./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4006574843 <...> Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. execve("./syz-executor4006574843", ["./syz-executor4006574843"], 0x7ffd9eb19b30 /* 10 vars */) = 0 brk(NULL) = 0x555556dd8000 brk(0x555556dd8d40) = 0x555556dd8d40 arch_prctl(ARCH_SET_FS, 0x555556dd83c0) = 0 set_tid_address(0x555556dd8690) = 5038 set_robust_list(0x555556dd86a0, 24) = 0 rseq(0x555556dd8ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4006574843", 4096) = 28 getrandom("\x77\x6a\x52\x98\x55\xfc\x37\xd5", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556dd8d40 brk(0x555556df9d40) = 0x555556df9d40 brk(0x555556dfa000) = 0x555556dfa000 mprotect(0x7fbf73479000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556dd8690) = 5039 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556dd8690) = 5040 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556dd8690) = 5041 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5042 attached , child_tidptr=0x555556dd8690) = 5042 [pid 5038] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5042] set_robust_list(0x555556dd86a0, 24./strace-static-x86_64: Process 5040 attached ./strace-static-x86_64: Process 5041 attached ./strace-static-x86_64: Process 5039 attached ) = 0 [pid 5042] mkdir("./syzkaller.0IxYc8", 0700 [pid 5041] set_robust_list(0x555556dd86a0, 24 [pid 5039] set_robust_list(0x555556dd86a0, 24./strace-static-x86_64: Process 5043 attached [pid 5041] <... set_robust_list resumed>) = 0 [pid 5040] set_robust_list(0x555556dd86a0, 24 [pid 5039] <... set_robust_list resumed>) = 0 [pid 5038] <... clone resumed>, child_tidptr=0x555556dd8690) = 5043 [pid 5043] set_robust_list(0x555556dd86a0, 24 [pid 5041] mkdir("./syzkaller.dYCWhH", 0700 [pid 5040] <... set_robust_list resumed>) = 0 [pid 5043] <... set_robust_list resumed>) = 0 [pid 5039] mkdir("./syzkaller.C3pJIf", 0700 [pid 5038] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5043] mkdir("./syzkaller.InJScd", 0700 [pid 5040] mkdir("./syzkaller.2N6F7y", 0700 [pid 5042] <... mkdir resumed>) = 0 [pid 5042] chmod("./syzkaller.0IxYc8", 0777) = 0 [pid 5042] chdir("./syzkaller.0IxYc8") = 0 [pid 5042] mkdir("./0", 0777 [pid 5041] <... mkdir resumed>) = 0 [pid 5040] <... mkdir resumed>) = 0 [pid 5039] <... mkdir resumed>) = 0 [pid 5041] chmod("./syzkaller.dYCWhH", 0777 [pid 5040] chmod("./syzkaller.2N6F7y", 0777 [pid 5039] chmod("./syzkaller.C3pJIf", 0777./strace-static-x86_64: Process 5044 attached [pid 5043] <... mkdir resumed>) = 0 [pid 5042] <... mkdir resumed>) = 0 [pid 5041] <... chmod resumed>) = 0 [pid 5040] <... chmod resumed>) = 0 [pid 5039] <... chmod resumed>) = 0 [pid 5038] <... clone resumed>, child_tidptr=0x555556dd8690) = 5044 [pid 5044] set_robust_list(0x555556dd86a0, 24 [pid 5041] chdir("./syzkaller.dYCWhH" [pid 5040] chdir("./syzkaller.2N6F7y" [pid 5039] chdir("./syzkaller.C3pJIf" [pid 5042] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5041] <... chdir resumed>) = 0 [pid 5040] <... chdir resumed>) = 0 [pid 5039] <... chdir resumed>) = 0 [pid 5044] <... set_robust_list resumed>) = 0 [ 111.102964][ T27] audit: type=1400 audit(1697040771.903:87): avc: denied { execmem } for pid=5038 comm="syz-executor400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 5041] mkdir("./0", 0777 [pid 5040] mkdir("./0", 0777 [pid 5039] mkdir("./0", 0777 [pid 5044] mkdir("./syzkaller.Oa6UrN", 0700 [pid 5043] chmod("./syzkaller.InJScd", 0777 [pid 5042] <... openat resumed>) = 3 [pid 5041] <... mkdir resumed>) = 0 [pid 5043] <... chmod resumed>) = 0 [pid 5044] <... mkdir resumed>) = 0 [pid 5043] chdir("./syzkaller.InJScd") = 0 [pid 5042] ioctl(3, LOOP_CLR_FD [pid 5043] mkdir("./0", 0777 [pid 5042] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5044] chmod("./syzkaller.Oa6UrN", 0777 [pid 5041] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5039] <... mkdir resumed>) = 0 [pid 5044] <... chmod resumed>) = 0 [pid 5042] close(3 [pid 5040] <... mkdir resumed>) = 0 [pid 5039] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5044] chdir("./syzkaller.Oa6UrN" [pid 5043] <... mkdir resumed>) = 0 [pid 5042] <... close resumed>) = 0 [pid 5041] <... openat resumed>) = 3 [pid 5040] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5039] <... openat resumed>) = 3 [pid 5043] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5044] <... chdir resumed>) = 0 [pid 5044] mkdir("./0", 0777 [pid 5043] ioctl(3, LOOP_CLR_FD [pid 5044] <... mkdir resumed>) = 0 [pid 5043] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5043] close(3) = 0 [pid 5043] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5042] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5044] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [ 111.151282][ T27] audit: type=1400 audit(1697040771.953:88): avc: denied { read write } for pid=5042 comm="syz-executor400" name="loop3" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 5044] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5043] <... clone resumed>, child_tidptr=0x555556dd8690) = 5045 ./strace-static-x86_64: Process 5045 attached [pid 5045] set_robust_list(0x555556dd86a0, 24 [pid 5044] close(3 [pid 5042] <... clone resumed>, child_tidptr=0x555556dd8690) = 5046 [pid 5045] <... set_robust_list resumed>) = 0 [pid 5044] <... close resumed>) = 0 [pid 5039] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5046 attached [pid 5045] chdir("./0" [pid 5044] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5041] ioctl(3, LOOP_CLR_FD [pid 5040] <... openat resumed>) = 3 [pid 5039] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5045] <... chdir resumed>) = 0 [pid 5045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5045] setpgid(0, 0) = 0 [pid 5045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5045] write(3, "1000", 4) = 4 [pid 5045] close(3) = 0 [pid 5045] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5045] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5044] <... clone resumed>, child_tidptr=0x555556dd8690) = 5047 [pid 5045] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, NULL, 8) = 0 [pid 5040] ioctl(3, LOOP_CLR_FD [pid 5039] close(3./strace-static-x86_64: Process 5047 attached [pid 5045] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5046] set_robust_list(0x555556dd86a0, 24 [pid 5041] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5047] set_robust_list(0x555556dd86a0, 24 [pid 5045] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5046] <... set_robust_list resumed>) = 0 [pid 5041] close(3 [pid 5040] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5039] <... close resumed>) = 0 [pid 5047] <... set_robust_list resumed>) = 0 [pid 5045] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5047] chdir("./0" [pid 5045] <... mmap resumed>) = 0x7fbf7338e000 [pid 5046] chdir("./0" [pid 5041] <... close resumed>) = 0 [pid 5040] close(3 [pid 5039] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5047] <... chdir resumed>) = 0 [pid 5045] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE [pid 5041] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5040] <... close resumed>) = 0 [pid 5045] <... mprotect resumed>) = 0 [pid 5045] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5045] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5047] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5040] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5048 attached ./strace-static-x86_64: Process 5049 attached [pid 5047] <... prctl resumed>) = 0 [pid 5039] <... clone resumed>, child_tidptr=0x555556dd8690) = 5048 ./strace-static-x86_64: Process 5050 attached [pid 5049] set_robust_list(0x555556dd86a0, 24 [pid 5047] setpgid(0, 0 [pid 5041] <... clone resumed>, child_tidptr=0x555556dd8690) = 5049 ./strace-static-x86_64: Process 5051 attached [pid 5050] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5048] set_robust_list(0x555556dd86a0, 24 [pid 5049] <... set_robust_list resumed>) = 0 [pid 5047] <... setpgid resumed>) = 0 [pid 5045] <... clone3 resumed> => {parent_tid=[5050]}, 88) = 5050 [pid 5051] set_robust_list(0x555556dd86a0, 24 [pid 5050] <... rseq resumed>) = 0 [pid 5048] <... set_robust_list resumed>) = 0 [pid 5049] chdir("./0" [pid 5047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5045] rt_sigprocmask(SIG_SETMASK, [], [pid 5040] <... clone resumed>, child_tidptr=0x555556dd8690) = 5051 [pid 5051] <... set_robust_list resumed>) = 0 [pid 5050] set_robust_list(0x7fbf733ae9a0, 24 [pid 5048] chdir("./0" [pid 5047] <... openat resumed>) = 3 [pid 5045] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5046] <... chdir resumed>) = 0 [pid 5051] chdir("./0" [pid 5050] <... set_robust_list resumed>) = 0 [pid 5048] <... chdir resumed>) = 0 [pid 5049] <... chdir resumed>) = 0 [pid 5047] write(3, "1000", 4 [pid 5045] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5051] <... chdir resumed>) = 0 [pid 5048] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5047] <... write resumed>) = 4 [pid 5046] <... prctl resumed>) = 0 [pid 5051] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5050] rt_sigprocmask(SIG_SETMASK, [], [pid 5048] <... prctl resumed>) = 0 [pid 5049] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5047] close(3 [pid 5045] <... futex resumed>) = 0 [pid 5046] setpgid(0, 0 [pid 5050] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5048] setpgid(0, 0 [pid 5049] <... prctl resumed>) = 0 [pid 5047] <... close resumed>) = 0 [pid 5045] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5046] <... setpgid resumed>) = 0 [ 111.182543][ T27] audit: type=1400 audit(1697040771.953:89): avc: denied { open } for pid=5042 comm="syz-executor400" path="/dev/loop3" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.210405][ T27] audit: type=1400 audit(1697040771.963:90): avc: denied { ioctl } for pid=5042 comm="syz-executor400" path="/dev/loop3" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 5050] memfd_create("syzkaller", 0 [pid 5048] <... setpgid resumed>) = 0 [pid 5049] setpgid(0, 0 [pid 5047] symlink("/dev/binderfs", "./binderfs" [pid 5046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5051] <... prctl resumed>) = 0 [pid 5048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5047] <... symlink resumed>) = 0 [pid 5046] <... openat resumed>) = 3 [pid 5046] write(3, "1000", 4 [pid 5047] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... write resumed>) = 4 [pid 5047] <... futex resumed>) = 0 [pid 5046] close(3 [pid 5047] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, [pid 5049] <... setpgid resumed>) = 0 [pid 5047] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5046] <... close resumed>) = 0 [pid 5047] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5046] symlink("/dev/binderfs", "./binderfs" [pid 5047] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5046] <... symlink resumed>) = 0 [pid 5051] setpgid(0, 0 [pid 5049] write(3, "1000", 4 [pid 5047] <... mmap resumed>) = 0x7fbf7338e000 [pid 5046] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... setpgid resumed>) = 0 [pid 5048] <... openat resumed>) = 3 [pid 5049] <... write resumed>) = 4 [pid 5047] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE [pid 5046] <... futex resumed>) = 0 [pid 5051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5048] write(3, "1000", 4 [pid 5049] close(3 [pid 5047] <... mprotect resumed>) = 0 [pid 5046] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, [pid 5049] <... close resumed>) = 0 [pid 5046] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5046] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5047] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5046] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5051] <... openat resumed>) = 3 [pid 5048] <... write resumed>) = 4 [pid 5049] symlink("/dev/binderfs", "./binderfs" [pid 5047] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5051] write(3, "1000", 4 [pid 5048] close(3 [pid 5049] <... symlink resumed>) = 0 [pid 5047] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5046] <... mmap resumed>) = 0x7fbf7338e000 [pid 5048] <... close resumed>) = 0 [pid 5051] <... write resumed>) = 4 [pid 5048] symlink("/dev/binderfs", "./binderfs" [pid 5049] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5052 attached [pid 5051] close(3 [pid 5049] <... futex resumed>) = 0 [pid 5046] <... mprotect resumed>) = 0 [pid 5051] <... close resumed>) = 0 [pid 5048] <... symlink resumed>) = 0 [pid 5049] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, [pid 5052] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5047] <... clone3 resumed> => {parent_tid=[5052]}, 88) = 5052 [pid 5049] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5049] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5047] rt_sigprocmask(SIG_SETMASK, [], [pid 5052] <... rseq resumed>) = 0 [pid 5051] symlink("/dev/binderfs", "./binderfs" [pid 5048] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5049] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5047] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5046] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5052] set_robust_list(0x7fbf733ae9a0, 24 [pid 5051] <... symlink resumed>) = 0 [pid 5050] <... memfd_create resumed>) = 3 [pid 5049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5047] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5052] <... set_robust_list resumed>) = 0 [pid 5050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5049] <... mmap resumed>) = 0x7fbf7338e000 [pid 5048] <... futex resumed>) = 0 [pid 5046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5052] rt_sigprocmask(SIG_SETMASK, [], [pid 5051] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... mmap resumed>) = 0x7fbf6af8e000 [pid 5048] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, [pid 5049] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE [pid 5047] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5053 attached [pid 5052] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5051] <... futex resumed>) = 0 [pid 5048] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5049] <... mprotect resumed>) = 0 [pid 5047] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5053] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5052] memfd_create("syzkaller", 0 [pid 5051] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, [pid 5048] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5049] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5046] <... clone3 resumed> => {parent_tid=[5053]}, 88) = 5053 [pid 5053] <... rseq resumed>) = 0 [pid 5051] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5048] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5046] rt_sigprocmask(SIG_SETMASK, [], [pid 5052] <... memfd_create resumed>) = 3 [pid 5051] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5049] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5046] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5053] set_robust_list(0x7fbf733ae9a0, 24 [pid 5052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5051] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5048] <... mmap resumed>) = 0x7fbf7338e000 [pid 5049] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5046] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [ 111.266678][ T5050] syz-executor400[5050]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [pid 5053] <... set_robust_list resumed>) = 0 [pid 5052] <... mmap resumed>) = 0x7fbf6af8e000 [pid 5051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5048] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE [pid 5046] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5054 attached [pid 5053] rt_sigprocmask(SIG_SETMASK, [], [pid 5048] <... mprotect resumed>) = 0 [pid 5049] <... clone3 resumed> => {parent_tid=[5054]}, 88) = 5054 [pid 5046] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5054] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5053] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5051] <... mmap resumed>) = 0x7fbf7338e000 [pid 5049] rt_sigprocmask(SIG_SETMASK, [], [pid 5054] <... rseq resumed>) = 0 [pid 5053] memfd_create("syzkaller", 0 [pid 5051] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE [pid 5049] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5054] set_robust_list(0x7fbf733ae9a0, 24 [pid 5053] <... memfd_create resumed>) = 3 [pid 5049] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] <... set_robust_list resumed>) = 0 [pid 5051] <... mprotect resumed>) = 0 [pid 5049] <... futex resumed>) = 0 [pid 5054] rt_sigprocmask(SIG_SETMASK, [], [pid 5053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5051] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5048] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5049] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5054] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5051] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5054] memfd_create("syzkaller", 0 [pid 5053] <... mmap resumed>) = 0x7fbf6af8e000 [pid 5054] <... memfd_create resumed>) = 3 [pid 5051] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5048] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbf6af8e000 ./strace-static-x86_64: Process 5055 attached [pid 5048] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5055] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053) = 0 ./strace-static-x86_64: Process 5056 attached [pid 5055] set_robust_list(0x7fbf733ae9a0, 24 [pid 5048] <... clone3 resumed> => {parent_tid=[5056]}, 88) = 5056 [pid 5051] <... clone3 resumed> => {parent_tid=[5055]}, 88) = 5055 [pid 5056] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5055] <... set_robust_list resumed>) = 0 [pid 5051] rt_sigprocmask(SIG_SETMASK, [], [pid 5048] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] <... rseq resumed>) = 0 [pid 5055] rt_sigprocmask(SIG_SETMASK, [], [pid 5048] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] set_robust_list(0x7fbf733ae9a0, 24) = 0 [pid 5055] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5048] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] rt_sigprocmask(SIG_SETMASK, [], [pid 5055] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5048] <... futex resumed>) = 0 [pid 5056] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5051] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5048] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5051] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5051] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5055] <... futex resumed>) = 0 [pid 5055] memfd_create("syzkaller", 0 [pid 5056] memfd_create("syzkaller", 0 [pid 5055] <... memfd_create resumed>) = 3 [pid 5055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbf6af8e000 [pid 5056] <... memfd_create resumed>) = 3 [pid 5056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbf6af8e000 [pid 5050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5052] <... write resumed>) = 16777216 [pid 5055] <... write resumed>) = 16777216 [pid 5052] munmap(0x7fbf6af8e000, 138412032 [pid 5055] munmap(0x7fbf6af8e000, 138412032 [pid 5053] <... write resumed>) = 16777216 [pid 5054] <... write resumed>) = 16777216 [pid 5054] munmap(0x7fbf6af8e000, 138412032 [pid 5050] <... write resumed>) = 16777216 [pid 5053] munmap(0x7fbf6af8e000, 138412032 [pid 5055] <... munmap resumed>) = 0 [pid 5050] munmap(0x7fbf6af8e000, 138412032 [pid 5052] <... munmap resumed>) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5055] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5054] <... munmap resumed>) = 0 [pid 5052] <... openat resumed>) = 4 [pid 5055] ioctl(4, LOOP_SET_FD, 3 [pid 5052] ioctl(4, LOOP_SET_FD, 3 [pid 5056] <... write resumed>) = 16777216 [pid 5053] <... munmap resumed>) = 0 [pid 5056] munmap(0x7fbf6af8e000, 138412032 [pid 5054] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5054] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5054] close(3) = 0 [pid 5054] mkdir("./file0", 0777) = 0 [pid 5054] mount("/dev/loop2", "./file0", "jfs", MS_REC, "" [pid 5053] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 112.950700][ T5054] loop2: detected capacity change from 0 to 32768 [ 112.950700][ T5052] loop5: detected capacity change from 0 to 32768 [ 112.960933][ T27] audit: type=1400 audit(1697040773.753:91): avc: denied { mounton } for pid=5049 comm="syz-executor400" path="/root/syzkaller.dYCWhH/0/file0" dev="sda1" ino=1945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 112.978392][ T5055] loop1: detected capacity change from 0 to 32768 [pid 5053] ioctl(4, LOOP_SET_FD, 3 [pid 5052] <... ioctl resumed>) = 0 [pid 5052] close(3 [pid 5055] <... ioctl resumed>) = 0 [pid 5055] close(3 [pid 5052] <... close resumed>) = 0 [pid 5055] <... close resumed>) = 0 [pid 5052] mkdir("./file0", 0777 [pid 5055] mkdir("./file0", 0777 [pid 5056] <... munmap resumed>) = 0 [pid 5055] <... mkdir resumed>) = 0 [pid 5052] <... mkdir resumed>) = 0 [pid 5050] <... munmap resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5052] mount("/dev/loop5", "./file0", "jfs", MS_REC, "" [pid 5050] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5055] mount("/dev/loop1", "./file0", "jfs", MS_REC, "" [pid 5050] <... openat resumed>) = 4 [pid 5050] ioctl(4, LOOP_SET_FD, 3 [pid 5053] <... ioctl resumed>) = 0 [pid 5053] close(3) = 0 [pid 5053] mkdir("./file0", 0777) = 0 [pid 5053] mount("/dev/loop3", "./file0", "jfs", MS_REC, "" [pid 5056] <... openat resumed>) = 4 [pid 5050] <... ioctl resumed>) = 0 [pid 5050] close(3) = 0 [pid 5050] mkdir("./file0", 0777) = 0 [pid 5050] mount("/dev/loop4", "./file0", "jfs", MS_REC, "" [pid 5054] <... mount resumed>) = 0 [ 113.002721][ T5053] loop3: detected capacity change from 0 to 32768 [ 113.014051][ T5050] loop4: detected capacity change from 0 to 32768 [pid 5054] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5053] <... mount resumed>) = 0 [pid 5054] <... openat resumed>) = 3 [pid 5056] ioctl(4, LOOP_SET_FD, 3 [pid 5054] chdir("./file0" [pid 5053] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5055] <... mount resumed>) = 0 [pid 5054] <... chdir resumed>) = 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5055] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5052] <... mount resumed>) = 0 [pid 5054] ioctl(4, LOOP_CLR_FD [pid 5053] <... openat resumed>) = 3 [pid 5056] close(3 [pid 5055] <... openat resumed>) = 3 [pid 5056] <... close resumed>) = 0 [pid 5055] chdir("./file0" [pid 5054] <... ioctl resumed>) = 0 [pid 5053] chdir("./file0" [pid 5056] mkdir("./file0", 0777 [pid 5055] <... chdir resumed>) = 0 [pid 5054] close(4 [pid 5053] <... chdir resumed>) = 0 [pid 5052] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5055] ioctl(4, LOOP_CLR_FD [pid 5052] <... openat resumed>) = 3 [pid 5056] <... mkdir resumed>) = 0 [pid 5055] <... ioctl resumed>) = 0 [pid 5054] <... close resumed>) = 0 [pid 5053] ioctl(4, LOOP_CLR_FD [pid 5052] chdir("./file0" [pid 5056] mount("/dev/loop0", "./file0", "jfs", MS_REC, "" [pid 5055] close(4 [pid 5054] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] <... ioctl resumed>) = 0 [pid 5052] <... chdir resumed>) = 0 [pid 5050] <... mount resumed>) = 0 [pid 5055] <... close resumed>) = 0 [pid 5054] <... futex resumed>) = 1 [pid 5053] close(4 [pid 5052] ioctl(4, LOOP_CLR_FD [pid 5050] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5049] <... futex resumed>) = 0 [pid 5055] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5053] <... close resumed>) = 0 [pid 5052] <... ioctl resumed>) = 0 [pid 5055] <... futex resumed>) = 1 [pid 5053] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] close(4 [pid 5051] <... futex resumed>) = 0 [pid 5050] <... openat resumed>) = 3 [pid 5049] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5055] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5054] <... futex resumed>) = 0 [pid 5053] <... futex resumed>) = 1 [pid 5052] <... close resumed>) = 0 [pid 5051] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] chdir("./file0" [pid 5049] <... futex resumed>) = 1 [pid 5046] <... futex resumed>) = 0 [pid 5055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5054] open(".", O_RDONLY [pid 5053] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5052] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = 0 [pid 5050] <... chdir resumed>) = 0 [pid 5049] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5055] open(".", O_RDONLY [pid 5054] <... open resumed>) = 4 [pid 5053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 1 [pid 5051] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] ioctl(4, LOOP_CLR_FD [pid 5047] <... futex resumed>) = 0 [pid 5046] <... futex resumed>) = 0 [pid 5055] <... open resumed>) = 4 [pid 5054] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] open(".", O_RDONLY [pid 5052] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5050] <... ioctl resumed>) = 0 [pid 5047] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5055] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] <... futex resumed>) = 1 [pid 5053] <... open resumed>) = 4 [pid 5052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5050] close(4 [pid 5049] <... futex resumed>) = 0 [pid 5047] <... futex resumed>) = 0 [pid 5054] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5053] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] open(".", O_RDONLY [pid 5050] <... close resumed>) = 0 [pid 5049] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [ 113.053803][ T27] audit: type=1400 audit(1697040773.853:92): avc: denied { mount } for pid=5047 comm="syz-executor400" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 113.057352][ T5056] loop0: detected capacity change from 0 to 32768 [pid 5047] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5055] <... futex resumed>) = 1 [pid 5054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5053] <... futex resumed>) = 1 [pid 5052] <... open resumed>) = 4 [pid 5051] <... futex resumed>) = 0 [pid 5050] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5049] <... futex resumed>) = 0 [pid 5046] <... futex resumed>) = 0 [pid 5054] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5053] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5052] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = 1 [pid 5049] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... futex resumed>) = 0 [pid 5055] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5046] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = 0 [pid 5050] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = 0 [pid 5046] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] <... futex resumed>) = 0 [pid 5051] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] open(".", O_RDONLY [pid 5045] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] <... futex resumed>) = 1 [pid 5052] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5050] <... open resumed>) = 4 [pid 5047] <... futex resumed>) = 0 [pid 5047] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5047] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5050] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5050] <... futex resumed>) = 1 [pid 5045] <... futex resumed>) = 0 [pid 5050] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5050] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5045] <... futex resumed>) = 0 [ 113.121135][ T5055] ERROR: (device loop1): diRead: i_ino != di_number [ 113.121135][ T5055] [ 113.132171][ T5053] ERROR: (device loop3): diRead: i_ino != di_number [ 113.132171][ T5053] [ 113.141731][ T5055] ERROR: (device loop1): remounting filesystem as read-only [ 113.148392][ T5054] ERROR: (device loop2): diRead: i_ino != di_number [ 113.148392][ T5054] [ 113.158103][ T5053] ERROR: (device loop3): remounting filesystem as read-only [pid 5049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5045] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5049] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5055] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5053] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5049] <... futex resumed>) = 0 [pid 5046] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5055] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5046] <... futex resumed>) = 0 [pid 5055] <... futex resumed>) = 0 [pid 5053] <... futex resumed>) = 0 [pid 5051] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5049] <... mmap resumed>) = 0x7fbf7336d000 [pid 5046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5055] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5053] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5051] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5049] mprotect(0x7fbf7336e000, 131072, PROT_READ|PROT_WRITE [pid 5046] <... mmap resumed>) = 0x7fbf7336d000 [pid 5047] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5046] mprotect(0x7fbf7336e000, 131072, PROT_READ|PROT_WRITE [pid 5047] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... mprotect resumed>) = 0 [pid 5054] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5047] <... futex resumed>) = 0 [pid 5046] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5054] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5046] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5054] <... futex resumed>) = 0 [pid 5047] <... mmap resumed>) = 0x7fbf7336d000 [pid 5046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf7338d990, parent_tid=0x7fbf7338d990, exit_signal=0, stack=0x7fbf7336d000, stack_size=0x20300, tls=0x7fbf7338d6c0} [pid 5049] <... mprotect resumed>) = 0 [pid 5047] mprotect(0x7fbf7336e000, 131072, PROT_READ|PROT_WRITE [pid 5054] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5051] <... futex resumed>) = 0 [pid 5049] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5047] <... mprotect resumed>) = 0 [pid 5046] <... clone3 resumed> => {parent_tid=[5060]}, 88) = 5060 [pid 5055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5051] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5049] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5047] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5046] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5060 attached [pid 5047] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5046] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] rseq(0x7fbf7338dfe0, 0x20, 0, 0x53053053 [pid 5056] <... mount resumed>) = 0 [pid 5047] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf7338d990, parent_tid=0x7fbf7338d990, exit_signal=0, stack=0x7fbf7336d000, stack_size=0x20300, tls=0x7fbf7338d6c0} [pid 5046] futex(0x7fbf7347f6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5061 attached [pid 5060] <... rseq resumed>) = 0 [pid 5056] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5049] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf7338d990, parent_tid=0x7fbf7338d990, exit_signal=0, stack=0x7fbf7336d000, stack_size=0x20300, tls=0x7fbf7338d6c0} [pid 5055] creat("./bus", 000 [pid 5046] <... futex resumed>) = 0 [pid 5052] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5061] rseq(0x7fbf7338dfe0, 0x20, 0, 0x53053053 [pid 5060] set_robust_list(0x7fbf7338d9a0, 24 [pid 5056] <... openat resumed>) = 3 [pid 5047] <... clone3 resumed> => {parent_tid=[5061]}, 88) = 5061 [pid 5046] futex(0x7fbf7347f6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... rseq resumed>) = 0 [pid 5060] <... set_robust_list resumed>) = 0 [pid 5056] chdir("./file0" [pid 5047] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] set_robust_list(0x7fbf7338d9a0, 24 [pid 5060] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] <... chdir resumed>) = 0 [pid 5055] <... creat resumed>) = -1 EROFS (Read-only file system) [pid 5052] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] <... set_robust_list resumed>) = 0 [pid 5060] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] ioctl(4, LOOP_CLR_FD [pid 5055] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] <... futex resumed>) = 0 [pid 5047] futex(0x7fbf7347f6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5062 attached [ 113.167309][ T5052] ERROR: (device loop5): diRead: i_ino != di_number [ 113.167309][ T5052] [ 113.185050][ T5050] ERROR: (device loop4): diRead: i_ino != di_number [ 113.185050][ T5050] [ 113.193931][ T5054] ERROR: (device loop2): remounting filesystem as read-only [ 113.206121][ T5052] ERROR: (device loop5): remounting filesystem as read-only [pid 5061] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] creat("./bus", 000 [pid 5056] <... ioctl resumed>) = 0 [pid 5055] <... futex resumed>) = 1 [pid 5052] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5051] <... futex resumed>) = 0 [pid 5049] <... clone3 resumed> => {parent_tid=[5062]}, 88) = 5062 [pid 5062] rseq(0x7fbf7338dfe0, 0x20, 0, 0x53053053 [pid 5061] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... creat resumed>) = -1 EROFS (Read-only file system) [pid 5055] ftruncate(-1, 2048 [pid 5051] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5049] rt_sigprocmask(SIG_SETMASK, [], [pid 5047] <... futex resumed>) = 0 [pid 5045] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5062] <... rseq resumed>) = 0 [pid 5062] set_robust_list(0x7fbf7338d9a0, 24) = 0 [pid 5062] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5062] futex(0x7fbf7347f6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] close(4 [pid 5061] creat("./bus", 000 [pid 5060] <... futex resumed>) = 1 [pid 5056] <... close resumed>) = 0 [pid 5047] futex(0x7fbf7347f6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] <... futex resumed>) = 0 [pid 5060] futex(0x7fbf7347f6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... futex resumed>) = 1 [pid 5048] <... futex resumed>) = 0 [pid 5046] <... futex resumed>) = 1 [pid 5048] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... creat resumed>) = -1 EROFS (Read-only file system) [pid 5056] open(".", O_RDONLY [pid 5048] <... futex resumed>) = 0 [pid 5061] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... open resumed>) = 4 [pid 5048] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5053] <... futex resumed>) = 0 [pid 5061] <... futex resumed>) = 1 [pid 5056] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5055] <... ftruncate resumed>) = -1 EBADF (Bad file descriptor) [pid 5051] <... futex resumed>) = 0 [pid 5050] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5049] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5047] <... futex resumed>) = 0 [pid 5053] ftruncate(-1, 2048 [pid 5045] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] futex(0x7fbf7347f6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] <... futex resumed>) = 0 [pid 5055] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] <... ftruncate resumed>) = -1 EBADF (Bad file descriptor) [pid 5051] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5049] futex(0x7fbf7347f6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... futex resumed>) = 0 [pid 5062] <... futex resumed>) = 0 [pid 5056] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5055] <... futex resumed>) = 0 [pid 5053] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] <... futex resumed>) = 0 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5048] <... futex resumed>) = 0 [pid 5049] <... futex resumed>) = 1 [pid 5047] <... futex resumed>) = 1 [pid 5045] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5062] creat("./bus", 000 [pid 5055] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5053] <... futex resumed>) = 1 [pid 5051] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5049] futex(0x7fbf7347f6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5053] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5052] ftruncate(-1, 2048 [pid 5051] <... futex resumed>) = 0 [pid 5050] <... futex resumed>) = 0 [pid 5045] <... mmap resumed>) = 0x7fbf7336d000 [pid 5055] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511 [pid 5052] <... ftruncate resumed>) = -1 EBADF (Bad file descriptor) [pid 5051] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] mprotect(0x7fbf7336e000, 131072, PROT_READ|PROT_WRITE [pid 5062] <... creat resumed>) = -1 EROFS (Read-only file system) [pid 5055] <... open resumed>) = -1 EROFS (Read-only file system) [pid 5052] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5047] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... mprotect resumed>) = 0 [pid 5046] <... futex resumed>) = 0 [pid 5062] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5055] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] <... futex resumed>) = 0 [pid 5047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5046] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 1 [pid 5055] <... futex resumed>) = 1 [pid 5053] <... futex resumed>) = 0 [pid 5052] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5051] <... futex resumed>) = 0 [pid 5049] <... futex resumed>) = 0 [pid 5047] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5046] <... futex resumed>) = 1 [pid 5062] futex(0x7fbf7347f6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5055] sendfile(-1, -1, NULL, 145139829833722 [pid 5053] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511 [pid 5052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5051] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5049] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] <... futex resumed>) = 0 [pid 5045] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf7338d990, parent_tid=0x7fbf7338d990, exit_signal=0, stack=0x7fbf7336d000, stack_size=0x20300, tls=0x7fbf7338d6c0} [pid 5046] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5063 attached [pid 5055] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5054] <... futex resumed>) = 0 [pid 5053] <... open resumed>) = -1 EROFS (Read-only file system) [pid 5052] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511 [pid 5051] <... futex resumed>) = 0 [pid 5049] <... futex resumed>) = 1 [ 113.239030][ T5050] ERROR: (device loop4): remounting filesystem as read-only [ 113.254112][ T5056] ERROR: (device loop0): diRead: i_ino != di_number [ 113.254112][ T5056] [pid 5047] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] rseq(0x7fbf7338dfe0, 0x20, 0, 0x53053053 [pid 5055] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] ftruncate(-1, 2048 [pid 5053] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] <... open resumed>) = -1 EROFS (Read-only file system) [pid 5051] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5049] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... clone3 resumed> => {parent_tid=[5063]}, 88) = 5063 [pid 5055] <... futex resumed>) = 0 [pid 5053] <... futex resumed>) = 1 [pid 5052] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] rt_sigprocmask(SIG_SETMASK, [], [pid 5046] <... futex resumed>) = 0 [pid 5063] <... rseq resumed>) = 0 [pid 5055] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5053] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5052] <... futex resumed>) = 1 [pid 5051] exit_group(0 [pid 5047] <... futex resumed>) = 0 [pid 5045] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5046] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] set_robust_list(0x7fbf7338d9a0, 24 [pid 5055] <... futex resumed>) = ? [pid 5054] <... ftruncate resumed>) = -1 EBADF (Bad file descriptor) [pid 5053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5051] <... exit_group resumed>) = ? [pid 5047] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] futex(0x7fbf7347f6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = 0 [pid 5063] <... set_robust_list resumed>) = 0 [pid 5055] +++ exited with 0 +++ [pid 5054] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] <... futex resumed>) = 0 [pid 5046] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5054] <... futex resumed>) = 1 [pid 5047] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5054] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] <... futex resumed>) = 0 [pid 5045] <... futex resumed>) = 0 [pid 5063] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5049] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] <... futex resumed>) = 0 [pid 5051] +++ exited with 0 +++ [pid 5049] <... futex resumed>) = 1 [pid 5045] futex(0x7fbf7347f6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5053] sendfile(-1, -1, NULL, 145139829833722 [pid 5063] creat("./bus", 000 [pid 5056] <... futex resumed>) = 1 [pid 5054] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511 [pid 5053] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5052] sendfile(-1, -1, NULL, 145139829833722 [pid 5048] <... futex resumed>) = 0 [pid 5049] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] <... creat resumed>) = -1 EROFS (Read-only file system) [pid 5056] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5054] <... open resumed>) = -1 EROFS (Read-only file system) [pid 5053] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5048] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5051, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=52 /* 0.52 s */} --- [pid 5063] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5054] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] <... futex resumed>) = 1 [pid 5052] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] <... futex resumed>) = 0 [pid 5046] <... futex resumed>) = 0 [pid 5040] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... futex resumed>) = 1 [pid 5056] creat("./bus", 000 [pid 5054] <... futex resumed>) = 1 [pid 5053] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5052] <... futex resumed>) = 1 [pid 5048] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5049] <... futex resumed>) = 0 [pid 5047] <... futex resumed>) = 0 [pid 5045] <... futex resumed>) = 0 [pid 5046] exit_group(0 [pid 5040] <... restart_syscall resumed>) = 0 [pid 5063] futex(0x7fbf7347f6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... futex resumed>) = ? [pid 5056] <... creat resumed>) = -1 EROFS (Read-only file system) [pid 5054] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5053] <... futex resumed>) = ? [pid 5052] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5049] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] exit_group(0 [pid 5045] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... exit_group resumed>) = ? [pid 5061] <... futex resumed>) = ? [pid 5060] +++ exited with 0 +++ [pid 5056] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5053] +++ exited with 0 +++ [pid 5052] <... futex resumed>) = ? [pid 5050] <... futex resumed>) = 0 [pid 5049] <... futex resumed>) = 0 [pid 5047] <... exit_group resumed>) = ? [pid 5045] <... futex resumed>) = 1 [pid 5061] +++ exited with 0 +++ [pid 5056] <... futex resumed>) = 1 [pid 5054] sendfile(-1, -1, NULL, 145139829833722 [pid 5052] +++ exited with 0 +++ [pid 5050] ftruncate(-1, 2048 [pid 5048] <... futex resumed>) = 0 [pid 5049] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5047] +++ exited with 0 +++ [pid 5045] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5046] +++ exited with 0 +++ [pid 5056] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5054] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5050] <... ftruncate resumed>) = -1 EBADF (Bad file descriptor) [pid 5048] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5047, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=42 /* 0.42 s */} --- [pid 5054] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] <... futex resumed>) = 0 [pid 5054] <... futex resumed>) = 1 [pid 5050] <... futex resumed>) = 1 [pid 5048] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5049] <... futex resumed>) = 0 [pid 5045] <... futex resumed>) = 0 [pid 5056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5054] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5050] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511 [pid 5049] exit_group(0 [pid 5045] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5046, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=41 /* 0.41 s */} --- [pid 5056] ftruncate(-1, 2048 [pid 5050] <... open resumed>) = -1 EROFS (Read-only file system) [pid 5045] <... futex resumed>) = 0 [pid 5062] <... futex resumed>) = ? [pid 5054] <... futex resumed>) = ? [pid 5049] <... exit_group resumed>) = ? [pid 5062] +++ exited with 0 +++ [pid 5056] <... ftruncate resumed>) = -1 EBADF (Bad file descriptor) [pid 5054] +++ exited with 0 +++ [pid 5050] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5042] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... futex resumed>) = 1 [pid 5048] <... futex resumed>) = 0 [ 113.284020][ T5056] ERROR: (device loop0): remounting filesystem as read-only [pid 5044] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5042] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511 [pid 5050] <... futex resumed>) = 0 [pid 5048] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5049] +++ exited with 0 +++ [pid 5045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5044] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5042] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5040] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... open resumed>) = -1 EROFS (Read-only file system) [pid 5050] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5048] <... futex resumed>) = 0 [pid 5045] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] <... openat resumed>) = 3 [pid 5042] <... openat resumed>) = 3 [pid 5041] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5049, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 5040] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5048] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... futex resumed>) = 0 [pid 5042] newfstatat(3, "", [pid 5040] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] <... futex resumed>) = 0 [pid 5050] sendfile(-1, -1, NULL, 145139829833722 [pid 5048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5045] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5044] newfstatat(3, "", [pid 5042] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5050] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5048] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5042] getdents64(3, [pid 5040] <... openat resumed>) = 3 [pid 5056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5050] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] <... futex resumed>) = 0 [pid 5044] getdents64(3, [pid 5056] sendfile(-1, -1, NULL, 145139829833722 [pid 5050] <... futex resumed>) = 1 [pid 5048] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... futex resumed>) = 0 [pid 5056] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5050] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5045] exit_group(0 [pid 5041] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5040] newfstatat(3, "", [pid 5063] <... futex resumed>) = ? [pid 5056] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = ? [pid 5045] <... exit_group resumed>) = ? [pid 5044] <... getdents64 resumed>0x555556dd9730 /* 4 entries */, 32768) = 112 [pid 5042] <... getdents64 resumed>0x555556dd9730 /* 4 entries */, 32768) = 112 [pid 5041] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5040] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] +++ exited with 0 +++ [pid 5056] <... futex resumed>) = 1 [pid 5048] <... futex resumed>) = 0 [pid 5041] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5050] +++ exited with 0 +++ [pid 5048] exit_group(0 [pid 5045] +++ exited with 0 +++ [pid 5044] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5042] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5041] <... openat resumed>) = 3 [pid 5040] getdents64(3, [pid 5048] <... exit_group resumed>) = ? [pid 5044] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5043] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5045, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=50 /* 0.50 s */} --- [pid 5042] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5041] newfstatat(3, "", [pid 5040] <... getdents64 resumed>0x555556dd9730 /* 4 entries */, 32768) = 112 [pid 5041] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5040] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5042] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5041] getdents64(3, [pid 5056] +++ exited with 0 +++ [pid 5048] +++ exited with 0 +++ [pid 5044] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5040] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] unlink("./0/binderfs" [pid 5042] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5041] <... getdents64 resumed>0x555556dd9730 /* 4 entries */, 32768) = 112 [pid 5040] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5039] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5048, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=44 /* 0.44 s */} --- [pid 5043] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5041] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5043] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5041] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5043] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5041] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5044] <... unlink resumed>) = 0 [pid 5043] <... openat resumed>) = 3 [pid 5042] unlink("./0/binderfs" [pid 5041] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5040] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5039] restart_syscall(<... resuming interrupted clone ...> [pid 5043] newfstatat(3, "", [pid 5041] unlink("./0/binderfs" [pid 5044] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5043] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5042] <... unlink resumed>) = 0 [pid 5041] <... unlink resumed>) = 0 [pid 5040] unlink("./0/binderfs" [pid 5039] <... restart_syscall resumed>) = 0 [pid 5043] getdents64(3, [pid 5042] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5041] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5040] <... unlink resumed>) = 0 [pid 5043] <... getdents64 resumed>0x555556dd9730 /* 4 entries */, 32768) = 112 [pid 5043] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5043] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5043] unlink("./0/binderfs") = 0 [pid 5043] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5039] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5040] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5039] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5039] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5039] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5039] getdents64(3, 0x555556dd9730 /* 4 entries */, 32768) = 112 [pid 5039] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5039] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5039] unlink("./0/binderfs") = 0 [pid 5039] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5043] <... umount2 resumed>) = 0 [pid 5040] <... umount2 resumed>) = 0 [pid 5042] <... umount2 resumed>) = 0 [ 113.416525][ T27] audit: type=1400 audit(1697040774.213:93): avc: denied { unmount } for pid=5044 comm="syz-executor400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [pid 5044] <... umount2 resumed>) = 0 [pid 5040] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5043] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5043] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5042] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5042] newfstatat(AT_FDCWD, "./0/file0", [pid 5043] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5042] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5040] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5043] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5040] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5043] newfstatat(4, "", [pid 5040] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] newfstatat(AT_FDCWD, "./0/file0", [pid 5043] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5040] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5044] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5043] getdents64(4, [pid 5042] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5040] <... openat resumed>) = 4 [pid 5044] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5043] <... getdents64 resumed>0x555556de1770 /* 2 entries */, 32768) = 48 [pid 5042] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5040] newfstatat(4, "", [pid 5044] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5043] getdents64(4, [pid 5042] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5040] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5044] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5043] <... getdents64 resumed>0x555556de1770 /* 0 entries */, 32768) = 0 [pid 5042] <... openat resumed>) = 4 [pid 5044] <... openat resumed>) = 4 [pid 5043] close(4 [pid 5042] newfstatat(4, "", [pid 5040] getdents64(4, [pid 5039] <... umount2 resumed>) = 0 [pid 5044] newfstatat(4, "", [pid 5043] <... close resumed>) = 0 [pid 5042] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5040] <... getdents64 resumed>0x555556de1770 /* 2 entries */, 32768) = 48 [pid 5039] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5040] getdents64(4, 0x555556de1770 /* 0 entries */, 32768) = 0 [pid 5039] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5040] close(4 [pid 5042] getdents64(4, [pid 5040] <... close resumed>) = 0 [pid 5039] newfstatat(AT_FDCWD, "./0/file0", [pid 5043] rmdir("./0/file0" [pid 5044] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5043] <... rmdir resumed>) = 0 [pid 5042] <... getdents64 resumed>0x555556de1770 /* 2 entries */, 32768) = 48 [pid 5042] getdents64(4, [pid 5044] getdents64(4, [pid 5042] <... getdents64 resumed>0x555556de1770 /* 0 entries */, 32768) = 0 [pid 5044] <... getdents64 resumed>0x555556de1770 /* 2 entries */, 32768) = 48 [pid 5042] close(4 [pid 5044] getdents64(4, [pid 5042] <... close resumed>) = 0 [pid 5040] rmdir("./0/file0" [pid 5039] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5044] <... getdents64 resumed>0x555556de1770 /* 0 entries */, 32768) = 0 [pid 5042] rmdir("./0/file0") = 0 [pid 5044] close(4) = 0 [pid 5044] rmdir("./0/file0") = 0 [pid 5044] getdents64(3, [pid 5040] <... rmdir resumed>) = 0 [pid 5039] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] <... getdents64 resumed>0x555556dd9730 /* 0 entries */, 32768) = 0 [pid 5039] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] close(3) = 0 [pid 5044] rmdir("./0" [pid 5043] getdents64(3, 0x555556dd9730 /* 0 entries */, 32768) = 0 [pid 5042] getdents64(3, [pid 5044] <... rmdir resumed>) = 0 [pid 5043] close(3 [pid 5042] <... getdents64 resumed>0x555556dd9730 /* 0 entries */, 32768) = 0 [pid 5043] <... close resumed>) = 0 [pid 5042] close(3 [pid 5043] rmdir("./0" [pid 5042] <... close resumed>) = 0 [pid 5043] <... rmdir resumed>) = 0 [pid 5042] rmdir("./0" [pid 5040] getdents64(3, [pid 5039] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5042] <... rmdir resumed>) = 0 [pid 5039] <... openat resumed>) = 4 [pid 5040] <... getdents64 resumed>0x555556dd9730 /* 0 entries */, 32768) = 0 [pid 5043] mkdir("./1", 0777 [pid 5040] close(3 [pid 5039] newfstatat(4, "", [pid 5040] <... close resumed>) = 0 [pid 5044] mkdir("./1", 0777 [pid 5039] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5040] rmdir("./0" [pid 5039] getdents64(4, [pid 5043] <... mkdir resumed>) = 0 [pid 5040] <... rmdir resumed>) = 0 [pid 5039] <... getdents64 resumed>0x555556de1770 /* 2 entries */, 32768) = 48 [pid 5040] mkdir("./1", 0777 [pid 5039] getdents64(4, [pid 5044] <... mkdir resumed>) = 0 [pid 5040] <... mkdir resumed>) = 0 [pid 5039] <... getdents64 resumed>0x555556de1770 /* 0 entries */, 32768) = 0 [pid 5042] mkdir("./1", 0777 [pid 5040] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5039] close(4 [pid 5040] <... openat resumed>) = 3 [pid 5039] <... close resumed>) = 0 [pid 5040] ioctl(3, LOOP_CLR_FD [pid 5039] rmdir("./0/file0" [pid 5042] <... mkdir resumed>) = 0 [pid 5039] <... rmdir resumed>) = 0 [pid 5044] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5039] getdents64(3, [pid 5043] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5044] ioctl(3, LOOP_CLR_FD [pid 5043] <... openat resumed>) = 3 [pid 5039] <... getdents64 resumed>0x555556dd9730 /* 0 entries */, 32768) = 0 [pid 5044] <... ioctl resumed>) = 0 [pid 5043] ioctl(3, LOOP_CLR_FD [pid 5039] close(3 [pid 5043] <... ioctl resumed>) = 0 [pid 5042] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5044] close(3 [pid 5043] close(3 [pid 5042] <... openat resumed>) = 3 [pid 5039] <... close resumed>) = 0 [pid 5044] <... close resumed>) = 0 [pid 5043] <... close resumed>) = 0 [pid 5042] ioctl(3, LOOP_CLR_FD [pid 5039] rmdir("./0" [pid 5044] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5043] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5042] <... ioctl resumed>) = 0 [pid 5042] close(3 [pid 5039] <... rmdir resumed>) = 0 [pid 5042] <... close resumed>) = 0 [pid 5039] mkdir("./1", 0777 [pid 5042] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5039] <... mkdir resumed>) = 0 [pid 5040] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5040] close(3 [pid 5044] <... clone resumed>, child_tidptr=0x555556dd8690) = 5067 [pid 5043] <... clone resumed>, child_tidptr=0x555556dd8690) = 5066 [pid 5040] <... close resumed>) = 0 ./strace-static-x86_64: Process 5067 attached [pid 5067] set_robust_list(0x555556dd86a0, 24 [pid 5040] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5066 attached [pid 5066] set_robust_list(0x555556dd86a0, 24 [pid 5042] <... clone resumed>, child_tidptr=0x555556dd8690) = 5068 ./strace-static-x86_64: Process 5068 attached [pid 5066] <... set_robust_list resumed>) = 0 [pid 5067] chdir("./1") = 0 [pid 5040] <... clone resumed>, child_tidptr=0x555556dd8690) = 5069 [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] set_robust_list(0x555556dd86a0, 24 [pid 5066] chdir("./1" [pid 5067] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5069 attached [pid 5066] <... chdir resumed>) = 0 [pid 5067] setpgid(0, 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5039] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5069] set_robust_list(0x555556dd86a0, 24 [pid 5067] <... setpgid resumed>) = 0 [pid 5069] <... set_robust_list resumed>) = 0 [pid 5068] <... set_robust_list resumed>) = 0 [pid 5066] setpgid(0, 0 [pid 5039] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] chdir("./1" [pid 5068] chdir("./1" [pid 5066] <... setpgid resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5039] ioctl(3, LOOP_CLR_FD [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] write(3, "1000", 4) = 4 [pid 5066] close(3) = 0 [pid 5066] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, NULL, 8) = 0 [pid 5066] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbf7338e000 [pid 5066] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5066] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5069] <... chdir resumed>) = 0 [pid 5068] <... chdir resumed>) = 0 [pid 5067] write(3, "1000", 4 [pid 5039] <... ioctl resumed>) = 0 [pid 5067] <... write resumed>) = 4 [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] close(3 [pid 5039] close(3 [pid 5067] <... close resumed>) = 0 [pid 5039] <... close resumed>) = 0 [pid 5067] symlink("/dev/binderfs", "./binderfs" [pid 5039] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... prctl resumed>) = 0 [pid 5068] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5070 attached [pid 5069] setpgid(0, 0 [pid 5068] setpgid(0, 0 [pid 5066] <... clone3 resumed> => {parent_tid=[5070]}, 88) = 5070 [pid 5067] <... symlink resumed>) = 0 [pid 5068] <... setpgid resumed>) = 0 [pid 5067] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5069] <... setpgid resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... futex resumed>) = 0 [pid 5070] <... rseq resumed>) = 0 [pid 5066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] set_robust_list(0x7fbf733ae9a0, 24 [pid 5068] <... openat resumed>) = 3 [pid 5066] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, [pid 5039] <... clone resumed>, child_tidptr=0x555556dd8690) = 5071 [pid 5070] <... set_robust_list resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] write(3, "1000", 4 [pid 5066] <... futex resumed>) = 0 [pid 5067] <... rt_sigaction resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5071 attached [pid 5070] rt_sigprocmask(SIG_SETMASK, [], [pid 5071] set_robust_list(0x555556dd86a0, 24 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... write resumed>) = 4 [pid 5067] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5066] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] close(3 [pid 5067] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] write(3, "1000", 4 [pid 5071] <... set_robust_list resumed>) = 0 [pid 5070] memfd_create("syzkaller", 0 [pid 5071] chdir("./1" [pid 5069] <... write resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] <... chdir resumed>) = 0 [pid 5068] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... mmap resumed>) = 0x7fbf7338e000 [pid 5070] <... memfd_create resumed>) = 3 [pid 5068] <... symlink resumed>) = 0 [pid 5067] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE [pid 5069] close(3 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... mprotect resumed>) = 0 [pid 5071] <... prctl resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5068] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... mmap resumed>) = 0x7fbf6af8e000 [pid 5069] symlink("/dev/binderfs", "./binderfs" [pid 5067] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5071] setpgid(0, 0 [pid 5069] <... symlink resumed>) = 0 [pid 5068] <... futex resumed>) = 0 [pid 5071] <... setpgid resumed>) = 0 [pid 5069] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... futex resumed>) = 0 [pid 5068] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5067] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, [pid 5068] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5069] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5068] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5071] <... openat resumed>) = 3 [pid 5068] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5072 attached [pid 5071] write(3, "1000", 4 [pid 5069] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5068] <... mmap resumed>) = 0x7fbf7338e000 [pid 5072] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5071] <... write resumed>) = 4 [pid 5069] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE [pid 5067] <... clone3 resumed> => {parent_tid=[5072]}, 88) = 5072 [pid 5072] <... rseq resumed>) = 0 [pid 5071] close(3 [pid 5069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... mprotect resumed>) = 0 [pid 5067] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5072] set_robust_list(0x7fbf733ae9a0, 24 [pid 5071] <... close resumed>) = 0 [pid 5069] <... mmap resumed>) = 0x7fbf7338e000 [pid 5068] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... set_robust_list resumed>) = 0 [pid 5071] symlink("/dev/binderfs", "./binderfs" [pid 5069] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE [pid 5068] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] <... futex resumed>) = 0 [pid 5072] rt_sigprocmask(SIG_SETMASK, [], [pid 5071] <... symlink resumed>) = 0 [pid 5069] <... mprotect resumed>) = 0 [pid 5068] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5067] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5073 attached [pid 5072] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] <... clone3 resumed> => {parent_tid=[5073]}, 88) = 5073 [pid 5073] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5072] memfd_create("syzkaller", 0 [pid 5071] <... futex resumed>) = 0 [pid 5069] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] rt_sigprocmask(SIG_SETMASK, [], [pid 5071] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, [pid 5069] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5073] <... rseq resumed>) = 0 [pid 5068] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] set_robust_list(0x7fbf733ae9a0, 24 [pid 5068] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... set_robust_list resumed>) = 0 [pid 5071] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5068] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5074 attached [pid 5073] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] <... memfd_create resumed>) = 3 [pid 5071] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5068] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5073] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... clone3 resumed> => {parent_tid=[5074]}, 88) = 5074 [pid 5074] <... rseq resumed>) = 0 [pid 5073] memfd_create("syzkaller", 0 [pid 5072] <... mmap resumed>) = 0x7fbf6af8e000 [pid 5071] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5071] <... mmap resumed>) = 0x7fbf7338e000 [pid 5069] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] set_robust_list(0x7fbf733ae9a0, 24) = 0 [pid 5073] <... memfd_create resumed>) = 3 [pid 5071] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... futex resumed>) = 0 [pid 5071] <... mprotect resumed>) = 0 [pid 5071] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5071] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5074] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... clone3 resumed> => {parent_tid=[5075]}, 88) = 5075 [pid 5069] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5075 attached [pid 5073] <... mmap resumed>) = 0x7fbf6af8e000 [pid 5071] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5071] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... rseq resumed>) = 0 [pid 5071] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] set_robust_list(0x7fbf733ae9a0, 24 [pid 5071] <... futex resumed>) = 0 [pid 5075] <... set_robust_list resumed>) = 0 [pid 5071] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] memfd_create("syzkaller", 0 [pid 5075] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] memfd_create("syzkaller", 0) = 3 [pid 5075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbf6af8e000 [pid 5074] <... memfd_create resumed>) = 3 [pid 5074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbf6af8e000 [pid 5070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5041] <... umount2 resumed>) = 0 [pid 5041] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5041] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5041] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5041] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5041] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5041] getdents64(4, 0x555556de1770 /* 2 entries */, 32768) = 48 [pid 5041] getdents64(4, 0x555556de1770 /* 0 entries */, 32768) = 0 [pid 5041] close(4) = 0 [pid 5041] rmdir("./0/file0") = 0 [pid 5041] getdents64(3, 0x555556dd9730 /* 0 entries */, 32768) = 0 [pid 5041] close(3) = 0 [pid 5041] rmdir("./0") = 0 [pid 5041] mkdir("./1", 0777) = 0 [pid 5041] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5041] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5041] close(3) = 0 [pid 5075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5041] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556dd8690) = 5076 ./strace-static-x86_64: Process 5076 attached [pid 5076] set_robust_list(0x555556dd86a0, 24) = 0 [pid 5073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5076] chdir("./1") = 0 [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] setpgid(0, 0) = 0 [pid 5076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "1000", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, [pid 5074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5076] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5076] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbf7338e000 [pid 5076] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5076] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5076] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0}./strace-static-x86_64: Process 5077 attached [pid 5077] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5076] <... clone3 resumed> => {parent_tid=[5077]}, 88) = 5077 [pid 5076] rt_sigprocmask(SIG_SETMASK, [], [pid 5077] <... rseq resumed>) = 0 [pid 5076] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5077] set_robust_list(0x7fbf733ae9a0, 24 [pid 5076] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... set_robust_list resumed>) = 0 [pid 5076] <... futex resumed>) = 0 [pid 5077] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5077] memfd_create("syzkaller", 0) = 3 [pid 5077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbf6af8e000 [pid 5077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5070] <... write resumed>) = 16777216 [pid 5070] munmap(0x7fbf6af8e000, 138412032) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5070] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... write resumed>) = 16777216 [pid 5072] munmap(0x7fbf6af8e000, 138412032 [pid 5075] <... write resumed>) = 16777216 [pid 5075] munmap(0x7fbf6af8e000, 138412032 [pid 5070] <... ioctl resumed>) = 0 [pid 5070] close(3) = 0 [pid 5070] mkdir("./file0", 0777 [pid 5073] <... write resumed>) = 16777216 [pid 5070] <... mkdir resumed>) = 0 [pid 5070] mount("/dev/loop4", "./file0", "jfs", MS_REC, "" [pid 5073] munmap(0x7fbf6af8e000, 138412032 [pid 5072] <... munmap resumed>) = 0 [ 115.773720][ T5070] loop4: detected capacity change from 0 to 32768 [pid 5072] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5072] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5072] close(3) = 0 [pid 5072] mkdir("./file0", 0777 [pid 5075] <... munmap resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5072] mount("/dev/loop5", "./file0", "jfs", MS_REC, "" [pid 5074] <... write resumed>) = 16777216 [pid 5073] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... openat resumed>) = 4 [pid 5074] munmap(0x7fbf6af8e000, 138412032 [pid 5073] <... openat resumed>) = 4 [pid 5075] ioctl(4, LOOP_SET_FD, 3 [pid 5073] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... mount resumed>) = 0 [ 115.841862][ T5072] loop5: detected capacity change from 0 to 32768 [ 115.879037][ T5075] loop0: detected capacity change from 0 to 32768 [pid 5073] <... ioctl resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5070] chdir("./file0") = 0 [pid 5073] close(3 [pid 5070] ioctl(4, LOOP_CLR_FD [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5070] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 5073] mkdir("./file0", 0777 [pid 5070] close(4 [pid 5075] <... close resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5075] mkdir("./file0", 0777 [pid 5074] <... munmap resumed>) = 0 [pid 5073] mount("/dev/loop3", "./file0", "jfs", MS_REC, "" [pid 5070] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5066] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] open(".", O_RDONLY [pid 5073] <... mount resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] chdir("./file0" [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... chdir resumed>) = 0 [pid 5070] <... open resumed>) = 4 [pid 5075] mount("/dev/loop0", "./file0", "jfs", MS_REC, "" [pid 5074] <... openat resumed>) = 4 [pid 5073] ioctl(4, LOOP_CLR_FD [pid 5070] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [ 115.888358][ T5073] loop3: detected capacity change from 0 to 32768 [pid 5074] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] <... mount resumed>) = 0 [pid 5070] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5066] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] close(4 [pid 5070] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 5073] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5068] <... futex resumed>) = 0 [pid 5073] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] open(".", O_RDONLY [pid 5068] <... futex resumed>) = 0 [pid 5075] <... mount resumed>) = 0 [pid 5068] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... open resumed>) = 4 [pid 5072] <... openat resumed>) = 3 [pid 5072] chdir("./file0") = 0 [pid 5075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5073] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] ioctl(4, LOOP_CLR_FD [pid 5075] <... openat resumed>) = 3 [pid 5073] <... futex resumed>) = 1 [pid 5072] <... ioctl resumed>) = 0 [pid 5068] <... futex resumed>) = 0 [pid 5075] chdir("./file0" [pid 5074] <... ioctl resumed>) = 0 [pid 5073] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] close(4 [pid 5068] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... chdir resumed>) = 0 [pid 5074] close(3 [pid 5073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] <... futex resumed>) = 0 [pid 5075] ioctl(4, LOOP_CLR_FD [pid 5074] <... close resumed>) = 0 [pid 5073] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5068] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] mkdir("./file0", 0777 [pid 5072] <... close resumed>) = 0 [pid 5072] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5067] <... futex resumed>) = 0 [pid 5067] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... mkdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] mount("/dev/loop1", "./file0", "jfs", MS_REC, "" [pid 5072] open(".", O_RDONLY) = 4 [pid 5072] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5067] <... futex resumed>) = 0 [pid 5072] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... futex resumed>) = 0 [pid 5067] <... futex resumed>) = 1 [ 115.943887][ T5074] loop1: detected capacity change from 0 to 32768 [ 115.953473][ T5070] ERROR: (device loop4): diRead: i_ino != di_number [ 115.953473][ T5070] [ 115.966537][ T5073] ERROR: (device loop3): diRead: i_ino != di_number [ 115.966537][ T5073] [pid 5072] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5067] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] close(4 [pid 5066] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] <... close resumed>) = 0 [pid 5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... mmap resumed>) = 0x7fbf7336d000 [pid 5075] <... futex resumed>) = 1 [pid 5071] <... futex resumed>) = 0 [pid 5066] mprotect(0x7fbf7336e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5066] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf7338d990, parent_tid=0x7fbf7338d990, exit_signal=0, stack=0x7fbf7336d000, stack_size=0x20300, tls=0x7fbf7338d6c0} [pid 5075] open(".", O_RDONLY [pid 5071] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... clone3 resumed> => {parent_tid=[5078]}, 88) = 5078 ./strace-static-x86_64: Process 5078 attached [pid 5075] <... open resumed>) = 4 [pid 5071] <... futex resumed>) = 0 [pid 5068] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... futex resumed>) = 0 [pid 5066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5078] rseq(0x7fbf7338dfe0, 0x20, 0, 0x53053053 [pid 5075] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] futex(0x7fbf7347f6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... rseq resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 5078] set_robust_list(0x7fbf7338d9a0, 24 [pid 5075] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5074] <... mount resumed>) = 0 [pid 5073] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5071] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5068] <... mmap resumed>) = 0x7fbf7336d000 [pid 5066] futex(0x7fbf7347f6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... set_robust_list resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5071] <... futex resumed>) = 0 [pid 5070] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] mprotect(0x7fbf7336e000, 131072, PROT_READ|PROT_WRITE [pid 5078] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 115.989395][ T5072] ERROR: (device loop5): diRead: i_ino != di_number [ 115.989395][ T5072] [ 116.000492][ T5070] ERROR: (device loop4): remounting filesystem as read-only [ 116.022082][ T5073] ERROR: (device loop3): remounting filesystem as read-only [ 116.030009][ T5072] ERROR: (device loop5): remounting filesystem as read-only [pid 5078] creat("./bus", 000 [pid 5072] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5078] <... creat resumed>) = -1 EROFS (Read-only file system) [pid 5072] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... futex resumed>) = 0 [pid 5067] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... mprotect resumed>) = 0 [pid 5071] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = 1 [pid 5074] <... openat resumed>) = 3 [pid 5073] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] <... futex resumed>) = 0 [pid 5067] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 5067] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] futex(0x7fbf7347f6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] creat("./bus", 000) = -1 EROFS (Read-only file system) [pid 5075] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5074] chdir("./file0" [pid 5073] <... futex resumed>) = 0 [pid 5072] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] ftruncate(-1, 2048 [pid 5068] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... chdir resumed>) = 0 [pid 5073] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... futex resumed>) = 1 [pid 5070] <... ftruncate resumed>) = -1 EBADF (Bad file descriptor) [pid 5068] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf7338d990, parent_tid=0x7fbf7338d990, exit_signal=0, stack=0x7fbf7336d000, stack_size=0x20300, tls=0x7fbf7338d6c0} [pid 5067] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5079 attached [pid 5075] <... futex resumed>) = 1 [pid 5074] ioctl(4, LOOP_CLR_FD [pid 5072] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5071] <... futex resumed>) = 0 [pid 5070] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] rseq(0x7fbf7338dfe0, 0x20, 0, 0x53053053 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5071] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = 1 [pid 5068] <... clone3 resumed> => {parent_tid=[5079]}, 88) = 5079 [pid 5066] <... futex resumed>) = 0 [pid 5067] <... futex resumed>) = 0 [pid 5079] <... rseq resumed>) = 0 [pid 5075] creat("./bus", 000 [pid 5074] close(4 [pid 5071] <... futex resumed>) = 0 [pid 5070] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] set_robust_list(0x7fbf7338d9a0, 24 [pid 5074] <... close resumed>) = 0 [pid 5071] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5079] <... set_robust_list resumed>) = 0 [pid 5075] <... creat resumed>) = -1 EROFS (Read-only file system) [pid 5074] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511 [pid 5068] futex(0x7fbf7347f6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5075] <... futex resumed>) = 1 [pid 5071] <... futex resumed>) = 0 [pid 5070] <... open resumed>) = -1 EROFS (Read-only file system) [pid 5069] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] open(".", O_RDONLY [pid 5071] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... futex resumed>) = 0 [pid 5068] <... futex resumed>) = 0 [pid 5079] creat("./bus", 000 [pid 5075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5071] <... futex resumed>) = 0 [pid 5070] <... futex resumed>) = 0 [pid 5069] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] futex(0x7fbf7347f6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] ftruncate(-1, 2048 [pid 5074] <... open resumed>) = 4 [pid 5071] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] <... creat resumed>) = -1 EROFS (Read-only file system) [pid 5075] <... ftruncate resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5072] ftruncate(-1, 2048 [pid 5071] <... futex resumed>) = 0 [pid 5070] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 1 [pid 5067] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... futex resumed>) = 1 [pid 5075] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... ftruncate resumed>) = -1 EBADF (Bad file descriptor) [pid 5068] <... futex resumed>) = 0 [pid 5066] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] futex(0x7fbf7347f6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5071] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5075] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511 [pid 5073] <... futex resumed>) = 0 [pid 5072] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... futex resumed>) = 0 [pid 5068] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5075] <... open resumed>) = -1 EROFS (Read-only file system) [pid 5073] ftruncate(-1, 2048 [pid 5072] <... futex resumed>) = 1 [pid 5071] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = 0 [ 116.040195][ T5075] ERROR: (device loop0): diRead: i_ino != di_number [ 116.040195][ T5075] [ 116.058453][ T5075] ERROR: (device loop0): remounting filesystem as read-only [pid 5073] <... ftruncate resumed>) = -1 EBADF (Bad file descriptor) [pid 5072] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 1 [pid 5067] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] sendfile(-1, -1, NULL, 145139829833722 [pid 5066] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... futex resumed>) = 0 [pid 5073] <... futex resumed>) = 1 [pid 5072] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511 [pid 5070] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5068] <... futex resumed>) = 0 [pid 5067] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... futex resumed>) = 1 [pid 5074] <... futex resumed>) = 1 [pid 5073] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... open resumed>) = -1 EROFS (Read-only file system) [pid 5071] <... futex resumed>) = 0 [pid 5070] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... futex resumed>) = 0 [pid 5068] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = 1 [pid 5069] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 5075] sendfile(-1, -1, NULL, 145139829833722 [pid 5074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5073] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511 [pid 5072] <... futex resumed>) = 1 [pid 5071] <... futex resumed>) = 0 [pid 5070] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... futex resumed>) = 0 [pid 5068] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] exit_group(0 [pid 5067] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = ? [pid 5072] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5071] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... futex resumed>) = ? [pid 5069] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... exit_group resumed>) = ? [pid 5067] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] +++ exited with 0 +++ [pid 5074] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5072] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] +++ exited with 0 +++ [pid 5066] +++ exited with 0 +++ [pid 5067] <... futex resumed>) = 0 [pid 5072] sendfile(-1, -1, NULL, 145139829833722 [pid 5067] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=48 /* 0.48 s */} --- [pid 5075] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5073] <... open resumed>) = -1 EROFS (Read-only file system) [pid 5075] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... futex resumed>) = 1 [pid 5071] <... futex resumed>) = 0 [pid 5073] <... futex resumed>) = 1 [pid 5068] <... futex resumed>) = 0 [pid 5071] exit_group(0 [pid 5068] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] sendfile(-1, -1, NULL, 145139829833722 [pid 5071] <... exit_group resumed>) = ? [pid 5068] <... futex resumed>) = 0 [pid 5073] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5068] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5072] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5072] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... futex resumed>) = 0 [pid 5067] exit_group(0 [pid 5075] +++ exited with 0 +++ [pid 5073] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] +++ exited with 0 +++ [pid 5043] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... futex resumed>) = 1 [pid 5068] <... futex resumed>) = 0 [pid 5043] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5039] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=32 /* 0.32 s */} --- [pid 5073] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... futex resumed>) = ? [pid 5068] exit_group(0 [pid 5067] <... exit_group resumed>) = ? [pid 5043] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... futex resumed>) = ? [pid 5073] <... futex resumed>) = ? [pid 5072] +++ exited with 0 +++ [pid 5068] <... exit_group resumed>) = ? [pid 5067] +++ exited with 0 +++ [pid 5043] <... openat resumed>) = 3 [pid 5044] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5067, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=44 /* 0.44 s */} --- [pid 5043] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5043] getdents64(3, [pid 5044] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5043] <... getdents64 resumed>0x555556dd9730 /* 4 entries */, 32768) = 112 [pid 5044] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5043] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5043] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] <... openat resumed>) = 3 [pid 5043] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5073] +++ exited with 0 +++ [pid 5044] newfstatat(3, "", [pid 5043] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5039] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5043] unlink("./1/binderfs" [pid 5079] +++ exited with 0 +++ [pid 5068] +++ exited with 0 +++ [pid 5044] getdents64(3, [pid 5043] <... unlink resumed>) = 0 [pid 5039] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] <... getdents64 resumed>0x555556dd9730 /* 4 entries */, 32768) = 112 [pid 5043] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5039] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5044] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5042] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=39 /* 0.39 s */} --- [pid 5039] <... openat resumed>) = 3 [pid 5074] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5044] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5042] restart_syscall(<... resuming interrupted clone ...> [pid 5039] newfstatat(3, "", [pid 5074] <... futex resumed>) = 0 [pid 5069] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5042] <... restart_syscall resumed>) = 0 [pid 5039] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] creat("./bus", 000 [pid 5069] <... futex resumed>) = 0 [pid 5044] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5044] unlink("./1/binderfs" [pid 5039] getdents64(3, [pid 5044] <... unlink resumed>) = 0 [pid 5039] <... getdents64 resumed>0x555556dd9730 /* 4 entries */, 32768) = 112 [pid 5074] <... creat resumed>) = -1 EROFS (Read-only file system) [pid 5044] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5042] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5042] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5069] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... openat resumed>) = 3 [pid 5069] <... futex resumed>) = 0 [pid 5042] newfstatat(3, "", [pid 5069] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] ftruncate(-1, 2048 [pid 5042] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... ftruncate resumed>) = -1 EBADF (Bad file descriptor) [pid 5074] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5039] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511 [pid 5069] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] getdents64(3, [pid 5069] <... futex resumed>) = 0 [pid 5042] <... getdents64 resumed>0x555556dd9730 /* 4 entries */, 32768) = 112 [pid 5039] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... open resumed>) = -1 EROFS (Read-only file system) [pid 5069] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5039] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5074] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5039] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... futex resumed>) = 0 [pid 5069] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] sendfile(-1, -1, NULL, 145139829833722 [pid 5069] <... futex resumed>) = 0 [ 116.134021][ T5074] ERROR: (device loop1): diRead: i_ino != di_number [ 116.134021][ T5074] [ 116.158485][ T5074] ERROR: (device loop1): remounting filesystem as read-only [pid 5039] unlink("./1/binderfs" [pid 5074] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5069] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5039] <... unlink resumed>) = 0 [pid 5074] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5039] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] exit_group(0) = ? [pid 5077] <... write resumed>) = 16777216 [pid 5042] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5074] +++ exited with 0 +++ [pid 5069] +++ exited with 0 +++ [pid 5040] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=45 /* 0.45 s */} --- [pid 5040] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5042] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5040] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5042] unlink("./1/binderfs" [pid 5040] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5040] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5040] getdents64(3, 0x555556dd9730 /* 4 entries */, 32768) = 112 [pid 5042] <... unlink resumed>) = 0 [pid 5040] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] munmap(0x7fbf6af8e000, 138412032 [pid 5042] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5040] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5040] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5040] unlink("./1/binderfs") = 0 [pid 5040] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... munmap resumed>) = 0 [pid 5042] <... umount2 resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5042] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 4 [pid 5042] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] ioctl(4, LOOP_SET_FD, 3 [pid 5042] newfstatat(AT_FDCWD, "./1/file0", [pid 5077] <... ioctl resumed>) = 0 [pid 5042] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5042] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5042] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] <... close resumed>) = 0 [pid 5042] newfstatat(4, "", [pid 5077] mkdir("./file0", 0777 [pid 5042] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... mkdir resumed>) = 0 [ 116.320769][ T5077] loop2: detected capacity change from 0 to 32768 [pid 5042] getdents64(4, [pid 5077] mount("/dev/loop2", "./file0", "jfs", MS_REC, "" [pid 5042] <... getdents64 resumed>0x555556de1770 /* 2 entries */, 32768) = 48 [pid 5042] getdents64(4, 0x555556de1770 /* 0 entries */, 32768) = 0 [pid 5042] close(4) = 0 [pid 5042] rmdir("./1/file0") = 0 [pid 5042] getdents64(3, 0x555556dd9730 /* 0 entries */, 32768) = 0 [pid 5042] close(3) = 0 [pid 5042] rmdir("./1" [pid 5077] <... mount resumed>) = 0 [pid 5042] <... rmdir resumed>) = 0 [pid 5042] mkdir("./2", 0777 [pid 5077] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5042] <... mkdir resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5042] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] chdir("./file0" [pid 5042] <... openat resumed>) = 3 [pid 5077] <... chdir resumed>) = 0 [pid 5042] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] ioctl(4, LOOP_CLR_FD [pid 5042] close(3 [pid 5077] <... ioctl resumed>) = 0 [pid 5042] <... close resumed>) = 0 [pid 5042] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] close(4) = 0 ./strace-static-x86_64: Process 5080 attached [pid 5077] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... clone resumed>, child_tidptr=0x555556dd8690) = 5080 [pid 5080] set_robust_list(0x555556dd86a0, 24 [pid 5077] <... futex resumed>) = 1 [pid 5076] <... futex resumed>) = 0 [pid 5076] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... set_robust_list resumed>) = 0 [pid 5077] open(".", O_RDONLY [pid 5076] <... futex resumed>) = 0 [pid 5080] chdir("./2" [pid 5076] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... open resumed>) = 4 [pid 5080] <... chdir resumed>) = 0 [pid 5077] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5076] <... futex resumed>) = 0 [pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5076] <... futex resumed>) = 0 [pid 5076] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5080] <... prctl resumed>) = 0 [pid 5080] setpgid(0, 0 [pid 5077] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5080] <... setpgid resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5080] write(3, "1000", 4) = 4 [pid 5080] close(3) = 0 [pid 5077] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] symlink("/dev/binderfs", "./binderfs" [pid 5076] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5080] <... symlink resumed>) = 0 [pid 5077] creat("./bus", 000 [pid 5076] <... futex resumed>) = 0 [pid 5080] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] <... creat resumed>) = -1 EROFS (Read-only file system) [pid 5076] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, NULL, 8) = 0 [pid 5080] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 116.510503][ T5077] ERROR: (device loop2): diRead: i_ino != di_number [ 116.510503][ T5077] [ 116.529673][ T5077] ERROR: (device loop2): remounting filesystem as read-only [pid 5077] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... mmap resumed>) = 0x7fbf7338e000 [pid 5077] <... futex resumed>) = 1 [pid 5076] <... futex resumed>) = 0 [pid 5076] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE [pid 5077] ftruncate(-1, 2048 [pid 5080] <... mprotect resumed>) = 0 [pid 5077] <... ftruncate resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5077] <... futex resumed>) = 1 [pid 5076] <... futex resumed>) = 0 [pid 5076] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5080] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5076] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5081 attached [pid 5077] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511 [pid 5076] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5080] <... clone3 resumed> => {parent_tid=[5081]}, 88) = 5081 [pid 5077] <... open resumed>) = -1 EROFS (Read-only file system) [pid 5081] <... rseq resumed>) = 0 [pid 5080] rt_sigprocmask(SIG_SETMASK, [], [pid 5077] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] set_robust_list(0x7fbf733ae9a0, 24 [pid 5080] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5077] <... futex resumed>) = 1 [pid 5081] <... set_robust_list resumed>) = 0 [pid 5080] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... futex resumed>) = 0 [pid 5081] rt_sigprocmask(SIG_SETMASK, [], [pid 5080] <... futex resumed>) = 0 [pid 5076] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5080] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] <... futex resumed>) = 0 [pid 5076] <... futex resumed>) = 1 [pid 5076] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] sendfile(-1, -1, NULL, 145139829833722 [pid 5081] memfd_create("syzkaller", 0 [pid 5077] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5077] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5076] <... futex resumed>) = 0 [pid 5076] exit_group(0 [pid 5077] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... memfd_create resumed>) = 3 [pid 5077] <... futex resumed>) = ? [pid 5076] <... exit_group resumed>) = ? [pid 5077] +++ exited with 0 +++ [pid 5076] +++ exited with 0 +++ [pid 5041] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5076, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=36 /* 0.36 s */} --- [pid 5041] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5041] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5041] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... mmap resumed>) = 0x7fbf6af8e000 [pid 5041] <... openat resumed>) = 3 [pid 5041] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5041] getdents64(3, 0x555556dd9730 /* 4 entries */, 32768) = 112 [pid 5041] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5041] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5041] unlink("./1/binderfs") = 0 [pid 5041] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5041] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5041] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5041] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5041] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5041] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5041] getdents64(4, 0x555556de1770 /* 2 entries */, 32768) = 48 [pid 5041] getdents64(4, 0x555556de1770 /* 0 entries */, 32768) = 0 [pid 5041] close(4) = 0 [pid 5041] rmdir("./1/file0") = 0 [pid 5041] getdents64(3, 0x555556dd9730 /* 0 entries */, 32768) = 0 [pid 5041] close(3) = 0 [pid 5041] rmdir("./1") = 0 [pid 5041] mkdir("./2", 0777) = 0 [pid 5041] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5041] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5041] close(3) = 0 [pid 5041] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5082 attached , child_tidptr=0x555556dd8690) = 5082 [pid 5082] set_robust_list(0x555556dd86a0, 24) = 0 [pid 5082] chdir("./2") = 0 [pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5082] setpgid(0, 0) = 0 [pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5082] write(3, "1000", 4 [pid 5044] <... umount2 resumed>) = 0 [pid 5082] <... write resumed>) = 4 [pid 5082] close(3) = 0 [pid 5082] symlink("/dev/binderfs", "./binderfs" [pid 5043] <... umount2 resumed>) = 0 [pid 5082] <... symlink resumed>) = 0 [pid 5044] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5044] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5044] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5044] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5044] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5044] getdents64(4, 0x555556de1770 /* 2 entries */, 32768) = 48 [pid 5044] getdents64(4, 0x555556de1770 /* 0 entries */, 32768) = 0 [pid 5044] close(4) = 0 [pid 5044] rmdir("./1/file0" [pid 5040] <... umount2 resumed>) = 0 [pid 5044] <... rmdir resumed>) = 0 [pid 5044] getdents64(3, 0x555556dd9730 /* 0 entries */, 32768) = 0 [pid 5044] close(3) = 0 [pid 5044] rmdir("./1") = 0 [pid 5044] mkdir("./2", 0777 [pid 5043] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] <... mkdir resumed>) = 0 [pid 5043] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5043] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5043] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5043] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5044] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5043] <... openat resumed>) = 4 [pid 5082] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] <... openat resumed>) = 3 [pid 5043] newfstatat(4, "", [pid 5044] ioctl(3, LOOP_CLR_FD [pid 5043] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5044] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5043] getdents64(4, [pid 5044] close(3 [pid 5043] <... getdents64 resumed>0x555556de1770 /* 2 entries */, 32768) = 48 [pid 5044] <... close resumed>) = 0 [pid 5043] getdents64(4, [pid 5082] <... futex resumed>) = 0 [pid 5082] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, [pid 5044] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5043] <... getdents64 resumed>0x555556de1770 /* 0 entries */, 32768) = 0 [pid 5040] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5082] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5043] close(4 [pid 5040] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbf7338e000 [pid 5044] <... clone resumed>, child_tidptr=0x555556dd8690) = 5083 [pid 5043] <... close resumed>) = 0 [pid 5082] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5043] rmdir("./1/file0" [pid 5082] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5043] <... rmdir resumed>) = 0 [pid 5040] newfstatat(AT_FDCWD, "./1/file0", ./strace-static-x86_64: Process 5083 attached [pid 5043] getdents64(3, [pid 5040] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] set_robust_list(0x555556dd86a0, 24 [pid 5043] <... getdents64 resumed>0x555556dd9730 /* 0 entries */, 32768) = 0 [pid 5040] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... set_robust_list resumed>) = 0 [pid 5082] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5043] close(3 [pid 5083] chdir("./2") = 0 [pid 5082] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5043] <... close resumed>) = 0 [pid 5040] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5043] rmdir("./1" [pid 5040] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5084 attached [pid 5083] setpgid(0, 0 [pid 5043] <... rmdir resumed>) = 0 [pid 5083] <... setpgid resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5043] mkdir("./2", 0777 [pid 5084] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5083] <... openat resumed>) = 3 [pid 5043] <... mkdir resumed>) = 0 [pid 5040] <... openat resumed>) = 4 [pid 5084] <... rseq resumed>) = 0 [pid 5084] set_robust_list(0x7fbf733ae9a0, 24 [pid 5040] newfstatat(4, "", [pid 5039] <... umount2 resumed>) = 0 [pid 5084] <... set_robust_list resumed>) = 0 [pid 5082] <... clone3 resumed> => {parent_tid=[5084]}, 88) = 5084 [pid 5084] rt_sigprocmask(SIG_SETMASK, [], [pid 5040] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5040] getdents64(4, [pid 5083] write(3, "1000", 4 [pid 5043] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5039] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... write resumed>) = 4 [pid 5082] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5040] <... getdents64 resumed>0x555556de1770 /* 2 entries */, 32768) = 48 [pid 5083] close(3 [pid 5082] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... openat resumed>) = 3 [pid 5040] getdents64(4, [pid 5039] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5082] <... futex resumed>) = 1 [pid 5043] ioctl(3, LOOP_CLR_FD [pid 5040] <... getdents64 resumed>0x555556de1770 /* 0 entries */, 32768) = 0 [pid 5039] newfstatat(AT_FDCWD, "./1/file0", [pid 5084] memfd_create("syzkaller", 0 [pid 5083] symlink("/dev/binderfs", "./binderfs" [pid 5082] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5043] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5040] close(4 [pid 5039] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... memfd_create resumed>) = 3 [pid 5083] <... symlink resumed>) = 0 [pid 5039] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5039] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5039] <... openat resumed>) = 4 [pid 5043] close(3 [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5040] <... close resumed>) = 0 [pid 5084] <... mmap resumed>) = 0x7fbf6af8e000 [pid 5083] <... futex resumed>) = 0 [pid 5043] <... close resumed>) = 0 [pid 5083] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, [pid 5043] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5039] newfstatat(4, "", [pid 5083] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5039] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5039] getdents64(4, [pid 5083] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5039] <... getdents64 resumed>0x555556de1770 /* 2 entries */, 32768) = 48 [pid 5083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5039] getdents64(4, [pid 5083] <... mmap resumed>) = 0x7fbf7338e000 [pid 5039] <... getdents64 resumed>0x555556de1770 /* 0 entries */, 32768) = 0 [pid 5083] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE [pid 5039] close(4 [pid 5083] <... mprotect resumed>) = 0 [pid 5039] <... close resumed>) = 0 [pid 5083] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5039] rmdir("./1/file0" [pid 5043] <... clone resumed>, child_tidptr=0x555556dd8690) = 5085 [pid 5039] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5085 attached [pid 5083] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5039] getdents64(3, [pid 5085] set_robust_list(0x555556dd86a0, 24 [pid 5039] <... getdents64 resumed>0x555556dd9730 /* 0 entries */, 32768) = 0 [pid 5085] <... set_robust_list resumed>) = 0 [pid 5039] close(3 [pid 5085] chdir("./2" [pid 5039] <... close resumed>) = 0 ./strace-static-x86_64: Process 5086 attached [pid 5085] <... chdir resumed>) = 0 [pid 5083] <... clone3 resumed> => {parent_tid=[5086]}, 88) = 5086 [pid 5040] rmdir("./1/file0" [pid 5039] rmdir("./1" [pid 5086] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5083] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] setpgid(0, 0) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1000", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5039] <... rmdir resumed>) = 0 [pid 5083] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 0 [pid 5083] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5085] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, [pid 5039] mkdir("./2", 0777 [pid 5085] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5039] <... mkdir resumed>) = 0 [pid 5085] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5086] <... rseq resumed>) = 0 [pid 5085] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5086] set_robust_list(0x7fbf733ae9a0, 24 [pid 5040] <... rmdir resumed>) = 0 [pid 5040] getdents64(3, [pid 5086] <... set_robust_list resumed>) = 0 [pid 5086] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] <... mmap resumed>) = 0x7fbf7338e000 [pid 5040] <... getdents64 resumed>0x555556dd9730 /* 0 entries */, 32768) = 0 [pid 5039] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5086] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5039] <... openat resumed>) = 3 [pid 5086] memfd_create("syzkaller", 0 [pid 5085] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5040] close(3 [pid 5086] <... memfd_create resumed>) = 3 [pid 5039] ioctl(3, LOOP_CLR_FD [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5085] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5040] <... close resumed>) = 0 [pid 5039] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5086] <... mmap resumed>) = 0x7fbf6af8e000 [pid 5040] rmdir("./1" [pid 5039] close(3 [pid 5085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} [pid 5039] <... close resumed>) = 0 [pid 5039] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5040] <... rmdir resumed>) = 0 [pid 5040] mkdir("./2", 0777 [pid 5085] <... clone3 resumed> => {parent_tid=[5087]}, 88) = 5087 ./strace-static-x86_64: Process 5087 attached [pid 5085] rt_sigprocmask(SIG_SETMASK, [], [pid 5087] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5085] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5087] <... rseq resumed>) = 0 [pid 5085] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] set_robust_list(0x7fbf733ae9a0, 24 [pid 5085] <... futex resumed>) = 0 [pid 5087] <... set_robust_list resumed>) = 0 [pid 5085] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5087] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5087] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5088 attached ) = 3 [pid 5039] <... clone resumed>, child_tidptr=0x555556dd8690) = 5088 [pid 5088] set_robust_list(0x555556dd86a0, 24 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5040] <... mkdir resumed>) = 0 [pid 5088] <... set_robust_list resumed>) = 0 [pid 5087] <... mmap resumed>) = 0x7fbf6af8e000 [pid 5088] chdir("./2") = 0 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5040] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5088] setpgid(0, 0) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5040] <... openat resumed>) = 3 [pid 5088] write(3, "1000", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5088] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] ioctl(3, LOOP_CLR_FD [pid 5088] <... futex resumed>) = 0 [pid 5088] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, NULL, 8) = 0 [pid 5088] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbf7338e000 [pid 5088] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5088] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5040] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5088] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0}./strace-static-x86_64: Process 5089 attached [pid 5089] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5088] <... clone3 resumed> => {parent_tid=[5089]}, 88) = 5089 [pid 5088] rt_sigprocmask(SIG_SETMASK, [], [pid 5089] <... rseq resumed>) = 0 [pid 5088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5089] set_robust_list(0x7fbf733ae9a0, 24 [pid 5088] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] close(3 [pid 5089] <... set_robust_list resumed>) = 0 [pid 5088] <... futex resumed>) = 0 [pid 5089] rt_sigprocmask(SIG_SETMASK, [], [pid 5088] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5040] <... close resumed>) = 0 [pid 5089] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5040] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5089] memfd_create("syzkaller", 0 [pid 5040] <... clone resumed>, child_tidptr=0x555556dd8690) = 5090 [pid 5089] <... memfd_create resumed>) = 3 [pid 5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbf6af8e000 ./strace-static-x86_64: Process 5090 attached [pid 5090] set_robust_list(0x555556dd86a0, 24) = 0 [pid 5090] chdir("./2") = 0 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5090] setpgid(0, 0) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "1000", 4) = 4 [pid 5090] close(3) = 0 [pid 5090] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5090] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] rt_sigaction(SIGRT_1, {sa_handler=0x7fbf73418060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbf73409210}, NULL, 8) = 0 [pid 5090] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbf7338e000 [pid 5090] mprotect(0x7fbf7338f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf733ae990, parent_tid=0x7fbf733ae990, exit_signal=0, stack=0x7fbf7338e000, stack_size=0x20300, tls=0x7fbf733ae6c0} => {parent_tid=[5091]}, 88) = 5091 ./strace-static-x86_64: Process 5091 attached [pid 5090] rt_sigprocmask(SIG_SETMASK, [], [pid 5091] rseq(0x7fbf733aefe0, 0x20, 0, 0x53053053 [pid 5090] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5091] <... rseq resumed>) = 0 [pid 5090] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] set_robust_list(0x7fbf733ae9a0, 24 [pid 5090] <... futex resumed>) = 0 [pid 5091] <... set_robust_list resumed>) = 0 [pid 5090] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5091] memfd_create("syzkaller", 0) = 3 [pid 5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbf6af8e000 [pid 5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... write resumed>) = 16777216 [pid 5081] munmap(0x7fbf6af8e000, 138412032) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5081] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5081] close(3) = 0 [pid 5081] mkdir("./file0", 0777) = 0 [ 118.341640][ T5081] loop3: detected capacity change from 0 to 32768 [pid 5081] mount("/dev/loop3", "./file0", "jfs", MS_REC, "" [pid 5087] <... write resumed>) = 16777216 [pid 5081] <... mount resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5087] munmap(0x7fbf6af8e000, 138412032 [pid 5081] chdir("./file0") = 0 [pid 5081] ioctl(4, LOOP_CLR_FD) = 0 [pid 5081] close(4) = 0 [pid 5081] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5081] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] open(".", O_RDONLY) = 4 [pid 5081] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5080] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... munmap resumed>) = 0 [pid 5081] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5087] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5087] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbf7336d000 [pid 5080] mprotect(0x7fbf7336e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5080] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5080] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf7338d990, parent_tid=0x7fbf7338d990, exit_signal=0, stack=0x7fbf7336d000, stack_size=0x20300, tls=0x7fbf7338d6c0}./strace-static-x86_64: Process 5092 attached [pid 5087] <... ioctl resumed>) = 0 [pid 5080] <... clone3 resumed> => {parent_tid=[5092]}, 88) = 5092 [pid 5092] rseq(0x7fbf7338dfe0, 0x20, 0, 0x53053053 [pid 5087] close(3 [pid 5080] rt_sigprocmask(SIG_SETMASK, [], [pid 5092] <... rseq resumed>) = 0 [pid 5087] <... close resumed>) = 0 [pid 5080] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5092] set_robust_list(0x7fbf7338d9a0, 24 [pid 5087] mkdir("./file0", 0777 [pid 5080] futex(0x7fbf7347f6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... set_robust_list resumed>) = 0 [pid 5080] <... futex resumed>) = 0 [pid 5092] rt_sigprocmask(SIG_SETMASK, [], [pid 5080] futex(0x7fbf7347f6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 118.568677][ T5081] ERROR: (device loop3): diRead: i_ino != di_number [ 118.568677][ T5081] [ 118.581391][ T5087] loop4: detected capacity change from 0 to 32768 [ 118.599607][ T5081] ERROR: (device loop3): remounting filesystem as read-only [pid 5092] creat("./bus", 000) = 5 [pid 5087] <... mkdir resumed>) = 0 [pid 5081] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5081] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5087] mount("/dev/loop4", "./file0", "jfs", MS_REC, "" [pid 5080] <... futex resumed>) = 0 [pid 5080] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... futex resumed>) = 0 [pid 5081] ftruncate(5, 2048) = 0 [pid 5092] futex(0x7fbf7347f6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5080] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 118.633844][ T27] audit: type=1400 audit(1697040779.433:94): avc: denied { write } for pid=5080 comm="syz-executor400" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 5080] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511) = 6 [pid 5081] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5080] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... mount resumed>) = 0 [pid 5081] sendfile(5, 6, NULL, 145139829833722 [pid 5087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5087] chdir("./file0") = 0 [pid 5087] ioctl(4, LOOP_CLR_FD) = 0 [pid 5087] close(4) = 0 [pid 5089] <... write resumed>) = 16777216 [pid 5087] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5087] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] munmap(0x7fbf6af8e000, 138412032 [pid 5085] <... futex resumed>) = 0 [pid 5085] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5087] open(".", O_RDONLY [ 118.738462][ T27] audit: type=1400 audit(1697040779.433:95): avc: denied { add_name } for pid=5080 comm="syz-executor400" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 5085] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5091] <... write resumed>) = 16777216 [pid 5087] <... open resumed>) = 4 [pid 5081] <... sendfile resumed>) = 2048 [pid 5081] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] exit_group(0) = ? [pid 5081] <... futex resumed>) = ? [pid 5081] +++ exited with 0 +++ [pid 5092] <... futex resumed>) = ? [pid 5092] +++ exited with 0 +++ [pid 5087] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... write resumed>) = 16777216 [pid 5080] +++ exited with 0 +++ [pid 5042] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5080, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=36 /* 0.36 s */} --- [pid 5091] munmap(0x7fbf6af8e000, 138412032 [pid 5089] <... munmap resumed>) = 0 [pid 5087] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5084] munmap(0x7fbf6af8e000, 138412032 [pid 5085] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5042] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] <... futex resumed>) = 0 [pid 5042] <... openat resumed>) = 3 [pid 5087] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5042] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5042] getdents64(3, [pid 5085] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5042] <... getdents64 resumed>0x555556dd9730 /* 4 entries */, 32768) = 112 [pid 5086] <... write resumed>) = 16777216 [pid 5042] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5042] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5042] unlink("./2/binderfs") = 0 [pid 5042] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 118.823667][ T27] audit: type=1400 audit(1697040779.433:96): avc: denied { create } for pid=5080 comm="syz-executor400" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.851508][ T5087] ERROR: (device loop4): diRead: i_ino != di_number [ 118.851508][ T5087] [pid 5086] munmap(0x7fbf6af8e000, 138412032 [pid 5089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5089] ioctl(4, LOOP_SET_FD, 3 [pid 5085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbf7336d000 [pid 5085] mprotect(0x7fbf7336e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5085] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf7338d990, parent_tid=0x7fbf7338d990, exit_signal=0, stack=0x7fbf7336d000, stack_size=0x20300, tls=0x7fbf7338d6c0} => {parent_tid=[5093]}, 88) = 5093 [ 118.880478][ T5042] ------------[ cut here ]------------ [ 118.886315][ T5042] kernel BUG at fs/jfs/inode.c:169! [ 118.888313][ T5087] ERROR: (device loop4): remounting filesystem as read-only [ 118.901438][ T5089] loop0: detected capacity change from 0 to 32768 [pid 5085] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5091] <... munmap resumed>) = 0 [pid 5089] <... ioctl resumed>) = 0 [pid 5087] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5084] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5093 attached [pid 5085] futex(0x7fbf7347f6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] rseq(0x7fbf7338dfe0, 0x20, 0, 0x53053053 [pid 5085] <... futex resumed>) = 0 [pid 5093] <... rseq resumed>) = 0 [pid 5085] futex(0x7fbf7347f6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5093] set_robust_list(0x7fbf7338d9a0, 24) = 0 [pid 5093] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5093] creat("./bus", 000) = -1 EROFS (Read-only file system) [pid 5093] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5093] ftruncate(-1, 2048 [pid 5085] futex(0x7fbf7347f6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... ftruncate resumed>) = -1 EBADF (Bad file descriptor) [pid 5085] <... futex resumed>) = 0 [pid 5093] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] futex(0x7fbf7347f6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5093] <... futex resumed>) = 0 [ 118.915734][ T27] audit: type=1400 audit(1697040779.433:97): avc: denied { write open } for pid=5080 comm="syz-executor400" path="/root/syzkaller.0IxYc8/2/file0/bus" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.922214][ T5042] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 118.942211][ T27] audit: type=1400 audit(1697040779.503:98): avc: denied { read append } for pid=5080 comm="syz-executor400" name="bus" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.946765][ T5042] CPU: 0 PID: 5042 Comm: syz-executor400 Not tainted 6.6.0-rc5-syzkaller-00055-g1c8b86a3799f #0 [ 118.979505][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 118.989598][ T5042] RIP: 0010:jfs_evict_inode+0x3eb/0x4b0 [ 118.995177][ T5042] Code: 7c 24 80 00 74 0d e8 44 26 94 fe 48 89 df e8 4c 7a 02 00 e8 37 26 94 fe 48 89 df e8 7f 27 1a ff e9 e3 fc ff ff e8 25 26 94 fe <0f> 0b 48 c7 c7 e0 e0 12 8d e8 87 17 e9 fe e9 44 fc ff ff e8 7d 17 [ 119.014988][ T5042] RSP: 0018:ffffc900033ffbe0 EFLAGS: 00010293 [ 119.021075][ T5042] RAX: 0000000000000000 RBX: ffff88806dc287b0 RCX: 0000000000000000 [ 119.029056][ T5042] RDX: ffff8880270d0200 RSI: ffffffff82f29edb RDI: ffff88806dc287a0 [ 119.037037][ T5042] RBP: ffff88806dc28438 R08: 0000000000000005 R09: 0000000000000000 [ 119.045038][ T5042] R10: 0000000000000000 R11: ffffffff81d02be6 R12: ffff88806dc28888 [ 119.053030][ T5042] R13: ffff88806dc287d8 R14: ffffffff8aca4f20 R15: ffff888028c789c0 [ 119.061104][ T5042] FS: 0000555556dd83c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 119.070245][ T5042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.076896][ T5042] CR2: 00007fbf7338dd58 CR3: 000000001eee9000 CR4: 00000000003506f0 [ 119.084889][ T5042] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.092881][ T5042] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.100866][ T5042] Call Trace: [ 119.104160][ T5042] [ 119.107103][ T5042] ? show_regs+0x8f/0xa0 [ 119.111383][ T5042] ? die+0x36/0xa0 [ 119.115125][ T5042] ? do_trap+0x22b/0x420 [ 119.119394][ T5042] ? jfs_evict_inode+0x3eb/0x4b0 [ 119.124354][ T5042] ? jfs_evict_inode+0x3eb/0x4b0 [ 119.129337][ T5042] ? do_error_trap+0xf4/0x230 [ 119.134133][ T5042] ? jfs_evict_inode+0x3eb/0x4b0 [ 119.139099][ T5042] ? handle_invalid_op+0x34/0x40 [ 119.144073][ T5042] ? jfs_evict_inode+0x3eb/0x4b0 [ 119.149032][ T5042] ? exc_invalid_op+0x2d/0x40 [ 119.153737][ T5042] ? asm_exc_invalid_op+0x1a/0x20 [ 119.158806][ T5042] ? free_unref_page_prepare+0x476/0xa40 [ 119.164483][ T5042] ? jfs_evict_inode+0x3eb/0x4b0 [ 119.169442][ T5042] ? jfs_evict_inode+0x3eb/0x4b0 [ 119.174399][ T5042] ? jfs_write_inode+0x240/0x240 [ 119.179369][ T5042] evict+0x2ed/0x6b0 [ 119.183280][ T5042] dispose_list+0x117/0x1e0 [ 119.187803][ T5042] evict_inodes+0x34f/0x450 [ 119.192333][ T5042] ? dispose_list+0x1e0/0x1e0 [ 119.197115][ T5042] ? shrink_dcache_for_umount+0x16e/0x340 [ 119.202953][ T5042] generic_shutdown_super+0xb5/0x3c0 [ 119.208275][ T5042] kill_block_super+0x3b/0x70 [ 119.212988][ T5042] deactivate_locked_super+0x9a/0x170 [ 119.218396][ T5042] deactivate_super+0xde/0x100 [ 119.223194][ T5042] cleanup_mnt+0x222/0x3d0 [ 119.227657][ T5042] task_work_run+0x14d/0x240 [ 119.232293][ T5042] ? task_work_cancel+0x30/0x30 [ 119.237215][ T5042] ptrace_notify+0x10c/0x130 [ 119.241820][ T5042] syscall_exit_to_user_mode_prepare+0x120/0x220 [ 119.248174][ T5042] syscall_exit_to_user_mode+0xd/0x60 [ 119.253579][ T5042] do_syscall_64+0x44/0xb0 [ 119.258018][ T5042] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.263936][ T5042] RIP: 0033:0x7fbf733f2ea7 [ 119.268371][ T5042] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 119.288017][ T5042] RSP: 002b:00007ffc60a7ab88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 119.296474][ T5042] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fbf733f2ea7 [ 119.304466][ T5042] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc60a7ac40 [ 119.312452][ T5042] RBP: 00007ffc60a7ac40 R08: 0000000000000000 R09: 0000000000000000 [ 119.320442][ T5042] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc60a7bd00 [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5093] futex(0x7fbf7347f6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5089] close(3 [pid 5087] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5091] <... openat resumed>) = 4 [pid 5089] <... close resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5086] <... munmap resumed>) = 0 [pid 5085] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 4 [pid 5086] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5085] <... futex resumed>) = 0 [pid 5086] <... openat resumed>) = 4 [pid 5085] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 119.328429][ T5042] R13: 0000555556dd9700 R14: 431bde82d7b634db R15: 00007ffc60a7bca4 [ 119.336495][ T5042] [ 119.339549][ T5042] Modules linked in: [ 119.344476][ T27] audit: type=1804 audit(1697040779.503:99): pid=5081 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor400" name="/root/syzkaller.0IxYc8/2/file0/bus" dev="loop3" ino=7 res=1 errno=0 [ 119.368464][ T5042] ---[ end trace 0000000000000000 ]--- [ 119.370353][ T5086] loop5: detected capacity change from 0 to 32768 [pid 5086] ioctl(4, LOOP_SET_FD, 3 [pid 5091] ioctl(4, LOOP_SET_FD, 3 [pid 5089] mkdir("./file0", 0777 [pid 5087] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511 [pid 5084] ioctl(4, LOOP_SET_FD, 3 [pid 5086] <... ioctl resumed>) = 0 [pid 5086] close(3) = 0 [pid 5086] mkdir("./file0", 0777) = 0 [pid 5086] mount("/dev/loop5", "./file0", "jfs", MS_REC, "") = 0 [pid 5086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5086] chdir("./file0") = 0 [pid 5086] ioctl(4, LOOP_CLR_FD) = 0 [pid 5086] close(4) = 0 [pid 5086] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5086] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] <... mkdir resumed>) = 0 [pid 5087] <... open resumed>) = -1 EROFS (Read-only file system) [pid 5083] <... futex resumed>) = 0 [pid 5083] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] <... futex resumed>) = 0 [pid 5086] open(".", O_RDONLY) = 4 [pid 5086] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5083] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 119.374532][ T5042] RIP: 0010:jfs_evict_inode+0x3eb/0x4b0 [ 119.386589][ T5084] loop2: detected capacity change from 0 to 32768 [ 119.390543][ T5042] Code: 7c 24 80 00 74 0d e8 44 26 94 fe 48 89 df e8 4c 7a 02 00 e8 37 26 94 fe 48 89 df e8 7f 27 1a ff e9 e3 fc ff ff e8 25 26 94 fe <0f> 0b 48 c7 c7 e0 e0 12 8d e8 87 17 e9 fe e9 44 fc ff ff e8 7d 17 [ 119.399366][ T5091] loop1: detected capacity change from 0 to 32768 [pid 5086] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5091] <... ioctl resumed>) = 0 [pid 5089] mount("/dev/loop0", "./file0", "jfs", MS_REC, "" [pid 5087] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] <... ioctl resumed>) = 0 [ 119.416012][ T27] audit: type=1800 audit(1697040779.503:100): pid=5081 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor400" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 119.433293][ T5042] RSP: 0018:ffffc900033ffbe0 EFLAGS: 00010293 [ 119.442548][ T5086] ERROR: (device loop5): diRead: i_ino != di_number [ 119.442548][ T5086] [ 119.448082][ T5042] [ 119.449642][ T5086] ERROR: (device loop5): remounting filesystem as read-only [ 119.458026][ T5042] RAX: 0000000000000000 RBX: ffff88806dc287b0 RCX: 0000000000000000 [pid 5091] close(3 [pid 5087] <... futex resumed>) = 0 [pid 5085] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(3 [pid 5091] <... close resumed>) = 0 [pid 5087] sendfile(-1, -1, NULL, 145139829833722 [pid 5085] <... futex resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5086] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5086] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 0 [pid 5083] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] <... futex resumed>) = 1 [pid 5086] creat("./bus", 000) = -1 EROFS (Read-only file system) [pid 5086] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 0 [pid 5083] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] <... futex resumed>) = 1 [pid 5086] ftruncate(-1, 2048) = -1 EBADF (Bad file descriptor) [pid 5086] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5083] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511) = -1 EROFS (Read-only file system) [pid 5086] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 0 [pid 5083] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] <... futex resumed>) = 1 [pid 5086] sendfile(-1, -1, NULL, 145139829833722) = -1 EBADF (Bad file descriptor) [pid 5086] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 0 [pid 5083] exit_group(0) = ? [pid 5086] <... futex resumed>) = ? [pid 5086] +++ exited with 0 +++ [pid 5083] +++ exited with 0 +++ [pid 5044] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=49 /* 0.49 s */} --- [pid 5085] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] mkdir("./file0", 0777) = 0 [pid 5087] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5087] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] mount("/dev/loop2", "./file0", "jfs", MS_REC, "" [pid 5091] mkdir("./file0", 0777) = 0 [pid 5091] mount("/dev/loop1", "./file0", "jfs", MS_REC, "" [pid 5087] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5087] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] exit_group(0 [pid 5091] <... mount resumed>) = 0 [pid 5091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5091] chdir("./file0" [pid 5093] <... futex resumed>) = ? [pid 5091] <... chdir resumed>) = 0 [pid 5087] <... futex resumed>) = ? [pid 5085] <... exit_group resumed>) = ? [pid 5093] +++ exited with 0 +++ [pid 5091] ioctl(4, LOOP_CLR_FD [pid 5044] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5091] <... ioctl resumed>) = 0 [pid 5091] close(4) = 0 [pid 5091] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5091] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] <... futex resumed>) = 0 [pid 5087] +++ exited with 0 +++ [pid 5085] +++ exited with 0 +++ [pid 5044] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5043] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=41 /* 0.41 s */} --- [pid 5044] <... openat resumed>) = 3 [pid 5090] <... futex resumed>) = 1 [pid 5091] <... futex resumed>) = 0 [pid 5091] open(".", O_RDONLY) = 4 [pid 5091] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5044] newfstatat(3, "", [pid 5090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5044] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5090] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... futex resumed>) = 0 [pid 5090] <... futex resumed>) = 1 [pid 5091] open_by_handle_at(4, {handle_bytes=8, handle_type=2, f_handle="\x0e\x00\x00\x00\x00\x00\x00\x00"}, O_RDONLY [pid 5090] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 119.480395][ T5042] RDX: ffff8880270d0200 RSI: ffffffff82f29edb RDI: ffff88806dc287a0 [ 119.493766][ T5042] RBP: ffff88806dc28438 R08: 0000000000000005 R09: 0000000000000000 [ 119.502862][ T5042] R10: 0000000000000000 R11: ffffffff81d02be6 R12: ffff88806dc28888 [ 119.514731][ T5042] R13: ffff88806dc287d8 R14: ffffffff8aca4f20 R15: ffff888028c789c0 [ 119.518851][ T5091] ERROR: (device loop1): diRead: i_ino != di_number [ 119.518851][ T5091] [pid 5044] getdents64(3, [pid 5043] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] <... getdents64 resumed>0x555556dd9730 /* 4 entries */, 32768) = 112 [pid 5043] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5043] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5044] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5043] <... openat resumed>) = 3 [pid 5090] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5090] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5090] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbf7336d000 [pid 5090] mprotect(0x7fbf7336e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbf7338d990, parent_tid=0x7fbf7338d990, exit_signal=0, stack=0x7fbf7336d000, stack_size=0x20300, tls=0x7fbf7338d6c0} => {parent_tid=[5094]}, 88) = 5094 [pid 5090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5090] futex(0x7fbf7347f6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] futex(0x7fbf7347f6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5094 attached [pid 5094] rseq(0x7fbf7338dfe0, 0x20, 0, 0x53053053) = 0 [pid 5094] set_robust_list(0x7fbf7338d9a0, 24) = 0 [pid 5094] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5094] creat("./bus", 000) = 5 [pid 5044] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5043] newfstatat(3, "", [pid 5094] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5090] <... futex resumed>) = 0 [pid 5090] futex(0x7fbf7347f6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] futex(0x7fbf7347f6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5091] <... open_by_handle_at resumed>) = -1 ESTALE (Stale file handle) [pid 5091] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] futex(0x7fbf7347f6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5094] ftruncate(5, 2048) = 0 [pid 5094] futex(0x7fbf7347f6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... futex resumed>) = 0 [pid 5090] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... futex resumed>) = 0 [pid 5090] <... futex resumed>) = 1 [pid 5091] open("./bus", O_RDONLY|O_CREAT|O_NOCTTY|O_APPEND|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOFOLLOW, 0511 [ 119.524404][ T5042] FS: 0000555556dd83c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 119.543321][ T5091] ERROR: (device loop1): remounting filesystem as read-only [ 119.543967][ T5042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.559322][ T5042] CR2: 0000555556de1738 CR3: 000000001eee9000 CR4: 00000000003506e0 [ 119.567353][ T5042] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [pid 5090] futex(0x7fbf7347f6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] <... futex resumed>) = 1 [pid 5091] <... open resumed>) = 6 [pid 5094] futex(0x7fbf7347f6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] futex(0x7fbf7347f6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5090] <... futex resumed>) = 0 [pid 5090] futex(0x7fbf7347f6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 119.576817][ T5042] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.584228][ T27] audit: type=1804 audit(1697040780.373:101): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor400" name="/root/syzkaller.2N6F7y/2/file0/bus" dev="loop1" ino=7 res=1 errno=0 [ 119.588334][ T5042] Kernel panic - not syncing: Fatal exception [ 119.609112][ T5042] Kernel Offset: disabled