOOP_SET_FD, 3 [pid 636] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 302] ioctl(3, LOOP_CLR_FD [pid 636] <... openat resumed>) = 3 [pid 628] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 636] chdir("./file0" [pid 628] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] close(3 [pid 636] <... chdir resumed>) = 0 [pid 628] <... futex resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 636] ioctl(4, LOOP_CLR_FD [pid 628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 636] <... ioctl resumed>) = 0 [pid 628] <... mmap resumed>) = 0x7fb6c5587000 [pid 636] close(4 [pid 628] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 302] <... clone resumed>, child_tidptr=0x5555574565d0) = 645 [pid 636] <... close resumed>) = 0 [pid 628] <... mprotect resumed>) = 0 [pid 636] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 628] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 636] <... futex resumed>) = 1 [pid 636] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 628] <... clone resumed>, parent_tid=[646], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 646 [pid 628] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 628] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 622] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 622] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 632] <... futex resumed>) = 0 [pid 622] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = 0 [pid 636] <... futex resumed>) = 0 [pid 632] <... futex resumed>) = 1 [pid 622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 622] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 622] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[647], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 647 [pid 622] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 632] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 640] <... ioctl resumed>) = 0 [pid 636] <... open resumed>) = 4 [pid 640] close(3 [pid 636] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... close resumed>) = 0 [pid 636] <... futex resumed>) = 1 [pid 632] <... futex resumed>) = 0 [pid 640] mkdir("./file0", 0777 [pid 636] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] <... futex resumed>) = 0 ./strace-static-x86_64: Process 646 attached ./strace-static-x86_64: Process 647 attached [pid 640] <... mkdir resumed>) = 0 [pid 636] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 632] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 645 attached [pid 647] set_robust_list(0x7fb6c55a79e0, 24 [pid 646] set_robust_list(0x7fb6c55a79e0, 24 [pid 640] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 636] <... open resumed>) = 5 [pid 647] <... set_robust_list resumed>) = 0 [pid 646] <... set_robust_list resumed>) = 0 [pid 645] set_robust_list(0x5555574565e0, 24 [pid 636] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 636] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] <... futex resumed>) = 0 [pid 636] ftruncate(5, 33587195 [pid 632] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] sendfile(4, 5, NULL, 4 [pid 646] sendfile(4, 5, NULL, 4 [pid 645] <... set_robust_list resumed>) = 0 [pid 636] <... ftruncate resumed>) = 0 [pid 647] <... sendfile resumed>) = 4 [pid 646] <... sendfile resumed>) = 4 [pid 636] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] chdir("./11" [pid 636] <... futex resumed>) = 1 [pid 647] <... futex resumed>) = 1 [pid 646] <... futex resumed>) = 1 [pid 645] <... chdir resumed>) = 0 [pid 636] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] <... futex resumed>) = 0 [pid 628] <... futex resumed>) = 0 [pid 622] <... futex resumed>) = 0 [pid 619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 647] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 646] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 645] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 632] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 628] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 645] <... prctl resumed>) = 0 [pid 644] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 636] <... futex resumed>) = 0 [pid 632] <... futex resumed>) = 1 [pid 628] <... futex resumed>) = 0 [pid 622] <... futex resumed>) = 0 [ 26.334760][ T644] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.349509][ T640] loop0: detected capacity change from 0 to 2048 [pid 645] setpgid(0, 0 [pid 636] sendfile(4, 5, NULL, 4 [pid 632] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 622] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] <... setpgid resumed>) = 0 [pid 636] <... sendfile resumed>) = 4 [pid 645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 636] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... openat resumed>) = 3 [pid 636] <... futex resumed>) = 1 [pid 632] <... futex resumed>) = 0 [pid 645] write(3, "1000", 4 [pid 636] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... write resumed>) = 4 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] <... futex resumed>) = 0 [pid 645] close(3 [pid 636] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 632] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] <... close resumed>) = 0 [pid 645] symlink("/dev/binderfs", "./binderfs") = 0 [pid 645] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 645] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 645] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[649], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 649 [pid 645] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 645] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 639] <... futex resumed>) = ? [pid 639] +++ killed by SIGBUS +++ [pid 644] +++ killed by SIGBUS +++ [pid 621] <... mmap resumed>) = ? [pid 621] +++ killed by SIGBUS +++ [pid 619] +++ killed by SIGBUS +++ [pid 640] <... mount resumed>) = 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=619, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=15} --- [pid 647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 646] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 640] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 631] <... mmap resumed>) = 0x20000000 [pid 640] <... openat resumed>) = 3 [pid 640] chdir("./file0") = 0 [pid 640] ioctl(4, LOOP_CLR_FD [pid 631] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... ioctl resumed>) = 0 [pid 640] close(4) = 0 [pid 628] <... futex resumed>) = ? [pid 640] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 637] <... futex resumed>) = 0 [pid 640] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 637] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] <... futex resumed>) = 0 [pid 640] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 637] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 640] <... open resumed>) = 4 [pid 640] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 637] <... futex resumed>) = 0 [pid 640] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 637] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 649 attached [pid 640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] <... futex resumed>) = 0 [pid 649] set_robust_list(0x7fb6cd8c89e0, 24 [pid 640] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 637] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... set_robust_list resumed>) = 0 [pid 640] <... open resumed>) = 5 [pid 649] memfd_create("syzkaller", 0 [pid 640] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... memfd_create resumed>) = 3 [pid 640] <... futex resumed>) = 1 [pid 637] <... futex resumed>) = 0 [pid 649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 640] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 637] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... mmap resumed>) = 0x7fb6c54a8000 [pid 640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] <... futex resumed>) = 0 [pid 640] ftruncate(5, 33587195 [pid 637] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 640] <... ftruncate resumed>) = 0 [pid 640] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 637] <... futex resumed>) = 0 [pid 640] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 637] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] <... futex resumed>) = 0 [pid 631] <... futex resumed>) = ? [pid 646] +++ killed by SIGBUS +++ [pid 640] sendfile(4, 5, NULL, 4 [pid 637] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 640] <... sendfile resumed>) = 4 [pid 640] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 637] <... futex resumed>) = 0 [pid 640] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 637] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] <... futex resumed>) = 0 [pid 640] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [ 26.371514][ T647] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.386240][ T646] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 637] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 631] +++ killed by SIGBUS +++ [pid 628] +++ killed by SIGBUS +++ [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 622] <... futex resumed>) = ? [pid 301] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 647] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=628, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 625] <... mmap resumed>) = ? [pid 301] <... openat resumed>) = 3 [pid 301] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] getdents64(3, [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 298] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 625] +++ killed by SIGBUS +++ [pid 622] +++ killed by SIGBUS +++ [pid 298] fstat(3, [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=622, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(3, [pid 301] lstat("./10/binderfs", [pid 299] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 301] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] unlink("./10/binderfs" [pid 299] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 299] <... openat resumed>) = 3 [pid 301] <... unlink resumed>) = 0 [pid 301] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] fstat(3, [pid 298] unlink("./10/binderfs") = 0 [pid 299] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 649] <... write resumed>) = 1048576 [pid 632] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 632] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 649] munmap(0x7fb6c54a8000, 1048576 [pid 632] <... mmap resumed>) = 0x7fb6c5587000 [pid 632] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 632] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 649] <... munmap resumed>) = 0 [pid 299] lstat("./10/binderfs", [pid 632] <... clone resumed>, parent_tid=[651], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 651 [pid 632] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 649] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 299] unlink("./10/binderfs" [pid 649] <... openat resumed>) = 4 [pid 299] <... unlink resumed>) = 0 [pid 649] ioctl(4, LOOP_SET_FD, 3 [pid 299] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 649] <... ioctl resumed>) = 0 [pid 649] close(3) = 0 [pid 649] mkdir("./file0", 0777) = 0 [pid 649] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 637] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 637] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 637] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 637] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[652], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 652 [pid 637] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 651 attached [pid 651] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 651] sendfile(4, 5, NULL, 4) = 4 [pid 651] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] <... futex resumed>) = 1 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 652 attached [pid 652] set_robust_list(0x7fb6c55a79e0, 24 [pid 299] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 652] <... set_robust_list resumed>) = 0 [pid 652] sendfile(4, 5, NULL, 4 [pid 299] <... openat resumed>) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, [pid 652] <... sendfile resumed>) = 4 [pid 299] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 652] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = 0 [pid 637] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 652] <... futex resumed>) = 1 [ 26.472588][ T649] loop5: detected capacity change from 0 to 2048 [ 26.503529][ T651] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 651] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 649] <... mount resumed>) = 0 [pid 301] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 649] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./10/file0" [pid 649] <... openat resumed>) = 3 [pid 636] <... mmap resumed>) = ? [pid 632] <... futex resumed>) = ? [pid 301] lstat("./10/file0", [pid 298] <... rmdir resumed>) = 0 [pid 651] +++ killed by SIGBUS +++ [pid 649] chdir("./file0" [pid 298] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 301] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] close(3) = 0 [pid 649] <... chdir resumed>) = 0 [pid 301] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] rmdir("./10" [pid 649] ioctl(4, LOOP_CLR_FD [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... rmdir resumed>) = 0 [pid 649] <... ioctl resumed>) = 0 [pid 301] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 649] close(4 [pid 301] <... openat resumed>) = 4 [pid 652] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 649] <... close resumed>) = 0 [pid 636] +++ killed by SIGBUS +++ [pid 632] +++ killed by SIGBUS +++ [pid 301] fstat(4, [pid 299] getdents64(4, [pid 298] mkdir("./11", 0777 [pid 649] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=632, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 298] <... mkdir resumed>) = 0 [pid 649] <... futex resumed>) = 1 [pid 645] <... futex resumed>) = 0 [pid 301] getdents64(4, [pid 299] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 649] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 645] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 298] <... openat resumed>) = 3 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 645] <... futex resumed>) = 0 [pid 301] getdents64(4, [pid 300] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] ioctl(3, LOOP_CLR_FD [pid 649] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 645] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 649] <... open resumed>) = 4 [pid 301] close(4 [pid 300] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 649] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... close resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 649] <... futex resumed>) = 1 [pid 645] <... futex resumed>) = 0 [pid 301] rmdir("./10/file0" [pid 300] fstat(3, [pid 298] close(3 [pid 649] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 645] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... rmdir resumed>) = 0 [pid 300] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] close(4 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 645] <... futex resumed>) = 0 [pid 640] <... mmap resumed>) = ? [pid 637] <... futex resumed>) = ? [pid 301] getdents64(3, [pid 300] getdents64(3, [pid 299] <... close resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 652] +++ killed by SIGBUS +++ [pid 649] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 645] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 640] +++ killed by SIGBUS +++ [pid 637] +++ killed by SIGBUS +++ [pid 300] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 299] rmdir("./10/file0" [pid 649] <... open resumed>) = 5 [pid 301] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 300] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] <... rmdir resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 649] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] close(3 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] getdents64(3, [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=637, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- ./strace-static-x86_64: Process 655 attached [pid 649] <... futex resumed>) = 1 [pid 645] <... futex resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 300] lstat("./11/binderfs", [pid 295] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 655] set_robust_list(0x5555574565e0, 24 [pid 649] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 645] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] rmdir("./10" [pid 300] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 299] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 298] <... clone resumed>, child_tidptr=0x5555574565d0) = 655 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 655] <... set_robust_list resumed>) = 0 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 645] <... futex resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 300] unlink("./11/binderfs" [pid 299] close(3 [pid 295] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 649] ftruncate(5, 33587195 [pid 645] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] mkdir("./11", 0777 [pid 300] <... unlink resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 649] <... ftruncate resumed>) = 0 [ 26.523305][ T652] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 299] rmdir("./10" [pid 295] <... openat resumed>) = 3 [pid 649] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... mkdir resumed>) = 0 [pid 300] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] <... rmdir resumed>) = 0 [pid 295] fstat(3, [pid 649] <... futex resumed>) = 1 [pid 645] <... futex resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 299] mkdir("./11", 0777 [pid 649] sendfile(4, 5, NULL, 4 [pid 645] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... mkdir resumed>) = 0 [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 656 [pid 655] chdir("./11") = 0 [pid 655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 655] setpgid(0, 0) = 0 [pid 655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 655] write(3, "1000", 4) = 4 [pid 655] close(3) = 0 [pid 655] symlink("/dev/binderfs", "./binderfs") = 0 [pid 655] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 655] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 655] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[657], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 657 [pid 655] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 655] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 657 attached [pid 657] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 657] memfd_create("syzkaller", 0) = 3 [pid 657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 645] <... futex resumed>) = 0 [pid 645] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] getdents64(3, [pid 649] <... sendfile resumed>) = 4 [pid 295] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 649] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... openat resumed>) = 3 [pid 649] <... futex resumed>) = 1 [pid 645] <... futex resumed>) = 0 [pid 301] ioctl(3, LOOP_CLR_FD [pid 295] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 649] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 645] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 645] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 649] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 645] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] close(3 [pid 295] lstat("./10/binderfs", [pid 657] <... write resumed>) = 1048576 [pid 657] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 657] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 657] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 657] close(3) = 0 [pid 657] mkdir("./file0", 0777) = 0 [pid 657] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue" [pid 295] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 301] <... close resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] unlink("./10/binderfs" [pid 301] <... clone resumed>, child_tidptr=0x5555574565d0) = 658 [pid 295] <... unlink resumed>) = 0 [pid 295] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 656 attached [pid 656] set_robust_list(0x5555574565e0, 24) = 0 [pid 656] chdir("./11") = 0 [pid 656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 656] setpgid(0, 0) = 0 [pid 656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 656] write(3, "1000", 4) = 4 [pid 656] close(3) = 0 [pid 656] symlink("/dev/binderfs", "./binderfs") = 0 [pid 656] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 656] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 656] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 295] <... umount2 resumed>) = 0 [pid 656] <... clone resumed>, parent_tid=[659], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 659 [pid 295] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] lstat("./10/file0", [pid 656] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 659 attached [pid 659] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 659] memfd_create("syzkaller", 0) = 3 [pid 659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 295] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 295] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 295] close(4./strace-static-x86_64: Process 658 attached ) = 0 [pid 295] rmdir("./10/file0" [pid 658] set_robust_list(0x5555574565e0, 24) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 658] chdir("./11" [pid 295] getdents64(3, [pid 658] <... chdir resumed>) = 0 [pid 295] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 658] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 295] close(3 [pid 658] <... prctl resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 295] rmdir("./10" [pid 658] setpgid(0, 0 [pid 295] <... rmdir resumed>) = 0 [pid 658] <... setpgid resumed>) = 0 [pid 295] mkdir("./11", 0777 [pid 658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 295] <... mkdir resumed>) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 658] <... openat resumed>) = 3 [pid 658] write(3, "1000", 4 [pid 295] <... openat resumed>) = 3 [pid 658] <... write resumed>) = 4 [pid 295] ioctl(3, LOOP_CLR_FD [pid 658] close(3 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 658] <... close resumed>) = 0 [pid 295] close(3 [pid 658] symlink("/dev/binderfs", "./binderfs" [pid 295] <... close resumed>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 660 [pid 658] <... symlink resumed>) = 0 [pid 659] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 660 attached [pid 660] set_robust_list(0x5555574565e0, 24) = 0 [pid 660] chdir("./11") = 0 [pid 658] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 660] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 658] <... futex resumed>) = 0 [pid 658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 658] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 660] setpgid(0, 0 [pid 658] <... mprotect resumed>) = 0 [pid 658] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 660] <... setpgid resumed>) = 0 [pid 659] munmap(0x7fb6c54a8000, 1048576 [pid 658] <... clone resumed>, parent_tid=[662], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 662 [pid 658] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 660] write(3, "1000", 4) = 4 [pid 660] close(3) = 0 [pid 660] symlink("/dev/binderfs", "./binderfs" [pid 659] <... munmap resumed>) = 0 [pid 659] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 660] <... symlink resumed>) = 0 [pid 659] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 662 attached [pid 662] set_robust_list(0x7fb6cd8c89e0, 24 [pid 660] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 660] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 662] <... set_robust_list resumed>) = 0 [pid 657] <... mount resumed>) = 0 [pid 657] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 662] memfd_create("syzkaller", 0 [pid 657] <... openat resumed>) = 3 [pid 662] <... memfd_create resumed>) = 3 [pid 657] chdir("./file0" [pid 662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 657] <... chdir resumed>) = 0 [pid 657] ioctl(4, LOOP_CLR_FD [pid 662] <... mmap resumed>) = 0x7fb6c54a8000 [pid 657] <... ioctl resumed>) = 0 [pid 657] close(4 [pid 660] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 660] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 660] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[664], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 664 [pid 660] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 660] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 664 attached [pid 664] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 664] memfd_create("syzkaller", 0) = 3 [pid 664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 662] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 657] <... close resumed>) = 0 [pid 657] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 655] <... futex resumed>) = 0 [pid 657] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 655] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 657] <... futex resumed>) = 0 [pid 655] <... futex resumed>) = 1 [pid 657] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 655] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] <... open resumed>) = 4 [pid 657] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 655] <... futex resumed>) = 0 [pid 657] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 655] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 657] <... open resumed>) = 5 [pid 655] <... futex resumed>) = 0 [pid 645] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 645] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 657] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 655] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] <... futex resumed>) = 0 [pid 645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 657] <... futex resumed>) = 0 [pid 655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 645] <... mmap resumed>) = 0x7fb6c5587000 [pid 645] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 657] ftruncate(5, 33587195 [pid 655] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... mprotect resumed>) = 0 [pid 657] <... ftruncate resumed>) = 0 [pid 655] <... futex resumed>) = 0 [pid 645] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 657] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 655] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] <... clone resumed>, parent_tid=[665], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 665 [pid 657] <... futex resumed>) = 0 [pid 655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 645] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 657] sendfile(4, 5, NULL, 4 [pid 655] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 657] <... sendfile resumed>) = 4 [pid 655] <... futex resumed>) = 0 [pid 657] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 655] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] <... futex resumed>) = 0 [pid 655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 657] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 655] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 645] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 655] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 659] <... ioctl resumed>) = 0 [pid 300] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./11/file0" [pid 659] close(3) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 300] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./11") = 0 [pid 300] mkdir("./12", 0777 [pid 659] mkdir("./file0", 0777 [pid 300] <... mkdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3 [pid 662] <... write resumed>) = 1048576 [pid 659] <... mkdir resumed>) = 0 [pid 659] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 300] <... close resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 664] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 665 attached [ 26.576300][ T657] loop1: detected capacity change from 0 to 2048 [ 26.616302][ T659] loop2: detected capacity change from 0 to 2048 [pid 665] set_robust_list(0x7fb6c55a79e0, 24 [pid 300] <... clone resumed>, child_tidptr=0x5555574565d0) = 666 [pid 665] <... set_robust_list resumed>) = 0 [pid 665] sendfile(4, 5, NULL, 4 [pid 662] munmap(0x7fb6c54a8000, 1048576 [pid 665] <... sendfile resumed>) = 4 [pid 662] <... munmap resumed>) = 0 [pid 665] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 662] ioctl(4, LOOP_SET_FD, 3 [pid 645] <... futex resumed>) = 0 [pid 645] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 645] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 1 [pid 662] <... ioctl resumed>) = 0 [pid 662] close(3) = 0 [pid 662] mkdir("./file0", 0777) = 0 [pid 662] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 666 attached [pid 666] set_robust_list(0x5555574565e0, 24 [pid 655] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 655] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 655] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 655] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 655] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[669], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 669 [pid 655] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 655] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... set_robust_list resumed>) = 0 [pid 666] chdir("./12") = 0 [pid 666] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 669 attached [pid 669] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 666] <... prctl resumed>) = 0 [pid 666] setpgid(0, 0 [pid 669] sendfile(4, 5, NULL, 4) = 4 [pid 669] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... setpgid resumed>) = 0 [pid 655] <... futex resumed>) = 0 [pid 669] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 664] <... write resumed>) = 1048576 [pid 655] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 666] <... openat resumed>) = 3 [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 664] munmap(0x7fb6c54a8000, 1048576 [pid 655] <... futex resumed>) = 0 [pid 649] <... mmap resumed>) = 0x20000000 [ 26.659318][ T662] loop4: detected capacity change from 0 to 2048 [ 26.660944][ T665] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 666] write(3, "1000", 4 [pid 664] <... munmap resumed>) = 0 [pid 655] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... write resumed>) = 4 [pid 664] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 666] close(3 [pid 664] <... openat resumed>) = 4 [pid 666] <... close resumed>) = 0 [pid 664] ioctl(4, LOOP_SET_FD, 3 [pid 666] symlink("/dev/binderfs", "./binderfs" [pid 645] <... futex resumed>) = ? [pid 669] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 666] <... symlink resumed>) = 0 [pid 665] +++ killed by SIGBUS +++ [pid 649] +++ killed by SIGBUS +++ [pid 645] +++ killed by SIGBUS +++ [pid 666] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=645, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6} --- [pid 664] <... ioctl resumed>) = 0 [pid 657] <... mmap resumed>) = ? [pid 655] <... futex resumed>) = ? [pid 302] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 669] +++ killed by SIGBUS +++ [pid 664] close(3 [pid 657] +++ killed by SIGBUS +++ [pid 664] <... close resumed>) = 0 [pid 664] mkdir("./file0", 0777) = 0 [pid 664] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 666] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 666] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 655] +++ killed by SIGBUS +++ [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=655, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 666] <... clone resumed>, parent_tid=[672], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 672 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 666] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 662] <... mount resumed>) = 0 [pid 302] <... openat resumed>) = 3 [pid 298] <... restart_syscall resumed>) = 0 [pid 662] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 302] fstat(3, [pid 662] <... openat resumed>) = 3 [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 662] chdir("./file0" [pid 659] <... mount resumed>) = 0 [pid 302] getdents64(3, [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 662] <... chdir resumed>) = 0 [pid 659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 302] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 298] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 672 attached [pid 662] ioctl(4, LOOP_CLR_FD [pid 659] <... openat resumed>) = 3 [pid 302] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] <... openat resumed>) = 3 [pid 662] <... ioctl resumed>) = 0 [pid 659] chdir("./file0" [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] fstat(3, [pid 662] close(4 [pid 659] <... chdir resumed>) = 0 [pid 302] lstat("./11/binderfs", [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 672] set_robust_list(0x7fb6cd8c89e0, 24 [pid 662] <... close resumed>) = 0 [pid 659] ioctl(4, LOOP_CLR_FD [pid 302] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 672] <... set_robust_list resumed>) = 0 [pid 664] <... mount resumed>) = 0 [pid 662] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] <... ioctl resumed>) = 0 [pid 302] unlink("./11/binderfs" [pid 298] getdents64(3, [pid 672] memfd_create("syzkaller", 0 [pid 664] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 662] <... futex resumed>) = 1 [pid 659] close(4 [pid 658] <... futex resumed>) = 0 [pid 302] <... unlink resumed>) = 0 [pid 672] <... memfd_create resumed>) = 3 [pid 664] <... openat resumed>) = 3 [pid 662] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 659] <... close resumed>) = 0 [pid 302] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 664] chdir("./file0" [pid 659] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 672] <... mmap resumed>) = 0x7fb6c54a8000 [pid 664] <... chdir resumed>) = 0 [pid 662] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = 1 [pid 658] <... futex resumed>) = 1 [pid 656] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 664] ioctl(4, LOOP_CLR_FD [pid 658] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] lstat("./11/binderfs", [pid 664] <... ioctl resumed>) = 0 [pid 298] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 664] close(4 [pid 298] unlink("./11/binderfs" [pid 672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 664] <... close resumed>) = 0 [pid 662] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 659] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 656] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... unlink resumed>) = 0 [pid 664] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [ 26.703636][ T669] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.705167][ T664] loop0: detected capacity change from 0 to 2048 [pid 298] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 664] <... futex resumed>) = 1 [pid 672] <... write resumed>) = 1048576 [pid 662] <... open resumed>) = 4 [pid 660] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 656] <... futex resumed>) = 0 [pid 672] munmap(0x7fb6c54a8000, 1048576 [pid 664] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 662] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 660] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 656] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... munmap resumed>) = 0 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 662] <... futex resumed>) = 1 [pid 660] <... futex resumed>) = 0 [pid 659] <... open resumed>) = 4 [pid 658] <... futex resumed>) = 0 [pid 672] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 664] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 662] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 660] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... openat resumed>) = 4 [pid 664] <... open resumed>) = 4 [pid 662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 659] <... futex resumed>) = 1 [pid 658] <... futex resumed>) = 0 [pid 656] <... futex resumed>) = 0 [pid 672] ioctl(4, LOOP_SET_FD, 3 [pid 664] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 659] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 658] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 656] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... ioctl resumed>) = 0 [pid 664] <... futex resumed>) = 1 [pid 662] <... open resumed>) = 5 [pid 660] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 656] <... futex resumed>) = 0 [pid 672] close(3 [pid 662] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 656] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... close resumed>) = 0 [pid 662] <... futex resumed>) = 0 [pid 659] <... open resumed>) = 5 [pid 672] mkdir("./file0", 0777 [pid 662] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 659] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... mkdir resumed>) = 0 [pid 664] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 660] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] <... futex resumed>) = 1 [pid 658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 656] <... futex resumed>) = 0 [pid 672] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 664] <... open resumed>) = 5 [pid 660] <... futex resumed>) = 0 [pid 659] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 656] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 660] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 658] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 656] <... futex resumed>) = 0 [pid 659] ftruncate(5, 33587195 [pid 656] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 0 [pid 662] <... futex resumed>) = 0 [pid 660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 659] <... ftruncate resumed>) = 0 [pid 658] <... futex resumed>) = 1 [pid 659] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 656] <... futex resumed>) = 0 [pid 659] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 656] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 656] <... futex resumed>) = 0 [pid 659] sendfile(4, 5, NULL, 4 [pid 656] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... sendfile resumed>) = 4 [pid 659] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 656] <... futex resumed>) = 0 [pid 659] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 656] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 656] <... futex resumed>) = 0 [pid 659] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 656] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] ftruncate(5, 33587195 [pid 662] ftruncate(5, 33587195 [pid 660] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... umount2 resumed>) = 0 [pid 664] <... ftruncate resumed>) = 0 [pid 662] <... ftruncate resumed>) = 0 [pid 660] <... futex resumed>) = 0 [pid 302] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 664] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 660] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 664] <... futex resumed>) = 0 [pid 662] <... futex resumed>) = 1 [pid 660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 658] <... futex resumed>) = 0 [pid 302] lstat("./11/file0", [pid 664] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 662] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 660] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 660] <... futex resumed>) = 0 [pid 658] <... futex resumed>) = 0 [pid 664] sendfile(4, 5, NULL, 4 [pid 662] sendfile(4, 5, NULL, 4 [pid 660] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... sendfile resumed>) = 4 [pid 662] <... sendfile resumed>) = 4 [pid 664] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 1 [pid 660] <... futex resumed>) = 0 [pid 664] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 662] <... futex resumed>) = 1 [pid 660] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 662] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 660] <... futex resumed>) = 0 [pid 658] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 660] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] <... futex resumed>) = 0 [pid 662] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 658] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 672] <... mount resumed>) = 0 [pid 672] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 672] chdir("./file0") = 0 [pid 672] ioctl(4, LOOP_CLR_FD) = 0 [pid 672] close(4) = 0 [pid 672] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 672] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 666] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 666] <... futex resumed>) = 0 [pid 672] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 666] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... open resumed>) = 4 [pid 672] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 672] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 666] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 672] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 302] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 672] <... open resumed>) = 5 [pid 672] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... openat resumed>) = 4 [pid 672] <... futex resumed>) = 1 [pid 666] <... futex resumed>) = 0 [pid 672] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 666] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 666] <... futex resumed>) = 0 [pid 672] ftruncate(5, 33587195 [pid 666] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... ftruncate resumed>) = 0 [pid 672] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 672] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 666] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 666] <... futex resumed>) = 0 [pid 672] sendfile(4, 5, NULL, 4 [pid 666] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... sendfile resumed>) = 4 [pid 672] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 672] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 666] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 666] <... futex resumed>) = 0 [pid 672] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 666] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./11/file0") = 0 [pid 302] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./11") = 0 [pid 302] mkdir("./12", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 26.767513][ T672] loop3: detected capacity change from 0 to 2048 [pid 302] close(3) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 677 [pid 656] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 656] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 298] <... umount2 resumed>) = 0 [pid 656] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 656] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[678], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 678 [pid 656] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 677 attached [pid 677] set_robust_list(0x5555574565e0, 24 [pid 660] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 660] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 677] <... set_robust_list resumed>) = 0 [pid 660] <... futex resumed>) = 0 [pid 660] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 677] chdir("./12" [pid 298] lstat("./11/file0", [pid 677] <... chdir resumed>) = 0 [pid 658] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 677] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 658] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 677] <... prctl resumed>) = 0 [pid 658] <... futex resumed>) = 0 [pid 677] setpgid(0, 0 [pid 658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 677] <... setpgid resumed>) = 0 [pid 677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 298] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 677] write(3, "1000", 4) = 4 [pid 677] close(3) = 0 [pid 658] <... mmap resumed>) = 0x7fb6c5587000 [pid 298] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 658] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 677] symlink("/dev/binderfs", "./binderfs") = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 658] <... mprotect resumed>) = 0 [pid 298] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 658] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 677] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] <... clone resumed>, parent_tid=[679], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 679 [pid 658] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... openat resumed>) = 4 [pid 658] <... futex resumed>) = 0 [pid 677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 658] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 677] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 298] fstat(4, [pid 677] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[680], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 680 [pid 677] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, [pid 660] <... mmap resumed>) = 0x7fb6c5587000 [pid 660] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 660] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[681], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 681 [pid 298] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 660] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] close(4 [pid 660] <... futex resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 660] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] rmdir("./11/file0") = 0 [pid 298] getdents64(3, [pid 666] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 666] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 666] <... futex resumed>) = 0 [pid 666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 666] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 679 attached ) = 0 [pid 298] close(3 [pid 666] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[682], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 682 [pid 666] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] <... close resumed>) = 0 [pid 666] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] rmdir("./11") = 0 [pid 298] mkdir("./12", 0777 [pid 679] set_robust_list(0x7fb6c55a79e0, 24./strace-static-x86_64: Process 681 attached [pid 681] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 681] sendfile(4, 5, NULL, 4) = 4 [pid 298] <... mkdir resumed>) = 0 [pid 681] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 660] <... futex resumed>) = 0 [pid 660] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 660] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 679] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 678 attached ./strace-static-x86_64: Process 682 attached ./strace-static-x86_64: Process 680 attached [pid 679] sendfile(4, 5, NULL, 4 [pid 678] set_robust_list(0x7fb6c55a79e0, 24 [pid 298] <... openat resumed>) = 3 [pid 298] ioctl(3, LOOP_CLR_FD [pid 679] <... sendfile resumed>) = 4 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] close(3 [pid 679] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 682] set_robust_list(0x7fb6c55a79e0, 24 [pid 680] set_robust_list(0x7fb6cd8c89e0, 24 [pid 678] <... set_robust_list resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 683 [pid 679] <... futex resumed>) = 1 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 656] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 656] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 656] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 656] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 656] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 656] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 656] futex(0x7fb6cd9a17cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5566000 [pid 656] mprotect(0x7fb6c5567000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 656] clone(child_stack=0x7fb6c55863f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[684], tls=0x7fb6c5586700, child_tidptr=0x7fb6c55869d0) = 684 [pid 656] futex(0x7fb6cd9a17c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] futex(0x7fb6cd9a17cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 678] sendfile(4, 5, NULL, 4 [pid 682] <... set_robust_list resumed>) = 0 [pid 680] <... set_robust_list resumed>) = 0 [pid 678] <... sendfile resumed>) = 4 [pid 660] <... futex resumed>) = ? [pid 681] +++ killed by SIGBUS +++ [pid 682] sendfile(4, 5, NULL, 4 [pid 678] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 678] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 680] memfd_create("syzkaller", 0 [pid 682] <... sendfile resumed>) = 4 [pid 680] <... memfd_create resumed>) = 3 [pid 682] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 666] <... futex resumed>) = 0 [pid 682] <... futex resumed>) = 1 [pid 680] <... mmap resumed>) = 0x7fb6c54a8000 [pid 666] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 26.861669][ T681] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.883409][ T679] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 666] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... mmap resumed>) = ? [pid 664] +++ killed by SIGBUS +++ [pid 660] +++ killed by SIGBUS +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=660, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=6} --- [pid 295] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 295] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 295] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 295] unlink("./11/binderfs") = 0 [pid 295] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 683 attached [pid 683] set_robust_list(0x5555574565e0, 24) = 0 [pid 683] chdir("./12") = 0 [pid 683] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 683] setpgid(0, 0) = 0 [pid 683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 683] write(3, "1000", 4) = 4 [pid 683] close(3) = 0 [pid 683] symlink("/dev/binderfs", "./binderfs") = 0 [pid 683] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 683] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 683] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[685], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 685 [pid 683] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 685 attached [pid 685] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 685] memfd_create("syzkaller", 0) = 3 [pid 685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 295] <... umount2 resumed>) = 0 [pid 685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 658] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 658] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 685] <... write resumed>) = 1048576 [pid 685] munmap(0x7fb6c54a8000, 1048576 [pid 295] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 685] <... munmap resumed>) = 0 [pid 685] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 656] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 685] <... openat resumed>) = 4 [ 26.900942][ T682] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 685] ioctl(4, LOOP_SET_FD, 3 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 295] rmdir("./11/file0") = 0 [pid 295] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./11") = 0 [pid 295] mkdir("./12", 0777) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 686 [pid 666] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 684 attached [pid 666] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 666] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 684] set_robust_list(0x7fb6c55869e0, 24 [pid 666] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 684] <... set_robust_list resumed>) = 0 [pid 680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 686 attached [pid 686] set_robust_list(0x5555574565e0, 24) = 0 [pid 686] chdir("./12") = 0 [pid 686] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 686] setpgid(0, 0) = 0 [pid 686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 686] write(3, "1000", 4) = 4 [pid 686] close(3) = 0 [pid 686] symlink("/dev/binderfs", "./binderfs") = 0 [pid 686] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 686] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 686] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[687], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 687 [pid 686] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 685] <... ioctl resumed>) = 0 [pid 685] close(3) = 0 [pid 685] mkdir("./file0", 0777) = 0 [pid 685] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue"./strace-static-x86_64: Process 687 attached [pid 687] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 687] memfd_create("syzkaller", 0) = 3 [pid 687] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 679] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 687] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 680] <... write resumed>) = 1048576 [pid 680] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 680] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 26.937870][ T685] loop1: detected capacity change from 0 to 2048 [ 26.952183][ T684] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 680] ioctl(4, LOOP_SET_FD, 3 [pid 687] <... write resumed>) = 1048576 [pid 687] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 687] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 687] ioctl(4, LOOP_SET_FD, 3 [pid 662] <... mmap resumed>) = ? [pid 679] +++ killed by SIGBUS +++ [pid 687] <... ioctl resumed>) = 0 [pid 687] close(3) = 0 [pid 687] mkdir("./file0", 0777) = 0 [pid 687] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 682] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 684] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 678] <... futex resumed>) = ? [pid 678] +++ killed by SIGBUS +++ [pid 684] +++ killed by SIGBUS +++ [pid 659] <... mmap resumed>) = ? [pid 680] <... ioctl resumed>) = 0 [pid 680] close(3) = 0 [pid 680] mkdir("./file0", 0777) = 0 [pid 680] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 682] +++ killed by SIGBUS +++ [pid 672] <... mmap resumed>) = ? [pid 662] +++ killed by SIGBUS +++ [pid 658] +++ killed by SIGBUS +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=658, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 659] +++ killed by SIGBUS +++ [pid 656] +++ killed by SIGBUS +++ [pid 672] +++ killed by SIGBUS +++ [pid 666] +++ killed by SIGBUS +++ [pid 301] <... restart_syscall resumed>) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=656, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=8} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=666, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 299] <... restart_syscall resumed>) = 0 [pid 301] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 680] <... mount resumed>) = 0 [pid 300] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 300] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 301] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] unlink("./12/binderfs" [pid 687] <... mount resumed>) = 0 [pid 685] <... mount resumed>) = 0 [pid 680] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 301] <... openat resumed>) = 3 [pid 300] <... unlink resumed>) = 0 [pid 299] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 687] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 685] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 300] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 687] <... openat resumed>) = 3 [pid 685] <... openat resumed>) = 3 [pid 680] <... openat resumed>) = 3 [pid 301] fstat(3, [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 685] chdir("./file0" [pid 687] chdir("./file0") = 0 [pid 687] ioctl(4, LOOP_CLR_FD) = 0 [pid 687] close(4) = 0 [pid 685] <... chdir resumed>) = 0 [pid 680] chdir("./file0" [pid 301] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 685] ioctl(4, LOOP_CLR_FD [pid 687] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 686] <... futex resumed>) = 0 [pid 687] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 686] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 687] <... open resumed>) = 4 [pid 686] <... futex resumed>) = 0 [pid 687] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 686] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] getdents64(3, [pid 687] <... futex resumed>) = 0 [pid 686] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 685] <... ioctl resumed>) = 0 [pid 680] <... chdir resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 687] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 686] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 687] <... open resumed>) = 5 [pid 686] <... futex resumed>) = 0 [pid 687] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 686] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] <... futex resumed>) = 0 [pid 686] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 687] ftruncate(5, 33587195 [pid 686] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 687] <... ftruncate resumed>) = 0 [pid 686] <... futex resumed>) = 0 [pid 687] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 686] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] <... futex resumed>) = 0 [pid 686] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 687] sendfile(4, 5, NULL, 4 [pid 686] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 687] <... sendfile resumed>) = 4 [pid 686] <... futex resumed>) = 0 [pid 687] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 686] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] <... futex resumed>) = 0 [pid 686] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 687] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 686] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] close(4 [pid 680] ioctl(4, LOOP_CLR_FD [pid 301] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] fstat(3, [pid 686] <... futex resumed>) = 0 [pid 685] <... close resumed>) = 0 [pid 680] <... ioctl resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 686] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] close(4 [pid 301] lstat("./11/binderfs", [pid 299] getdents64(3, [pid 685] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 680] <... close resumed>) = 0 [pid 301] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 299] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 685] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 683] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] unlink("./11/binderfs" [pid 299] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 683] <... futex resumed>) = 0 [pid 680] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 301] <... unlink resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 685] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 683] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] lstat("./11/binderfs", [pid 685] <... open resumed>) = 4 [pid 680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 677] <... futex resumed>) = 0 [pid 299] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 26.982797][ T680] loop5: detected capacity change from 0 to 2048 [ 26.985446][ T687] loop0: detected capacity change from 0 to 2048 [pid 680] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 677] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] unlink("./11/binderfs") = 0 [pid 299] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 685] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... open resumed>) = 4 [pid 685] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 680] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 683] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 683] <... futex resumed>) = 0 [pid 680] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 683] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 677] <... futex resumed>) = 0 [pid 685] <... open resumed>) = 5 [pid 680] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 685] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 677] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... open resumed>) = 5 [pid 685] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 685] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 683] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 683] <... futex resumed>) = 0 [pid 680] <... futex resumed>) = 1 [pid 685] ftruncate(5, 33587195 [pid 683] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] <... futex resumed>) = 0 [pid 685] <... ftruncate resumed>) = 0 [pid 677] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 685] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 685] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 680] ftruncate(5, 33587195 [pid 683] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 683] <... futex resumed>) = 0 [pid 680] <... ftruncate resumed>) = 0 [pid 683] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] sendfile(4, 5, NULL, 4 [pid 680] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] <... sendfile resumed>) = 4 [pid 680] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 677] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] sendfile(4, 5, NULL, 4 [pid 677] <... futex resumed>) = 0 [pid 685] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 677] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... sendfile resumed>) = 4 [pid 683] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 680] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = 0 [pid 683] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 680] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 677] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 677] <... futex resumed>) = 0 [pid 677] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... umount2 resumed>) = 0 [pid 686] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 686] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 686] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 686] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[694], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 694 [pid 686] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 694 attached [pid 694] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 694] sendfile(4, 5, NULL, 4) = 4 [pid 694] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 686] <... futex resumed>) = 0 [pid 686] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./12/file0") = 0 [pid 683] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 683] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 683] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 683] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[695], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 695 [pid 683] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./12") = 0 [pid 300] mkdir("./13", 0777./strace-static-x86_64: Process 695 attached ) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 695] set_robust_list(0x7fb6c55a79e0, 24 [pid 300] <... openat resumed>) = 3 [pid 695] <... set_robust_list resumed>) = 0 [pid 695] sendfile(4, 5, NULL, 4 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 695] <... sendfile resumed>) = 4 [pid 300] close(3) = 0 [pid 677] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 677] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 677] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 677] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[696], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 696 [pid 677] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 697 [pid 695] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 683] <... futex resumed>) = 0 [pid 683] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 27.075182][ T694] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.108313][ T695] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 683] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- ./strace-static-x86_64: Process 696 attached [pid 696] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 696] sendfile(4, 5, NULL, 4) = 4 [pid 696] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 697 attached [pid 697] set_robust_list(0x5555574565e0, 24) = 0 [pid 697] chdir("./13") = 0 [pid 697] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 697] setpgid(0, 0) = 0 [pid 697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 697] write(3, "1000", 4) = 4 [pid 697] close(3) = 0 [pid 697] symlink("/dev/binderfs", "./binderfs") = 0 [pid 697] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 697] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 697] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[698], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 698 [pid 697] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 698 attached [pid 698] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 698] memfd_create("syzkaller", 0) = 3 [pid 698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 698] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 677] <... futex resumed>) = 0 [pid 687] <... mmap resumed>) = ? [pid 686] <... futex resumed>) = ? [pid 694] +++ killed by SIGBUS +++ [pid 677] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 687] +++ killed by SIGBUS +++ [pid 686] +++ killed by SIGBUS +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=686, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 677] <... futex resumed>) = 1 [pid 696] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./11/file0") = 0 [pid 299] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./11") = 0 [pid 299] mkdir("./12", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 699 [pid 698] <... write resumed>) = 1048576 [pid 698] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 698] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 698] ioctl(4, LOOP_SET_FD, 3 [pid 677] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 295] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 295] unlink("./12/binderfs") = 0 [pid 295] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 698] <... ioctl resumed>) = 0 [pid 698] close(3 [pid 683] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 683] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 698] <... close resumed>) = 0 [pid 698] mkdir("./file0", 0777) = 0 [pid 698] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./11/file0") = 0 [pid 301] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 698] <... mount resumed>) = 0 [pid 301] rmdir("./11" [pid 698] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 698] chdir("./file0") = 0 [pid 698] ioctl(4, LOOP_CLR_FD) = 0 [pid 698] close(4) = 0 [pid 301] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 699 attached [ 27.126027][ T696] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.131741][ T698] loop3: detected capacity change from 0 to 2048 [pid 301] mkdir("./12", 0777 [pid 699] set_robust_list(0x5555574565e0, 24 [pid 698] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... mkdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 301] ioctl(3, LOOP_CLR_FD [pid 699] <... set_robust_list resumed>) = 0 [pid 698] <... futex resumed>) = 1 [pid 697] <... futex resumed>) = 0 [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 698] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 697] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] close(3 [pid 698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 697] <... futex resumed>) = 0 [pid 698] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 697] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... close resumed>) = 0 [pid 699] chdir("./12" [pid 698] <... open resumed>) = 4 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 699] <... chdir resumed>) = 0 [pid 698] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... umount2 resumed>) = 0 [pid 698] <... futex resumed>) = 1 [pid 697] <... futex resumed>) = 0 [pid 698] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 697] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 697] <... futex resumed>) = 0 [pid 698] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 697] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... open resumed>) = 5 [pid 698] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 697] <... futex resumed>) = 0 [pid 699] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 698] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 697] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 677] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] <... clone resumed>, child_tidptr=0x5555574565d0) = 702 [pid 698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 697] <... futex resumed>) = 0 [pid 698] ftruncate(5, 33587195 [pid 697] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... prctl resumed>) = 0 [pid 698] <... ftruncate resumed>) = 0 [pid 698] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 697] <... futex resumed>) = 0 [pid 698] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 697] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 697] <... futex resumed>) = 0 [pid 699] setpgid(0, 0 [pid 698] sendfile(4, 5, NULL, 4 [pid 697] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 699] <... setpgid resumed>) = 0 [pid 698] <... sendfile resumed>) = 4 [pid 698] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 697] <... futex resumed>) = 0 [pid 698] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 697] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 697] <... futex resumed>) = 0 [pid 699] <... openat resumed>) = 3 [pid 698] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 697] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] write(3, "1000", 4 [pid 696] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 699] <... write resumed>) = 4 [pid 695] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 680] <... mmap resumed>) = ? [pid 295] lstat("./12/file0", [pid 699] close(3 [pid 696] +++ killed by SIGBUS +++ [pid 680] +++ killed by SIGBUS +++ [pid 699] <... close resumed>) = 0 [pid 685] <... mmap resumed>) = ? [pid 677] +++ killed by SIGBUS +++ [pid 295] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 699] symlink("/dev/binderfs", "./binderfs" [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=677, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 295] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 699] <... symlink resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 699] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] +++ killed by SIGBUS +++ [pid 295] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 699] <... futex resumed>) = 0 [pid 295] <... openat resumed>) = 4 ./strace-static-x86_64: Process 702 attached [pid 699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 295] fstat(4, [pid 702] set_robust_list(0x5555574565e0, 24 [pid 699] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 702] <... set_robust_list resumed>) = 0 [pid 699] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 295] getdents64(4, [pid 685] +++ killed by SIGBUS +++ [pid 683] +++ killed by SIGBUS +++ [pid 702] chdir("./12" [pid 699] <... mprotect resumed>) = 0 [pid 302] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 702] <... chdir resumed>) = 0 [pid 699] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=683, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7} --- [pid 295] getdents64(4, [pid 702] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 302] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 702] <... prctl resumed>) = 0 [pid 699] <... clone resumed>, parent_tid=[704], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 704 [pid 302] <... openat resumed>) = 3 [pid 295] close(4 [pid 699] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] fstat(3, [pid 298] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... close resumed>) = 0 [pid 699] <... futex resumed>) = 0 [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] getdents64(3, [pid 295] rmdir("./12/file0" [pid 699] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 298] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 295] <... rmdir resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 302] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] fstat(3, [pid 295] getdents64(3, [pid 702] setpgid(0, 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 298] getdents64(3, [pid 302] lstat("./12/binderfs", [pid 298] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 295] close(3 [pid 302] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 298] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... close resumed>) = 0 [pid 702] <... setpgid resumed>) = 0 [pid 302] unlink("./12/binderfs" [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] rmdir("./12" [pid 302] <... unlink resumed>) = 0 [pid 298] lstat("./12/binderfs", [pid 295] <... rmdir resumed>) = 0 [pid 302] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 295] mkdir("./13", 0777 [pid 298] unlink("./12/binderfs") = 0 [pid 298] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 704 attached [pid 704] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 704] memfd_create("syzkaller", 0) = 3 [pid 704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 704] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 704] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 704] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 704] ioctl(4, LOOP_SET_FD, 3 [pid 702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 702] <... openat resumed>) = 3 [pid 295] ioctl(3, LOOP_CLR_FD [pid 704] <... ioctl resumed>) = 0 [pid 704] close(3) = 0 [pid 704] mkdir("./file0", 0777 [pid 702] write(3, "1000", 4 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] close(3 [pid 702] <... write resumed>) = 4 [pid 704] <... mkdir resumed>) = 0 [pid 702] close(3 [pid 295] <... close resumed>) = 0 [pid 702] <... close resumed>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 702] symlink("/dev/binderfs", "./binderfs") = 0 [pid 702] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... clone resumed>, child_tidptr=0x5555574565d0) = 705 [pid 702] <... futex resumed>) = 0 [pid 702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 702] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 702] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[706], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 706 [pid 702] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 706 attached [pid 706] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 706] memfd_create("syzkaller", 0) = 3 [pid 706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 697] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 697] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] <... umount2 resumed>) = 0 [pid 697] <... mmap resumed>) = 0x7fb6c5587000 [pid 697] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 697] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[707], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 707 [pid 697] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 697] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./12/file0") = 0 [pid 706] <... write resumed>) = 1048576 [pid 706] munmap(0x7fb6c54a8000, 1048576 [pid 302] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 706] <... munmap resumed>) = 0 [pid 706] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 302] rmdir("./12" [pid 706] ioctl(4, LOOP_SET_FD, 3 [pid 302] <... rmdir resumed>) = 0 [pid 302] mkdir("./13", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3 [pid 704] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 302] <... close resumed>) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 708 ./strace-static-x86_64: Process 708 attached [pid 708] set_robust_list(0x5555574565e0, 24) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 708] chdir("./13" [pid 298] lstat("./12/file0", [pid 708] <... chdir resumed>) = 0 [pid 708] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 708] <... prctl resumed>) = 0 [pid 708] setpgid(0, 0 [pid 298] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 708] <... setpgid resumed>) = 0 [pid 708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 708] <... openat resumed>) = 3 [pid 298] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 708] write(3, "1000", 4) = 4 [pid 708] close(3) = 0 [pid 708] symlink("/dev/binderfs", "./binderfs") = 0 [pid 298] <... openat resumed>) = 4 [pid 708] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] fstat(4, [pid 708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 705 attached ) = 0x7fb6cd8a8000 [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 708] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 705] set_robust_list(0x5555574565e0, 24 [pid 298] getdents64(4, [pid 708] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 706] <... ioctl resumed>) = 0 [pid 705] <... set_robust_list resumed>) = 0 [pid 298] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 706] close(3 [pid 705] chdir("./13" [pid 298] getdents64(4, ./strace-static-x86_64: Process 707 attached [pid 708] <... clone resumed>, parent_tid=[710], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 710 [pid 706] <... close resumed>) = 0 [pid 705] <... chdir resumed>) = 0 [pid 298] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 708] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 707] set_robust_list(0x7fb6c55a79e0, 24 [pid 706] mkdir("./file0", 0777 [pid 705] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] close(4 [pid 708] <... futex resumed>) = 0 [pid 708] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 707] <... set_robust_list resumed>) = 0 [pid 706] <... mkdir resumed>) = 0 [pid 705] <... prctl resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 707] sendfile(4, 5, NULL, 4 [pid 298] rmdir("./12/file0") = 0 [pid 298] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./12") = 0 [pid 707] <... sendfile resumed>) = 4 [pid 706] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue" [pid 705] setpgid(0, 0 [pid 298] mkdir("./13", 0777 [pid 707] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... setpgid resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 707] <... futex resumed>) = 1 [pid 705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 697] <... futex resumed>) = 0 [ 27.232301][ T704] loop2: detected capacity change from 0 to 2048 [ 27.265753][ T706] loop4: detected capacity change from 0 to 2048 [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 705] <... openat resumed>) = 3 [pid 697] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... openat resumed>) = 3 [pid 705] write(3, "1000", 4 [pid 697] <... futex resumed>) = 0 [pid 298] ioctl(3, LOOP_CLR_FD [pid 705] <... write resumed>) = 4 [pid 697] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 705] close(3 [pid 704] <... mount resumed>) = 0 [pid 298] close(3 [pid 705] <... close resumed>) = 0 [pid 704] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 298] <... close resumed>) = 0 [pid 705] symlink("/dev/binderfs", "./binderfs" [pid 704] <... openat resumed>) = 3 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 705] <... symlink resumed>) = 0 [pid 704] chdir("./file0" [pid 705] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] <... chdir resumed>) = 0 [pid 298] <... clone resumed>, child_tidptr=0x5555574565d0) = 714 [pid 705] <... futex resumed>) = 0 [pid 704] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 710 attached [pid 705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 704] <... ioctl resumed>) = 0 [pid 710] set_robust_list(0x7fb6cd8c89e0, 24 [pid 705] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 704] close(4./strace-static-x86_64: Process 714 attached [pid 710] <... set_robust_list resumed>) = 0 [pid 705] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 704] <... close resumed>) = 0 [pid 714] set_robust_list(0x5555574565e0, 24 [pid 710] memfd_create("syzkaller", 0 [pid 705] <... mprotect resumed>) = 0 [pid 704] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... set_robust_list resumed>) = 0 [pid 710] <... memfd_create resumed>) = 3 [pid 705] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 704] <... futex resumed>) = 1 [pid 699] <... futex resumed>) = 0 [pid 714] chdir("./13" [pid 710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 704] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 699] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... chdir resumed>) = 0 [pid 710] <... mmap resumed>) = 0x7fb6c54a8000 [pid 705] <... clone resumed>, parent_tid=[715], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 715 [pid 704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] <... futex resumed>) = 0 ./strace-static-x86_64: Process 715 attached [pid 714] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 707] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 706] <... mount resumed>) = 0 [pid 705] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 699] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... mmap resumed>) = -1 (errno 18446744073709551414) [pid 715] set_robust_list(0x7fb6cd8c89e0, 24 [pid 714] <... prctl resumed>) = 0 [pid 706] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 705] <... futex resumed>) = 0 [pid 704] <... open resumed>) = 4 [pid 698] +++ killed by SIGBUS +++ [pid 697] <... futex resumed>) = ? [pid 715] <... set_robust_list resumed>) = 0 [pid 714] setpgid(0, 0 [pid 710] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 707] +++ killed by SIGBUS +++ [pid 706] <... openat resumed>) = 3 [pid 705] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 704] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 715] memfd_create("syzkaller", 0 [pid 714] <... setpgid resumed>) = 0 [pid 706] chdir("./file0" [pid 704] <... futex resumed>) = 1 [pid 699] <... futex resumed>) = 0 [pid 697] +++ killed by SIGBUS +++ [pid 715] <... memfd_create resumed>) = 3 [pid 714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 706] <... chdir resumed>) = 0 [ 27.291470][ T707] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 704] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 699] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 714] <... openat resumed>) = 3 [pid 710] <... write resumed>) = 1048576 [pid 706] ioctl(4, LOOP_CLR_FD [pid 710] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 710] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 710] ioctl(4, LOOP_SET_FD, 3 [pid 715] <... mmap resumed>) = 0x7fb6c54a8000 [pid 714] write(3, "1000", 4 [pid 706] <... ioctl resumed>) = 0 [pid 704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] <... futex resumed>) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=697, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=12} --- [pid 714] <... write resumed>) = 4 [pid 706] close(4 [pid 704] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 699] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 706] <... close resumed>) = 0 [pid 714] close(3 [pid 706] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] <... open resumed>) = 5 [pid 300] <... restart_syscall resumed>) = 0 [pid 714] <... close resumed>) = 0 [pid 706] <... futex resumed>) = 1 [pid 704] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 714] symlink("/dev/binderfs", "./binderfs" [pid 706] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 704] <... futex resumed>) = 1 [pid 702] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = 0 [pid 714] <... symlink resumed>) = 0 [pid 706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 704] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] <... futex resumed>) = 0 [pid 699] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 714] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... futex resumed>) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 714] <... futex resumed>) = 0 [pid 706] <... open resumed>) = 4 [pid 704] ftruncate(5, 33587195 [pid 699] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 706] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] <... ftruncate resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 714] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 706] <... futex resumed>) = 1 [pid 704] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 300] fstat(3, [pid 714] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 706] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 704] <... futex resumed>) = 1 [pid 702] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = 0 [pid 300] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 714] <... mprotect resumed>) = 0 [pid 710] <... ioctl resumed>) = 0 [pid 706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 704] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] <... futex resumed>) = 0 [pid 699] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] getdents64(3, [pid 714] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 706] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... futex resumed>) = 0 [pid 300] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 706] <... open resumed>) = 5 [pid 704] sendfile(4, 5, NULL, 4 [pid 699] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 714] <... clone resumed>, parent_tid=[717], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 717 [pid 706] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] <... sendfile resumed>) = 4 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 714] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = 1 [pid 704] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 300] lstat("./13/binderfs", [pid 714] <... futex resumed>) = 0 [pid 706] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 704] <... futex resumed>) = 1 [pid 702] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = 0 [pid 300] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 714] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 704] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] <... futex resumed>) = 0 [pid 699] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] unlink("./13/binderfs" [pid 706] ftruncate(5, 33587195 [pid 704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... futex resumed>) = 0 [pid 300] <... unlink resumed>) = 0 [pid 706] <... ftruncate resumed>) = 0 [pid 704] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 699] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 717 attached [pid 715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 710] close(3 [pid 706] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] sendfile(4, 5, NULL, 4 [pid 717] set_robust_list(0x7fb6cd8c89e0, 24 [pid 710] <... close resumed>) = 0 [pid 717] <... set_robust_list resumed>) = 0 [pid 702] <... futex resumed>) = 0 [pid 710] mkdir("./file0", 0777 [pid 706] <... sendfile resumed>) = 4 [pid 702] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... mkdir resumed>) = 0 [pid 706] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 715] <... write resumed>) = 1048576 [pid 717] memfd_create("syzkaller", 0) = 3 [pid 717] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 717] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 710] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 706] <... futex resumed>) = 1 [pid 702] <... futex resumed>) = 0 [pid 706] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 702] <... futex resumed>) = 0 [pid 715] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 715] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 715] ioctl(4, LOOP_SET_FD, 3 [pid 702] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 717] <... write resumed>) = 1048576 [pid 715] <... ioctl resumed>) = 0 [pid 717] munmap(0x7fb6c54a8000, 1048576 [pid 715] close(3) = 0 [pid 717] <... munmap resumed>) = 0 [pid 715] mkdir("./file0", 0777 [pid 710] <... mount resumed>) = 0 [pid 710] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 710] chdir("./file0") = 0 [pid 710] ioctl(4, LOOP_CLR_FD) = 0 [pid 710] close(4 [pid 717] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 715] <... mkdir resumed>) = 0 [pid 710] <... close resumed>) = 0 [pid 710] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 708] <... futex resumed>) = 0 [pid 710] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 708] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 715] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 708] <... futex resumed>) = 0 [pid 717] <... openat resumed>) = 4 [pid 710] <... open resumed>) = 4 [pid 708] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 717] ioctl(4, LOOP_SET_FD, 3 [pid 710] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 708] <... futex resumed>) = 0 [ 27.336325][ T710] loop5: detected capacity change from 0 to 2048 [ 27.363812][ T715] loop0: detected capacity change from 0 to 2048 [pid 710] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 708] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... open resumed>) = 5 [pid 708] <... futex resumed>) = 0 [pid 710] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 708] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... futex resumed>) = 0 [pid 708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 710] ftruncate(5, 33587195 [pid 708] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... ftruncate resumed>) = 0 [pid 708] <... futex resumed>) = 0 [pid 710] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 708] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... futex resumed>) = 0 [pid 708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 710] sendfile(4, 5, NULL, 4 [pid 708] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... sendfile resumed>) = 4 [pid 708] <... futex resumed>) = 0 [pid 710] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 708] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... futex resumed>) = 0 [pid 708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 710] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 708] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] <... ioctl resumed>) = 0 [pid 708] <... futex resumed>) = 0 [pid 708] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 717] close(3) = 0 [pid 717] mkdir("./file0", 0777) = 0 [pid 717] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue" [pid 699] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 699] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 699] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 699] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[724], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 724 [pid 699] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... mount resumed>) = 0 [pid 715] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 715] chdir("./file0") = 0 [pid 715] ioctl(4, LOOP_CLR_FD) = 0 [pid 715] close(4) = 0 [pid 702] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 715] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 705] <... futex resumed>) = 0 [pid 715] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 705] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 705] <... futex resumed>) = 0 [pid 715] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 705] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... open resumed>) = 4 [pid 702] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 715] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 705] <... futex resumed>) = 0 [pid 715] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 705] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 705] <... futex resumed>) = 0 [pid 715] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 705] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... open resumed>) = 5 [pid 702] <... futex resumed>) = 0 [pid 715] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 705] <... futex resumed>) = 0 [pid 715] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 705] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 705] <... futex resumed>) = 0 [pid 715] ftruncate(5, 33587195 [ 27.385103][ T717] loop1: detected capacity change from 0 to 2048 [pid 705] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... ftruncate resumed>) = 0 [pid 715] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 705] <... futex resumed>) = 0 [pid 715] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 705] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 705] <... futex resumed>) = 0 [pid 715] sendfile(4, 5, NULL, 4 [pid 705] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... mmap resumed>) = 0x7fb6c5587000 [pid 715] <... sendfile resumed>) = 4 [pid 715] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 715] <... futex resumed>) = 1 [pid 705] <... futex resumed>) = 0 [pid 715] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 705] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 705] <... futex resumed>) = 0 [pid 702] <... mprotect resumed>) = 0 [pid 715] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 705] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 725 attached , parent_tid=[725], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 725 [pid 725] set_robust_list(0x7fb6c55a79e0, 24 [pid 702] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... set_robust_list resumed>) = 0 [pid 708] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 702] <... futex resumed>) = 0 [pid 708] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 725] sendfile(4, 5, NULL, 4 [pid 708] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 702] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 708] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 708] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 708] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 725] <... sendfile resumed>) = 4 [pid 717] <... mount resumed>) = 0 [pid 717] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 717] chdir("./file0") = 0 [pid 717] ioctl(4, LOOP_CLR_FD) = 0 [pid 717] close(4 [pid 725] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] <... close resumed>) = 0 [pid 699] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 717] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 714] <... futex resumed>) = 0 [pid 717] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 714] <... futex resumed>) = 0 [pid 717] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 714] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] <... futex resumed>) = 1 [pid 717] <... open resumed>) = 4 [pid 702] <... futex resumed>) = 0 [pid 699] futex(0x7fb6cd9a17cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 717] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 714] <... futex resumed>) = 0 [pid 717] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 714] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 717] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 714] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = 0 [pid 717] <... open resumed>) = 5 [pid 717] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 714] <... futex resumed>) = 0 [pid 717] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 714] <... futex resumed>) = 0 [pid 717] ftruncate(5, 33587195 [pid 714] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 717] <... ftruncate resumed>) = 0 [pid 717] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 714] <... futex resumed>) = 0 [pid 717] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 714] <... futex resumed>) = 0 [pid 717] sendfile(4, 5, NULL, 4 [pid 714] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 717] <... sendfile resumed>) = 4 [pid 717] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 724 attached ) = 1 [pid 714] <... futex resumed>) = 0 [pid 724] set_robust_list(0x7fb6c55a79e0, 24 [pid 717] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] <... set_robust_list resumed>) = 0 [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 714] <... futex resumed>) = 0 [pid 724] sendfile(4, 5, NULL, 4 [pid 717] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 714] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... sendfile resumed>) = 4 [pid 724] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 705] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 705] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 705] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[727], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 727 [pid 705] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 705] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = 0 [pid 724] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 727 attached [pid 727] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 727] sendfile(4, 5, NULL, 4) = 4 [pid 727] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... futex resumed>) = 0 [pid 705] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 705] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... futex resumed>) = 1 [pid 725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 702] <... futex resumed>) = 0 [pid 699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 708] <... mmap resumed>) = 0x7fb6c5587000 [pid 708] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 702] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 708] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 728 attached [pid 706] <... mmap resumed>) = ? [pid 702] <... futex resumed>) = ? [pid 728] set_robust_list(0x7fb6c55a79e0, 24 [pid 725] +++ killed by SIGBUS +++ [pid 708] <... clone resumed>, parent_tid=[728], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 728 [pid 699] <... mmap resumed>) = 0x7fb6c5566000 [pid 708] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] +++ killed by SIGBUS +++ [pid 708] <... futex resumed>) = 0 [pid 708] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] +++ killed by SIGBUS +++ [pid 699] mprotect(0x7fb6c5567000, 131072, PROT_READ|PROT_WRITE [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=702, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=13} --- [pid 728] <... set_robust_list resumed>) = 0 [pid 699] <... mprotect resumed>) = 0 [pid 300] <... umount2 resumed>) = 0 [pid 728] sendfile(4, 5, NULL, 4 [pid 699] clone(child_stack=0x7fb6c55863f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 728] <... sendfile resumed>) = 4 [pid 300] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 728] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... clone resumed>, parent_tid=[729], tls=0x7fb6c5586700, child_tidptr=0x7fb6c55869d0) = 729 [pid 699] futex(0x7fb6cd9a17c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... futex resumed>) = 1 [pid 708] <... futex resumed>) = 0 [pid 699] <... futex resumed>) = 0 [pid 301] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 708] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 27.475656][ T725] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.485747][ T727] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 708] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] futex(0x7fb6cd9a17cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./13/file0") = 0 [pid 300] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./13") = 0 [pid 714] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 714] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 714] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 714] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[730], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 730 [pid 705] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 714] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 705] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 300] mkdir("./14", 0777 [pid 705] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 705] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 300] <... mkdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 729 attached [pid 729] set_robust_list(0x7fb6c55869e0, 24) = 0 [pid 728] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 300] <... clone resumed>, child_tidptr=0x5555574565d0) = 731 ./strace-static-x86_64: Process 730 attached [pid 301] <... openat resumed>) = 3 [pid 730] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 730] sendfile(4, 5, NULL, 4) = 4 [pid 301] fstat(3, [pid 730] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 704] <... mmap resumed>) = 0x20000000 [pid 301] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 731 attached [pid 704] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] getdents64(3, [pid 731] set_robust_list(0x5555574565e0, 24 [pid 301] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 731] <... set_robust_list resumed>) = 0 [pid 731] chdir("./14" [pid 301] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 731] <... chdir resumed>) = 0 [pid 731] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 731] setpgid(0, 0 [pid 704] <... futex resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] lstat("./12/binderfs", [pid 704] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 731] <... setpgid resumed>) = 0 [pid 731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 731] <... openat resumed>) = 3 [pid 301] unlink("./12/binderfs" [pid 731] write(3, "1000", 4) = 4 [pid 731] close(3 [pid 301] <... unlink resumed>) = 0 [pid 301] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 731] <... close resumed>) = 0 [pid 731] symlink("/dev/binderfs", "./binderfs") = 0 [pid 731] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 731] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 731] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[732], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 732 [pid 731] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 731] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 710] <... mmap resumed>) = ? [pid 708] <... futex resumed>) = ? [pid 728] +++ killed by SIGBUS +++ [pid 710] +++ killed by SIGBUS +++ [pid 708] +++ killed by SIGBUS +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=708, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 302] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 302] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 302] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 302] unlink("./13/binderfs") = 0 [pid 302] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 699] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 730] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 714] <... futex resumed>) = ? [pid 717] <... mmap resumed>) = ? [pid 717] +++ killed by SIGBUS +++ [pid 729] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 730] +++ killed by SIGBUS +++ [pid 714] +++ killed by SIGBUS +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=714, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 724] <... futex resumed>) = ? [pid 724] +++ killed by SIGBUS +++ [pid 298] <... restart_syscall resumed>) = 0 [pid 704] <... futex resumed>) = ? [pid 298] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(3, [pid 729] +++ killed by SIGBUS +++ [pid 298] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 298] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 732 attached [pid 732] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 732] memfd_create("syzkaller", 0) = 3 [pid 732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 298] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 298] unlink("./13/binderfs") = 0 [pid 298] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 27.527643][ T728] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.540213][ T729] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.560326][ T730] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 732] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 732] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 732] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 732] ioctl(4, LOOP_SET_FD, 3 [pid 704] +++ killed by SIGBUS +++ [pid 699] +++ killed by SIGBUS +++ [pid 302] <... umount2 resumed>) = 0 [pid 715] <... mmap resumed>) = ? [pid 302] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=699, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=11} --- [pid 715] +++ killed by SIGBUS +++ [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 732] <... ioctl resumed>) = 0 [pid 727] +++ killed by SIGBUS +++ [pid 705] +++ killed by SIGBUS +++ [pid 302] lstat("./13/file0", [pid 298] <... umount2 resumed>) = 0 [pid 302] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=705, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 299] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] <... openat resumed>) = 4 [pid 298] lstat("./13/file0", [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 302] fstat(4, [pid 299] <... openat resumed>) = 3 [pid 298] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] fstat(3, [pid 298] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] getdents64(4, [pid 299] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 299] getdents64(3, [pid 298] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 299] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 298] <... openat resumed>) = 4 [pid 295] <... restart_syscall resumed>) = 0 [pid 302] close(4 [pid 299] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] fstat(4, [pid 302] <... close resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] rmdir("./13/file0" [pid 299] lstat("./12/binderfs", [pid 298] getdents64(4, [pid 732] close(3 [pid 302] <... rmdir resumed>) = 0 [pid 299] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 298] <... getdents64 resumed>0x55555745f660 /* 2 entries */, 32768) = 48 [pid 295] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] getdents64(3, [pid 299] unlink("./12/binderfs" [pid 298] getdents64(4, [pid 302] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] close(3 [pid 299] <... unlink resumed>) = 0 [pid 298] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 295] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] <... close resumed>) = 0 [pid 299] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] close(4 [pid 302] rmdir("./13" [pid 295] <... openat resumed>) = 3 [pid 295] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] getdents64(3, [pid 732] <... close resumed>) = 0 [pid 732] mkdir("./file0", 0777) = 0 [pid 732] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 295] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 298] <... close resumed>) = 0 [pid 295] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] rmdir("./13/file0" [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... rmdir resumed>) = 0 [pid 295] lstat("./13/binderfs", [pid 298] <... rmdir resumed>) = 0 [pid 295] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 302] mkdir("./14", 0777 [pid 298] getdents64(3, [pid 295] unlink("./13/binderfs") = 0 [pid 298] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 295] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] close(3 [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] lstat("./12/file0", [pid 298] <... close resumed>) = 0 [pid 298] rmdir("./13" [pid 301] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 298] mkdir("./14", 0777 [pid 301] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 301] close(4 [pid 302] <... mkdir resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 298] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 302] <... openat resumed>) = 3 [pid 298] <... openat resumed>) = 3 [pid 301] rmdir("./12/file0") = 0 [pid 301] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./12") = 0 [pid 301] mkdir("./13", 0777 [pid 298] ioctl(3, LOOP_CLR_FD [pid 302] ioctl(3, LOOP_CLR_FD [pid 301] <... mkdir resumed>) = 0 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 298] close(3 [pid 302] close(3 [pid 301] <... openat resumed>) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574565d0) = 735 ./strace-static-x86_64: Process 735 attached [pid 735] set_robust_list(0x5555574565e0, 24) = 0 [pid 735] chdir("./13") = 0 [pid 735] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 735] setpgid(0, 0) = 0 [pid 298] <... close resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 735] write(3, "1000", 4) = 4 [pid 735] close(3) = 0 [pid 735] symlink("/dev/binderfs", "./binderfs") = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... umount2 resumed>) = 0 [pid 735] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6cd8a8000 [pid 735] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 735] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[736], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 736 [pid 735] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 735] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 736 attached [pid 736] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 736] memfd_create("syzkaller", 0) = 3 [pid 736] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 298] <... clone resumed>, child_tidptr=0x5555574565d0) = 737 [pid 295] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 736] <... mmap resumed>) = 0x7fb6c54a8000 [pid 302] <... clone resumed>, child_tidptr=0x5555574565d0) = 738 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] getdents64(4, ./strace-static-x86_64: Process 738 attached ./strace-static-x86_64: Process 737 attached 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, [pid 738] set_robust_list(0x5555574565e0, 24 [pid 737] set_robust_list(0x5555574565e0, 24 [pid 295] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 738] <... set_robust_list resumed>) = 0 [pid 737] <... set_robust_list resumed>) = 0 [pid 295] close(4 [pid 738] chdir("./14" [pid 737] chdir("./14" [pid 732] <... mount resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 295] rmdir("./13/file0" [pid 737] <... chdir resumed>) = 0 [pid 738] <... chdir resumed>) = 0 [pid 737] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 732] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 295] <... rmdir resumed>) = 0 [pid 738] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 737] <... prctl resumed>) = 0 [pid 295] getdents64(3, [pid 738] <... prctl resumed>) = 0 [pid 737] setpgid(0, 0 [pid 732] <... openat resumed>) = 3 [pid 295] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 738] setpgid(0, 0 [pid 737] <... setpgid resumed>) = 0 [pid 732] chdir("./file0" [pid 295] close(3 [pid 738] <... setpgid resumed>) = 0 [pid 732] <... chdir resumed>) = 0 [pid 737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 295] <... close resumed>) = 0 [pid 738] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 732] ioctl(4, LOOP_CLR_FD [pid 295] rmdir("./13" [pid 737] <... openat resumed>) = 3 [pid 732] <... ioctl resumed>) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 738] <... openat resumed>) = 3 [pid 737] write(3, "1000", 4 [pid 732] close(4 [pid 295] mkdir("./14", 0777 [pid 732] <... close resumed>) = 0 [pid 738] write(3, "1000", 4 [pid 737] <... write resumed>) = 4 [pid 732] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... mkdir resumed>) = 0 [pid 738] <... write resumed>) = 4 [pid 737] close(3 [pid 732] <... futex resumed>) = 1 [pid 731] <... futex resumed>) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 738] close(3 [pid 737] <... close resumed>) = 0 [pid 732] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 731] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 738] <... close resumed>) = 0 [pid 737] symlink("/dev/binderfs", "./binderfs" [pid 732] <... open resumed>) = 4 [pid 731] <... futex resumed>) = 0 [pid 295] <... openat resumed>) = 3 [pid 738] symlink("/dev/binderfs", "./binderfs" [pid 737] <... symlink resumed>) = 0 [pid 732] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] ioctl(3, LOOP_CLR_FD [pid 738] <... symlink resumed>) = 0 [pid 737] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 738] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 732] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 731] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] close(3 [pid 738] <... futex resumed>) = 0 [pid 737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 732] <... open resumed>) = 5 [pid 731] <... futex resumed>) = 0 [pid 738] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 737] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 732] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... close resumed>) = 0 [pid 738] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 737] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 732] <... futex resumed>) = 0 [pid 731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 738] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 737] <... mprotect resumed>) = 0 [pid 732] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 731] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 731] <... futex resumed>) = 0 [pid 738] <... mprotect resumed>) = 0 [pid 737] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 732] ftruncate(5, 33587195 [pid 731] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... clone resumed>, child_tidptr=0x5555574565d0) = 739 [pid 738] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 732] <... ftruncate resumed>) = 0 [ 27.612602][ T732] loop3: detected capacity change from 0 to 2048 [pid 737] <... clone resumed>, parent_tid=[740], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 740 [pid 732] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 738] <... clone resumed>, parent_tid=[741], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 741 [pid 737] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 1 [pid 731] <... futex resumed>) = 0 [pid 738] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 732] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 731] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 738] <... futex resumed>) = 0 [pid 737] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 732] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 731] <... futex resumed>) = 0 [pid 738] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 732] sendfile(4, 5, NULL, 4 [pid 731] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 732] <... sendfile resumed>) = 4 [pid 732] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 731] <... futex resumed>) = 0 [pid 732] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 731] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 731] <... futex resumed>) = 0 [pid 732] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 731] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 736] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 299] <... umount2 resumed>) = 0 [pid 736] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 299] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] lstat("./12/file0", ./strace-static-x86_64: Process 739 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 736] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 739] set_robust_list(0x5555574565e0, 24 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 736] <... openat resumed>) = 4 [pid 299] fstat(4, [pid 739] <... set_robust_list resumed>) = 0 [pid 299] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 736] ioctl(4, LOOP_SET_FD, 3 [pid 739] chdir("./14" [pid 299] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 739] <... chdir resumed>) = 0 [pid 739] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] getdents64(4, [pid 739] <... prctl resumed>) = 0 [pid 299] <... getdents64 resumed>0x55555745f660 /* 0 entries */, 32768) = 0 [pid 739] setpgid(0, 0 [pid 299] close(4) = 0 [pid 739] <... setpgid resumed>) = 0 [pid 739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] rmdir("./12/file0" [pid 739] <... openat resumed>) = 3 [pid 299] <... rmdir resumed>) = 0 [pid 739] write(3, "1000", 4 [pid 299] getdents64(3, ./strace-static-x86_64: Process 741 attached [pid 739] <... write resumed>) = 4 [pid 299] <... getdents64 resumed>0x555557457620 /* 0 entries */, 32768) = 0 [pid 741] set_robust_list(0x7fb6cd8c89e0, 24 [pid 739] close(3 [pid 741] <... set_robust_list resumed>) = 0 [pid 739] <... close resumed>) = 0 [pid 299] close(3 [pid 741] memfd_create("syzkaller", 0 [pid 739] symlink("/dev/binderfs", "./binderfs" [pid 741] <... memfd_create resumed>) = 3 [pid 739] <... symlink resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 741] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 739] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rmdir("./12" [pid 741] <... mmap resumed>) = 0x7fb6c54a8000 [pid 739] <... futex resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] mkdir("./13", 0777 [pid 739] <... mmap resumed>) = 0x7fb6cd8a8000 ./strace-static-x86_64: Process 740 attached [pid 739] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 736] <... ioctl resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 740] set_robust_list(0x7fb6cd8c89e0, 24 [pid 739] <... mprotect resumed>) = 0 [pid 740] <... set_robust_list resumed>) = 0 [pid 739] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 736] close(3 [pid 299] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 740] memfd_create("syzkaller", 0 [pid 736] <... close resumed>) = 0 ./strace-static-x86_64: Process 742 attached [pid 741] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 740] <... memfd_create resumed>) = 3 [pid 739] <... clone resumed>, parent_tid=[742], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 742 [pid 736] mkdir("./file0", 0777 [pid 299] <... openat resumed>) = 3 [pid 742] set_robust_list(0x7fb6cd8c89e0, 24 [pid 741] <... write resumed>) = 1048576 [pid 740] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 739] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 736] <... mkdir resumed>) = 0 [pid 742] <... set_robust_list resumed>) = 0 [pid 736] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue" [pid 742] memfd_create("syzkaller", 0 [pid 740] <... mmap resumed>) = 0x7fb6c54a8000 [pid 739] <... futex resumed>) = 0 [pid 299] ioctl(3, LOOP_CLR_FD [pid 742] <... memfd_create resumed>) = 3 [pid 742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 742] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 740] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 739] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 741] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 299] close(3 [pid 741] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 741] ioctl(4, LOOP_SET_FD, 3 [pid 299] <... close resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 743 attached [pid 740] <... write resumed>) = 1048576 [pid 740] munmap(0x7fb6c54a8000, 1048576 [pid 299] <... clone resumed>, child_tidptr=0x5555574565d0) = 743 [pid 740] <... munmap resumed>) = 0 [pid 740] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 743] set_robust_list(0x5555574565e0, 24 [pid 740] <... openat resumed>) = 4 [pid 743] <... set_robust_list resumed>) = 0 [pid 740] ioctl(4, LOOP_SET_FD, 3 [pid 742] <... write resumed>) = 1048576 [pid 742] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 742] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 742] ioctl(4, LOOP_SET_FD, 3 [pid 743] chdir("./13" [pid 740] <... ioctl resumed>) = 0 [pid 731] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 741] <... ioctl resumed>) = 0 [pid 743] <... chdir resumed>) = 0 [pid 731] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 743] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 741] close(3) = 0 [pid 741] mkdir("./file0", 0777) = 0 [pid 731] <... futex resumed>) = 0 [pid 743] <... prctl resumed>) = 0 [pid 740] close(3 [pid 741] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 743] setpgid(0, 0) = 0 [pid 742] <... ioctl resumed>) = 0 [pid 742] close(3 [pid 743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 742] <... close resumed>) = 0 [pid 742] mkdir("./file0", 0777 [pid 743] <... openat resumed>) = 3 [pid 743] write(3, "1000", 4) = 4 [pid 740] <... close resumed>) = 0 [pid 731] <... mmap resumed>) = 0x7fb6c5587000 [pid 731] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 743] close(3 [pid 731] <... mprotect resumed>) = 0 [pid 743] <... close resumed>) = 0 [pid 740] mkdir("./file0", 0777 [pid 742] <... mkdir resumed>) = 0 [pid 742] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 731] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 743] symlink("/dev/binderfs", "./binderfs") = 0 [pid 736] <... mount resumed>) = 0 [pid 743] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 736] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 731] <... clone resumed>, parent_tid=[747], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 747 [pid 743] <... futex resumed>) = 0 [pid 731] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 736] <... openat resumed>) = 3 [pid 743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 731] <... futex resumed>) = 0 [pid 740] <... mkdir resumed>) = 0 [pid 731] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 743] <... mmap resumed>) = 0x7fb6cd8a8000 [pid 736] chdir("./file0" [pid 743] mprotect(0x7fb6cd8a9000, 131072, PROT_READ|PROT_WRITE [pid 736] <... chdir resumed>) = 0 [pid 743] <... mprotect resumed>) = 0 [pid 736] ioctl(4, LOOP_CLR_FD [pid 740] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue" [pid 743] clone(child_stack=0x7fb6cd8c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 736] <... ioctl resumed>) = 0 [pid 736] close(4 [pid 743] <... clone resumed>, parent_tid=[748], tls=0x7fb6cd8c8700, child_tidptr=0x7fb6cd8c89d0) = 748 [pid 736] <... close resumed>) = 0 ./strace-static-x86_64: Process 748 attached [pid 748] set_robust_list(0x7fb6cd8c89e0, 24) = 0 [pid 748] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 743] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 736] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 743] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 736] <... futex resumed>) = 1 [pid 735] <... futex resumed>) = 0 [pid 735] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 736] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 735] <... futex resumed>) = 0 [pid 736] <... open resumed>) = 4 [pid 735] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 736] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 735] <... futex resumed>) = 0 [pid 735] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 736] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 735] <... futex resumed>) = 0 [pid 735] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 736] <... open resumed>) = 5 [pid 736] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 735] <... futex resumed>) = 0 [pid 735] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 735] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 736] ftruncate(5, 33587195) = 0 [pid 736] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 735] <... futex resumed>) = 0 [pid 736] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 735] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 735] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 736] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 736] sendfile(4, 5, NULL, 4) = 4 [pid 736] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 735] <... futex resumed>) = 0 [pid 736] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 735] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 735] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 736] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 736] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 748] <... futex resumed>) = 0 [pid 748] memfd_create("syzkaller", 0) = 3 [pid 748] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb6c54a8000 [pid 748] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 747 attached [pid 747] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 747] sendfile(4, 5, NULL, 4) = 4 [pid 747] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 731] <... futex resumed>) = 0 [pid 731] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 27.693087][ T736] loop4: detected capacity change from 0 to 2048 [ 27.719740][ T741] loop5: detected capacity change from 0 to 2048 [ 27.727882][ T740] loop1: detected capacity change from 0 to 2048 [ 27.730825][ T742] loop0: detected capacity change from 0 to 2048 [pid 731] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 741] <... mount resumed>) = 0 [pid 741] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 741] chdir("./file0") = 0 [pid 741] ioctl(4, LOOP_CLR_FD) = 0 [pid 741] close(4) = 0 [pid 741] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 738] <... futex resumed>) = 0 [pid 738] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 738] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 741] <... open resumed>) = 4 [pid 741] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 738] <... futex resumed>) = 0 [pid 738] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 738] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 741] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 741] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 738] <... futex resumed>) = 0 [pid 741] ftruncate(5, 33587195 [pid 738] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... ftruncate resumed>) = 0 [pid 738] <... futex resumed>) = 0 [pid 741] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 738] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 741] <... futex resumed>) = 0 [pid 738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 741] sendfile(4, 5, NULL, 4 [pid 738] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... sendfile resumed>) = 4 [pid 738] <... futex resumed>) = 0 [pid 741] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 738] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 741] <... futex resumed>) = 0 [pid 738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 741] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 738] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 738] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 740] <... mount resumed>) = 0 [pid 740] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 740] chdir("./file0") = 0 [pid 740] ioctl(4, LOOP_CLR_FD) = 0 [pid 740] close(4) = 0 [pid 740] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 740] <... open resumed>) = 4 [pid 740] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 737] <... futex resumed>) = 0 [pid 740] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 737] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 740] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 740] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] ftruncate(5, 33587195 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... mount resumed>) = 0 [pid 740] <... ftruncate resumed>) = 0 [pid 742] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 740] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] <... openat resumed>) = 3 [pid 740] <... futex resumed>) = 1 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] chdir("./file0" [pid 740] sendfile(4, 5, NULL, 4 [pid 742] <... chdir resumed>) = 0 [pid 742] ioctl(4, LOOP_CLR_FD [pid 735] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 742] <... ioctl resumed>) = 0 [pid 735] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 742] close(4) = 0 [pid 735] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 742] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 742] <... futex resumed>) = 1 [pid 739] <... futex resumed>) = 0 [pid 740] <... sendfile resumed>) = 4 [pid 742] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 739] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 739] <... futex resumed>) = 0 [pid 735] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 739] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] <... futex resumed>) = 0 [pid 735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 742] <... open resumed>) = 4 [pid 735] <... mmap resumed>) = 0x7fb6c5587000 [pid 735] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 742] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] <... mprotect resumed>) = 0 [pid 742] <... futex resumed>) = 1 [pid 740] <... futex resumed>) = 1 [pid 739] <... futex resumed>) = 0 [pid 737] <... futex resumed>) = 0 [pid 735] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 739] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 739] <... futex resumed>) = 0 [pid 737] <... futex resumed>) = 0 [pid 739] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] <... clone resumed>, parent_tid=[754], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 754 [pid 737] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 735] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 740] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 742] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 742] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 739] <... futex resumed>) = 0 [pid 742] futex(0x7fb6cd9a17a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 739] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] ftruncate(5, 33587195 [pid 739] <... futex resumed>) = 0 [pid 742] <... ftruncate resumed>) = 0 [pid 739] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 742] <... futex resumed>) = 0 [pid 739] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] sendfile(4, 5, NULL, 4 [pid 739] <... futex resumed>) = 0 [pid 742] <... sendfile resumed>) = 4 [pid 739] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 742] <... futex resumed>) = 0 [pid 739] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 739] <... futex resumed>) = 0 [pid 739] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 27.773970][ T747] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 731] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 738] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 738] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 738] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 738] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 738] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 748] <... write resumed>) = 1048576 [pid 738] <... clone resumed>, parent_tid=[755], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 755 [pid 738] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 738] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 748] munmap(0x7fb6c54a8000, 1048576) = 0 [pid 748] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 748] ioctl(4, LOOP_SET_FD, 3 [pid 737] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 737] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 735] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 737] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 735] futex(0x7fb6cd9a17cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] <... futex resumed>) = 0 [pid 737] <... futex resumed>) = 0 [pid 735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 735] <... mmap resumed>) = 0x7fb6c5566000 [pid 737] <... mmap resumed>) = 0x7fb6c5587000 [pid 735] mprotect(0x7fb6c5567000, 131072, PROT_READ|PROT_WRITE [pid 737] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE [pid 735] <... mprotect resumed>) = 0 [pid 737] <... mprotect resumed>) = 0 [pid 735] clone(child_stack=0x7fb6c55863f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 737] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 735] <... clone resumed>, parent_tid=[756], tls=0x7fb6c5586700, child_tidptr=0x7fb6c55869d0) = 756 [pid 737] <... clone resumed>, parent_tid=[757], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 757 [pid 735] futex(0x7fb6cd9a17c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] <... futex resumed>) = 0 ./strace-static-x86_64: Process 756 attached ./strace-static-x86_64: Process 754 attached [pid 739] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 737] <... futex resumed>) = 0 [pid 735] futex(0x7fb6cd9a17cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 756] set_robust_list(0x7fb6c55869e0, 24 [pid 739] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 756] <... set_robust_list resumed>) = 0 [pid 739] <... futex resumed>) = 0 [pid 739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb6c5587000 [pid 739] mprotect(0x7fb6c5588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 739] clone(child_stack=0x7fb6c55a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[758], tls=0x7fb6c55a7700, child_tidptr=0x7fb6c55a79d0) = 758 [pid 739] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 739] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 757 attached [pid 754] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 754] sendfile(4, 5, NULL, 4 [pid 757] set_robust_list(0x7fb6c55a79e0, 24) = 0 [pid 757] sendfile(4, 5, NULL, 4) = 4 [pid 757] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 758 attached ) = 1 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 755 attached [pid 758] set_robust_list(0x7fb6c55a79e0, 24 [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 738] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 738] futex(0x7fb6cd9a17cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 738] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 758] <... set_robust_list resumed>) = 0 [pid 755] set_robust_list(0x7fb6c55a79e0, 24 [pid 738] <... mmap resumed>) = 0x7fb6c5566000 [pid 738] mprotect(0x7fb6c5567000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 758] sendfile(4, 5, NULL, 4 [pid 755] <... set_robust_list resumed>) = 0 [pid 738] clone(child_stack=0x7fb6c55863f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[759], tls=0x7fb6c5586700, child_tidptr=0x7fb6c55869d0) = 759 [pid 738] futex(0x7fb6cd9a17c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 738] futex(0x7fb6cd9a17cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] <... sendfile resumed>) = 4 [pid 755] sendfile(4, 5, NULL, 4 [pid 758] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] <... sendfile resumed>) = 4 [pid 758] <... futex resumed>) = 1 [pid 755] futex(0x7fb6cd9a17bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 739] <... futex resumed>) = 0 ./strace-static-x86_64: Process 759 attached [ 27.865910][ T748] loop2: detected capacity change from 0 to 2048 [ 27.873260][ T756] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.886813][ T757] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.902824][ T754] ------------[ cut here ]------------ [ 27.908115][ T754] kernel BUG at fs/ext4/ext4_jbd2.c:53! [pid 758] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] <... futex resumed>) = 0 [pid 739] futex(0x7fb6cd9a17b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] set_robust_list(0x7fb6c55869e0, 24 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 755] futex(0x7fb6cd9a17b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 739] <... futex resumed>) = 0 [pid 759] <... set_robust_list resumed>) = 0 [pid 739] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 748] <... ioctl resumed>) = 0 [pid 748] close(3) = 0 [pid 748] mkdir("./file0", 0777) = 0 [pid 737] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 27.919766][ T758] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.935147][ T759] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.937054][ T754] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 27.955806][ T754] CPU: 1 PID: 754 Comm: syz-executor400 Not tainted 6.1.25-syzkaller-00339-g7b1489746079 #0 [ 27.965695][ T754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 27.975593][ T754] RIP: 0010:__ext4_journal_stop+0x1b3/0x1c0 [ 27.981319][ T754] Code: c3 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c f8 fe ff ff e8 21 e6 d0 ff 48 ba 00 00 00 00 00 fc ff df e9 e4 fe ff ff e8 bd 78 8b ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 41 57 41 56 41 [ 28.000774][ T754] RSP: 0018:ffffc90001d57138 EFLAGS: 00010293 [ 28.006662][ T754] RAX: ffffffff81e836d3 RBX: ffffffff863a17ae RCX: ffff8881227e9300 [ 28.014472][ T754] RDX: 0000000000000000 RSI: 0000000000000322 RDI: ffffffff863a17ae [ 28.022286][ T754] RBP: ffffc90001d57170 R08: ffffffff81edcc9b R09: ffffed102411615d [ 28.030102][ T754] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000008 [ 28.037910][ T754] R13: 0000000000000000 R14: ffff888120bc9bf0 R15: 0000000000000322 [ 28.045717][ T754] FS: 00007fb6c55a7700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.054488][ T754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.060907][ T754] CR2: 0000000000efb068 CR3: 0000000122b36000 CR4: 00000000003506a0 [ 28.068718][ T754] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.076528][ T754] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.084438][ T754] Call Trace: [ 28.087560][ T754] [ 28.090332][ T754] ext4_write_inline_data_end+0x7c3/0xa90 [ 28.096088][ T754] ? put_page+0xc0/0xc0 [ 28.100177][ T754] ? pipe_zero+0x220/0x220 [ 28.104421][ T754] ext4_da_write_end+0x1ed/0x970 [ 28.109195][ T754] ? ext4_da_write_begin+0x920/0x920 [ 28.114316][ T754] generic_perform_write+0x3e6/0x5c0 [ 28.119440][ T754] ? generic_file_direct_write+0x6b0/0x6b0 [ 28.125164][ T754] ? generic_write_checks_count+0x490/0x490 [ 28.130893][ T754] ? arch_stack_walk+0xf3/0x140 [ 28.135576][ T754] ext4_buffered_write_iter+0x360/0x640 [ 28.140962][ T754] ext4_file_write_iter+0x194/0x1cf0 [ 28.146076][ T754] ? __stack_depot_save+0x36/0x480 [ 28.151027][ T754] ? iomap_dio_complete+0x6bc/0x7e0 [ 28.156058][ T754] ? kasan_set_track+0x60/0x70 [ 28.160655][ T754] ? kasan_set_track+0x4b/0x70 [ 28.165256][ T754] ? kasan_save_alloc_info+0x1f/0x30 [ 28.170379][ T754] ? __kasan_kmalloc+0x9c/0xb0 [ 28.174978][ T754] ? __kmalloc+0xb4/0x1e0 [ 28.179247][ T754] ? iter_file_splice_write+0x278/0xf90 [ 28.184610][ T754] ? direct_splice_actor+0xff/0x130 [ 28.189644][ T754] ? splice_direct_to_actor+0x4b4/0xbb0 [ 28.195047][ T754] ? do_splice_direct+0x27f/0x3c0 [ 28.199888][ T754] ? avc_policy_seqno+0x1b/0x70 [ 28.204575][ T754] ? ext4_file_read_iter+0x470/0x470 [ 28.209695][ T754] ? fsnotify_perm+0x6a/0x5d0 [ 28.214209][ T754] do_iter_write+0x6e6/0xc50 [ 28.218635][ T754] ? vfs_iter_write+0xa0/0xa0 [ 28.223244][ T754] ? __kasan_check_read+0x11/0x20 [ 28.228120][ T754] ? splice_from_pipe_next+0x5e9/0x640 [ 28.233399][ T754] vfs_iter_write+0x7c/0xa0 [ 28.237742][ T754] iter_file_splice_write+0x7f8/0xf90 [ 28.242947][ T754] ? splice_from_pipe+0x230/0x230 [ 28.247808][ T754] ? splice_shrink_spd+0xb0/0xb0 [ 28.252576][ T754] ? __kasan_check_read+0x11/0x20 [ 28.257439][ T754] ? fsnotify_perm+0x470/0x5d0 [ 28.262040][ T754] ? splice_from_pipe+0x230/0x230 [ 28.266898][ T754] direct_splice_actor+0xff/0x130 [ 28.271759][ T754] splice_direct_to_actor+0x4b4/0xbb0 [ 28.277055][ T754] ? do_splice_direct+0x3c0/0x3c0 [ 28.281912][ T754] ? pipe_to_sendpage+0x340/0x340 [ 28.286777][ T754] ? rw_verify_area+0xa7/0x1c0 [ 28.291376][ T754] do_splice_direct+0x27f/0x3c0 [ 28.296066][ T754] ? splice_direct_to_actor+0xbb0/0xbb0 [ 28.301442][ T754] ? fsnotify_perm+0x6a/0x5d0 [ 28.305954][ T754] ? security_file_permission+0x86/0xb0 [ 28.311347][ T754] do_sendfile+0x616/0xfe0 [ 28.315589][ T754] ? do_preadv+0x350/0x350 [ 28.319841][ T754] ? ptrace_notify+0x249/0x350 [ 28.324443][ T754] __x64_sys_sendfile64+0x1ce/0x230 [ 28.329474][ T754] ? __ia32_sys_sendfile+0x240/0x240 [ 28.334596][ T754] ? syscall_enter_from_user_mode+0x6a/0x190 [ 28.340414][ T754] do_syscall_64+0x3d/0xb0 [ 28.344683][ T754] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 28.350403][ T754] RIP: 0033:0x7fb6cd91d069 [ 28.354643][ T754] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 28.374173][ T754] RSP: 002b:00007fb6c55a72f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 28.382417][ T754] RAX: ffffffffffffffda RBX: 00007fb6cd9a17b0 RCX: 00007fb6cd91d069 [ 28.390236][ T754] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 28.398037][ T754] RBP: 00007fb6cd96e840 R08: 00007fb6c55a7700 R09: 0000000000000000 [ 28.405945][ T754] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fb6cd96e0c0 [ 28.413747][ T754] R13: 0000000020000f40 R14: 0030656c69662f2e R15: 00007fb6cd9a17b8 [pid 737] futex(0x7fb6cd9a17bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 758] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 748] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 747] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000140} --- [pid 742] <... mmap resumed>) = 0x20000000 [pid 741] <... mmap resumed>) = 0x20000000 [pid 740] <... mmap resumed>) = 0x20000000 [pid 739] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 738] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 737] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 732] <... mmap resumed>) = 0x20000000 [pid 755] <... futex resumed>) = ? [pid 759] +++ killed by SIGBUS +++ [pid 755] +++ killed by SIGBUS +++ [pid 747] +++ killed by SIGBUS +++ [pid 741] +++ killed by SIGBUS +++ [pid 738] +++ killed by SIGBUS +++ [pid 758] +++ killed by SIGBUS +++ [pid 757] +++ killed by SIGBUS +++ [pid 742] +++ killed by SIGBUS +++ [pid 740] +++ killed by SIGBUS +++ [pid 732] +++ killed by SIGBUS +++ [pid 731] +++ killed by SIGBUS +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=731, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 300] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(3, 0x555557457620 /* 4 entries */, 32768) = 112 [pid 300] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 300] unlink("./14/binderfs") = 0 [pid 300] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 739] +++ killed by SIGBUS +++ [pid 737] +++ killed by SIGBUS +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=738, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=23} --- [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=737, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=739, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=9} --- [pid 302] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... openat resumed>) = 3 [pid 298] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] fstat(3, [pid 298] <... openat resumed>) = 3 [pid 295] <... openat resumed>) = 3 [pid 302] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] fstat(3, [pid 295] fstat(3, [pid 302] getdents64(3, [pid 298] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 295] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 298] getdents64(3, [pid 295] getdents64(3, [pid 302] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 295] <... getdents64 resumed>0x555557457620 /* 4 entries */, 32768) = 112 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 295] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 302] lstat("./14/binderfs", [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 298] lstat("./14/binderfs", [pid 295] lstat("./14/binderfs", [pid 302] unlink("./14/binderfs" [pid 298] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 295] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 302] <... unlink resumed>) = 0 [pid 298] unlink("./14/binderfs" [pid 295] unlink("./14/binderfs" [pid 302] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 298] <... unlink resumed>) = 0 [pid 295] <... unlink resumed>) = 0 [pid 298] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 28.421562][ T754] [ 28.424424][ T754] Modules linked in: [ 28.429093][ T754] ---[ end trace 0000000000000000 ]--- [ 28.435369][ T754] RIP: 0010:__ext4_journal_stop+0x1b3/0x1c0 [ 28.448230][ T754] Code: c3 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c f8 fe ff ff e8 21 e6 d0 ff 48 ba 00 00 00 00 00 fc ff df e9 e4 fe ff ff e8 bd 78 8b ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 41 57 41 56 41 [pid 295] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 748] <... mount resumed>) = 0 [pid 748] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 748] chdir("./file0") = 0 [pid 748] ioctl(4, LOOP_CLR_FD) = 0 [pid 748] close(4) = 0 [pid 748] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 743] <... futex resumed>) = 0 [pid 743] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 743] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 748] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 748] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 743] <... futex resumed>) = 0 [pid 743] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 743] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 748] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 748] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 743] <... futex resumed>) = 0 [pid 743] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 743] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 748] ftruncate(5, 33587195) = 0 [pid 748] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 743] <... futex resumed>) = 0 [pid 748] sendfile(4, 5, NULL, 4 [pid 743] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 748] <... sendfile resumed>) = 4 [pid 743] <... futex resumed>) = 0 [pid 748] futex(0x7fb6cd9a17ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 743] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 748] <... futex resumed>) = 0 [pid 743] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 748] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0x2000 [pid 743] futex(0x7fb6cd9a17a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 28.468608][ T754] RSP: 0018:ffffc90001d57138 EFLAGS: 00010293 [ 28.474596][ T754] RAX: ffffffff81e836d3 RBX: ffffffff863a17ae RCX: ffff8881227e9300 [ 28.482303][ T754] RDX: 0000000000000000 RSI: 0000000000000322 RDI: ffffffff863a17ae [ 28.490584][ T754] RBP: ffffc90001d57170 R08: ffffffff81edcc9b R09: ffffed102411615d [ 28.498417][ T754] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000008 [ 28.506271][ T754] R13: 0000000000000000 R14: ffff888120bc9bf0 R15: 0000000000000322 [pid 743] futex(0x7fb6cd9a17ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55555745f660 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55555745f660 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./14/file0") = 0 [pid 300] getdents64(3, 0x555557457620 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./14") = 0 [ 28.513991][ T754] FS: 00007fb6c55a7700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 28.522909][ T754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.529279][ T754] CR2: 00007ffc24cdcfa8 CR3: 0000000122b36000 CR4: 00000000003506b0 [ 28.537151][ T754] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.544963][ T754] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.552702][ T754] Kernel panic - not syncing: Fatal exception [ 28.558751][ T754] Kernel Offset: disabled [ 28.562877][ T754] Rebooting in 86400 seconds..