./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor346229425 <...> Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. execve("./syz-executor346229425", ["./syz-executor346229425"], 0x7fffbeb0e0b0 /* 10 vars */) = 0 brk(NULL) = 0x5555751e4000 brk(0x5555751e4e00) = 0x5555751e4e00 arch_prctl(ARCH_SET_FS, 0x5555751e4480) = 0 set_tid_address(0x5555751e4750) = 357 set_robust_list(0x5555751e4760, 24) = 0 rseq(0x5555751e4da0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor346229425", 4096) = 27 getrandom("\x88\x37\x5b\x3f\x04\x39\x9e\x26", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555751e4e00 brk(0x555575205e00) = 0x555575205e00 brk(0x555575206000) = 0x555575206000 mprotect(0x7fa2cc9db000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7fa2cc91f9f0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7fa2cc91f9f0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 358 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 358 attached [pid 358] set_robust_list(0x5555751e4760, 24 [pid 357] <... clone resumed>, child_tidptr=0x5555751e4750) = 359 ./strace-static-x86_64: Process 359 attached [pid 359] set_robust_list(0x5555751e4760, 24) = 0 [pid 359] mkdir("./syzkaller.xPrWZK", 0700 [pid 357] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 358] <... set_robust_list resumed>) = 0 [pid 358] mkdir("./syzkaller.CBc8Da", 0700 [pid 357] <... clone resumed>, child_tidptr=0x5555751e4750) = 360 ./strace-static-x86_64: Process 360 attached [pid 360] set_robust_list(0x5555751e4760, 24) = 0 [pid 357] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 359] <... mkdir resumed>) = 0 [pid 359] chmod("./syzkaller.xPrWZK", 0777) = 0 [pid 359] chdir("./syzkaller.xPrWZK") = 0 [pid 359] mkdir("./0", 0777) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWRexecuting program ) = 3 [pid 359] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 359] close(3) = 0 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 361 [pid 360] getrandom("\xfa\xe0\xfd\x46\x13\x63\x6f\x60", 8, GRND_NONBLOCK) = 8 [pid 360] mkdir("./syzkaller.43gnE1", 0700./strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x5555751e4760, 24) = 0 [pid 361] chdir("./0") = 0 [pid 361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 361] setpgid(0, 0) = 0 [pid 361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 361] write(3, "1000", 4) = 4 [pid 361] close(3) = 0 [pid 361] symlink("/dev/binderfs", "./binderfs") = 0 [pid 361] write(1, "executing program\n", 18) = 18 [pid 361] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 361] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 361] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 361] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 361] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[362]}, 88) = 362 [pid 361] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 361] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 362 attached [pid 362] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 362] memfd_create("syzkaller", 0) = 3 [pid 362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 362] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 362] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 362] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 362] close(3) = 0 [pid 362] close(4 [pid 357] <... clone resumed>, child_tidptr=0x5555751e4750) = 364 [pid 357] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 365 ./strace-static-x86_64: Process 365 attached [pid 365] set_robust_list(0x5555751e4760, 24) = 0 [pid 365] mkdir("./syzkaller.prTUv6", 0700./strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x5555751e4760, 24) = 0 [pid 364] mkdir("./syzkaller.Y2RuHV", 0700 [pid 360] <... mkdir resumed>) = 0 [pid 360] chmod("./syzkaller.43gnE1", 0777) = 0 [pid 360] chdir("./syzkaller.43gnE1") = 0 [pid 360] mkdir("./0", 0777) = 0 [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 365] <... mkdir resumed>) = 0 [pid 365] chmod("./syzkaller.prTUv6", 0777) = 0 [pid 365] chdir("./syzkaller.prTUv6") = 0 [pid 365] mkdir("./0", 0777) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 364] <... mkdir resumed>) = 0 [pid 358] <... mkdir resumed>) = 0 [pid 358] chmod("./syzkaller.CBc8Da", 0777) = 0 [pid 358] chdir("./syzkaller.CBc8Da") = 0 [pid 358] mkdir("./0", 0777) = 0 [pid 364] chmod("./syzkaller.Y2RuHV", 0777) = 0 [pid 364] chdir("./syzkaller.Y2RuHV") = 0 [pid 364] mkdir("./0", 0777) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 24.044677][ T23] audit: type=1400 audit(1744820612.900:66): avc: denied { execmem } for pid=357 comm="syz-executor346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.069371][ T23] audit: type=1400 audit(1744820612.920:67): avc: denied { read write } for pid=359 comm="syz-executor346" name="loop1" dev="devtmpfs" ino=9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 24.093955][ T23] audit: type=1400 audit(1744820612.920:68): avc: denied { open } for pid=359 comm="syz-executor346" path="/dev/loop1" dev="devtmpfs" ino=9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 24.118213][ T23] audit: type=1400 audit(1744820612.920:69): avc: denied { ioctl } for pid=359 comm="syz-executor346" path="/dev/loop1" dev="devtmpfs" ino=9408 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 362] <... close resumed>) = 0 [pid 360] <... openat resumed>) = 3 [pid 362] mkdir("./file1", 0777 [pid 360] ioctl(3, LOOP_CLR_FD [pid 362] <... mkdir resumed>) = 0 [ 24.124141][ T362] ====================================================== [ 24.124141][ T362] WARNING: the mand mount option is being deprecated and [ 24.124141][ T362] will be removed in v5.15! [ 24.124141][ T362] ====================================================== [ 24.144803][ T23] audit: type=1400 audit(1744820612.980:70): avc: denied { mounton } for pid=361 comm="syz-executor346" path="/root/syzkaller.xPrWZK/0/file1" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [pid 362] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue"executing program [pid 365] <... openat resumed>) = 3 [pid 365] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 365] close(3) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 364] <... openat resumed>) = 3 [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 358] <... openat resumed>) = 3 [pid 365] <... clone resumed>, child_tidptr=0x5555751e4750) = 367 ./strace-static-x86_64: Process 367 attached [pid 364] ioctl(3, LOOP_CLR_FD [pid 360] close(3 [pid 364] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 358] ioctl(3, LOOP_CLR_FD [pid 367] set_robust_list(0x5555751e4760, 24) = 0 [pid 367] chdir("./0" [pid 364] close(3 [pid 360] <... close resumed>) = 0 [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 367] <... chdir resumed>) = 0 [pid 367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 367] setpgid(0, 0) = 0 [pid 358] close(3 [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 364] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 367] write(3, "1000", 4) = 4 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 360] <... clone resumed>, child_tidptr=0x5555751e4750) = 368 [pid 367] close(3) = 0 [pid 367] symlink("/dev/binderfs", "./binderfs") = 0 [pid 367] write(1, "executing program\n", 18) = 18 [pid 367] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] <... clone resumed>, child_tidptr=0x5555751e4750) = 369 [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 370 [pid 367] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 367] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 367] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 367] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[371]}, 88) = 371 [pid 367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 367] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x5555751e4760, 24) = 0 [pid 368] chdir("./0") = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 368] setpgid(0, 0) = 0 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x5555751e4760, 24) = 0 [pid 368] write(3, "1000", 4 [pid 370] chdir("./0" [pid 368] <... write resumed>) = 4 [pid 368] close(3) = 0 [pid 368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 370] <... chdir resumed>) = 0 [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 370] setpgid(0, 0) = 0 executing program [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 368] write(1, "executing program\n", 18) = 18 [pid 368] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] write(3, "1000", 4) = 4 [pid 368] <... futex resumed>) = 0 [pid 370] close(3 [pid 368] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 370] <... close resumed>) = 0 [pid 368] <... rt_sigaction resumed>NULL, 8) = 0 [pid 368] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 370] symlink("/dev/binderfs", "./binderfs" [pid 368] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 370] <... symlink resumed>) = 0 [pid 368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 368] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 369 attached ./strace-static-x86_64: Process 371 attached [pid 368] rt_sigprocmask(SIG_BLOCK, ~[], [pid 369] set_robust_list(0x5555751e4760, 24 [pid 368] <... rt_sigprocmask resumed>[], 8) = 0 [pid 368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}executing program ./strace-static-x86_64: Process 372 attached [pid 371] set_robust_list(0x7fa2cc9159a0, 24 [pid 370] write(1, "executing program\n", 18 [pid 369] <... set_robust_list resumed>) = 0 [pid 368] <... clone3 resumed> => {parent_tid=[372]}, 88) = 372 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 370] <... write resumed>) = 18 [pid 370] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 370] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 370] rt_sigprocmask(SIG_BLOCK, ~[], [pid 369] chdir("./0" [pid 370] <... rt_sigprocmask resumed>[], 8) = 0 [pid 370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 369] <... chdir resumed>) = 0 [pid 372] set_robust_list(0x7fa2cc9159a0, 24 [pid 371] <... set_robust_list resumed>) = 0 [pid 369] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 371] rt_sigprocmask(SIG_SETMASK, [], [pid 372] <... set_robust_list resumed>) = 0 [pid 369] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 373 attached [pid 370] <... clone3 resumed> => {parent_tid=[373]}, 88) = 373 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 373] set_robust_list(0x7fa2cc9159a0, 24 [pid 372] rt_sigprocmask(SIG_SETMASK, [], [pid 371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 369] setpgid(0, 0 [pid 372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 371] memfd_create("syzkaller", 0 [pid 372] memfd_create("syzkaller", 0 [pid 369] <... setpgid resumed>) = 0 [pid 373] <... set_robust_list resumed>) = 0 [pid 371] <... memfd_create resumed>) = 3 [pid 373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 372] <... memfd_create resumed>) = 3 [pid 371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 373] memfd_create("syzkaller", 0) = 3 [pid 369] <... openat resumed>) = 3 [pid 372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 371] <... mmap resumed>) = 0x7fa2c44f5000 [pid 373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 372] <... mmap resumed>) = 0x7fa2c44f5000 [pid 371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 369] write(3, "1000", 4) = 4 [pid 369] close(3) = 0 [pid 369] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 369] write(1, "executing program\n", 18) = 18 [pid 369] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 369] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 369] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 369] <... mprotect resumed>) = 0 [pid 369] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[374]}, 88) = 374 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 373] <... write resumed>) = 1048576 [pid 373] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 373] ioctl(4, LOOP_SET_FD, 3 [pid 372] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 374 attached [pid 374] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] memfd_create("syzkaller", 0 [pid 371] <... write resumed>) = 1048576 [pid 372] munmap(0x7fa2c44f5000, 138412032 [pid 374] <... memfd_create resumed>) = 3 [pid 371] munmap(0x7fa2c44f5000, 138412032 [pid 374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 371] <... munmap resumed>) = 0 [pid 371] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 372] <... munmap resumed>) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 373] <... ioctl resumed>) = 0 [pid 372] <... openat resumed>) = 4 [pid 371] <... openat resumed>) = 4 [pid 373] close(3 [pid 372] ioctl(4, LOOP_SET_FD, 3 [pid 371] ioctl(4, LOOP_SET_FD, 3 [pid 373] <... close resumed>) = 0 [pid 373] close(4 [pid 372] <... ioctl resumed>) = 0 [pid 372] close(3) = 0 [pid 372] close(4 [pid 374] <... write resumed>) = 1048576 [pid 374] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 371] <... ioctl resumed>) = 0 [pid 362] <... mount resumed>) = 0 [pid 371] close(3) = 0 [pid 371] close(4 [pid 362] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 362] chdir("./file1") = 0 [pid 362] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 373] <... close resumed>) = 0 [pid 373] mkdir("./file1", 0777) = 0 [ 24.272706][ T362] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 24.281925][ T23] audit: type=1400 audit(1744820613.130:71): avc: denied { mount } for pid=361 comm="syz-executor346" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [pid 373] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 372] <... close resumed>) = 0 [pid 372] mkdir("./file1", 0777 [pid 371] <... close resumed>) = 0 [pid 371] mkdir("./file1", 0777 [pid 372] <... mkdir resumed>) = 0 [pid 371] <... mkdir resumed>) = 0 [pid 372] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 371] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 362] <... openat resumed>) = 4 [pid 362] ioctl(4, LOOP_CLR_FD) = 0 [pid 362] close(4) = 0 [pid 362] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] <... futex resumed>) = 0 [pid 362] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 361] <... futex resumed>) = 0 [pid 362] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 361] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... openat resumed>) = 4 [pid 374] ioctl(4, LOOP_SET_FD, 3 [pid 362] <... openat resumed>) = 4 [pid 362] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] <... futex resumed>) = 0 [pid 362] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... ioctl resumed>) = 0 [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 361] <... futex resumed>) = 0 [pid 374] close(3 [pid 362] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 361] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... close resumed>) = 0 [pid 362] <... mmap resumed>) = 0x200000000000 [pid 374] close(4 [pid 362] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] <... futex resumed>) = 0 [pid 362] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 361] <... futex resumed>) = 0 [ 24.423099][ T23] audit: type=1400 audit(1744820613.270:72): avc: denied { write } for pid=361 comm="syz-executor346" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.448434][ T362] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.450116][ T372] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 361] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... mount resumed>) = 0 [pid 372] <... mount resumed>) = 0 [pid 362] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 371] <... mount resumed>) = 0 [pid 371] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 371] chdir("./file1") = 0 [pid 371] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 373] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 372] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 362] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 374] <... close resumed>) = 0 [pid 373] chdir("./file1" [pid 372] <... openat resumed>) = 3 [pid 362] capset(0x200000000000, NULL [pid 373] <... chdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 373] ioctl(4, LOOP_CLR_FD) = 0 [pid 373] close(4) = 0 [pid 373] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 373] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 370] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... openat resumed>) = 4 [pid 370] <... futex resumed>) = 0 [pid 373] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 370] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... mmap resumed>) = 0x200000000000 [pid 370] <... futex resumed>) = 0 [pid 373] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [ 24.466105][ T373] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 24.476043][ T371] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 24.482087][ T23] audit: type=1400 audit(1744820613.270:73): avc: denied { add_name } for pid=361 comm="syz-executor346" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 370] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] mkdir("./file1", 0777 [pid 373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 372] chdir("./file1" [pid 370] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... capset resumed>) = -1 EFAULT (Bad address) [pid 361] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 373] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 373] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 373] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 373] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 373] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 373] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] exit_group(0) = ? [pid 373] <... futex resumed>) = ? [pid 373] +++ exited with 0 +++ [pid 370] +++ exited with 0 +++ [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=370, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 358] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 358] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 358] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./0/binderfs") = 0 [pid 358] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 374] <... mkdir resumed>) = 0 [pid 372] <... chdir resumed>) = 0 [pid 362] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 361] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 374] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 371] <... openat resumed>) = 4 [pid 372] <... openat resumed>) = 4 [pid 362] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 361] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] ioctl(4, LOOP_CLR_FD [pid 362] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 372] <... ioctl resumed>) = 0 [pid 362] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 372] close(4) = 0 [pid 362] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 372] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... umount2 resumed>) = 0 [pid 372] <... futex resumed>) = 1 [pid 371] ioctl(4, LOOP_CLR_FD [pid 368] <... futex resumed>) = 0 [pid 362] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 372] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] <... ioctl resumed>) = 0 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] close(4 [pid 368] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 358] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 372] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 371] <... close resumed>) = 0 [pid 362] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 372] <... openat resumed>) = 4 [pid 371] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = 1 [pid 362] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 372] <... futex resumed>) = 0 [pid 371] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... futex resumed>) = 0 [pid 362] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 358] newfstatat(AT_FDCWD, "./0/file1", [pid 368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 367] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 371] <... futex resumed>) = 0 [pid 368] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = 1 [pid 362] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 358] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 371] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 362] sendmmsg(-1, [pid 371] <... openat resumed>) = 4 [pid 368] <... futex resumed>) = 1 [pid 367] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = 0 [pid 362] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 371] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... mmap resumed>) = 0x200000000000 [pid 371] <... futex resumed>) = 0 [pid 372] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] <... futex resumed>) = 1 [pid 361] <... futex resumed>) = 0 [pid 372] <... futex resumed>) = 0 [pid 362] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 361] <... futex resumed>) = 0 [pid 362] ioctl(-1, SIOCGIFINDEX, NULL [pid 361] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 368] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 362] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 367] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 1 [pid 361] <... futex resumed>) = 0 [pid 358] <... openat resumed>) = 4 [pid 371] <... futex resumed>) = 0 [pid 368] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = 1 [pid 362] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] exit_group(0 [pid 358] newfstatat(4, "", [pid 372] <... futex resumed>) = 0 [pid 371] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 368] <... futex resumed>) = 1 [pid 367] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = ? [pid 361] <... exit_group resumed>) = ? [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 24.511208][ T23] audit: type=1400 audit(1744820613.270:74): avc: denied { create } for pid=361 comm="syz-executor346" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.519445][ T373] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.532002][ T23] audit: type=1400 audit(1744820613.280:75): avc: denied { read write } for pid=361 comm="syz-executor346" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [pid 368] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] close(4) = 0 [pid 358] rmdir("./0/file1") = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] close(3) = 0 [pid 358] rmdir("./0") = 0 [pid 358] mkdir("./1", 0777) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 358] ioctl(3, LOOP_CLR_FD) = 0 [pid 358] close(3) = 0 [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 393 ./strace-static-x86_64: Process 393 attached [pid 371] <... mmap resumed>) = 0x200000000000 [pid 362] +++ exited with 0 +++ [pid 393] set_robust_list(0x5555751e4760, 24) = 0 [pid 371] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] +++ exited with 0 +++ [pid 371] <... futex resumed>) = 1 [pid 367] <... futex resumed>) = 0 [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=361, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 371] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] restart_syscall(<... resuming interrupted clone ...> [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 367] <... futex resumed>) = 0 [pid 367] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] chdir("./1") = 0 [pid 393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 393] setpgid(0, 0) = 0 [pid 393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 393] write(3, "1000", 4) = 4 [pid 393] close(3) = 0 [pid 393] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 393] write(1, "executing program\n", 18) = 18 [pid 393] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 393] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 393] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 359] <... restart_syscall resumed>) = 0 [pid 359] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 359] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] unlink("./0/binderfs") = 0 [pid 359] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 393] <... mprotect resumed>) = 0 [pid 393] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[395]}, 88) = 395 [pid 393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 393] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 395 attached [pid 395] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 395] memfd_create("syzkaller", 0) = 3 [pid 395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 372] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 371] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 372] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 372] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 372] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 371] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 371] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 395] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 395] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = 0 [pid 372] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 372] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 372] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 372] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 372] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 372] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 372] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 372] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 372] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 367] <... futex resumed>) = 0 [pid 367] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 367] <... futex resumed>) = 1 [pid 367] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] <... futex resumed>) = 0 [pid 371] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 372] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 371] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 371] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 372] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 372] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = 1 [pid 372] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 372] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] exit_group(0) = ? [pid 371] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 372] <... futex resumed>) = ? [pid 372] +++ exited with 0 +++ [pid 368] +++ exited with 0 +++ [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=368, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 360] restart_syscall(<... resuming interrupted clone ...> [pid 371] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 371] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 371] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 371] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 371] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 371] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 371] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 371] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 371] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] <... restart_syscall resumed>) = 0 [pid 360] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 360] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] unlink("./0/binderfs") = 0 [pid 360] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 395] <... openat resumed>) = 4 [pid 395] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 395] close(3) = 0 [pid 395] close(4) = 0 [pid 395] mkdir("./file1", 0777 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 367] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... mkdir resumed>) = 0 [pid 395] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 374] <... mount resumed>) = 0 [pid 374] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 374] chdir("./file1") = 0 [pid 374] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 374] ioctl(4, LOOP_CLR_FD) = 0 [pid 374] close(4) = 0 [pid 374] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 374] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 374] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 367] <... futex resumed>) = 1 [pid 371] <... futex resumed>) = 0 [pid 371] ioctl(-1, SIOCGIFINDEX, NULL [pid 367] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 371] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] <... futex resumed>) = 0 [pid 367] exit_group(0 [pid 371] <... futex resumed>) = ? [pid 367] <... exit_group resumed>) = ? [pid 371] +++ exited with 0 +++ [ 24.587166][ T372] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.605322][ T371] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.621011][ T374] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 367] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=367, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 374] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 365] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", [pid 374] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 374] capset(0x200000000000, NULL [pid 365] getdents64(3, [pid 359] <... umount2 resumed>) = 0 [pid 374] <... capset resumed>) = -1 EFAULT (Bad address) [pid 365] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] <... umount2 resumed>) = 0 [pid 374] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./0/binderfs" [pid 374] <... futex resumed>) = 1 [pid 369] <... futex resumed>) = 0 [pid 360] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 369] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 369] <... futex resumed>) = 0 [pid 360] newfstatat(AT_FDCWD, "./0/file1", [pid 374] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 369] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... unlink resumed>) = 0 [pid 365] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 374] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 360] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 374] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 360] <... openat resumed>) = 4 [pid 360] newfstatat(4, "", [pid 374] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(4, [pid 374] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 360] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 374] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 360] getdents64(4, [pid 374] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 360] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] close(4 [pid 374] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 360] <... close resumed>) = 0 [pid 360] rmdir("./0/file1" [pid 374] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 374] sendmmsg(-1, [pid 360] <... rmdir resumed>) = 0 [pid 360] getdents64(3, [pid 374] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 359] newfstatat(AT_FDCWD, "./0/file1", [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 374] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] close(3 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] <... close resumed>) = 0 [pid 374] <... futex resumed>) = 1 [pid 369] <... futex resumed>) = 0 [pid 360] rmdir("./0" [pid 374] ioctl(-1, SIOCGIFINDEX, NULL [pid 369] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 369] <... futex resumed>) = 0 [pid 360] <... rmdir resumed>) = 0 [pid 374] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] mkdir("./1", 0777 [pid 374] <... futex resumed>) = 0 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 359] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 369] exit_group(0 [pid 360] <... mkdir resumed>) = 0 [pid 369] <... exit_group resumed>) = ? [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 374] +++ exited with 0 +++ [pid 369] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=369, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 360] <... openat resumed>) = 3 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] ioctl(3, LOOP_CLR_FD [pid 359] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] <... ioctl resumed>) = 0 [pid 359] <... openat resumed>) = 4 [pid 395] <... mount resumed>) = 0 [pid 360] close(3 [pid 359] newfstatat(4, "", [pid 360] <... close resumed>) = 0 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 359] getdents64(4, [pid 360] <... clone resumed>, child_tidptr=0x5555751e4750) = 400 [pid 359] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 395] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 359] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] close(4 [pid 395] <... openat resumed>) = 3 [pid 359] <... close resumed>) = 0 [pid 395] chdir("./file1" [pid 359] rmdir("./0/file1" [pid 395] <... chdir resumed>) = 0 [pid 359] <... rmdir resumed>) = 0 [pid 359] getdents64(3, [pid 395] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3) = 0 [pid 395] <... openat resumed>) = 4 [pid 359] rmdir("./0") = 0 [pid 359] mkdir("./1", 0777) = 0 ./strace-static-x86_64: Process 400 attached [pid 395] ioctl(4, LOOP_CLR_FD [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 400] set_robust_list(0x5555751e4760, 24) = 0 [pid 364] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 400] chdir("./1" [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 400] <... chdir resumed>) = 0 [pid 364] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 400] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 364] <... openat resumed>) = 3 [pid 364] newfstatat(3, "", [pid 400] <... prctl resumed>) = 0 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 400] setpgid(0, 0) = 0 [pid 364] getdents64(3, [pid 400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 364] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 400] <... openat resumed>) = 3 [pid 364] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 400] write(3, "1000", 4 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 400] <... write resumed>) = 4 [pid 364] newfstatat(AT_FDCWD, "./0/binderfs", [pid 400] close(3 [pid 364] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 400] <... close resumed>) = 0 [pid 364] unlink("./0/binderfs" [pid 400] symlink("/dev/binderfs", "./binderfs") = 0 [pid 364] <... unlink resumed>) = 0 [pid 400] write(1, "executing program\n", 18 [pid 364] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 400] <... write resumed>) = 18 [pid 400] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000executing program ) = 0 [pid 400] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 400] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 400] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 400] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[401]}, 88) = 401 [pid 400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 400] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 401 attached [pid 401] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 401] memfd_create("syzkaller", 0) = 3 [pid 401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 365] <... umount2 resumed>) = 0 [pid 395] <... ioctl resumed>) = 0 [pid 365] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] <... openat resumed>) = 3 [pid 395] close(4 [pid 359] ioctl(3, LOOP_CLR_FD [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 365] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] close(4) = 0 [pid 365] rmdir("./0/file1") = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] close(3) = 0 [pid 365] rmdir("./0") = 0 [pid 365] mkdir("./1", 0777) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 401] <... write resumed>) = 1048576 [pid 401] munmap(0x7fa2c44f5000, 138412032) = 0 [ 24.651623][ T374] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.669166][ T395] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 401] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 395] <... close resumed>) = 0 [pid 365] <... openat resumed>) = 3 [pid 364] <... umount2 resumed>) = 0 [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 395] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] ioctl(3, LOOP_CLR_FD [pid 364] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] close(3 [pid 395] <... futex resumed>) = 1 [pid 393] <... futex resumed>) = 0 [pid 395] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] <... close resumed>) = 0 [pid 365] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] <... futex resumed>) = 0 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 364] newfstatat(AT_FDCWD, "./0/file1", [pid 395] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 393] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] close(3 [pid 395] <... openat resumed>) = 4 [pid 395] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 395] <... futex resumed>) = 1 [pid 393] <... futex resumed>) = 0 [pid 365] <... close resumed>) = 0 [pid 359] <... clone resumed>, child_tidptr=0x5555751e4750) = 402 [pid 364] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 402 attached [pid 395] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] <... futex resumed>) = 0 [pid 395] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 393] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... mmap resumed>) = 0x200000000000 [pid 395] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 393] <... futex resumed>) = 0 [pid 395] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] <... futex resumed>) = 0 ./strace-static-x86_64: Process 403 attached [pid 402] set_robust_list(0x5555751e4760, 24 [pid 365] <... clone resumed>, child_tidptr=0x5555751e4750) = 403 [pid 364] <... openat resumed>) = 4 [pid 402] <... set_robust_list resumed>) = 0 [pid 364] newfstatat(4, "", [pid 402] chdir("./1" [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 402] <... chdir resumed>) = 0 [pid 364] getdents64(4, [pid 402] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 364] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 402] <... prctl resumed>) = 0 [pid 364] getdents64(4, [pid 402] setpgid(0, 0 [pid 364] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 402] <... setpgid resumed>) = 0 [pid 364] close(4 [pid 402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 364] <... close resumed>) = 0 [pid 402] <... openat resumed>) = 3 [pid 364] rmdir("./0/file1" [pid 402] write(3, "1000", 4 [pid 393] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] <... rmdir resumed>) = 0 [pid 403] set_robust_list(0x5555751e4760, 24 [pid 402] <... write resumed>) = 4 [pid 401] <... openat resumed>) = 4 [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 364] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] close(3 [pid 402] close(3 [pid 401] ioctl(4, LOOP_SET_FD, 3 [pid 364] <... close resumed>) = 0 [pid 364] rmdir("./0" [pid 402] <... close resumed>) = 0 [pid 364] <... rmdir resumed>) = 0 [pid 402] symlink("/dev/binderfs", "./binderfs" [pid 364] mkdir("./1", 0777executing program [pid 402] <... symlink resumed>) = 0 [pid 364] <... mkdir resumed>) = 0 [pid 402] write(1, "executing program\n", 18 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 402] <... write resumed>) = 18 [pid 403] <... set_robust_list resumed>) = 0 [pid 402] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... ioctl resumed>) = 0 [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 364] <... openat resumed>) = 3 [pid 402] <... futex resumed>) = 0 [pid 401] close(3 [pid 364] ioctl(3, LOOP_CLR_FD [pid 402] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 401] <... close resumed>) = 0 [pid 364] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 402] <... rt_sigaction resumed>NULL, 8) = 0 [pid 401] close(4 [pid 364] close(3 [pid 402] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 401] <... close resumed>) = 0 [pid 364] <... close resumed>) = 0 [pid 401] mkdir("./file1", 0777 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 401] <... mkdir resumed>) = 0 [pid 401] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 364] <... clone resumed>, child_tidptr=0x5555751e4750) = 405 [pid 402] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 405 attached [pid 403] chdir("./1" [pid 402] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 395] capset(0x200000000000, NULL [pid 402] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 402] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 402] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 402] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}./strace-static-x86_64: Process 406 attached => {parent_tid=[406]}, 88) = 406 [pid 402] rt_sigprocmask(SIG_SETMASK, [], [pid 406] set_robust_list(0x7fa2cc9159a0, 24 [pid 402] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 402] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] set_robust_list(0x5555751e4760, 24 [pid 402] <... futex resumed>) = 0 [pid 406] <... set_robust_list resumed>) = 0 [pid 402] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 405] <... set_robust_list resumed>) = 0 [pid 406] rt_sigprocmask(SIG_SETMASK, [], [pid 405] chdir("./1" [pid 406] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 406] memfd_create("syzkaller", 0 [pid 403] <... chdir resumed>) = 0 [pid 405] <... chdir resumed>) = 0 [pid 405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 406] <... memfd_create resumed>) = 3 [pid 405] setpgid(0, 0) = 0 [pid 405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 395] <... capset resumed>) = -1 EFAULT (Bad address) [pid 403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 395] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... prctl resumed>) = 0 [pid 395] <... futex resumed>) = 1 [pid 393] <... futex resumed>) = 0 [pid 405] <... openat resumed>) = 3 [pid 393] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] setpgid(0, 0 [pid 393] <... futex resumed>) = 0 [pid 405] write(3, "1000", 4) = 4 [pid 393] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... setpgid resumed>) = 0 [pid 405] close(3 [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 405] <... close resumed>) = 0 [pid 405] symlink("/dev/binderfs", "./binderfs" [pid 403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- executing program [pid 403] <... openat resumed>) = 3 [pid 405] <... symlink resumed>) = 0 [pid 405] write(1, "executing program\n", 18) = 18 [pid 405] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] write(3, "1000", 4 [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 403] <... write resumed>) = 4 [pid 403] close(3) = 0 [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 405] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 405] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 403] symlink("/dev/binderfs", "./binderfs" [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 405] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 403] <... symlink resumed>) = 0 [pid 405] rt_sigprocmask(SIG_BLOCK, ~[], [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 403] write(1, "executing program\n", 18 [pid 405] <... rt_sigprocmask resumed>[], 8) = 0 [pid 405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}executing program [pid 403] <... write resumed>) = 18 [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 403] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... clone3 resumed> => {parent_tid=[407]}, 88) = 407 [pid 405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 405] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 403] <... futex resumed>) = 0 [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 403] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 403] <... rt_sigaction resumed>NULL, 8) = 0 [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 403] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 407 attached NULL, 8) = 0 [pid 395] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 395] sendmmsg(-1, [pid 403] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 395] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 407] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 403] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 395] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] rt_sigprocmask(SIG_SETMASK, [], [pid 403] <... mprotect resumed>) = 0 [pid 395] <... futex resumed>) = 1 [pid 393] <... futex resumed>) = 0 [pid 407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 403] rt_sigprocmask(SIG_BLOCK, ~[], [pid 395] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] memfd_create("syzkaller", 0 [pid 403] <... rt_sigprocmask resumed>[], 8) = 0 [pid 395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] <... futex resumed>) = 0 [pid 401] <... mount resumed>) = 0 [pid 401] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 395] ioctl(-1, SIOCGIFINDEX, NULL [pid 393] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] chdir("./file1") = 0 [pid 401] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 407] <... memfd_create resumed>) = 3 [pid 401] ioctl(4, LOOP_CLR_FD [pid 407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 395] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 401] <... ioctl resumed>) = 0 [pid 401] close(4) = 0 [pid 401] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [ 24.807334][ T395] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.845988][ T401] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 401] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 401] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [pid 401] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 401] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [pid 407] <... mmap resumed>) = 0x7fa2c44f5000 [pid 406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 395] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... clone3 resumed> => {parent_tid=[410]}, 88) = 410 [pid 395] <... futex resumed>) = 1 [pid 393] <... futex resumed>) = 0 [pid 403] rt_sigprocmask(SIG_SETMASK, [], [pid 395] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] exit_group(0 [pid 403] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 395] <... futex resumed>) = ? [pid 393] <... exit_group resumed>) = ? [pid 403] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] +++ exited with 0 +++ [pid 393] +++ exited with 0 +++ [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=393, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- ./strace-static-x86_64: Process 410 attached [pid 410] set_robust_list(0x7fa2cc9159a0, 24 [pid 401] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 407] <... write resumed>) = 1048576 [pid 406] <... write resumed>) = 1048576 [pid 406] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 406] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 406] ioctl(4, LOOP_SET_FD, 3 [pid 410] <... set_robust_list resumed>) = 0 [pid 358] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 407] munmap(0x7fa2c44f5000, 138412032 [pid 406] <... ioctl resumed>) = 0 [pid 401] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 406] close(3) = 0 [pid 406] close(4) = 0 [pid 406] mkdir("./file1", 0777) = 0 [pid 406] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 410] memfd_create("syzkaller", 0 [pid 358] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 410] <... memfd_create resumed>) = 3 [pid 358] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 358] getdents64(3, [pid 410] <... mmap resumed>) = 0x7fa2c44f5000 [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 407] <... munmap resumed>) = 0 [pid 407] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 407] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 407] close(3) = 0 [pid 407] close(4) = 0 [pid 407] mkdir("./file1", 0777) = 0 [pid 407] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 358] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./1/binderfs") = 0 [pid 358] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 401] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 401] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 401] <... futex resumed>) = 1 [pid 400] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 401] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 410] <... write resumed>) = 1048576 [pid 401] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [ 24.858390][ T401] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 401] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 401] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 401] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 401] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 401] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 401] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 401] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 401] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 401] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 401] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [pid 401] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 401] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] exit_group(0) = ? [pid 401] <... futex resumed>) = ? [pid 401] +++ exited with 0 +++ [pid 400] +++ exited with 0 +++ [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=400, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 360] restart_syscall(<... resuming interrupted clone ...> [pid 410] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 410] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 406] <... mount resumed>) = 0 [pid 406] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 406] chdir("./file1") = 0 [pid 406] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 358] <... umount2 resumed>) = 0 [pid 410] <... openat resumed>) = 4 [pid 360] <... restart_syscall resumed>) = 0 [pid 406] <... openat resumed>) = 4 [pid 406] ioctl(4, LOOP_CLR_FD) = 0 [pid 406] close(4) = 0 [pid 358] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 406] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] newfstatat(AT_FDCWD, "./1/file1", [pid 406] <... futex resumed>) = 1 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 406] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 358] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 358] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 406] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] getdents64(4, [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 406] <... futex resumed>) = 1 [pid 406] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 358] close(4 [pid 406] <... mmap resumed>) = 0x200000000000 [pid 358] <... close resumed>) = 0 [pid 358] rmdir("./1/file1") = 0 [pid 406] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 1 [pid 410] ioctl(4, LOOP_SET_FD, 3 [pid 407] <... mount resumed>) = 0 [pid 358] getdents64(3, [pid 360] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 360] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] unlink("./1/binderfs") = 0 [pid 360] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 407] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 406] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 410] <... ioctl resumed>) = 0 [pid 358] close(3) = 0 [pid 358] rmdir("./1" [pid 410] close(3 [pid 358] <... rmdir resumed>) = 0 [pid 410] <... close resumed>) = 0 [pid 358] mkdir("./2", 0777 [pid 410] close(4 [pid 358] <... mkdir resumed>) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 406] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 407] <... openat resumed>) = 3 [pid 407] chdir("./file1") = 0 [pid 407] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 406] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 406] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 1 [pid 406] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 406] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 406] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 406] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 406] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 406] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 406] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 406] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 406] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 406] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 406] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 406] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 406] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 406] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 402] exit_group(0) = ? [pid 406] +++ exited with 0 +++ [pid 402] +++ exited with 0 +++ [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=402, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 359] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 359] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 359] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] unlink("./1/binderfs") = 0 [ 24.902203][ T406] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 24.917145][ T407] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 24.920932][ T406] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 359] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 410] <... close resumed>) = 0 [pid 410] mkdir("./file1", 0777) = 0 [pid 410] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 407] <... openat resumed>) = 4 [pid 358] <... openat resumed>) = 3 [pid 407] ioctl(4, LOOP_CLR_FD [pid 358] ioctl(3, LOOP_CLR_FD [pid 407] <... ioctl resumed>) = 0 [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 407] close(4 [pid 358] close(3 [pid 407] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 407] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 407] <... futex resumed>) = 1 [pid 407] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 418 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] <... futex resumed>) = 0 [pid 405] <... futex resumed>) = 1 [pid 407] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 405] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] <... openat resumed>) = 4 [pid 407] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 405] <... futex resumed>) = 0 [pid 407] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 405] <... futex resumed>) = 0 [pid 407] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 405] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] <... mmap resumed>) = 0x200000000000 [pid 407] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 418 attached ) = 1 [pid 405] <... futex resumed>) = 0 [pid 407] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 405] <... futex resumed>) = 0 [pid 418] set_robust_list(0x5555751e4760, 24 [pid 405] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... set_robust_list resumed>) = 0 [pid 418] chdir("./2") = 0 [pid 418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 418] setpgid(0, 0) = 0 [pid 418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 418] write(3, "1000", 4) = 4 [pid 418] close(3) = 0 executing program [pid 418] symlink("/dev/binderfs", "./binderfs") = 0 [pid 418] write(1, "executing program\n", 18) = 18 [pid 418] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 418] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 418] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 418] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[419]}, 88) = 419 [pid 418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 418] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 419 attached [pid 419] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 419] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 419] memfd_create("syzkaller", 0) = 3 [pid 419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 407] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 419] <... mmap resumed>) = 0x7fa2c44f5000 [pid 407] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 419] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 419] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 407] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 407] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 407] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 410] <... mount resumed>) = 0 [pid 407] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 407] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 410] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 407] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 407] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 407] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 407] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 407] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 407] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 407] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 407] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 407] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] <... futex resumed>) = 1 [pid 407] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 407] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 405] exit_group(0) = ? [pid 407] <... futex resumed>) = ? [pid 410] <... openat resumed>) = 3 [pid 407] +++ exited with 0 +++ [pid 405] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=405, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 410] chdir("./file1" [pid 364] restart_syscall(<... resuming interrupted clone ...> [pid 410] <... chdir resumed>) = 0 [pid 410] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 364] <... restart_syscall resumed>) = 0 [pid 364] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 364] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./1/binderfs") = 0 [ 25.016936][ T407] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.035335][ T410] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 364] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 410] <... openat resumed>) = 4 [pid 410] ioctl(4, LOOP_CLR_FD [pid 360] <... umount2 resumed>) = 0 [pid 359] <... umount2 resumed>) = 0 [pid 359] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 410] <... ioctl resumed>) = 0 [pid 359] newfstatat(AT_FDCWD, "./1/file1", [pid 410] close(4 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 410] <... close resumed>) = 0 [pid 360] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 410] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 410] <... futex resumed>) = 1 [pid 403] <... futex resumed>) = 0 [pid 359] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 410] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 403] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... openat resumed>) = 4 [pid 410] <... openat resumed>) = 4 [pid 403] <... futex resumed>) = 0 [pid 359] newfstatat(4, "", [pid 410] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 410] <... futex resumed>) = 0 [pid 403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 359] getdents64(4, [pid 410] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 403] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 410] <... mmap resumed>) = 0x200000000000 [pid 403] <... futex resumed>) = 0 [pid 359] getdents64(4, [pid 410] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 410] <... futex resumed>) = 0 [pid 419] <... openat resumed>) = 4 [pid 403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 364] <... umount2 resumed>) = 0 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] close(4 [pid 419] ioctl(4, LOOP_SET_FD, 3 [pid 403] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] newfstatat(AT_FDCWD, "./1/file1", [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] newfstatat(AT_FDCWD, "./1/file1", [pid 360] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... openat resumed>) = 4 [pid 364] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] newfstatat(4, "", [pid 364] <... openat resumed>) = 4 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] newfstatat(4, "", [pid 360] getdents64(4, [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 364] getdents64(4, [pid 360] getdents64(4, [pid 364] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 360] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] getdents64(4, [pid 360] close(4 [pid 364] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] <... close resumed>) = 0 [pid 364] close(4 [pid 360] rmdir("./1/file1" [pid 364] <... close resumed>) = 0 [pid 360] <... rmdir resumed>) = 0 [pid 364] rmdir("./1/file1" [pid 360] getdents64(3, [pid 364] <... rmdir resumed>) = 0 [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] getdents64(3, [pid 360] close(3 [pid 364] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] <... close resumed>) = 0 [pid 364] close(3 [pid 360] rmdir("./1" [pid 364] <... close resumed>) = 0 [pid 360] <... rmdir resumed>) = 0 [pid 364] rmdir("./1" [pid 360] mkdir("./2", 0777 [pid 364] <... rmdir resumed>) = 0 [pid 360] <... mkdir resumed>) = 0 [pid 364] mkdir("./2", 0777 [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 364] <... mkdir resumed>) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 419] <... ioctl resumed>) = 0 [pid 364] <... openat resumed>) = 3 [pid 360] <... openat resumed>) = 3 [pid 419] close(3 [pid 364] ioctl(3, LOOP_CLR_FD [pid 360] ioctl(3, LOOP_CLR_FD [pid 419] <... close resumed>) = 0 [pid 364] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 419] close(4 [pid 364] close(3 [pid 360] close(3 [pid 359] <... close resumed>) = 0 [pid 359] rmdir("./1/file1") = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3) = 0 [pid 359] rmdir("./1") = 0 [pid 359] mkdir("./2", 0777) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 410] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 410] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 410] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 410] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] <... futex resumed>) = 0 [pid 410] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 403] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 410] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 410] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 410] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 410] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 410] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 410] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 410] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 410] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 410] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 410] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 410] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 410] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 403] exit_group(0) = ? [pid 410] +++ exited with 0 +++ [pid 403] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=403, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 365] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 365] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./1/binderfs") = 0 [pid 365] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 419] <... close resumed>) = 0 [pid 364] <... close resumed>) = 0 [pid 419] mkdir("./file1", 0777 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 423 [pid 419] <... mkdir resumed>) = 0 [pid 419] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue"./strace-static-x86_64: Process 423 attached [pid 423] set_robust_list(0x5555751e4760, 24) = 0 [pid 423] chdir("./2") = 0 [pid 423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 423] setpgid(0, 0) = 0 [pid 423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 423] write(3, "1000", 4) = 4 [pid 423] close(3) = 0 [pid 423] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 423] write(1, "executing program\n", 18) = 18 [pid 423] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 423] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 423] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 423] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[424]}, 88) = 424 [pid 423] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 423] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 424 attached [pid 424] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 424] memfd_create("syzkaller", 0) = 3 [pid 424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 424] munmap(0x7fa2c44f5000, 138412032) = 0 [ 25.171614][ T410] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 424] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 360] <... close resumed>) = 0 [pid 359] <... openat resumed>) = 3 [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 359] ioctl(3, LOOP_CLR_FD [pid 360] <... clone resumed>, child_tidptr=0x5555751e4750) = 425 ./strace-static-x86_64: Process 425 attached [pid 425] set_robust_list(0x5555751e4760, 24) = 0 [pid 425] chdir("./2") = 0 [pid 425] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 425] setpgid(0, 0) = 0 [pid 425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 425] write(3, "1000", 4) = 4 [pid 425] close(3) = 0 [pid 425] symlink("/dev/binderfs", "./binderfs") = 0 [pid 425] write(1, "executing program\n", 18executing program ) = 18 [pid 425] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 419] <... mount resumed>) = 0 [pid 425] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 419] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 419] chdir("./file1") = 0 [pid 419] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 425] <... rt_sigaction resumed>NULL, 8) = 0 [pid 425] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 425] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 425] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}./strace-static-x86_64: Process 428 attached => {parent_tid=[428]}, 88) = 428 [pid 428] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 428] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 428] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 425] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] memfd_create("syzkaller", 0) = 3 [pid 428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 425] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 428] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 428] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 424] <... openat resumed>) = 4 [pid 419] <... openat resumed>) = 4 [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 419] ioctl(4, LOOP_CLR_FD [pid 359] close(3 [pid 419] <... ioctl resumed>) = 0 [pid 359] <... close resumed>) = 0 [pid 419] close(4 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 419] <... close resumed>) = 0 [pid 419] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... clone resumed>, child_tidptr=0x5555751e4750) = 429 [pid 419] <... futex resumed>) = 1 [pid 418] <... futex resumed>) = 0 [pid 419] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 418] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] <... openat resumed>) = 4 [pid 418] <... futex resumed>) = 0 [pid 419] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] <... futex resumed>) = 0 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 419] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 418] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] <... mmap resumed>) = 0x200000000000 [pid 418] <... futex resumed>) = 0 ./strace-static-x86_64: Process 429 attached [pid 424] ioctl(4, LOOP_SET_FD, 3 [pid 419] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] <... futex resumed>) = 0 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 429] set_robust_list(0x5555751e4760, 24 [pid 428] <... openat resumed>) = 4 [pid 418] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... umount2 resumed>) = 0 [pid 365] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 365] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] close(4) = 0 [pid 365] rmdir("./1/file1") = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] close(3) = 0 [pid 365] rmdir("./1") = 0 [pid 365] mkdir("./2", 0777) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 428] ioctl(4, LOOP_SET_FD, 3 [pid 429] <... set_robust_list resumed>) = 0 [pid 429] chdir("./2") = 0 [pid 429] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 429] setpgid(0, 0) = 0 [pid 429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 429] write(3, "1000", 4) = 4 [pid 429] close(3) = 0 [pid 429] symlink("/dev/binderfs", "./binderfs") = 0 [pid 429] write(1, "executing program\n", 18executing program ) = 18 [pid 429] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 428] <... ioctl resumed>) = 0 [pid 424] <... ioctl resumed>) = 0 [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 418] <... futex resumed>) = 0 [pid 365] <... openat resumed>) = 3 [pid 424] close(3 [pid 428] close(3 [pid 424] <... close resumed>) = 0 [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 418] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] ioctl(3, LOOP_CLR_FD [pid 424] close(4 [pid 428] <... close resumed>) = 0 [pid 424] <... close resumed>) = 0 [pid 419] capset(0x200000000000, NULL [pid 365] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 424] mkdir("./file1", 0777 [pid 428] close(4 [pid 419] <... capset resumed>) = -1 EFAULT (Bad address) [pid 365] close(3 [pid 419] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... close resumed>) = 0 [pid 419] <... futex resumed>) = 1 [pid 418] <... futex resumed>) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 424] <... mkdir resumed>) = 0 [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 418] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 424] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 418] <... futex resumed>) = 0 [pid 365] <... clone resumed>, child_tidptr=0x5555751e4750) = 432 [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 418] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 429] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 419] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 419] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] <... futex resumed>) = 0 [pid 419] ioctl(-1, SIOCGIFINDEX, NULL [pid 418] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 418] <... futex resumed>) = 0 [pid 419] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] <... futex resumed>) = 0 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 429] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 419] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] exit_group(0 [pid 419] <... futex resumed>) = ? [pid 418] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 432 attached [pid 429] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 419] +++ exited with 0 +++ [pid 418] +++ exited with 0 +++ [pid 429] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 429] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[433]}, 88) = 433 [pid 429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 429] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 432] set_robust_list(0x5555751e4760, 24) = 0 ./strace-static-x86_64: Process 433 attached [pid 432] chdir("./2" [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=418, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 432] <... chdir resumed>) = 0 [pid 432] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 432] setpgid(0, 0 [pid 433] set_robust_list(0x7fa2cc9159a0, 24 [pid 358] restart_syscall(<... resuming interrupted clone ...> [pid 432] <... setpgid resumed>) = 0 executing program [pid 432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 433] <... set_robust_list resumed>) = 0 [pid 433] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 433] memfd_create("syzkaller", 0 [pid 432] <... openat resumed>) = 3 [pid 432] write(3, "1000", 4) = 4 [pid 432] close(3) = 0 [pid 432] symlink("/dev/binderfs", "./binderfs" [pid 433] <... memfd_create resumed>) = 3 [pid 432] <... symlink resumed>) = 0 [pid 432] write(1, "executing program\n", 18) = 18 [pid 432] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 432] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 432] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 432] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 432] rt_sigprocmask(SIG_BLOCK, ~[], [pid 433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 432] <... rt_sigprocmask resumed>[], 8) = 0 [pid 432] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 433] <... mmap resumed>) = 0x7fa2c44f5000 [pid 432] <... clone3 resumed> => {parent_tid=[434]}, 88) = 434 [pid 432] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 432] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 434 attached [pid 434] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 434] memfd_create("syzkaller", 0) = 3 [pid 358] <... restart_syscall resumed>) = 0 [pid 434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 358] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 434] <... mmap resumed>) = 0x7fa2c44f5000 [pid 358] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 358] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./2/binderfs") = 0 [pid 358] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 433] <... write resumed>) = 1048576 [pid 433] munmap(0x7fa2c44f5000, 138412032 [pid 428] <... close resumed>) = 0 [ 25.264294][ T419] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 25.297505][ T419] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 428] mkdir("./file1", 0777 [pid 434] <... write resumed>) = 1048576 [pid 434] munmap(0x7fa2c44f5000, 138412032 [pid 428] <... mkdir resumed>) = 0 [pid 434] <... munmap resumed>) = 0 [pid 434] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 428] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 433] <... munmap resumed>) = 0 [pid 433] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 434] <... openat resumed>) = 4 [pid 433] <... openat resumed>) = 4 [pid 424] <... mount resumed>) = 0 [pid 358] <... umount2 resumed>) = 0 [pid 434] ioctl(4, LOOP_SET_FD, 3 [pid 433] ioctl(4, LOOP_SET_FD, 3 [pid 424] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 358] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 434] <... ioctl resumed>) = 0 [pid 434] close(3) = 0 [pid 434] close(4 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./2/file1", [pid 424] <... openat resumed>) = 3 [pid 424] chdir("./file1" [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 424] <... chdir resumed>) = 0 [pid 424] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 358] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] getdents64(4, [pid 428] <... mount resumed>) = 0 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] close(4) = 0 [pid 358] rmdir("./2/file1" [pid 428] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 358] <... rmdir resumed>) = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] close(3) = 0 [pid 358] rmdir("./2" [pid 428] <... openat resumed>) = 3 [pid 358] <... rmdir resumed>) = 0 [pid 358] mkdir("./3", 0777 [pid 428] chdir("./file1" [pid 358] <... mkdir resumed>) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 428] <... chdir resumed>) = 0 [pid 428] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 434] <... close resumed>) = 0 [pid 434] mkdir("./file1", 0777 [pid 433] <... ioctl resumed>) = 0 [pid 424] <... openat resumed>) = 4 [pid 358] <... openat resumed>) = 3 [pid 424] ioctl(4, LOOP_CLR_FD [pid 358] ioctl(3, LOOP_CLR_FD [pid 424] <... ioctl resumed>) = 0 [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 424] close(4 [pid 358] close(3 [pid 424] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 424] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 424] <... futex resumed>) = 1 [pid 423] <... futex resumed>) = 0 [pid 424] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 423] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... openat resumed>) = 4 [pid 423] <... futex resumed>) = 0 [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 441 [pid 424] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 0 [pid 423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 424] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [ 25.354654][ T424] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 25.374914][ T428] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 423] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... mmap resumed>) = 0x200000000000 [pid 423] <... futex resumed>) = 0 [pid 424] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... mkdir resumed>) = 0 [pid 433] close(3 [pid 424] <... futex resumed>) = 0 [pid 423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 441 attached [pid 434] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 433] <... close resumed>) = 0 [pid 423] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] close(4 [pid 441] set_robust_list(0x5555751e4760, 24) = 0 [pid 441] chdir("./3") = 0 [pid 441] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 441] setpgid(0, 0) = 0 [pid 441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 441] write(3, "1000", 4) = 4 [pid 441] close(3) = 0 [pid 441] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 441] write(1, "executing program\n", 18) = 18 [pid 441] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 441] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 441] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 441] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 441] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 441] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[442]}, 88) = 442 [pid 441] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 441] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 441] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 442 attached [pid 442] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 442] memfd_create("syzkaller", 0) = 3 [pid 442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 442] <... write resumed>) = 1048576 [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 442] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 424] capset(0x200000000000, NULL [pid 442] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 424] <... capset resumed>) = -1 EFAULT (Bad address) [pid 424] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 424] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 424] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 424] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 424] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] <... futex resumed>) = 0 [pid 423] exit_group(0) = ? [pid 424] +++ exited with 0 +++ [pid 423] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=423, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 364] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 364] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 364] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./2/binderfs") = 0 [pid 364] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 428] <... openat resumed>) = 4 [ 25.413072][ T424] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 428] ioctl(4, LOOP_CLR_FD [pid 434] <... mount resumed>) = 0 [pid 434] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 434] chdir("./file1") = 0 [pid 434] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 442] <... openat resumed>) = 4 [pid 433] <... close resumed>) = 0 [pid 428] <... ioctl resumed>) = 0 [pid 442] ioctl(4, LOOP_SET_FD, 3 [pid 433] mkdir("./file1", 0777 [pid 428] close(4 [pid 433] <... mkdir resumed>) = 0 [ 25.454252][ T434] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 433] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 434] <... openat resumed>) = 4 [pid 442] <... ioctl resumed>) = 0 [pid 442] close(3) = 0 [pid 442] close(4 [pid 434] ioctl(4, LOOP_CLR_FD [pid 442] <... close resumed>) = 0 [pid 428] <... close resumed>) = 0 [pid 442] mkdir("./file1", 0777 [pid 428] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... umount2 resumed>) = 0 [pid 442] <... mkdir resumed>) = 0 [pid 434] <... ioctl resumed>) = 0 [pid 428] <... futex resumed>) = 1 [pid 425] <... futex resumed>) = 0 [pid 364] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 442] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 428] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 425] <... futex resumed>) = 0 [pid 428] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 425] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 428] <... openat resumed>) = 4 [pid 428] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 425] <... futex resumed>) = 0 [pid 428] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 425] <... futex resumed>) = 0 [pid 428] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 425] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 428] <... mmap resumed>) = 0x200000000000 [pid 428] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 425] <... futex resumed>) = 0 [pid 428] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 364] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 364] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] close(4) = 0 [pid 364] rmdir("./2/file1") = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] close(3) = 0 [pid 364] rmdir("./2") = 0 [pid 364] mkdir("./3", 0777) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 364] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 364] close(3) = 0 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 448 [pid 434] close(4./strace-static-x86_64: Process 448 attached ) = 0 [pid 448] set_robust_list(0x5555751e4760, 24 [pid 434] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 1 [pid 434] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 434] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 1 [pid 434] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 434] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 1 [pid 448] <... set_robust_list resumed>) = 0 [pid 428] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 428] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 428] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 428] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 428] <... futex resumed>) = 1 [pid 428] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 428] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 428] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 428] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 428] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 428] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 428] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 428] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 428] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 428] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 428] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 428] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [ 25.573723][ T428] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.602626][ T434] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 428] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 428] <... futex resumed>) = 1 [pid 428] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 428] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] exit_group(0) = ? [pid 428] <... futex resumed>) = ? [pid 448] chdir("./3") = 0 [pid 448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 448] setpgid(0, 0) = 0 [pid 448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 448] write(3, "1000", 4) = 4 [pid 448] close(3) = 0 [pid 448] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 448] write(1, "executing program\n", 18) = 18 [pid 448] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 448] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 448] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[451]}, 88) = 451 [pid 448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 448] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 451 attached [pid 428] +++ exited with 0 +++ [pid 425] +++ exited with 0 +++ [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=425, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 360] restart_syscall(<... resuming interrupted clone ...> [pid 451] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 434] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 434] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 433] <... mount resumed>) = 0 [pid 451] memfd_create("syzkaller", 0 [pid 433] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 451] <... memfd_create resumed>) = 3 [pid 433] <... openat resumed>) = 3 [pid 451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [ 25.614912][ T433] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 433] chdir("./file1" [pid 451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 433] <... chdir resumed>) = 0 [pid 433] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 432] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 360] <... restart_syscall resumed>) = 0 [pid 433] ioctl(4, LOOP_CLR_FD) = 0 [pid 433] close(4 [pid 432] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... close resumed>) = 0 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 360] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] unlink("./2/binderfs") = 0 [pid 360] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 433] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [pid 434] <... futex resumed>) = 1 [pid 434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 433] <... futex resumed>) = 1 [pid 429] <... futex resumed>) = 0 [pid 433] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 429] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 433] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 433] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 429] <... futex resumed>) = 0 [pid 429] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 433] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 429] <... futex resumed>) = 0 [pid 433] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 429] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 429] <... futex resumed>) = 0 [pid 429] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 434] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 434] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 434] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 1 [pid 434] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 434] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] exit_group(0) = ? [pid 434] <... futex resumed>) = ? [pid 434] +++ exited with 0 +++ [pid 432] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=432, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 365] restart_syscall(<... resuming interrupted clone ...> [pid 442] <... mount resumed>) = 0 [pid 442] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 442] chdir("./file1") = 0 [pid 442] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 451] <... write resumed>) = 1048576 [pid 451] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 451] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 365] <... restart_syscall resumed>) = 0 [pid 365] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./2/binderfs") = 0 [pid 365] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 433] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 433] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 433] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 433] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 429] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 433] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 433] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 433] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 433] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 433] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 433] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 433] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 433] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 433] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 433] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 433] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 433] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 429] <... futex resumed>) = 0 [pid 433] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 429] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 433] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 433] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 429] <... futex resumed>) = 0 [pid 429] exit_group(0) = ? [pid 433] +++ exited with 0 +++ [pid 429] +++ exited with 0 +++ [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=429, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 359] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 359] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 359] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] unlink("./2/binderfs") = 0 [pid 359] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... umount2 resumed>) = 0 [pid 442] <... openat resumed>) = 4 [pid 442] ioctl(4, LOOP_CLR_FD [pid 360] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 442] <... ioctl resumed>) = 0 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 442] close(4) = 0 [pid 360] newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 442] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 442] <... futex resumed>) = 1 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 442] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 360] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 360] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] close(4) = 0 [pid 360] rmdir("./2/file1") = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] close(3) = 0 [pid 360] rmdir("./2") = 0 [pid 451] <... openat resumed>) = 4 [pid 360] mkdir("./3", 0777 [pid 451] ioctl(4, LOOP_SET_FD, 3 [pid 441] <... futex resumed>) = 0 [pid 360] <... mkdir resumed>) = 0 [pid 441] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 441] <... futex resumed>) = 1 [pid 442] <... futex resumed>) = 0 [pid 442] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 441] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 442] <... openat resumed>) = 4 [pid 442] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 441] <... futex resumed>) = 0 [pid 442] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 441] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... mmap resumed>) = 0x200000000000 [pid 441] <... futex resumed>) = 0 [pid 442] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 442] <... futex resumed>) = 0 [pid 441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 25.645671][ T442] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 25.661833][ T433] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 441] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 442] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 442] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 442] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 442] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 441] <... futex resumed>) = 0 [pid 441] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 441] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 442] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 442] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 442] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 442] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 442] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 442] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 442] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 442] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 442] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 442] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 442] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 442] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 442] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 441] <... futex resumed>) = 0 [pid 441] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 441] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 442] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 442] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 441] <... futex resumed>) = 0 [pid 441] exit_group(0) = ? [pid 442] +++ exited with 0 +++ [pid 441] +++ exited with 0 +++ [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=441, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 358] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 358] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 451] <... ioctl resumed>) = 0 [pid 365] <... umount2 resumed>) = 0 [pid 451] close(3 [pid 365] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 451] <... close resumed>) = 0 [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 451] close(4 [pid 365] newfstatat(AT_FDCWD, "./2/file1", [pid 451] <... close resumed>) = 0 [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 451] mkdir("./file1", 0777 [pid 365] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 451] <... mkdir resumed>) = 0 [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... openat resumed>) = 3 [pid 359] <... umount2 resumed>) = 0 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 451] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 365] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] ioctl(3, LOOP_CLR_FD [pid 359] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 365] <... openat resumed>) = 4 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(4, "", [pid 359] newfstatat(AT_FDCWD, "./2/file1", [pid 358] <... openat resumed>) = 3 [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] newfstatat(3, "", [pid 365] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] getdents64(4, [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] close(4 [pid 358] getdents64(3, [pid 365] <... close resumed>) = 0 [pid 359] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 365] rmdir("./2/file1") = 0 [pid 359] <... openat resumed>) = 4 [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] getdents64(3, [pid 359] newfstatat(4, "", [pid 365] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] close(3 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] <... close resumed>) = 0 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] getdents64(4, [pid 365] rmdir("./2") = 0 [pid 359] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] newfstatat(AT_FDCWD, "./3/binderfs", [pid 365] mkdir("./3", 0777 [pid 359] getdents64(4, [pid 358] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] unlink("./3/binderfs" [pid 359] close(4 [pid 358] <... unlink resumed>) = 0 [pid 359] <... close resumed>) = 0 [pid 358] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] rmdir("./2/file1") = 0 [pid 365] <... mkdir resumed>) = 0 [pid 359] getdents64(3, [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3) = 0 [pid 359] rmdir("./2") = 0 [pid 359] mkdir("./3", 0777) = 0 [ 25.706283][ T442] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 359] <... openat resumed>) = 3 [pid 365] <... openat resumed>) = 3 [pid 360] close(3 [pid 359] ioctl(3, LOOP_CLR_FD [pid 365] ioctl(3, LOOP_CLR_FD [pid 451] <... mount resumed>) = 0 [pid 451] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 451] chdir("./file1") = 0 [pid 451] openat(AT_FDCWD, "/dev/loop3", O_RDWRexecuting program [pid 360] <... close resumed>) = 0 [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 456 ./strace-static-x86_64: Process 456 attached [pid 456] set_robust_list(0x5555751e4760, 24) = 0 [pid 456] chdir("./3") = 0 [pid 456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 456] setpgid(0, 0) = 0 [pid 456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 456] write(3, "1000", 4) = 4 [pid 456] close(3) = 0 [pid 456] symlink("/dev/binderfs", "./binderfs") = 0 [pid 456] write(1, "executing program\n", 18) = 18 [pid 456] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 456] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 456] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 456] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[457]}, 88) = 457 [pid 456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 456] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 365] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 365] close(3) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 458 [pid 359] close(3) = 0 ./strace-static-x86_64: Process 457 attached [pid 451] <... openat resumed>) = 4 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 451] ioctl(4, LOOP_CLR_FD) = 0 [pid 451] close(4) = 0 [pid 359] <... clone resumed>, child_tidptr=0x5555751e4750) = 459 [pid 451] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 451] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 451] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 451] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 448] <... futex resumed>) = 0 [pid 358] <... umount2 resumed>) = 0 [pid 451] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 448] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... mmap resumed>) = 0x200000000000 [pid 451] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 459 attached ./strace-static-x86_64: Process 458 attached [pid 457] set_robust_list(0x7fa2cc9159a0, 24 [pid 451] <... futex resumed>) = 1 [pid 448] <... futex resumed>) = 0 [pid 451] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 448] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] newfstatat(AT_FDCWD, "./3/file1", [pid 457] <... set_robust_list resumed>) = 0 [pid 451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 25.784269][ T451] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 459] set_robust_list(0x5555751e4760, 24 [pid 458] set_robust_list(0x5555751e4760, 24 [pid 457] rt_sigprocmask(SIG_SETMASK, [], [pid 448] <... futex resumed>) = 0 [pid 358] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 458] <... set_robust_list resumed>) = 0 [pid 457] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 448] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 459] <... set_robust_list resumed>) = 0 [pid 458] chdir("./3" [pid 457] memfd_create("syzkaller", 0 [pid 358] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 459] chdir("./3" [pid 458] <... chdir resumed>) = 0 [pid 457] <... memfd_create resumed>) = 3 [pid 358] <... openat resumed>) = 4 [pid 459] <... chdir resumed>) = 0 [pid 458] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 358] newfstatat(4, "", [pid 459] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 458] <... prctl resumed>) = 0 [pid 457] <... mmap resumed>) = 0x7fa2c44f5000 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 459] <... prctl resumed>) = 0 [pid 458] setpgid(0, 0 [pid 457] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 358] getdents64(4, [pid 459] setpgid(0, 0 [pid 458] <... setpgid resumed>) = 0 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 459] <... setpgid resumed>) = 0 [pid 458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 358] getdents64(4, [pid 459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 458] <... openat resumed>) = 3 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 459] <... openat resumed>) = 3 [pid 458] write(3, "1000", 4 [pid 358] close(4 [pid 459] write(3, "1000", 4 [pid 458] <... write resumed>) = 4 [pid 358] <... close resumed>) = 0 [pid 459] <... write resumed>) = 4 [pid 458] close(3 [pid 358] rmdir("./3/file1" [pid 459] close(3 [pid 458] <... close resumed>) = 0 [pid 451] capset(0x200000000000, NULL [pid 358] <... rmdir resumed>) = 0 [pid 459] <... close resumed>) = 0 [pid 458] symlink("/dev/binderfs", "./binderfs" [pid 358] getdents64(3, [pid 459] symlink("/dev/binderfs", "./binderfs" [pid 458] <... symlink resumed>) = 0 [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 executing program [pid 459] <... symlink resumed>) = 0 [pid 458] write(1, "executing program\n", 18 [pid 358] close(3 [pid 459] write(1, "executing program\n", 18 [pid 458] <... write resumed>) = 18 executing program [pid 358] <... close resumed>) = 0 [pid 459] <... write resumed>) = 18 [pid 458] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] rmdir("./3" [pid 459] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 358] <... rmdir resumed>) = 0 [pid 459] <... futex resumed>) = 0 [pid 458] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 358] mkdir("./4", 0777 [pid 459] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 458] <... rt_sigaction resumed>NULL, 8) = 0 [pid 358] <... mkdir resumed>) = 0 [pid 459] <... rt_sigaction resumed>NULL, 8) = 0 [pid 458] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 459] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 458] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 358] <... openat resumed>) = 3 [pid 459] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 358] ioctl(3, LOOP_CLR_FD [pid 459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 458] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 459] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 458] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 358] close(3 [pid 459] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 458] <... mprotect resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 459] <... mprotect resumed>) = 0 [pid 458] rt_sigprocmask(SIG_BLOCK, ~[], [pid 451] <... capset resumed>) = -1 EFAULT (Bad address) [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 459] rt_sigprocmask(SIG_BLOCK, ~[], [pid 458] <... rt_sigprocmask resumed>[], 8) = 0 [pid 459] <... rt_sigprocmask resumed>[], 8) = 0 [pid 458] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 460 ./strace-static-x86_64: Process 460 attached [pid 459] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 457] <... write resumed>) = 1048576 [pid 451] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] set_robust_list(0x5555751e4760, 24 [pid 458] <... clone3 resumed> => {parent_tid=[461]}, 88) = 461 [pid 457] munmap(0x7fa2c44f5000, 138412032 [pid 451] <... futex resumed>) = 1 [pid 448] <... futex resumed>) = 0 [pid 460] <... set_robust_list resumed>) = 0 [pid 459] <... clone3 resumed> => {parent_tid=[462]}, 88) = 462 [pid 458] rt_sigprocmask(SIG_SETMASK, [], [pid 457] <... munmap resumed>) = 0 [pid 451] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 462 attached ./strace-static-x86_64: Process 461 attached [pid 460] chdir("./4" [pid 459] rt_sigprocmask(SIG_SETMASK, [], [pid 458] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 457] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 448] <... futex resumed>) = 0 [pid 462] set_robust_list(0x7fa2cc9159a0, 24 [pid 461] set_robust_list(0x7fa2cc9159a0, 24 [pid 460] <... chdir resumed>) = 0 [pid 459] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 458] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... openat resumed>) = 4 [pid 462] <... set_robust_list resumed>) = 0 [pid 461] <... set_robust_list resumed>) = 0 [pid 460] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 459] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 457] ioctl(4, LOOP_SET_FD, 3 [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 448] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] rt_sigprocmask(SIG_SETMASK, [], [pid 461] rt_sigprocmask(SIG_SETMASK, [], [pid 460] <... prctl resumed>) = 0 [pid 459] <... futex resumed>) = 0 [pid 458] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 457] <... ioctl resumed>) = 0 [pid 460] setpgid(0, 0 [pid 457] close(3 [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 460] <... setpgid resumed>) = 0 [pid 457] <... close resumed>) = 0 [pid 460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 457] close(4 [pid 460] <... openat resumed>) = 3 [pid 457] <... close resumed>) = 0 [pid 460] write(3, "1000", 4 [pid 457] mkdir("./file1", 0777 [pid 460] <... write resumed>) = 4 [pid 459] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 457] <... mkdir resumed>) = 0 [pid 460] close(3 [pid 457] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 462] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 461] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 460] <... close resumed>) = 0 [pid 460] symlink("/dev/binderfs", "./binderfs"executing program [pid 461] memfd_create("syzkaller", 0 [pid 460] <... symlink resumed>) = 0 [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 462] memfd_create("syzkaller", 0 [pid 460] write(1, "executing program\n", 18) = 18 [pid 460] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 461] <... memfd_create resumed>) = 3 [pid 460] <... futex resumed>) = 0 [pid 460] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 460] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 460] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 460] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 460] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 462] <... memfd_create resumed>) = 3 [pid 461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 460] <... clone3 resumed> => {parent_tid=[464]}, 88) = 464 [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 461] <... mmap resumed>) = 0x7fa2c44f5000 [pid 460] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 460] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 464 attached [pid 464] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 464] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 464] memfd_create("syzkaller", 0) = 3 [pid 464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 462] <... mmap resumed>) = 0x7fa2c44f5000 [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 451] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 451] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 451] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 448] <... futex resumed>) = 0 [pid 451] ioctl(-1, SIOCGIFINDEX, NULL [pid 448] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 451] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 451] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] exit_group(0) = ? [pid 451] <... futex resumed>) = ? [pid 451] +++ exited with 0 +++ [pid 448] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=448, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 364] restart_syscall(<... resuming interrupted clone ...> [pid 464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 464] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 464] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 464] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 464] close(3) = 0 [pid 464] close(4) = 0 [pid 464] mkdir("./file1", 0777) = 0 [pid 464] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 364] <... restart_syscall resumed>) = 0 [pid 364] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 364] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./3/binderfs") = 0 [ 25.833913][ T451] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 364] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 461] <... write resumed>) = 1048576 [pid 461] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 461] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 461] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 461] close(3) = 0 [pid 461] close(4 [pid 462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 457] <... mount resumed>) = 0 [pid 457] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 457] chdir("./file1") = 0 [pid 457] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 462] <... write resumed>) = 1048576 [pid 462] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 462] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 464] <... mount resumed>) = 0 [pid 364] <... umount2 resumed>) = 0 [pid 464] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 461] <... close resumed>) = 0 [pid 457] <... openat resumed>) = 4 [pid 364] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 461] mkdir("./file1", 0777 [pid 464] chdir("./file1" [pid 461] <... mkdir resumed>) = 0 [pid 457] ioctl(4, LOOP_CLR_FD [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 461] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 464] <... chdir resumed>) = 0 [pid 457] <... ioctl resumed>) = 0 [pid 364] newfstatat(AT_FDCWD, "./3/file1", [pid 457] close(4 [pid 462] <... openat resumed>) = 4 [pid 464] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 457] <... close resumed>) = 0 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 462] ioctl(4, LOOP_SET_FD, 3 [pid 457] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 457] <... futex resumed>) = 1 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... ioctl resumed>) = 0 [pid 457] <... openat resumed>) = 4 [pid 462] close(3 [pid 457] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... close resumed>) = 0 [pid 462] close(4) = 0 [pid 462] mkdir("./file1", 0777) = 0 [pid 462] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 457] <... futex resumed>) = 1 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... mmap resumed>) = 0x200000000000 [pid 457] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 457] <... futex resumed>) = 1 [pid 456] <... futex resumed>) = 0 [ 25.900567][ T457] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 25.914920][ T464] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 364] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 464] <... openat resumed>) = 4 [pid 457] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 364] <... openat resumed>) = 4 [pid 364] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 364] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] close(4) = 0 [pid 364] rmdir("./3/file1") = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] close(3) = 0 [pid 364] rmdir("./3") = 0 [pid 364] mkdir("./4", 0777) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 364] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 364] close(3) = 0 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 472 ./strace-static-x86_64: Process 472 attached [pid 472] set_robust_list(0x5555751e4760, 24) = 0 [pid 472] chdir("./4") = 0 [pid 472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 472] setpgid(0, 0) = 0 [pid 472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 472] write(3, "1000", 4) = 4 [pid 472] close(3) = 0 [pid 472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 472] write(1, "executing program\n", 18) = 18 [pid 472] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 472] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 472] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[473]}, 88) = 473 [pid 472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 472] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 473 attached [pid 473] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 473] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 473] memfd_create("syzkaller", 0) = 3 [pid 473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 456] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... write resumed>) = 1048576 [pid 473] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 473] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 473] ioctl(4, LOOP_SET_FD, 3executing program [pid 464] ioctl(4, LOOP_CLR_FD [pid 473] <... ioctl resumed>) = 0 [pid 464] <... ioctl resumed>) = 0 [pid 473] close(3 [pid 464] close(4 [pid 473] <... close resumed>) = 0 [pid 464] <... close resumed>) = 0 [pid 473] close(4 [pid 464] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 460] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 464] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 464] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] <... mount resumed>) = 0 [pid 460] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 464] <... futex resumed>) = 0 [pid 461] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 457] capset(0x200000000000, NULL [pid 464] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 461] <... openat resumed>) = 3 [pid 464] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 464] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 460] <... futex resumed>) = 1 [pid 460] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... capset resumed>) = -1 EFAULT (Bad address) [pid 457] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 457] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 457] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 457] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] exit_group(0) = ? [pid 457] <... futex resumed>) = ? [pid 457] +++ exited with 0 +++ [pid 456] +++ exited with 0 +++ [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=456, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 360] restart_syscall(<... resuming interrupted clone ...> [pid 461] chdir("./file1") = 0 [pid 461] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 360] <... restart_syscall resumed>) = 0 [pid 360] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 360] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] unlink("./3/binderfs") = 0 [ 25.943020][ T457] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.962916][ T461] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 25.974421][ T464] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 360] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 473] <... close resumed>) = 0 [pid 464] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 473] mkdir("./file1", 0777) = 0 [pid 473] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 464] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 464] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 464] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 1 [pid 464] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 464] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 464] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 464] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 464] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 464] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 464] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 464] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 464] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 464] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 464] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 464] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 464] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 1 [pid 464] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 464] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] exit_group(0) = ? [pid 464] <... futex resumed>) = ? [pid 464] +++ exited with 0 +++ [pid 460] +++ exited with 0 +++ [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=460, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 462] <... mount resumed>) = 0 [pid 462] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 358] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 462] <... openat resumed>) = 3 [pid 462] chdir("./file1" [pid 358] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 462] <... chdir resumed>) = 0 [pid 358] <... openat resumed>) = 3 [pid 462] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 358] newfstatat(3, "", [pid 462] <... openat resumed>) = 4 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 462] ioctl(4, LOOP_CLR_FD [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 462] <... ioctl resumed>) = 0 [pid 358] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 462] close(4 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./4/binderfs", [pid 462] <... close resumed>) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./4/binderfs" [pid 462] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... unlink resumed>) = 0 [pid 358] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... futex resumed>) = 1 [pid 462] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 462] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... futex resumed>) = 1 [pid 462] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 462] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... futex resumed>) = 1 [pid 473] <... mount resumed>) = 0 [pid 473] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 473] chdir("./file1") = 0 [pid 473] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 461] <... openat resumed>) = 4 [pid 461] ioctl(4, LOOP_CLR_FD) = 0 [pid 461] close(4) = 0 [pid 461] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 458] <... futex resumed>) = 0 [pid 461] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 458] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 461] <... openat resumed>) = 4 [pid 458] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 458] <... futex resumed>) = 0 [pid 461] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 458] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... mmap resumed>) = 0x200000000000 [pid 458] <... futex resumed>) = 0 [pid 461] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 458] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 458] <... futex resumed>) = 0 [pid 462] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 462] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 462] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... futex resumed>) = 1 [pid 462] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 462] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 462] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 462] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 462] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 462] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 462] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 462] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [ 25.984412][ T462] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 26.011597][ T473] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 26.015271][ T462] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 462] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 462] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 462] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 462] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 462] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... futex resumed>) = 1 [pid 462] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 462] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 459] exit_group(0) = ? [pid 462] <... futex resumed>) = ? [pid 462] +++ exited with 0 +++ [pid 459] +++ exited with 0 +++ [pid 458] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=459, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 359] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 359] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 359] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] unlink("./3/binderfs") = 0 [pid 359] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 461] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 461] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 461] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 461] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 461] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 461] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 461] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 461] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 461] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 461] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 461] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 461] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 461] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 461] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 461] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 461] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 461] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 458] <... futex resumed>) = 0 [pid 458] exit_group(0) = ? [pid 461] +++ exited with 0 +++ [pid 458] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=458, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 365] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 365] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./3/binderfs") = 0 [pid 365] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 360] <... umount2 resumed>) = 0 [pid 365] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./3/file1", [pid 365] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] newfstatat(4, "", [pid 360] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] getdents64(4, [pid 360] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 365] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] close(4 [pid 360] <... openat resumed>) = 4 [pid 365] <... close resumed>) = 0 [pid 365] rmdir("./3/file1") = 0 [pid 360] newfstatat(4, "", [pid 365] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] close(3) = 0 [pid 360] getdents64(4, [pid 365] rmdir("./3") = 0 [pid 360] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] mkdir("./4", 0777) = 0 [pid 360] getdents64(4, [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 360] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] close(4) = 0 [pid 360] rmdir("./3/file1") = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] close(3) = 0 [pid 360] rmdir("./3") = 0 [pid 360] mkdir("./4", 0777) = 0 [ 26.039330][ T461] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 473] <... openat resumed>) = 4 [pid 360] <... openat resumed>) = 3 [pid 358] <... umount2 resumed>) = 0 [pid 360] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 360] close(3) = 0 [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 481 ./strace-static-x86_64: Process 481 attached [pid 481] set_robust_list(0x5555751e4760, 24) = 0 [pid 481] chdir("./4") = 0 [pid 481] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 481] setpgid(0, 0) = 0 [pid 481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 481] write(3, "1000", 4) = 4 [pid 481] close(3) = 0 [pid 481] symlink("/dev/binderfs", "./binderfs") = 0 [pid 481] write(1, "executing program\n", 18executing program ) = 18 [pid 481] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 481] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 481] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 481] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 359] <... umount2 resumed>) = 0 [pid 473] ioctl(4, LOOP_CLR_FD) = 0 [pid 365] <... openat resumed>) = 3 [pid 359] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 473] close(4) = 0 [pid 365] ioctl(3, LOOP_CLR_FD [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 473] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 365] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 359] newfstatat(AT_FDCWD, "./3/file1", [pid 358] newfstatat(AT_FDCWD, "./4/file1", [pid 473] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 365] close(3 [pid 473] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 472] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] <... close resumed>) = 0 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 473] <... openat resumed>) = 4 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 358] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 473] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 481] rt_sigprocmask(SIG_BLOCK, ~[], [pid 473] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] <... clone resumed>, child_tidptr=0x5555751e4750) = 482 [pid 473] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 358] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 473] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 472] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 473] <... mmap resumed>) = 0x200000000000 [pid 358] <... openat resumed>) = 4 [pid 473] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... openat resumed>) = 4 [pid 473] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 358] newfstatat(4, "", [pid 473] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] newfstatat(4, "", [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 481] <... rt_sigprocmask resumed>[], 8) = 0 [pid 481] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[483]}, 88) = 483 [pid 481] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 481] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 481] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 482 attached [pid 482] set_robust_list(0x5555751e4760, 24) = 0 [pid 482] chdir("./4") = 0 [pid 482] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 482] setpgid(0, 0) = 0 [pid 482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 482] write(3, "1000", 4) = 4 [pid 482] close(3) = 0 [pid 482] symlink("/dev/binderfs", "./binderfs") = 0 [pid 482] write(1, "executing program\n", 18executing program ) = 18 [pid 482] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 482] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 482] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 482] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 482] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[484]}, 88) = 484 [pid 482] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 482] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 484 attached [pid 484] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 484] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 484] memfd_create("syzkaller", 0) = 3 [pid 484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 472] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] getdents64(4, [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] getdents64(4, [pid 359] getdents64(4, [pid 358] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] close(4 [pid 359] getdents64(4, [pid 358] <... close resumed>) = 0 [pid 359] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] rmdir("./4/file1") = 0 [pid 359] close(4 [pid 358] getdents64(3, [pid 359] <... close resumed>) = 0 [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] rmdir("./3/file1" [pid 358] close(3 [pid 359] <... rmdir resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 359] getdents64(3, [pid 358] rmdir("./4") = 0 [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 359] close(3 [pid 358] mkdir("./5", 0777 [pid 484] <... write resumed>) = 1048576 [pid 484] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 484] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 358] <... mkdir resumed>) = 0 [pid 359] <... close resumed>) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 359] rmdir("./3" [pid 358] <... openat resumed>) = 3 [pid 359] <... rmdir resumed>) = 0 [pid 358] ioctl(3, LOOP_CLR_FD [pid 359] mkdir("./4", 0777 [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 484] <... openat resumed>) = 4 [pid 359] <... mkdir resumed>) = 0 [pid 358] close(3 [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 358] <... close resumed>) = 0 [pid 359] <... openat resumed>) = 3 [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 359] ioctl(3, LOOP_CLR_FD [pid 484] ioctl(4, LOOP_SET_FD, 3 [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 485 [pid 359] close(3) = 0 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 487 ./strace-static-x86_64: Process 485 attached [pid 485] set_robust_list(0x5555751e4760, 24) = 0 [pid 485] chdir("./5") = 0 [pid 485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 485] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 483 attached [pid 483] set_robust_list(0x7fa2cc9159a0, 24./strace-static-x86_64: Process 487 attached ) = 0 [pid 473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 485] write(3, "1000", 4) = 4 [pid 485] close(3) = 0 [pid 485] symlink("/dev/binderfs", "./binderfs") = 0 [pid 485] write(1, "executing program\n", 18executing program ) = 18 [pid 485] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 485] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 485] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 485] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[488]}, 88) = 488 [pid 483] memfd_create("syzkaller", 0) = 3 [pid 485] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 485] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 485] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 488 attached [pid 488] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 488] memfd_create("syzkaller", 0) = 3 [pid 488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 473] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 473] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... futex resumed>) = 1 [pid 473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 484] <... ioctl resumed>) = 0 [pid 484] close(3) = 0 [pid 484] close(4) = 0 [pid 484] mkdir("./file1", 0777) = 0 [pid 473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 484] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 483] <... write resumed>) = 1048576 [pid 483] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 483] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 483] <... openat resumed>) = 4 [pid 483] ioctl(4, LOOP_SET_FD, 3 [pid 473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [ 26.177866][ T473] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 473] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 473] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 473] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... futex resumed>) = 1 [pid 483] <... ioctl resumed>) = 0 [pid 483] close(3) = 0 [pid 483] close(4) = 0 [pid 473] ioctl(-1, SIOCGIFINDEX, NULL [pid 483] mkdir("./file1", 0777 [pid 473] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 473] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... mkdir resumed>) = 0 [pid 472] <... futex resumed>) = 0 [pid 483] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 472] exit_group(0) = ? [pid 473] <... futex resumed>) = ? [pid 473] +++ exited with 0 +++ [pid 472] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=472, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 364] restart_syscall(<... resuming interrupted clone ...> [pid 487] set_robust_list(0x5555751e4760, 24) = 0 [pid 487] chdir("./4") = 0 [pid 487] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 487] setpgid(0, 0) = 0 [pid 487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 487] <... openat resumed>) = 3 [pid 487] write(3, "1000", 4) = 4 [pid 487] close(3) = 0 [pid 487] symlink("/dev/binderfs", "./binderfs") = 0 [pid 364] <... restart_syscall resumed>) = 0 [pid 364] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 364] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./4/binderfs") = 0 [pid 364] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 487] write(1, "executing program\n", 18 [pid 488] <... write resumed>) = 1048576 executing program [pid 488] munmap(0x7fa2c44f5000, 138412032 [pid 487] <... write resumed>) = 18 [pid 487] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 487] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 488] <... munmap resumed>) = 0 [pid 487] <... rt_sigaction resumed>NULL, 8) = 0 [pid 487] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 487] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 488] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 487] <... mprotect resumed>) = 0 [pid 487] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 487] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[494]}, 88) = 494 [pid 487] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 487] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 487] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 494 attached [pid 494] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 494] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 494] memfd_create("syzkaller", 0) = 3 [pid 494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 494] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 494] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 484] <... mount resumed>) = 0 [pid 484] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 484] chdir("./file1") = 0 [pid 484] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 483] <... mount resumed>) = 0 [pid 483] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 483] chdir("./file1") = 0 [pid 483] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 494] <... openat resumed>) = 4 [pid 488] <... openat resumed>) = 4 [pid 484] <... openat resumed>) = 4 [pid 364] <... umount2 resumed>) = 0 [pid 488] ioctl(4, LOOP_SET_FD, 3 [pid 494] ioctl(4, LOOP_SET_FD, 3 [pid 364] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 488] <... ioctl resumed>) = 0 [pid 488] close(3 [pid 484] ioctl(4, LOOP_CLR_FD [pid 483] <... openat resumed>) = 4 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./4/file1", [pid 488] <... close resumed>) = 0 [pid 488] close(4 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 483] ioctl(4, LOOP_CLR_FD [pid 494] <... ioctl resumed>) = 0 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 488] <... close resumed>) = 0 [pid 364] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 364] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] close(4) = 0 [pid 364] rmdir("./4/file1") = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] close(3) = 0 [pid 364] rmdir("./4") = 0 [pid 364] mkdir("./5", 0777 [pid 488] mkdir("./file1", 0777 [pid 494] close(3 [pid 488] <... mkdir resumed>) = 0 [pid 364] <... mkdir resumed>) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 364] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 364] close(3) = 0 [ 26.257018][ T484] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 26.267541][ T483] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 494] <... close resumed>) = 0 [pid 488] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 494] close(4 [pid 483] <... ioctl resumed>) = 0 [pid 364] <... clone resumed>, child_tidptr=0x5555751e4750) = 497 ./strace-static-x86_64: Process 497 attached [pid 494] <... close resumed>) = 0 [pid 483] close(4 [pid 494] mkdir("./file1", 0777 [pid 483] <... close resumed>) = 0 [pid 497] set_robust_list(0x5555751e4760, 24) = 0 [pid 494] <... mkdir resumed>) = 0 [pid 483] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 483] <... futex resumed>) = 1 [pid 481] <... futex resumed>) = 0 [pid 481] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 481] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 497] chdir("./5" [pid 483] <... openat resumed>) = 4 [pid 483] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 481] <... futex resumed>) = 0 [pid 483] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 481] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 481] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 0 [pid 483] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 483] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 481] <... futex resumed>) = 0 [pid 481] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 481] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... chdir resumed>) = 0 [pid 497] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 497] setpgid(0, 0) = 0 [pid 497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 497] write(3, "1000", 4) = 4 [pid 484] <... ioctl resumed>) = 0 [pid 497] close(3) = 0 [pid 497] symlink("/dev/binderfs", "./binderfs") = 0 [pid 497] write(1, "executing program\n", 18executing program ) = 18 [pid 484] close(4 [pid 497] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 497] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 497] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 497] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 484] <... close resumed>) = 0 [pid 497] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 484] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 482] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... openat resumed>) = 4 [pid 484] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 484] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 482] <... futex resumed>) = 0 [pid 484] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 482] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... clone3 resumed> => {parent_tid=[498]}, 88) = 498 [pid 497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 497] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 498 attached [pid 498] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 498] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 498] memfd_create("syzkaller", 0) = 3 [pid 498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 483] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 483] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] <... futex resumed>) = 0 [pid 481] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 481] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [ 26.319704][ T483] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.346336][ T484] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 498] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 483] sendmmsg(-1, [pid 498] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 498] <... openat resumed>) = 4 [pid 484] capset(0x200000000000, NULL [pid 483] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 483] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] <... futex resumed>) = 0 [pid 481] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 481] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 483] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] <... futex resumed>) = 0 [pid 481] exit_group(0) = ? [pid 483] <... futex resumed>) = ? [pid 483] +++ exited with 0 +++ [pid 481] +++ exited with 0 +++ [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=481, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 360] restart_syscall(<... resuming interrupted clone ...> [pid 498] ioctl(4, LOOP_SET_FD, 3 [pid 484] <... capset resumed>) = -1 EFAULT (Bad address) [pid 484] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... ioctl resumed>) = 0 [pid 484] <... futex resumed>) = 1 [pid 482] <... futex resumed>) = 0 [pid 360] <... restart_syscall resumed>) = 0 [pid 498] close(3 [pid 484] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 482] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... close resumed>) = 0 [pid 484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 482] <... futex resumed>) = 0 [pid 498] close(4 [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 482] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... close resumed>) = 0 [pid 498] mkdir("./file1", 0777 [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 360] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 360] newfstatat(3, "", [pid 498] <... mkdir resumed>) = 0 [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 498] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 360] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 360] unlink("./4/binderfs" [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 360] <... unlink resumed>) = 0 [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 360] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 360] <... umount2 resumed>) = 0 [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 360] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 360] newfstatat(AT_FDCWD, "./4/file1", [pid 484] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 484] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 482] <... futex resumed>) = 0 [pid 360] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 484] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 482] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 482] <... futex resumed>) = 0 [pid 484] ioctl(-1, SIOCGIFINDEX, NULL [pid 482] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 484] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 484] <... futex resumed>) = 1 [pid 482] <... futex resumed>) = 0 [pid 484] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 494] <... mount resumed>) = 0 [pid 482] exit_group(0 [pid 360] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 482] <... exit_group resumed>) = ? [pid 360] <... openat resumed>) = 4 [pid 494] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 484] <... futex resumed>) = ? [pid 360] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(4, [pid 484] +++ exited with 0 +++ [pid 482] +++ exited with 0 +++ [pid 360] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=482, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 365] restart_syscall(<... resuming interrupted clone ...> [pid 360] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] close(4) = 0 [pid 360] rmdir("./4/file1") = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] close(3) = 0 [pid 360] rmdir("./4") = 0 [pid 360] mkdir("./5", 0777) = 0 [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 494] <... openat resumed>) = 3 [pid 494] chdir("./file1") = 0 [pid 494] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 365] <... restart_syscall resumed>) = 0 [pid 365] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 498] <... mount resumed>) = 0 [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./4/binderfs" [pid 498] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 365] <... unlink resumed>) = 0 [pid 498] <... openat resumed>) = 3 [pid 365] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 498] chdir("./file1") = 0 [pid 498] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 488] <... mount resumed>) = 0 [pid 488] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 488] chdir("./file1") = 0 [ 26.372198][ T494] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 26.396075][ T498] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 26.407560][ T488] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 488] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 498] <... openat resumed>) = 4 [pid 494] <... openat resumed>) = 4 [pid 360] <... openat resumed>) = 3 [pid 498] ioctl(4, LOOP_CLR_FD [pid 494] ioctl(4, LOOP_CLR_FD [pid 360] ioctl(3, LOOP_CLR_FDexecuting program [pid 498] <... ioctl resumed>) = 0 [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 494] <... ioctl resumed>) = 0 [pid 488] <... openat resumed>) = 4 [pid 488] ioctl(4, LOOP_CLR_FD) = 0 [pid 488] close(4) = 0 [pid 488] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] close(4 [pid 485] <... futex resumed>) = 0 [pid 488] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 498] <... close resumed>) = 0 [pid 494] close(4 [pid 485] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] close(3 [pid 498] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 1 [pid 360] <... close resumed>) = 0 [pid 498] <... futex resumed>) = 1 [pid 497] <... futex resumed>) = 0 [pid 494] <... close resumed>) = 0 [pid 485] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 498] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 494] <... futex resumed>) = 1 [pid 487] <... futex resumed>) = 0 [pid 498] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 487] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... clone resumed>, child_tidptr=0x5555751e4750) = 507 [pid 498] <... futex resumed>) = 1 [pid 497] <... futex resumed>) = 0 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 487] <... futex resumed>) = 0 [pid 498] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 487] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... futex resumed>) = 0 [pid 498] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 497] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... mmap resumed>) = 0x200000000000 [pid 498] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... openat resumed>) = 4 [pid 498] <... futex resumed>) = 1 [pid 497] <... futex resumed>) = 0 [pid 494] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... futex resumed>) = 0 [pid 494] <... futex resumed>) = 1 [pid 487] <... futex resumed>) = 0 [pid 365] <... umount2 resumed>) = 0 [pid 488] <... futex resumed>) = 0 [pid 488] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 488] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 507 attached [pid 507] set_robust_list(0x5555751e4760, 24) = 0 [pid 507] chdir("./5") = 0 [pid 507] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 507] setpgid(0, 0) = 0 [pid 507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 365] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 507] write(3, "1000", 4 [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 507] <... write resumed>) = 4 [pid 507] close(3) = 0 [pid 365] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 507] symlink("/dev/binderfs", "./binderfs") = 0 [pid 365] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 365] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] getdents64(4, [pid 507] write(1, "executing program\n", 18 [pid 365] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 507] <... write resumed>) = 18 [pid 365] close(4 [pid 507] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... close resumed>) = 0 [pid 507] <... futex resumed>) = 0 [pid 365] rmdir("./4/file1" [pid 507] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 365] <... rmdir resumed>) = 0 [pid 507] <... rt_sigaction resumed>NULL, 8) = 0 [pid 507] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 507] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 507] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 507] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 507] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 365] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 507] <... clone3 resumed> => {parent_tid=[508]}, 88) = 508 [pid 507] rt_sigprocmask(SIG_SETMASK, [], [pid 365] close(3 [pid 507] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 365] <... close resumed>) = 0 [pid 507] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 507] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 365] rmdir("./4") = 0 [pid 365] mkdir("./5", 0777) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 365] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 365] close(3) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 509 ./strace-static-x86_64: Process 508 attached [pid 508] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 508] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 508] memfd_create("syzkaller", 0) = 3 [pid 508] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 508] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 509 attached [pid 509] set_robust_list(0x5555751e4760, 24) = 0 [pid 509] chdir("./5") = 0 [pid 509] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 509] setpgid(0, 0) = 0 [pid 509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 485] <... futex resumed>) = 0 [pid 487] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 0 [pid 485] <... futex resumed>) = 1 [pid 494] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 487] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 485] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... mmap resumed>) = 0x200000000000 [pid 494] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] <... futex resumed>) = 0 executing program [pid 494] <... futex resumed>) = 1 [pid 487] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 487] <... futex resumed>) = 0 [pid 488] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 487] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 488] <... mmap resumed>) = 0x200000000000 [pid 488] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] <... openat resumed>) = 3 [pid 509] write(3, "1000", 4) = 4 [pid 509] close(3) = 0 [pid 509] symlink("/dev/binderfs", "./binderfs") = 0 [pid 509] write(1, "executing program\n", 18) = 18 [pid 509] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 509] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 509] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 509] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 509] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[510]}, 88) = 510 [pid 509] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 509] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 508] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 510 attached [pid 510] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 510] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 510] memfd_create("syzkaller", 0) = 3 [pid 510] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 510] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 508] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 508] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 508] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 508] close(3) = 0 [pid 508] close(4 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 485] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 488] <... futex resumed>) = 0 [pid 510] <... write resumed>) = 1048576 [pid 498] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 494] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 498] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 498] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 498] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... futex resumed>) = 1 [pid 498] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 498] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 498] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 498] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 498] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 498] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 498] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 498] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 498] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 498] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 498] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 498] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 498] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... futex resumed>) = 1 [pid 510] munmap(0x7fa2c44f5000, 138412032 [pid 494] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 498] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 498] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] exit_group(0) = ? [pid 498] <... futex resumed>) = ? [pid 510] <... munmap resumed>) = 0 [pid 494] capset(0x200000000000, NULL [pid 488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 494] <... capset resumed>) = -1 EFAULT (Bad address) [pid 510] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 488] capset(0x200000000000, NULL [pid 494] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 487] <... futex resumed>) = 0 [pid 487] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 487] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 488] <... capset resumed>) = -1 EFAULT (Bad address) [pid 488] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 488] <... futex resumed>) = 1 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 498] +++ exited with 0 +++ [pid 497] +++ exited with 0 +++ [pid 494] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=497, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 364] restart_syscall(<... resuming interrupted clone ...> [pid 494] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 494] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 510] <... openat resumed>) = 4 [pid 508] <... close resumed>) = 0 [pid 494] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 364] <... restart_syscall resumed>) = 0 [pid 508] mkdir("./file1", 0777 [pid 364] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 508] <... mkdir resumed>) = 0 [pid 364] <... openat resumed>) = 3 [pid 508] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 364] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 510] ioctl(4, LOOP_SET_FD, 3 [pid 488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 364] unlink("./5/binderfs") = 0 [pid 364] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 364] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 364] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 364] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] close(4) = 0 [pid 364] rmdir("./5/file1" [pid 494] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 364] <... rmdir resumed>) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 510] <... ioctl resumed>) = 0 [pid 364] close(3 [pid 494] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 364] <... close resumed>) = 0 [pid 510] close(3 [pid 364] rmdir("./5" [pid 510] <... close resumed>) = 0 [pid 488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 364] <... rmdir resumed>) = 0 [pid 510] close(4 [pid 494] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 364] mkdir("./6", 0777 [pid 494] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 364] <... mkdir resumed>) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 494] sendmmsg(-1, [pid 488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 494] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 494] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 494] <... futex resumed>) = 1 [pid 488] sendmmsg(-1, [pid 487] <... futex resumed>) = 0 [ 26.495088][ T498] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.511281][ T494] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.527162][ T488] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 494] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 487] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 487] <... futex resumed>) = 0 [pid 487] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] ioctl(-1, SIOCGIFINDEX, NULL [pid 508] <... mount resumed>) = 0 [pid 494] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 494] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 494] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 487] <... futex resumed>) = 0 [pid 508] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 485] <... futex resumed>) = 0 [pid 487] exit_group(0 [pid 485] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] <... exit_group resumed>) = ? [pid 485] <... futex resumed>) = 0 [pid 508] <... openat resumed>) = 3 [pid 494] <... futex resumed>) = ? [pid 488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 485] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] chdir("./file1") = 0 [pid 494] +++ exited with 0 +++ [pid 488] ioctl(-1, SIOCGIFINDEX, NULL [pid 487] +++ exited with 0 +++ [pid 508] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 488] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=487, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 488] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] restart_syscall(<... resuming interrupted clone ...> [pid 488] <... futex resumed>) = 1 [pid 485] <... futex resumed>) = 0 [pid 488] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 485] exit_group(0 [pid 364] <... openat resumed>) = 3 [pid 508] <... openat resumed>) = 4 [pid 508] ioctl(4, LOOP_CLR_FD) = 0 [pid 508] close(4) = 0 [pid 508] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... futex resumed>) = 0 [pid 507] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 507] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] <... futex resumed>) = 1 [pid 508] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 508] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... futex resumed>) = 0 [pid 507] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 507] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] <... futex resumed>) = 1 [pid 508] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 508] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... futex resumed>) = 0 [pid 507] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 507] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] <... futex resumed>) = 1 [pid 510] <... close resumed>) = 0 [pid 485] <... exit_group resumed>) = ? [pid 364] ioctl(3, LOOP_CLR_FD [pid 359] <... restart_syscall resumed>) = 0 [pid 510] mkdir("./file1", 0777 [pid 488] <... futex resumed>) = ? [pid 510] <... mkdir resumed>) = 0 [pid 488] +++ exited with 0 +++ [pid 485] +++ exited with 0 +++ [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=485, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 359] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 510] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 359] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 359] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(3, [pid 508] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 508] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./4/binderfs", [pid 508] capset(0x200000000000, NULL [pid 359] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] unlink("./4/binderfs" [pid 508] <... capset resumed>) = -1 EFAULT (Bad address) [pid 359] <... unlink resumed>) = 0 [pid 508] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 507] <... futex resumed>) = 0 [pid 507] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 507] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] <... futex resumed>) = 1 [pid 508] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 508] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 508] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 508] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 508] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 508] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 508] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 508] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 508] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 508] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 508] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 508] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 508] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... futex resumed>) = 0 [pid 507] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 507] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] <... futex resumed>) = 1 [pid 508] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 508] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... futex resumed>) = 0 [pid 507] exit_group(0) = ? [pid 508] <... futex resumed>) = ? [pid 508] +++ exited with 0 +++ [pid 507] +++ exited with 0 +++ [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=507, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 360] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 360] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 358] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... openat resumed>) = 3 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(3, "", [pid 358] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] <... openat resumed>) = 3 [pid 360] getdents64(3, [pid 358] newfstatat(3, "", [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] getdents64(3, [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] newfstatat(AT_FDCWD, "./5/binderfs", [pid 358] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] unlink("./5/binderfs" [pid 358] newfstatat(AT_FDCWD, "./5/binderfs", [pid 360] <... unlink resumed>) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] unlink("./5/binderfs") = 0 [pid 358] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] <... ioctl resumed>) = 0 [ 26.573748][ T508] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 26.587771][ T508] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 364] close(3 [pid 360] <... umount2 resumed>) = 0 [pid 360] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] <... umount2 resumed>) = 0 [pid 360] newfstatat(AT_FDCWD, "./5/file1", [pid 359] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 359] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] close(4) = 0 [pid 359] rmdir("./4/file1") = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3) = 0 [pid 359] rmdir("./4") = 0 [pid 359] mkdir("./5", 0777) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 359] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 359] close(3) = 0 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 360] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] <... umount2 resumed>) = 0 [pid 359] <... clone resumed>, child_tidptr=0x5555751e4750) = 515 executing program ./strace-static-x86_64: Process 515 attached [pid 515] set_robust_list(0x5555751e4760, 24) = 0 [pid 515] chdir("./5") = 0 [pid 515] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 515] setpgid(0, 0) = 0 [pid 515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 515] write(3, "1000", 4) = 4 [pid 515] close(3) = 0 [pid 515] symlink("/dev/binderfs", "./binderfs") = 0 [pid 515] write(1, "executing program\n", 18 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] <... close resumed>) = 0 [pid 360] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 360] <... openat resumed>) = 4 [pid 515] <... write resumed>) = 18 [pid 515] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] newfstatat(4, "", [pid 515] <... futex resumed>) = 0 [pid 364] <... clone resumed>, child_tidptr=0x5555751e4750) = 516 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 515] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 515] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 515] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 360] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 515] <... mprotect resumed>) = 0 [pid 515] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 515] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 360] getdents64(4, [pid 358] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 516 attached [pid 360] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 515] <... clone3 resumed> => {parent_tid=[518]}, 88) = 518 [pid 360] close(4 [pid 515] rt_sigprocmask(SIG_SETMASK, [], [pid 360] <... close resumed>) = 0 [pid 516] set_robust_list(0x5555751e4760, 24 [pid 360] rmdir("./5/file1" [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 518 attached [pid 516] <... set_robust_list resumed>) = 0 [pid 360] <... rmdir resumed>) = 0 [pid 358] newfstatat(AT_FDCWD, "./5/file1", [pid 516] chdir("./6" [pid 360] getdents64(3, [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 516] <... chdir resumed>) = 0 [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 516] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 360] close(3 [pid 516] <... prctl resumed>) = 0 [pid 360] <... close resumed>) = 0 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 516] setpgid(0, 0 [pid 360] rmdir("./5" [pid 358] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 515] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 515] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 515] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 518] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 518] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 518] memfd_create("syzkaller", 0) = 3 [pid 518] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 518] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 358] <... openat resumed>) = 4 [pid 360] <... rmdir resumed>) = 0 [pid 516] <... setpgid resumed>) = 0 [pid 360] mkdir("./6", 0777 [pid 358] newfstatat(4, "", [pid 516] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 360] <... mkdir resumed>) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 516] <... openat resumed>) = 3 [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 516] write(3, "1000", 4 [pid 358] getdents64(4, [pid 516] <... write resumed>) = 4 [pid 516] close(3 [pid 510] <... mount resumed>) = 0 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 516] <... close resumed>) = 0 [pid 518] <... write resumed>) = 1048576 [pid 518] munmap(0x7fa2c44f5000, 138412032 [pid 516] symlink("/dev/binderfs", "./binderfs" [pid 510] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 358] getdents64(4, [pid 518] <... munmap resumed>) = 0 [pid 518] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 516] <... symlink resumed>) = 0 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 510] <... openat resumed>) = 3 executing program [pid 516] write(1, "executing program\n", 18 [pid 358] close(4 [pid 516] <... write resumed>) = 18 [pid 516] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 358] <... close resumed>) = 0 [pid 510] chdir("./file1" [pid 516] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 510] <... chdir resumed>) = 0 [pid 358] rmdir("./5/file1" [pid 516] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 516] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 516] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 516] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 516] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 358] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 520 attached [pid 510] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 358] getdents64(3, [pid 520] set_robust_list(0x7fa2cc9159a0, 24 [pid 516] <... clone3 resumed> => {parent_tid=[520]}, 88) = 520 [pid 516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 516] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] <... set_robust_list resumed>) = 0 [pid 516] <... futex resumed>) = 0 [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 516] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 520] rt_sigprocmask(SIG_SETMASK, [], [pid 358] close(3 [pid 520] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 358] <... close resumed>) = 0 [pid 520] memfd_create("syzkaller", 0 [pid 358] rmdir("./5") = 0 [pid 520] <... memfd_create resumed>) = 3 [pid 358] mkdir("./6", 0777 [pid 520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 358] <... mkdir resumed>) = 0 [pid 520] <... mmap resumed>) = 0x7fa2c44f5000 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 520] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 520] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 518] <... openat resumed>) = 4 [pid 510] <... openat resumed>) = 4 [pid 360] <... openat resumed>) = 3 [pid 358] <... openat resumed>) = 3 [pid 510] ioctl(4, LOOP_CLR_FD [pid 360] ioctl(3, LOOP_CLR_FD [pid 358] ioctl(3, LOOP_CLR_FD [pid 510] <... ioctl resumed>) = 0 [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 510] close(4 [pid 360] close(3 [pid 358] close(3 [pid 510] <... close resumed>) = 0 [pid 360] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 510] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 510] <... futex resumed>) = 1 [pid 509] <... futex resumed>) = 0 [pid 510] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... clone resumed>, child_tidptr=0x5555751e4750) = 521 [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 522 [pid 510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] <... futex resumed>) = 0 [pid 510] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 509] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 510] <... openat resumed>) = 4 [pid 510] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] <... futex resumed>) = 0 [pid 510] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] <... futex resumed>) = 0 [pid 510] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 509] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 510] <... mmap resumed>) = 0x200000000000 [ 26.747710][ T510] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 510] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] <... futex resumed>) = 0 [pid 510] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] <... futex resumed>) = 0 ./strace-static-x86_64: Process 522 attached ./strace-static-x86_64: Process 521 attached [pid 509] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 518] ioctl(4, LOOP_SET_FD, 3 [pid 520] ioctl(4, LOOP_SET_FD, 3 [pid 518] <... ioctl resumed>) = 0 [pid 518] close(3) = 0 [pid 522] set_robust_list(0x5555751e4760, 24 [pid 521] set_robust_list(0x5555751e4760, 24 [pid 518] close(4 [pid 510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 522] <... set_robust_list resumed>) = 0 [pid 521] <... set_robust_list resumed>) = 0 [pid 522] chdir("./6") = 0 [pid 521] chdir("./6" [pid 520] <... ioctl resumed>) = 0 [pid 520] close(3) = 0 [pid 520] close(4 [pid 510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 510] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 522] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 521] <... chdir resumed>) = 0 [pid 510] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 510] <... futex resumed>) = 1 [pid 522] <... prctl resumed>) = 0 [pid 521] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 522] setpgid(0, 0 [pid 521] <... prctl resumed>) = 0 [pid 522] <... setpgid resumed>) = 0 [pid 521] setpgid(0, 0 [pid 522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 521] <... setpgid resumed>) = 0 [pid 521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 522] <... openat resumed>) = 3 [pid 521] <... openat resumed>) = 3 [pid 522] write(3, "1000", 4 [pid 510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 521] write(3, "1000", 4 [pid 522] <... write resumed>) = 4 [pid 510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 521] <... write resumed>) = 4 [pid 510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 522] close(3 [pid 510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 510] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 510] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 510] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 510] <... futex resumed>) = 1 [pid 510] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 510] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 509] exit_group(0) = ? [pid 510] <... futex resumed>) = ? [pid 521] close(3 [pid 522] <... close resumed>) = 0 [pid 521] <... close resumed>) = 0 [pid 522] symlink("/dev/binderfs", "./binderfs" [pid 521] symlink("/dev/binderfs", "./binderfs" [pid 522] <... symlink resumed>) = 0 [pid 510] +++ exited with 0 +++ [pid 509] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=509, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 365] restart_syscall(<... resuming interrupted clone ...>executing program [pid 521] <... symlink resumed>) = 0 [pid 522] write(1, "executing program\n", 18) = 18 [pid 522] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 522] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 522] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 521] write(1, "executing program\n", 18 [pid 522] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[525]}, 88) = 525 [pid 522] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 522] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 525 attached [pid 525] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 525] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 525] memfd_create("syzkaller", 0) = 3 [pid 525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 executing program [pid 521] <... write resumed>) = 18 [pid 521] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 521] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 521] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 521] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 521] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[526]}, 88) = 526 [pid 521] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 521] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 365] <... restart_syscall resumed>) = 0 [pid 365] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./5/binderfs") = 0 [pid 365] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 526 attached [pid 525] <... write resumed>) = 1048576 [pid 525] munmap(0x7fa2c44f5000, 138412032 [pid 526] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 525] <... munmap resumed>) = 0 [pid 525] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 526] memfd_create("syzkaller", 0) = 3 [pid 526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 520] <... close resumed>) = 0 [pid 518] <... close resumed>) = 0 [pid 520] mkdir("./file1", 0777 [pid 518] mkdir("./file1", 0777 [pid 520] <... mkdir resumed>) = 0 [pid 518] <... mkdir resumed>) = 0 [pid 520] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [ 26.786284][ T510] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 518] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 526] <... write resumed>) = 1048576 [pid 526] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 526] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 525] <... openat resumed>) = 4 [pid 525] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 525] close(3) = 0 [pid 525] close(4 [pid 365] <... umount2 resumed>) = 0 [pid 365] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 365] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] close(4) = 0 [pid 365] rmdir("./5/file1") = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] close(3) = 0 [pid 365] rmdir("./5") = 0 [pid 365] mkdir("./6", 0777) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 518] <... mount resumed>) = 0 [pid 525] <... close resumed>) = 0 [pid 518] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 518] chdir("./file1") = 0 [pid 518] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 518] ioctl(4, LOOP_CLR_FD) = 0 [pid 518] close(4) = 0 [pid 518] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 515] <... futex resumed>) = 0 [pid 526] <... openat resumed>) = 4 [pid 525] mkdir("./file1", 0777 [pid 518] <... futex resumed>) = 1 [pid 515] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] ioctl(4, LOOP_SET_FD, 3 [pid 525] <... mkdir resumed>) = 0 [pid 525] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 515] <... futex resumed>) = 0 [pid 515] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 518] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 518] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] <... futex resumed>) = 0 [pid 515] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 515] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 518] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 518] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] <... futex resumed>) = 0 [pid 520] <... mount resumed>) = 0 [pid 515] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 520] chdir("./file1") = 0 [pid 520] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 515] <... futex resumed>) = 0 [ 26.884972][ T518] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 26.914123][ T520] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 515] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 518] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 518] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 518] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 518] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] <... futex resumed>) = 0 [pid 515] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 515] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 518] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 518] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 518] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 518] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 518] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 518] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 518] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 518] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 518] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 518] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 365] <... openat resumed>) = 3 [pid 365] ioctl(3, LOOP_CLR_FD [pid 526] <... ioctl resumed>) = 0 [pid 518] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 520] <... openat resumed>) = 4 [pid 520] ioctl(4, LOOP_CLR_FD) = 0 [pid 520] close(4) = 0 [pid 520] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... futex resumed>) = 1 [pid 520] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 526] close(3 [pid 365] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 520] <... openat resumed>) = 4 [pid 520] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... futex resumed>) = 1 [pid 520] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 520] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... futex resumed>) = 1 [pid 526] <... close resumed>) = 0 [pid 518] sendmmsg(-1, [pid 365] close(3 [pid 526] close(4 [pid 365] <... close resumed>) = 0 [pid 526] <... close resumed>) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 526] mkdir("./file1", 0777) = 0 [pid 520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 365] <... clone resumed>, child_tidptr=0x5555751e4750) = 533 [pid 526] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 520] capset(0x200000000000, NULL [pid 518] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 518] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 518] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 533 attached [pid 533] set_robust_list(0x5555751e4760, 24) = 0 [pid 533] chdir("./6") = 0 [pid 533] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 533] setpgid(0, 0) = 0 [pid 533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 533] write(3, "1000", 4) = 4 [pid 533] close(3) = 0 [pid 533] symlink("/dev/binderfs", "./binderfs" [pid 515] <... futex resumed>) = 0 [pid 533] <... symlink resumed>) = 0 [pid 520] <... capset resumed>) = -1 EFAULT (Bad address) [pid 515] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 515] <... futex resumed>) = 1 [pid 520] <... futex resumed>) = 1 [pid 516] <... futex resumed>) = 0 [pid 515] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] <... mount resumed>) = 0 [pid 516] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = 0 [pid 518] ioctl(-1, SIOCGIFINDEX, NULL [pid 520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 518] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 525] <... openat resumed>) = 3 [pid 518] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] chdir("./file1" [pid 520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 518] <... futex resumed>) = 1 [pid 525] <... chdir resumed>) = 0 [pid 520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 515] <... futex resumed>) = 0 [pid 518] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 515] exit_group(0 [pid 520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 525] <... openat resumed>) = 4 [pid 515] <... exit_group resumed>) = ? [pid 520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 525] ioctl(4, LOOP_CLR_FD [pid 518] <... futex resumed>) = ? [pid 525] <... ioctl resumed>) = 0 [pid 518] +++ exited with 0 +++ [pid 515] +++ exited with 0 +++ executing program [pid 533] write(1, "executing program\n", 18) = 18 [pid 533] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 26.915889][ T518] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.951460][ T520] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.975907][ T525] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 533] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 533] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 533] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 533] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 533] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[538]}, 88) = 538 [pid 533] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 533] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 533] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 538 attached [pid 538] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 538] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 538] memfd_create("syzkaller", 0) = 3 [pid 538] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=515, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 525] close(4) = 0 [pid 526] <... mount resumed>) = 0 [pid 525] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 538] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 525] <... futex resumed>) = 1 [pid 522] <... futex resumed>) = 0 [pid 526] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 525] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 522] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 359] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 526] <... openat resumed>) = 3 [pid 525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 526] chdir("./file1" [pid 525] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 522] <... futex resumed>) = 0 [pid 520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 522] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] <... openat resumed>) = 4 [pid 359] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 359] <... openat resumed>) = 3 [pid 525] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 359] newfstatat(3, "", [pid 525] <... futex resumed>) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 525] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 522] <... futex resumed>) = 0 [pid 520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 522] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] <... mmap resumed>) = 0x200000000000 [pid 520] sendmmsg(-1, [pid 359] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 525] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... chdir resumed>) = 0 [pid 520] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 538] <... write resumed>) = 1048576 [pid 538] munmap(0x7fa2c44f5000, 138412032 [pid 359] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 525] <... futex resumed>) = 1 [pid 522] <... futex resumed>) = 0 [pid 520] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 522] <... futex resumed>) = 0 [pid 538] <... munmap resumed>) = 0 [pid 538] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 538] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 538] close(3) = 0 [pid 538] close(4 [pid 526] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 520] <... futex resumed>) = 1 [pid 520] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 359] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] unlink("./5/binderfs") = 0 [pid 359] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 522] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] <... futex resumed>) = 0 [pid 516] <... futex resumed>) = 1 [pid 520] ioctl(-1, SIOCGIFINDEX, NULL [pid 516] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 520] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 516] <... futex resumed>) = 0 [pid 520] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 516] exit_group(0 [pid 520] <... futex resumed>) = ? [pid 516] <... exit_group resumed>) = ? [pid 520] +++ exited with 0 +++ [pid 516] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=516, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 364] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 364] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 364] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./6/binderfs") = 0 [pid 364] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 525] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 525] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 525] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 525] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 525] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] exit_group(0) = ? [pid 525] +++ exited with 0 +++ [pid 522] +++ exited with 0 +++ [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=522, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 358] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 358] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 358] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./6/binderfs") = 0 [pid 358] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 538] <... close resumed>) = 0 [pid 538] mkdir("./file1", 0777) = 0 [ 26.990387][ T526] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 27.010682][ T525] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 538] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 526] <... openat resumed>) = 4 [pid 526] ioctl(4, LOOP_CLR_FD) = 0 [pid 364] <... umount2 resumed>) = 0 [pid 359] <... umount2 resumed>) = 0 [pid 358] <... umount2 resumed>) = 0 [pid 526] close(4 [pid 364] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 364] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 364] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] close(4) = 0 [pid 364] rmdir("./6/file1") = 0 [pid 359] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] getdents64(3, [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] newfstatat(AT_FDCWD, "./5/file1", [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] close(3 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] newfstatat(AT_FDCWD, "./6/file1", [pid 364] <... close resumed>) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] rmdir("./6" [pid 358] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] <... rmdir resumed>) = 0 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] mkdir("./7", 0777 [pid 359] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 358] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 364] <... mkdir resumed>) = 0 [pid 358] <... openat resumed>) = 4 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 358] newfstatat(4, "", [pid 359] <... openat resumed>) = 4 [pid 359] newfstatat(4, "", [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(4, [pid 359] getdents64(4, [pid 358] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] getdents64(4, [pid 359] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] close(4 [pid 358] close(4 [pid 359] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 359] rmdir("./5/file1" [pid 358] rmdir("./6/file1") = 0 [pid 359] <... rmdir resumed>) = 0 [pid 358] getdents64(3, [pid 359] getdents64(3, [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3 [pid 358] close(3 [pid 359] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 359] rmdir("./5" [pid 358] rmdir("./6" [pid 359] <... rmdir resumed>) = 0 [pid 359] mkdir("./6", 0777 [pid 358] <... rmdir resumed>) = 0 [pid 359] <... mkdir resumed>) = 0 [pid 358] mkdir("./7", 0777) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 526] <... close resumed>) = 0 [pid 364] <... openat resumed>) = 3 [pid 359] <... openat resumed>) = 3 [pid 364] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 359] ioctl(3, LOOP_CLR_FD [pid 364] close(3) = 0 [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 359] close(3 [pid 364] <... clone resumed>, child_tidptr=0x5555751e4750) = 540 [pid 359] <... close resumed>) = 0 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 541 ./strace-static-x86_64: Process 541 attached [pid 541] set_robust_list(0x5555751e4760, 24) = 0 [pid 541] chdir("./6") = 0 [pid 541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 541] setpgid(0, 0) = 0 [pid 541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 540 attached [pid 526] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... openat resumed>) = 3 [pid 526] <... futex resumed>) = 1 [pid 521] <... futex resumed>) = 0 [pid 526] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] ioctl(3, LOOP_CLR_FD [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 521] <... futex resumed>) = 0 [pid 526] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 521] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 526] <... openat resumed>) = 4 [pid 526] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] close(3 [pid 526] <... futex resumed>) = 1 [pid 521] <... futex resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 526] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 541] <... openat resumed>) = 3 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 521] <... futex resumed>) = 0 [pid 541] write(3, "1000", 4 [pid 526] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 521] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] <... mmap resumed>) = 0x200000000000 [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 544 [pid 526] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] <... futex resumed>) = 0 [pid 526] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 521] <... futex resumed>) = 0 ./strace-static-x86_64: Process 544 attached [pid 541] <... write resumed>) = 4 [pid 540] set_robust_list(0x5555751e4760, 24 [pid 538] <... mount resumed>) = 0 [pid 544] set_robust_list(0x5555751e4760, 24 [pid 541] close(3 [pid 540] <... set_robust_list resumed>) = 0 [pid 538] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 544] <... set_robust_list resumed>) = 0 [pid 541] <... close resumed>) = 0 [pid 540] chdir("./7" [pid 538] <... openat resumed>) = 3 [pid 544] chdir("./7" [pid 541] symlink("/dev/binderfs", "./binderfs" [pid 540] <... chdir resumed>) = 0 [pid 538] chdir("./file1"executing program [pid 544] <... chdir resumed>) = 0 [pid 541] <... symlink resumed>) = 0 [pid 540] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 538] <... chdir resumed>) = 0 [pid 544] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 541] write(1, "executing program\n", 18 [pid 544] <... prctl resumed>) = 0 [pid 541] <... write resumed>) = 18 [pid 540] <... prctl resumed>) = 0 [pid 538] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 544] setpgid(0, 0 [pid 541] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... setpgid resumed>) = 0 [pid 541] <... futex resumed>) = 0 [pid 540] setpgid(0, 0 [pid 538] <... openat resumed>) = 4 [pid 544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 541] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 544] <... openat resumed>) = 3 [pid 541] <... rt_sigaction resumed>NULL, 8) = 0 [pid 540] <... setpgid resumed>) = 0 [pid 538] ioctl(4, LOOP_CLR_FD [pid 544] write(3, "1000", 4 [pid 541] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 544] <... write resumed>) = 4 [pid 541] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 540] <... openat resumed>) = 3 [pid 538] <... ioctl resumed>) = 0 [pid 544] close(3 [pid 541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 540] write(3, "1000", 4 [pid 538] close(4 [pid 544] <... close resumed>) = 0 [pid 541] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 540] <... write resumed>) = 4 [pid 538] <... close resumed>) = 0 executing program [pid 544] symlink("/dev/binderfs", "./binderfs" [pid 541] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 540] close(3 [pid 538] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... symlink resumed>) = 0 [pid 541] <... mprotect resumed>) = 0 [pid 540] <... close resumed>) = 0 [pid 538] <... futex resumed>) = 1 [pid 533] <... futex resumed>) = 0 [pid 544] write(1, "executing program\n", 18 [pid 541] rt_sigprocmask(SIG_BLOCK, ~[], [pid 540] symlink("/dev/binderfs", "./binderfs" [pid 538] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... write resumed>) = 18 [pid 541] <... rt_sigprocmask resumed>[], 8) = 0 [pid 540] <... symlink resumed>) = 0 [pid 538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 544] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}executing program [pid 540] write(1, "executing program\n", 18 [pid 538] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 533] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] <... futex resumed>) = 0 [pid 540] <... write resumed>) = 18 [pid 538] <... openat resumed>) = 4 [pid 544] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 541] <... clone3 resumed> => {parent_tid=[545]}, 88) = 545 [pid 540] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 545 attached [pid 544] <... rt_sigaction resumed>NULL, 8) = 0 [pid 541] rt_sigprocmask(SIG_SETMASK, [], [pid 540] <... futex resumed>) = 0 [pid 538] <... futex resumed>) = 1 [pid 533] <... futex resumed>) = 0 [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 545] set_robust_list(0x7fa2cc9159a0, 24 [pid 544] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 541] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 540] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 538] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... set_robust_list resumed>) = 0 [pid 544] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 541] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... rt_sigaction resumed>NULL, 8) = 0 [pid 538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 545] rt_sigprocmask(SIG_SETMASK, [], [pid 544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 541] <... futex resumed>) = 0 [pid 540] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 538] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 533] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] capset(0x200000000000, NULL [pid 545] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 544] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 541] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 538] <... mmap resumed>) = 0x200000000000 [pid 544] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 538] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... mprotect resumed>) = 0 [pid 540] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 538] <... futex resumed>) = 1 [pid 533] <... futex resumed>) = 0 [pid 544] rt_sigprocmask(SIG_BLOCK, ~[], [pid 540] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 538] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... rt_sigprocmask resumed>[], 8) = 0 [pid 540] <... mprotect resumed>) = 0 [pid 538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 545] memfd_create("syzkaller", 0 [pid 544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 540] rt_sigprocmask(SIG_BLOCK, ~[], [pid 526] <... capset resumed>) = -1 EFAULT (Bad address) [pid 545] <... memfd_create resumed>) = 3 [pid 526] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 526] <... futex resumed>) = 1 [pid 521] <... futex resumed>) = 0 [pid 545] <... mmap resumed>) = 0x7fa2c44f5000 [pid 526] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 521] <... futex resumed>) = 0 [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 521] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 526] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 526] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 526] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] <... futex resumed>) = 0 [pid 526] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... futex resumed>) = 0 [pid 526] ioctl(-1, SIOCGIFINDEX, NULL [pid 521] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 526] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] <... futex resumed>) = 0 ./strace-static-x86_64: Process 546 attached [pid 544] <... clone3 resumed> => {parent_tid=[546]}, 88) = 546 [pid 540] <... rt_sigprocmask resumed>[], 8) = 0 [pid 538] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 545] <... write resumed>) = 1048576 [pid 526] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] exit_group(0 [pid 546] set_robust_list(0x7fa2cc9159a0, 24 [pid 545] munmap(0x7fa2c44f5000, 138412032 [pid 544] rt_sigprocmask(SIG_SETMASK, [], [pid 540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 538] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 526] <... futex resumed>) = ? [pid 521] <... exit_group resumed>) = ? [pid 546] <... set_robust_list resumed>) = 0 [pid 545] <... munmap resumed>) = 0 [pid 544] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 538] capset(0x200000000000, NULL [pid 526] +++ exited with 0 +++ [pid 521] +++ exited with 0 +++ [pid 546] rt_sigprocmask(SIG_SETMASK, [], [pid 545] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 544] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... clone3 resumed> => {parent_tid=[547]}, 88) = 547 [pid 546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 544] <... futex resumed>) = 0 [pid 540] rt_sigprocmask(SIG_SETMASK, [], [pid 538] <... capset resumed>) = -1 EFAULT (Bad address) [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=521, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 545] <... openat resumed>) = 4 ./strace-static-x86_64: Process 547 attached [pid 546] memfd_create("syzkaller", 0 [pid 544] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 360] restart_syscall(<... resuming interrupted clone ...> [pid 545] ioctl(4, LOOP_SET_FD, 3 [pid 538] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... memfd_create resumed>) = 3 [pid 540] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] set_robust_list(0x7fa2cc9159a0, 24 [pid 540] <... futex resumed>) = 0 [pid 546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 538] <... futex resumed>) = 1 [pid 533] <... futex resumed>) = 0 [pid 547] <... set_robust_list resumed>) = 0 [pid 540] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 533] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... mmap resumed>) = 0x7fa2c44f5000 [pid 533] <... futex resumed>) = 0 [pid 547] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 547] memfd_create("syzkaller", 0) = 3 [pid 547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 533] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 538] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 547] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 546] <... write resumed>) = 1048576 [pid 538] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 545] <... ioctl resumed>) = 0 [pid 538] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 360] <... restart_syscall resumed>) = 0 [pid 546] munmap(0x7fa2c44f5000, 138412032 [pid 545] close(3 [pid 538] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 360] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 360] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 547] <... write resumed>) = 1048576 [pid 547] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 547] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 360] newfstatat(AT_FDCWD, "./6/binderfs", [pid 547] <... openat resumed>) = 4 [pid 547] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 547] close(3) = 0 [pid 547] close(4 [pid 360] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] unlink("./6/binderfs") = 0 [pid 360] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 546] <... munmap resumed>) = 0 [pid 546] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 545] <... close resumed>) = 0 [pid 545] close(4 [pid 538] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 538] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 538] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 538] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 538] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 538] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 538] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 538] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 538] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 533] <... futex resumed>) = 0 [pid 538] ioctl(-1, SIOCGIFINDEX, NULL [pid 533] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 533] <... futex resumed>) = 0 [pid 538] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 538] <... futex resumed>) = 0 [pid 533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] exit_group(0) = ? [pid 538] <... futex resumed>) = ? [pid 538] +++ exited with 0 +++ [pid 533] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=533, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 365] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 365] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./6/binderfs") = 0 [ 27.330178][ T538] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 27.331293][ T526] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.360935][ T538] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 365] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 547] <... close resumed>) = 0 [pid 546] <... openat resumed>) = 4 [pid 545] <... close resumed>) = 0 [pid 547] mkdir("./file1", 0777) = 0 [pid 547] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 545] mkdir("./file1", 0777) = 0 [pid 545] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 546] ioctl(4, LOOP_SET_FD, 3 [pid 547] <... mount resumed>) = 0 [pid 547] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 547] chdir("./file1") = 0 [pid 547] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 546] <... ioctl resumed>) = 0 [pid 360] <... umount2 resumed>) = 0 [pid 365] <... umount2 resumed>) = 0 [pid 546] close(3) = 0 [pid 546] close(4) = 0 [pid 546] mkdir("./file1", 0777) = 0 [pid 365] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 546] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./6/file1", [pid 360] newfstatat(AT_FDCWD, "./6/file1", [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 365] <... openat resumed>) = 4 [pid 365] newfstatat(4, "", [pid 360] newfstatat(4, "", [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, [pid 360] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 360] getdents64(4, [pid 365] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] close(4 [pid 360] close(4) = 0 [pid 365] <... close resumed>) = 0 [pid 365] rmdir("./6/file1" [pid 360] rmdir("./6/file1") = 0 [pid 365] <... rmdir resumed>) = 0 [pid 360] getdents64(3, [pid 365] getdents64(3, [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [ 27.504050][ T547] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 360] close(3 [pid 365] close(3 [pid 360] <... close resumed>) = 0 [pid 360] rmdir("./6" [pid 365] <... close resumed>) = 0 [pid 365] rmdir("./6" [pid 360] <... rmdir resumed>) = 0 [pid 545] <... mount resumed>) = 0 [pid 365] <... rmdir resumed>) = 0 [pid 360] mkdir("./7", 0777 [pid 545] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 365] mkdir("./7", 0777 [pid 545] <... openat resumed>) = 3 [pid 365] <... mkdir resumed>) = 0 [pid 360] <... mkdir resumed>) = 0 [pid 545] chdir("./file1" [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 545] <... chdir resumed>) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 545] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 547] <... openat resumed>) = 4 [pid 365] <... openat resumed>) = 3 [pid 365] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 365] close(3) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 556 [pid 547] ioctl(4, LOOP_CLR_FD) = 0 [pid 547] close(4) = 0 [pid 547] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 547] <... futex resumed>) = 1 [pid 547] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 360] <... openat resumed>) = 3 [pid 360] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 360] close(3) = 0 [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 557 [pid 547] <... openat resumed>) = 4 [pid 547] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] <... futex resumed>) = 1 [pid 540] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 547] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 547] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 540] <... futex resumed>) = 0 ./strace-static-x86_64: Process 557 attached ./strace-static-x86_64: Process 556 attached [pid 545] <... openat resumed>) = 4 [pid 540] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] set_robust_list(0x5555751e4760, 24 [pid 545] ioctl(4, LOOP_CLR_FD) = 0 [pid 556] <... set_robust_list resumed>) = 0 [pid 545] close(4 [pid 556] chdir("./7" [pid 547] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 545] <... close resumed>) = 0 [pid 540] <... futex resumed>) = 0 [pid 556] <... chdir resumed>) = 0 [pid 545] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 545] <... futex resumed>) = 1 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] <... prctl resumed>) = 0 [pid 545] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 556] setpgid(0, 0 [pid 545] <... openat resumed>) = 4 [pid 556] <... setpgid resumed>) = 0 [pid 545] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 545] <... futex resumed>) = 1 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] <... openat resumed>) = 3 [pid 545] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 556] write(3, "1000", 4 [pid 545] <... mmap resumed>) = 0x200000000000 [pid 556] <... write resumed>) = 4 [pid 545] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] close(3 [pid 545] <... futex resumed>) = 1 [pid 541] <... futex resumed>) = 0 [ 27.565376][ T545] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 27.587576][ T547] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.605334][ T546] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue executing program [pid 557] set_robust_list(0x5555751e4760, 24 [pid 556] <... close resumed>) = 0 [pid 547] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 546] <... mount resumed>) = 0 [pid 541] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 547] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 540] <... futex resumed>) = 0 [pid 547] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] <... futex resumed>) = 0 [pid 547] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 540] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 547] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 547] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 547] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 547] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 547] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 547] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 547] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 547] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 547] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 547] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 547] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 547] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 540] <... futex resumed>) = 0 [pid 547] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] <... futex resumed>) = 0 [pid 547] ioctl(-1, SIOCGIFINDEX, NULL [pid 540] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 547] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 547] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 540] <... futex resumed>) = 0 [pid 547] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] exit_group(0 [pid 547] <... futex resumed>) = ? [pid 540] <... exit_group resumed>) = ? [pid 547] +++ exited with 0 +++ [pid 540] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=540, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 364] restart_syscall(<... resuming interrupted clone ...> [pid 546] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 557] <... set_robust_list resumed>) = 0 [pid 557] chdir("./7" [pid 546] chdir("./file1") = 0 [pid 546] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 557] <... chdir resumed>) = 0 [pid 546] <... openat resumed>) = 4 [pid 557] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 546] ioctl(4, LOOP_CLR_FD [pid 557] <... prctl resumed>) = 0 [pid 546] <... ioctl resumed>) = 0 [pid 557] setpgid(0, 0 [pid 546] close(4 [pid 557] <... setpgid resumed>) = 0 [pid 546] <... close resumed>) = 0 [pid 557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 546] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... openat resumed>) = 3 [pid 546] <... futex resumed>) = 1 [pid 557] write(3, "1000", 4 [pid 546] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 557] <... write resumed>) = 4 [pid 557] close(3) = 0 [pid 557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 557] write(1, "executing program\n", 18) = 18 [pid 557] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 557] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 557] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 557] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[560]}, 88) = 560 [pid 557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 557] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 560 attached [pid 560] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 560] memfd_create("syzkaller", 0) = 3 [pid 560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 364] <... restart_syscall resumed>) = 0 [pid 364] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 364] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./7/binderfs") = 0 [pid 364] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 544] <... futex resumed>) = 0 [pid 541] <... futex resumed>) = 0 [pid 544] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] <... futex resumed>) = 1 [pid 546] <... futex resumed>) = 0 [pid 544] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] symlink("/dev/binderfs", "./binderfs" [pid 546] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 546] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 544] <... futex resumed>) = 0 [pid 546] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 544] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... mmap resumed>) = 0x200000000000 [pid 544] <... futex resumed>) = 0 [pid 546] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... futex resumed>) = 0 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 556] <... symlink resumed>) = 0 [pid 545] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 544] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 556] write(1, "executing program\n", 18) = 18 [pid 556] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 556] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 556] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 556] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 556] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 556] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[561]}, 88) = 561 [pid 556] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 556] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 545] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 545] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 545] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 1 [pid 545] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 545] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 545] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 545] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 545] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 545] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 545] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 545] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 545] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 545] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 545] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 545] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 545] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 1 [pid 545] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 545] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] exit_group(0) = ? [pid 545] <... futex resumed>) = ? [pid 545] +++ exited with 0 +++ [pid 541] +++ exited with 0 +++ [pid 544] <... futex resumed>) = 0 [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=541, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- ./strace-static-x86_64: Process 561 attached [pid 546] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 544] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 359] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 561] rt_sigprocmask(SIG_SETMASK, [], [pid 546] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 561] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 546] capset(0x200000000000, NULL [pid 359] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 561] memfd_create("syzkaller", 0 [pid 359] <... openat resumed>) = 3 [pid 561] <... memfd_create resumed>) = 3 [pid 359] newfstatat(3, "", [pid 561] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 546] <... capset resumed>) = -1 EFAULT (Bad address) [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 561] <... mmap resumed>) = 0x7fa2c44f5000 [pid 546] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] getdents64(3, [pid 561] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 544] <... futex resumed>) = 0 [pid 359] newfstatat(AT_FDCWD, "./6/binderfs", [pid 546] <... futex resumed>) = 1 [pid 544] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 544] <... futex resumed>) = 0 [pid 359] unlink("./6/binderfs" [pid 544] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] <... write resumed>) = 1048576 [pid 546] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 359] <... unlink resumed>) = 0 [pid 359] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 546] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 560] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 560] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 546] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 546] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 546] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 546] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 546] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 546] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 546] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 546] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 546] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 546] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 546] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 544] <... futex resumed>) = 0 [pid 546] ioctl(-1, SIOCGIFINDEX, NULL [pid 544] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 544] <... futex resumed>) = 0 [pid 546] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... futex resumed>) = 0 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 546] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 544] exit_group(0 [pid 546] <... futex resumed>) = ? [pid 544] <... exit_group resumed>) = ? [pid 561] <... write resumed>) = 1048576 [pid 546] +++ exited with 0 +++ [pid 544] +++ exited with 0 +++ [pid 561] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=544, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 358] restart_syscall(<... resuming interrupted clone ...> [pid 561] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 560] <... openat resumed>) = 4 [pid 364] <... umount2 resumed>) = 0 [pid 560] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 364] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 560] close(3) = 0 [pid 560] close(4 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 364] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 364] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] close(4) = 0 [pid 364] rmdir("./7/file1") = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] close(3 [pid 358] <... restart_syscall resumed>) = 0 [pid 364] <... close resumed>) = 0 [pid 364] rmdir("./7" [pid 358] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 358] newfstatat(3, "", [pid 364] <... rmdir resumed>) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] mkdir("./8", 0777 [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./7/binderfs") = 0 [pid 358] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] <... mkdir resumed>) = 0 [ 27.611075][ T545] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.632202][ T546] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 358] <... umount2 resumed>) = 0 [pid 358] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 358] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] close(4) = 0 [pid 358] rmdir("./7/file1") = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] close(3) = 0 [pid 358] rmdir("./7") = 0 [pid 358] mkdir("./8", 0777) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 560] <... close resumed>) = 0 [pid 561] <... openat resumed>) = 4 [pid 364] <... openat resumed>) = 3 [pid 561] ioctl(4, LOOP_SET_FD, 3 [pid 364] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 364] close(3 [pid 561] <... ioctl resumed>) = 0 [pid 561] close(3) = 0 [pid 561] close(4 [pid 560] mkdir("./file1", 0777) = 0 [pid 560] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 561] <... close resumed>) = 0 [pid 561] mkdir("./file1", 0777) = 0 [pid 359] <... umount2 resumed>) = 0 [pid 561] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 359] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 359] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] close(4) = 0 [pid 359] rmdir("./6/file1") = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3) = 0 [pid 359] rmdir("./6") = 0 [pid 359] mkdir("./7", 0777) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 364] <... close resumed>) = 0 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 359] <... openat resumed>) = 3 [pid 358] <... openat resumed>) = 3 [pid 359] ioctl(3, LOOP_CLR_FD [pid 358] ioctl(3, LOOP_CLR_FD [pid 364] <... clone resumed>, child_tidptr=0x5555751e4750) = 564 [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 359] close(3 [pid 358] close(3 [pid 359] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 359] <... clone resumed>, child_tidptr=0x5555751e4750) = 565 [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 566 ./strace-static-x86_64: Process 564 attached ./strace-static-x86_64: Process 566 attached [pid 564] set_robust_list(0x5555751e4760, 24 [pid 566] set_robust_list(0x5555751e4760, 24 [pid 564] <... set_robust_list resumed>) = 0 [pid 564] chdir("./8" [pid 566] <... set_robust_list resumed>) = 0 [pid 566] chdir("./8" [pid 564] <... chdir resumed>) = 0 [pid 566] <... chdir resumed>) = 0 [pid 566] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 564] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 566] <... prctl resumed>) = 0 [pid 564] <... prctl resumed>) = 0 [pid 566] setpgid(0, 0 [pid 564] setpgid(0, 0 [pid 566] <... setpgid resumed>) = 0 [pid 564] <... setpgid resumed>) = 0 [pid 566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 565 attached [pid 565] set_robust_list(0x5555751e4760, 24) = 0 [pid 566] <... openat resumed>) = 3 [pid 564] <... openat resumed>) = 3 [pid 566] write(3, "1000", 4 [pid 564] write(3, "1000", 4) = 4 [pid 566] <... write resumed>) = 4 [pid 564] close(3 [pid 566] close(3 [pid 564] <... close resumed>) = 0 [pid 566] <... close resumed>) = 0 [pid 566] symlink("/dev/binderfs", "./binderfs" [pid 564] symlink("/dev/binderfs", "./binderfs" [pid 566] <... symlink resumed>) = 0 [pid 564] <... symlink resumed>) = 0 executing program [pid 564] write(1, "executing program\n", 18) = 18 [pid 564] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000executing program ) = 0 [pid 564] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 564] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 566] write(1, "executing program\n", 18 [pid 564] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 566] <... write resumed>) = 18 [pid 565] chdir("./7" [pid 564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 565] <... chdir resumed>) = 0 [pid 565] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 564] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 566] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 566] <... futex resumed>) = 0 [pid 564] <... mprotect resumed>) = 0 [pid 566] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 566] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 564] rt_sigprocmask(SIG_BLOCK, ~[], [pid 566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 566] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 566] rt_sigprocmask(SIG_BLOCK, ~[], [pid 564] <... rt_sigprocmask resumed>[], 8) = 0 [pid 564] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 566] <... rt_sigprocmask resumed>[], 8) = 0 [pid 566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 565] <... prctl resumed>) = 0 [pid 564] <... clone3 resumed> => {parent_tid=[571]}, 88) = 571 [pid 564] rt_sigprocmask(SIG_SETMASK, [], [pid 565] setpgid(0, 0 [pid 564] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 564] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] <... clone3 resumed> => {parent_tid=[572]}, 88) = 572 [pid 564] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 566] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 572 attached [pid 572] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 572] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 572] memfd_create("syzkaller", 0) = 3 [pid 572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 ./strace-static-x86_64: Process 571 attached [pid 571] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 571] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 571] memfd_create("syzkaller", 0) = 3 [pid 571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 565] <... setpgid resumed>) = 0 [pid 565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 565] write(3, "1000", 4) = 4 [pid 565] close(3) = 0 [pid 565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 565] write(1, "executing program\n", 18executing program ) = 18 [pid 565] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 565] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 565] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 572] <... write resumed>) = 1048576 [pid 572] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 571] <... write resumed>) = 1048576 [pid 572] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 572] ioctl(4, LOOP_SET_FD, 3 [pid 571] munmap(0x7fa2c44f5000, 138412032 [pid 565] rt_sigprocmask(SIG_BLOCK, ~[], [pid 571] <... munmap resumed>) = 0 [pid 565] <... rt_sigprocmask resumed>[], 8) = 0 [pid 572] <... ioctl resumed>) = 0 [pid 561] <... mount resumed>) = 0 [pid 560] <... mount resumed>) = 0 [pid 572] close(3 [pid 571] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 572] <... close resumed>) = 0 [pid 571] <... openat resumed>) = 4 [pid 565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 572] close(4 [pid 571] ioctl(4, LOOP_SET_FD, 3 [pid 572] <... close resumed>) = 0 [pid 572] mkdir("./file1", 0777 [pid 565] <... clone3 resumed> => {parent_tid=[574]}, 88) = 574 [pid 572] <... mkdir resumed>) = 0 [pid 571] <... ioctl resumed>) = 0 [pid 565] rt_sigprocmask(SIG_SETMASK, [], [pid 572] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 571] close(3) = 0 [pid 565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 571] close(4) = 0 [pid 571] mkdir("./file1", 0777) = 0 [pid 565] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 571] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 565] <... futex resumed>) = 0 [pid 565] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 560] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 560] chdir("./file1") = 0 [pid 560] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 560] ioctl(4, LOOP_CLR_FD) = 0 [pid 560] close(4) = 0 [pid 560] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 557] <... futex resumed>) = 0 [pid 560] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 557] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... openat resumed>) = 4 [pid 557] <... futex resumed>) = 0 [pid 560] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] <... futex resumed>) = 0 [pid 557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 561] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 560] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 557] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 561] <... openat resumed>) = 3 [pid 560] <... mmap resumed>) = 0x200000000000 [pid 557] <... futex resumed>) = 0 [pid 561] chdir("./file1" [pid 560] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] <... chdir resumed>) = 0 [pid 560] <... futex resumed>) = 0 [pid 557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 27.834225][ T560] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 27.844029][ T561] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue ./strace-static-x86_64: Process 574 attached [pid 557] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 561] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 557] <... futex resumed>) = 0 [pid 561] <... openat resumed>) = 4 [pid 574] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 574] memfd_create("syzkaller", 0 [pid 557] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] ioctl(4, LOOP_CLR_FD [pid 574] <... memfd_create resumed>) = 3 [pid 574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 561] <... ioctl resumed>) = 0 [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 561] close(4) = 0 [pid 574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 561] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 556] <... futex resumed>) = 0 [pid 556] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 561] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 556] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] <... openat resumed>) = 4 [pid 560] capset(0x200000000000, NULL [pid 561] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 560] <... capset resumed>) = -1 EFAULT (Bad address) [pid 556] <... futex resumed>) = 0 [pid 556] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 561] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 556] <... futex resumed>) = 0 [pid 560] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] <... mmap resumed>) = 0x200000000000 [pid 572] <... mount resumed>) = 0 [pid 561] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = 1 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... write resumed>) = 1048576 [pid 572] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 561] <... futex resumed>) = 1 [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 557] <... futex resumed>) = 0 [pid 556] <... futex resumed>) = 0 [pid 561] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 557] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 561] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 556] <... futex resumed>) = 0 [pid 574] munmap(0x7fa2c44f5000, 138412032 [pid 572] <... openat resumed>) = 3 [pid 571] <... mount resumed>) = 0 [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 556] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 560] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 560] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 560] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] chdir("./file1") = 0 [pid 572] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 572] ioctl(4, LOOP_CLR_FD) = 0 [ 27.884203][ T560] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.904803][ T572] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 27.917951][ T571] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 572] close(4) = 0 [pid 572] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 572] <... futex resumed>) = 1 [pid 572] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 571] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 574] <... munmap resumed>) = 0 [pid 571] chdir("./file1") = 0 [pid 571] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 571] ioctl(4, LOOP_CLR_FD) = 0 [pid 571] close(4 [pid 557] <... futex resumed>) = 0 [pid 572] <... openat resumed>) = 4 [pid 572] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 572] <... futex resumed>) = 1 [pid 572] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 572] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 572] <... futex resumed>) = 1 [pid 557] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = 0 [pid 557] <... futex resumed>) = 1 [pid 560] ioctl(-1, SIOCGIFINDEX, NULL [pid 557] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 560] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 560] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 557] <... futex resumed>) = 0 [pid 560] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 557] exit_group(0 [pid 561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 560] <... futex resumed>) = ? [pid 557] <... exit_group resumed>) = ? [pid 560] +++ exited with 0 +++ [pid 571] <... close resumed>) = 0 [pid 557] +++ exited with 0 +++ [pid 561] capset(0x200000000000, NULL [pid 574] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 561] <... capset resumed>) = -1 EFAULT (Bad address) [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=557, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 574] <... openat resumed>) = 4 [pid 572] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 571] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 561] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] restart_syscall(<... resuming interrupted clone ...> [pid 574] ioctl(4, LOOP_SET_FD, 3 [pid 561] <... futex resumed>) = 1 [pid 556] <... futex resumed>) = 0 [pid 556] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 556] <... futex resumed>) = 0 [pid 564] <... futex resumed>) = 0 [pid 561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 564] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 564] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] <... ioctl resumed>) = 0 [pid 574] close(3 [pid 572] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 571] <... futex resumed>) = 1 [pid 561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 574] <... close resumed>) = 0 [pid 561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 574] close(4 [pid 561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 574] <... close resumed>) = 0 [pid 561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 574] mkdir("./file1", 0777) = 0 [pid 572] capset(0x200000000000, NULL [pid 561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 571] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 571] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 360] <... restart_syscall resumed>) = 0 [pid 571] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [ 27.926509][ T561] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.945846][ T572] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 360] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 561] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 561] sendmmsg(-1, [pid 360] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 561] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 360] <... openat resumed>) = 3 [pid 561] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] newfstatat(3, "", [pid 561] <... futex resumed>) = 1 [pid 556] <... futex resumed>) = 0 [pid 561] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 556] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 561] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 556] <... futex resumed>) = 0 [pid 561] ioctl(-1, SIOCGIFINDEX, NULL [pid 556] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] getdents64(3, [pid 561] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 561] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 561] <... futex resumed>) = 1 [pid 556] <... futex resumed>) = 0 [pid 561] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 556] exit_group(0 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 556] <... exit_group resumed>) = ? [pid 360] newfstatat(AT_FDCWD, "./7/binderfs", [pid 561] <... futex resumed>) = ? [pid 360] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 561] +++ exited with 0 +++ [pid 556] +++ exited with 0 +++ [pid 360] unlink("./7/binderfs" [pid 566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 566] futex(0x7fa2cc9e16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=556, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 360] <... unlink resumed>) = 0 [pid 566] <... futex resumed>) = 0 [pid 365] restart_syscall(<... resuming interrupted clone ...> [pid 566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 360] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 572] <... capset resumed>) = -1 EFAULT (Bad address) [pid 566] <... mmap resumed>) = 0x7fa2cc8d4000 [pid 566] mprotect(0x7fa2cc8d5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc8f4990, parent_tid=0x7fa2cc8f4990, exit_signal=0, stack=0x7fa2cc8d4000, stack_size=0x20240, tls=0x7fa2cc8f46c0} => {parent_tid=[582]}, 88) = 582 [pid 566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 566] futex(0x7fa2cc9e16d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7fa2cc9e16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 582 attached [pid 582] set_robust_list(0x7fa2cc8f49a0, 24) = 0 [pid 582] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 582] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 582] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 582] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 582] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 582] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 582] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 582] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 582] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 582] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 582] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 582] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 582] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 582] futex(0x7fa2cc9e16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7fa2cc9e16d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7fa2cc9e16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] <... futex resumed>) = 1 [pid 582] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 582] futex(0x7fa2cc9e16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 582] <... futex resumed>) = 1 [pid 582] futex(0x7fa2cc9e16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] <... restart_syscall resumed>) = 0 [pid 365] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./7/binderfs" [pid 571] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 365] <... unlink resumed>) = 0 [pid 365] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 571] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 571] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 571] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 571] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 571] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 571] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 571] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 571] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 571] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 571] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 571] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 571] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 571] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 571] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 571] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 571] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] <... futex resumed>) = 0 [pid 564] exit_group(0) = ? [pid 571] <... futex resumed>) = ? [pid 571] +++ exited with 0 +++ [pid 564] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=564, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 364] restart_syscall(<... resuming interrupted clone ...> [pid 572] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 566] exit_group(0 [pid 582] <... futex resumed>) = ? [pid 566] <... exit_group resumed>) = ? [pid 364] <... restart_syscall resumed>) = 0 [pid 582] +++ exited with 0 +++ [pid 572] <... futex resumed>) = ? [pid 364] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 364] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./8/binderfs") = 0 [pid 364] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 572] +++ exited with 0 +++ [pid 566] +++ exited with 0 +++ [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=566, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 358] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 358] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 574] <... mount resumed>) = 0 [pid 358] <... openat resumed>) = 3 [pid 574] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 358] newfstatat(3, "", [pid 574] <... openat resumed>) = 3 [pid 574] chdir("./file1") = 0 [pid 574] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./8/binderfs") = 0 [ 27.977062][ T571] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.019999][ T574] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 358] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... umount2 resumed>) = 0 [pid 360] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 360] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 360] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] close(4) = 0 [pid 360] rmdir("./7/file1") = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] close(3) = 0 [pid 360] rmdir("./7") = 0 [pid 360] mkdir("./8", 0777) = 0 [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 365] <... umount2 resumed>) = 0 [pid 364] <... umount2 resumed>) = 0 [pid 360] <... openat resumed>) = 3 [pid 365] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 365] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] close(4) = 0 [pid 365] rmdir("./7/file1") = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] close(3) = 0 [pid 365] rmdir("./7") = 0 [pid 365] mkdir("./8", 0777) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 365] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 365] close(3) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 585 ./strace-static-x86_64: Process 585 attached [pid 585] set_robust_list(0x5555751e4760, 24) = 0 [pid 364] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 574] <... openat resumed>) = 4 [pid 360] ioctl(3, LOOP_CLR_FD [pid 358] <... umount2 resumed>) = 0 [pid 574] ioctl(4, LOOP_CLR_FD [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 574] <... ioctl resumed>) = 0 [pid 364] newfstatat(AT_FDCWD, "./8/file1", [pid 360] close(3 [pid 358] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 574] close(4 [pid 585] chdir("./8" [pid 574] <... close resumed>) = 0 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] <... close resumed>) = 0 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 585] <... chdir resumed>) = 0 [pid 358] newfstatat(AT_FDCWD, "./8/file1", [pid 364] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] <... clone resumed>, child_tidptr=0x5555751e4750) = 586 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] <... openat resumed>) = 4 [pid 574] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] newfstatat(4, "", [pid 358] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 574] <... futex resumed>) = 1 [pid 565] <... futex resumed>) = 0 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 586 attached [pid 585] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 574] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 565] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] getdents64(4, [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 586] set_robust_list(0x5555751e4760, 24 [pid 585] <... prctl resumed>) = 0 [pid 574] <... openat resumed>) = 4 [pid 565] <... futex resumed>) = 0 [pid 364] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 574] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 574] <... futex resumed>) = 0 [pid 565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 364] getdents64(4, [pid 585] setpgid(0, 0 [pid 574] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 565] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] <... openat resumed>) = 4 [pid 586] <... set_robust_list resumed>) = 0 [pid 585] <... setpgid resumed>) = 0 [pid 574] <... mmap resumed>) = 0x200000000000 [pid 565] <... futex resumed>) = 0 [pid 364] close(4 [pid 574] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] <... close resumed>) = 0 [pid 358] newfstatat(4, "", [pid 585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 574] <... futex resumed>) = 0 [pid 565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 364] rmdir("./8/file1" [pid 586] chdir("./8" [pid 585] <... openat resumed>) = 3 [pid 565] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 586] <... chdir resumed>) = 0 [pid 585] write(3, "1000", 4 [pid 586] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 585] <... write resumed>) = 4 [pid 586] <... prctl resumed>) = 0 [pid 585] close(3 [pid 586] setpgid(0, 0 [pid 585] <... close resumed>) = 0 [pid 586] <... setpgid resumed>) = 0 [pid 585] symlink("/dev/binderfs", "./binderfs" [pid 586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC executing program [pid 585] <... symlink resumed>) = 0 [pid 586] <... openat resumed>) = 3 [pid 585] write(1, "executing program\n", 18 [pid 586] write(3, "1000", 4 [pid 585] <... write resumed>) = 18 [pid 586] <... write resumed>) = 4 [pid 585] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] close(3 [pid 585] <... futex resumed>) = 0 [pid 586] <... close resumed>) = 0 [pid 585] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 586] symlink("/dev/binderfs", "./binderfs" [pid 585] <... rt_sigaction resumed>NULL, 8) = 0 executing program [pid 586] <... symlink resumed>) = 0 [pid 585] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 586] write(1, "executing program\n", 18 [pid 585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 586] <... write resumed>) = 18 [pid 585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 586] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 586] <... futex resumed>) = 0 [pid 585] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 586] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 585] <... mprotect resumed>) = 0 [pid 586] <... rt_sigaction resumed>NULL, 8) = 0 [pid 585] rt_sigprocmask(SIG_BLOCK, ~[], [pid 586] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 585] <... rt_sigprocmask resumed>[], 8) = 0 [pid 586] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 585] <... clone3 resumed> => {parent_tid=[587]}, 88) = 587 [pid 586] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 585] rt_sigprocmask(SIG_SETMASK, [], [pid 586] <... mprotect resumed>) = 0 [pid 585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 586] rt_sigprocmask(SIG_BLOCK, ~[], [pid 585] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... rt_sigprocmask resumed>[], 8) = 0 [pid 585] <... futex resumed>) = 0 [pid 586] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 585] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 586] <... clone3 resumed> => {parent_tid=[588]}, 88) = 588 [pid 586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 586] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 588 attached [pid 588] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 588] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 588] memfd_create("syzkaller", 0) = 3 [pid 588] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 364] <... rmdir resumed>) = 0 [pid 565] <... futex resumed>) = 0 [pid 565] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 587 attached [pid 364] getdents64(3, [pid 358] getdents64(4, [pid 587] set_robust_list(0x7fa2cc9159a0, 24 [pid 364] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 587] <... set_robust_list resumed>) = 0 [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 364] close(3 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 587] rt_sigprocmask(SIG_SETMASK, [], [pid 364] <... close resumed>) = 0 [pid 587] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 358] getdents64(4, [pid 587] memfd_create("syzkaller", 0 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] rmdir("./8" [pid 358] close(4 [pid 364] <... rmdir resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 587] <... memfd_create resumed>) = 3 [pid 358] rmdir("./8/file1" [pid 364] mkdir("./9", 0777 [pid 358] <... rmdir resumed>) = 0 [pid 587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 364] <... mkdir resumed>) = 0 [pid 587] <... mmap resumed>) = 0x7fa2c44f5000 [pid 358] getdents64(3, [pid 588] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 364] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] close(3 [pid 587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 364] <... close resumed>) = 0 [pid 358] close(3 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 589 [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 588] <... write resumed>) = 1048576 [pid 574] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 358] <... close resumed>) = 0 [pid 358] rmdir("./8" [pid 574] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 588] munmap(0x7fa2c44f5000, 138412032 [pid 358] <... rmdir resumed>) = 0 [pid 565] <... futex resumed>) = 0 [pid 565] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 358] mkdir("./9", 0777 [pid 565] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] <... futex resumed>) = 0 [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 358] <... mkdir resumed>) = 0 [pid 588] <... munmap resumed>) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 358] <... openat resumed>) = 3 [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 358] ioctl(3, LOOP_CLR_FD [pid 588] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 588] <... openat resumed>) = 4 [pid 588] ioctl(4, LOOP_SET_FD, 3 [pid 358] close(3 [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 574] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 574] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... futex resumed>) = 0 [pid 565] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] <... futex resumed>) = 1 [pid 574] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 574] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... futex resumed>) = 0 [pid 565] exit_group(0) = ? [pid 574] <... futex resumed>) = ? [pid 574] +++ exited with 0 +++ [pid 565] +++ exited with 0 +++ [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=565, si_uid=0, si_status=0, si_utime=1, si_stime=3} --- [pid 359] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 589 attached [pid 589] set_robust_list(0x5555751e4760, 24) = 0 [pid 589] chdir("./9") = 0 [pid 589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 589] setpgid(0, 0) = 0 [pid 589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 589] write(3, "1000", 4) = 4 [pid 589] close(3) = 0 [pid 589] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 589] write(1, "executing program\n", 18) = 18 [pid 589] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 589] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 589] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 589] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 589] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[591]}, 88) = 591 [pid 589] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 589] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 591 attached [pid 591] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 591] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 591] memfd_create("syzkaller", 0) = 3 [pid 591] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 359] <... restart_syscall resumed>) = 0 [pid 359] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 359] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] unlink("./7/binderfs") = 0 [pid 359] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 588] <... ioctl resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 588] close(3) = 0 [pid 588] close(4 [pid 591] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 592 [pid 587] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 592 attached [pid 587] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 587] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 592] set_robust_list(0x5555751e4760, 24 [pid 591] <... write resumed>) = 1048576 [pid 591] munmap(0x7fa2c44f5000, 138412032 [pid 592] <... set_robust_list resumed>) = 0 [pid 591] <... munmap resumed>) = 0 [pid 591] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 592] chdir("./9") = 0 [pid 592] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 592] setpgid(0, 0) = 0 [pid 592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 592] write(3, "1000", 4) = 4 [pid 592] close(3) = 0 [pid 592] symlink("/dev/binderfs", "./binderfs") = 0 [pid 592] write(1, "executing program\n", 18executing program ) = 18 [pid 592] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 592] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 592] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 592] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 592] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[593]}, 88) = 593 [pid 592] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 592] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 593 attached [pid 593] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 593] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 593] memfd_create("syzkaller", 0) = 3 [pid 593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [ 28.219495][ T574] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 588] <... close resumed>) = 0 [pid 588] mkdir("./file1", 0777) = 0 [pid 588] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 593] <... write resumed>) = 1048576 [pid 593] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 593] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 591] <... openat resumed>) = 4 [pid 587] <... openat resumed>) = 4 [pid 587] ioctl(4, LOOP_SET_FD, 3 [pid 591] ioctl(4, LOOP_SET_FD, 3 [pid 587] <... ioctl resumed>) = 0 [pid 587] close(3) = 0 [pid 587] close(4 [pid 359] <... umount2 resumed>) = 0 [pid 593] <... openat resumed>) = 4 [pid 359] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 593] ioctl(4, LOOP_SET_FD, 3 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 359] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] close(4) = 0 [pid 359] rmdir("./7/file1") = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3) = 0 [pid 359] rmdir("./7") = 0 [pid 359] mkdir("./8", 0777) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 587] <... close resumed>) = 0 [pid 587] mkdir("./file1", 0777) = 0 [pid 587] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 591] <... ioctl resumed>) = 0 [pid 591] close(3) = 0 [pid 591] close(4 [pid 587] <... mount resumed>) = 0 [pid 587] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 587] chdir("./file1") = 0 [pid 587] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 591] <... close resumed>) = 0 [pid 591] mkdir("./file1", 0777 [pid 593] <... ioctl resumed>) = 0 [pid 591] <... mkdir resumed>) = 0 [pid 359] <... openat resumed>) = 3 [pid 593] close(3 [pid 359] ioctl(3, LOOP_CLR_FD [pid 593] <... close resumed>) = 0 [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 593] close(4 [pid 359] close(3 [pid 593] <... close resumed>) = 0 [pid 359] <... close resumed>) = 0 [pid 593] mkdir("./file1", 0777 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 593] <... mkdir resumed>) = 0 [pid 593] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 359] <... clone resumed>, child_tidptr=0x5555751e4750) = 599 [pid 591] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue"./strace-static-x86_64: Process 599 attached [pid 599] set_robust_list(0x5555751e4760, 24) = 0 [pid 599] chdir("./8") = 0 [pid 599] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 599] setpgid(0, 0) = 0 [ 28.424451][ T587] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 599] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 599] write(3, "1000", 4) = 4 [pid 599] close(3) = 0 [pid 599] symlink("/dev/binderfs", "./binderfs") = 0 [pid 599] write(1, "executing program\n", 18executing program ) = 18 [pid 599] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 599] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 599] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 599] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 599] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 599] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[602]}, 88) = 602 [pid 599] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 599] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 588] <... mount resumed>) = 0 ./strace-static-x86_64: Process 602 attached [pid 588] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 602] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 588] <... openat resumed>) = 3 [pid 602] rt_sigprocmask(SIG_SETMASK, [], [pid 588] chdir("./file1" [pid 602] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 588] <... chdir resumed>) = 0 [pid 602] memfd_create("syzkaller", 0 [pid 588] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 602] <... memfd_create resumed>) = 3 [pid 602] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 602] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 602] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 602] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 593] <... mount resumed>) = 0 [pid 593] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 593] chdir("./file1") = 0 [ 28.464737][ T588] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 28.484164][ T593] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 593] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 587] <... openat resumed>) = 4 [pid 587] ioctl(4, LOOP_CLR_FD) = 0 [pid 587] close(4) = 0 [pid 587] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 587] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 588] <... openat resumed>) = 4 [pid 585] <... futex resumed>) = 0 [pid 588] ioctl(4, LOOP_CLR_FD [pid 585] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... ioctl resumed>) = 0 [pid 588] close(4) = 0 [pid 588] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 588] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 593] <... openat resumed>) = 4 [pid 593] ioctl(4, LOOP_CLR_FD) = 0 [pid 593] close(4) = 0 [pid 593] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = 1 [pid 593] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 593] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = 1 [pid 593] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 593] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = 1 [pid 602] <... openat resumed>) = 4 [pid 586] <... futex resumed>) = 0 [pid 585] <... futex resumed>) = 1 [pid 587] <... futex resumed>) = 0 [pid 602] ioctl(4, LOOP_SET_FD, 3 [pid 586] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 588] <... futex resumed>) = 0 [pid 587] <... openat resumed>) = 4 [pid 586] <... futex resumed>) = 1 [pid 587] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 587] <... futex resumed>) = 1 [pid 586] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] <... futex resumed>) = 0 [pid 587] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 585] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... openat resumed>) = 4 [pid 587] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 588] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] <... mmap resumed>) = 0x200000000000 [pid 585] <... futex resumed>) = 0 [pid 587] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 587] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 593] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 585] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 588] <... futex resumed>) = 1 [pid 586] <... futex resumed>) = 0 [pid 593] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 588] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 586] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] capset(0x200000000000, NULL [pid 586] <... futex resumed>) = 0 [pid 588] <... mmap resumed>) = 0x200000000000 [pid 585] <... futex resumed>) = 1 [pid 587] <... futex resumed>) = 0 [pid 602] <... ioctl resumed>) = 0 [pid 588] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 28.520954][ T593] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.539955][ T587] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.560327][ T591] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 585] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] close(3 [pid 588] <... futex resumed>) = 0 [pid 586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 592] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 592] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 592] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 592] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 592] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 592] futex(0x7fa2cc9e16dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8d4000 [pid 592] mprotect(0x7fa2cc8d5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 592] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 592] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc8f4990, parent_tid=0x7fa2cc8f4990, exit_signal=0, stack=0x7fa2cc8d4000, stack_size=0x20240, tls=0x7fa2cc8f46c0} => {parent_tid=[609]}, 88) = 609 [pid 592] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 592] futex(0x7fa2cc9e16d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7fa2cc9e16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 586] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 609 attached [pid 609] set_robust_list(0x7fa2cc8f49a0, 24) = 0 [pid 609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 609] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 609] futex(0x7fa2cc9e16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7fa2cc9e16d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7fa2cc9e16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 1 [pid 609] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 609] futex(0x7fa2cc9e16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 609] <... futex resumed>) = 1 [pid 609] futex(0x7fa2cc9e16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 591] <... mount resumed>) = 0 [pid 591] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 591] chdir("./file1") = 0 [pid 591] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 591] ioctl(4, LOOP_CLR_FD) = 0 [pid 591] close(4) = 0 [pid 591] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] <... futex resumed>) = 0 [pid 589] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] <... futex resumed>) = 1 [pid 591] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 591] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] <... futex resumed>) = 0 [pid 589] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] <... futex resumed>) = 1 [pid 591] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 591] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] <... futex resumed>) = 0 [pid 589] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] <... futex resumed>) = 1 [pid 602] <... close resumed>) = 0 [pid 593] <... capset resumed>) = -1 EFAULT (Bad address) [pid 588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 586] <... futex resumed>) = 0 [pid 602] close(4 [pid 593] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] exit_group(0 [pid 586] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = ? [pid 592] <... exit_group resumed>) = ? [pid 593] +++ exited with 0 +++ [pid 609] <... futex resumed>) = ? [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 587] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 609] +++ exited with 0 +++ [pid 592] +++ exited with 0 +++ [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=592, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 588] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 587] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] <... futex resumed>) = 0 [pid 585] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 585] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 588] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] <... futex resumed>) = 1 [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 588] <... futex resumed>) = 1 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 587] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 587] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] <... futex resumed>) = 0 [pid 585] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 585] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... futex resumed>) = 1 [pid 587] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 587] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] <... futex resumed>) = 0 [pid 585] exit_group(0) = ? [pid 587] <... futex resumed>) = ? [pid 588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 587] +++ exited with 0 +++ [pid 585] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=585, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 365] restart_syscall(<... resuming interrupted clone ...> [pid 588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 591] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 591] capset(0x200000000000, NULL [pid 588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 591] <... capset resumed>) = -1 EFAULT (Bad address) [pid 591] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 591] <... futex resumed>) = 1 [pid 589] <... futex resumed>) = 0 [pid 588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 589] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 588] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 591] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 588] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 588] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 586] <... futex resumed>) = 0 [pid 591] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 586] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 591] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 588] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... restart_syscall resumed>) = 0 [pid 365] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 358] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 365] <... openat resumed>) = 3 [pid 358] <... openat resumed>) = 3 [pid 365] newfstatat(3, "", [pid 358] newfstatat(3, "", [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, [pid 358] getdents64(3, [pid 591] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 365] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./8/binderfs", [pid 358] newfstatat(AT_FDCWD, "./9/binderfs", [pid 365] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./8/binderfs" [pid 358] unlink("./9/binderfs" [pid 591] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 591] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 365] <... unlink resumed>) = 0 [pid 591] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 365] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] <... unlink resumed>) = 0 [pid 358] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 591] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 591] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 591] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 591] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 591] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] <... futex resumed>) = 0 [pid 589] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] <... futex resumed>) = 1 [pid 591] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 591] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] <... futex resumed>) = 0 [pid 589] exit_group(0) = ? [pid 591] <... futex resumed>) = ? [pid 588] <... futex resumed>) = 1 [pid 586] <... futex resumed>) = 0 [pid 586] exit_group(0) = ? [pid 591] +++ exited with 0 +++ [pid 589] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=589, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 364] restart_syscall(<... resuming interrupted clone ...> [pid 588] +++ exited with 0 +++ [pid 586] +++ exited with 0 +++ [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=586, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 360] restart_syscall(<... resuming interrupted clone ...> [pid 364] <... restart_syscall resumed>) = 0 [pid 360] <... restart_syscall resumed>) = 0 [pid 364] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 364] <... openat resumed>) = 3 [pid 360] <... openat resumed>) = 3 [pid 364] newfstatat(3, "", [pid 360] newfstatat(3, "", [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, [pid 360] getdents64(3, [pid 364] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./9/binderfs", [pid 360] newfstatat(AT_FDCWD, "./8/binderfs", [pid 364] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./9/binderfs" [pid 360] unlink("./8/binderfs" [pid 364] <... unlink resumed>) = 0 [pid 360] <... unlink resumed>) = 0 [pid 364] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 602] <... close resumed>) = 0 [pid 602] mkdir("./file1", 0777) = 0 [ 28.572817][ T588] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.585676][ T591] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 602] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 364] <... umount2 resumed>) = 0 [pid 364] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 364] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 364] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] close(4) = 0 [pid 364] rmdir("./9/file1") = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] close(3) = 0 [pid 364] rmdir("./9") = 0 [pid 364] mkdir("./10", 0777) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 602] <... mount resumed>) = 0 [pid 602] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 602] chdir("./file1") = 0 [pid 602] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 365] <... umount2 resumed>) = 0 [pid 358] <... umount2 resumed>) = 0 [pid 365] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 28.714229][ T602] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 365] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 365] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] close(4) = 0 [pid 365] rmdir("./8/file1") = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] close(3) = 0 [pid 360] <... umount2 resumed>) = 0 [pid 358] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] rmdir("./8") = 0 [pid 360] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] mkdir("./9", 0777) = 0 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./9/file1", [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 360] newfstatat(AT_FDCWD, "./8/file1", [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(4, "", [pid 360] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(4, [pid 360] <... openat resumed>) = 4 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 360] newfstatat(4, "", [pid 358] getdents64(4, [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] getdents64(4, [pid 358] close(4) = 0 [pid 360] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] rmdir("./9/file1" [pid 360] getdents64(4, [pid 358] <... rmdir resumed>) = 0 [pid 360] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] getdents64(3, [pid 360] close(4 [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] <... close resumed>) = 0 [pid 358] close(3 [pid 360] rmdir("./8/file1" [pid 358] <... close resumed>) = 0 [pid 358] rmdir("./9" [pid 360] <... rmdir resumed>) = 0 [pid 358] <... rmdir resumed>) = 0 [pid 360] getdents64(3, [pid 358] mkdir("./10", 0777) = 0 [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 360] close(3) = 0 [pid 360] rmdir("./8") = 0 [pid 360] mkdir("./9", 0777) = 0 [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 602] <... openat resumed>) = 4 [pid 364] <... openat resumed>) = 3 [pid 364] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 364] close(3) = 0 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 602] ioctl(4, LOOP_CLR_FD [pid 364] <... clone resumed>, child_tidptr=0x5555751e4750) = 612 [pid 602] <... ioctl resumed>) = 0 [pid 602] close(4) = 0 [pid 602] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 599] <... futex resumed>) = 0 [pid 602] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 599] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... openat resumed>) = 4 [pid 599] <... futex resumed>) = 0 [pid 602] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... futex resumed>) = 0 [pid 599] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 602] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 599] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... mmap resumed>) = 0x200000000000 [pid 599] <... futex resumed>) = 0 [pid 602] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... futex resumed>) = 0 [pid 599] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 599] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... openat resumed>) = 3 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 365] close(3) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 613 [pid 358] <... openat resumed>) = 3 [pid 360] <... openat resumed>) = 3 ./strace-static-x86_64: Process 613 attached [pid 358] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 613] set_robust_list(0x5555751e4760, 24) = 0 [pid 613] chdir("./9") = 0 ./strace-static-x86_64: Process 612 attached [pid 602] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 360] ioctl(3, LOOP_CLR_FD [pid 358] close(3 [pid 612] set_robust_list(0x5555751e4760, 24 [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 612] <... set_robust_list resumed>) = 0 [pid 360] close(3 [pid 358] <... close resumed>) = 0 [pid 612] chdir("./10" [pid 360] <... close resumed>) = 0 [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 612] <... chdir resumed>) = 0 [pid 602] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 613] setpgid(0, 0) = 0 [pid 613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 612] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 614 [pid 612] <... prctl resumed>) = 0 [pid 602] capset(0x200000000000, NULL [pid 360] <... clone resumed>, child_tidptr=0x5555751e4750) = 615 [pid 612] setpgid(0, 0) = 0 [pid 613] <... openat resumed>) = 3 [pid 612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 613] write(3, "1000", 4 [pid 612] <... openat resumed>) = 3 [pid 612] write(3, "1000", 4) = 4 [pid 602] <... capset resumed>) = -1 EFAULT (Bad address) [pid 612] close(3) = 0 [pid 602] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] symlink("/dev/binderfs", "./binderfs" [pid 613] <... write resumed>) = 4 [pid 613] close(3 [pid 612] <... symlink resumed>) = 0 [pid 602] <... futex resumed>) = 1 [pid 599] <... futex resumed>) = 0 [pid 612] write(1, "executing program\n", 18executing program ) = 18 [pid 602] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 599] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = 0 [pid 599] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 612] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 612] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 602] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 612] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 612] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 602] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 613] <... close resumed>) = 0 [pid 612] <... mprotect resumed>) = 0 [pid 613] symlink("/dev/binderfs", "./binderfs") = 0 [pid 612] rt_sigprocmask(SIG_BLOCK, ~[], [pid 602] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- executing program [pid 612] <... rt_sigprocmask resumed>[], 8) = 0 [pid 613] write(1, "executing program\n", 18) = 18 [pid 612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 602] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 613] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... clone3 resumed> => {parent_tid=[616]}, 88) = 616 [pid 612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 602] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 612] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = 0 [pid 613] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 612] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 602] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 613] <... rt_sigaction resumed>NULL, 8) = 0 [pid 613] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 613] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 613] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[617]}, 88) = 617 [pid 613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 613] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 614 attached [pid 614] set_robust_list(0x5555751e4760, 24) = 0 [pid 614] chdir("./10"./strace-static-x86_64: Process 615 attached ) = 0 [pid 615] set_robust_list(0x5555751e4760, 24 [pid 614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 615] <... set_robust_list resumed>) = 0 [pid 615] chdir("./9" [pid 614] setpgid(0, 0) = 0 [pid 614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 615] <... chdir resumed>) = 0 [pid 615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 615] setpgid(0, 0 [pid 614] <... openat resumed>) = 3 [pid 615] <... setpgid resumed>) = 0 [pid 615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 617 attached ./strace-static-x86_64: Process 616 attached ) = 3 [pid 602] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 617] set_robust_list(0x7fa2cc9159a0, 24 [pid 616] set_robust_list(0x7fa2cc9159a0, 24 [pid 602] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 614] write(3, "1000", 4) = 4 [pid 614] close(3) = 0 [pid 614] symlink("/dev/binderfs", "./binderfs" [pid 602] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 617] <... set_robust_list resumed>) = 0 [pid 616] <... set_robust_list resumed>) = 0 [pid 617] rt_sigprocmask(SIG_SETMASK, [], [pid 616] rt_sigprocmask(SIG_SETMASK, [], [pid 614] <... symlink resumed>) = 0 [pid 602] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 615] write(3, "1000", 4 [pid 602] sendmmsg(-1, [pid 616] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 602] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 602] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] memfd_create("syzkaller", 0 [pid 602] <... futex resumed>) = 1 [pid 599] <... futex resumed>) = 0 [pid 602] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 599] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 599] <... futex resumed>) = 0 [pid 602] ioctl(-1, SIOCGIFINDEX, NULL [pid 599] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] <... memfd_create resumed>) = 3 [pid 602] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 617] memfd_create("syzkaller", 0 [pid 602] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 602] <... futex resumed>) = 1 [pid 599] <... futex resumed>) = 0 [pid 602] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULLexecuting program [pid 617] <... memfd_create resumed>) = 3 [pid 616] <... mmap resumed>) = 0x7fa2c44f5000 [pid 615] <... write resumed>) = 4 [pid 614] write(1, "executing program\n", 18 [pid 599] exit_group(0 [pid 617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 602] <... futex resumed>) = ? [pid 599] <... exit_group resumed>) = ? [pid 615] close(3 [pid 614] <... write resumed>) = 18 [pid 602] +++ exited with 0 +++ [pid 615] <... close resumed>) = 0 [pid 614] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 615] symlink("/dev/binderfs", "./binderfs" [pid 614] <... futex resumed>) = 0 [pid 615] <... symlink resumed>) = 0 [pid 614] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 599] +++ exited with 0 +++ executing program [pid 615] write(1, "executing program\n", 18 [pid 614] <... rt_sigaction resumed>NULL, 8) = 0 [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=599, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 615] <... write resumed>) = 18 [pid 614] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 615] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 617] <... mmap resumed>) = 0x7fa2c44f5000 [pid 615] <... futex resumed>) = 0 [pid 614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 359] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 615] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 614] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 615] <... rt_sigaction resumed>NULL, 8) = 0 [pid 614] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 359] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 615] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 614] <... mprotect resumed>) = 0 [pid 359] <... openat resumed>) = 3 [pid 615] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 614] rt_sigprocmask(SIG_BLOCK, ~[], [pid 359] newfstatat(3, "", [pid 615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 614] <... rt_sigprocmask resumed>[], 8) = 0 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 615] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 614] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 359] getdents64(3, [pid 615] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 615] <... mprotect resumed>) = 0 [pid 614] <... clone3 resumed> => {parent_tid=[618]}, 88) = 618 [pid 359] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 615] rt_sigprocmask(SIG_BLOCK, ~[], [pid 614] rt_sigprocmask(SIG_SETMASK, [], [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 615] <... rt_sigprocmask resumed>[], 8) = 0 [pid 614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 359] newfstatat(AT_FDCWD, "./8/binderfs", [pid 615] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 614] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 614] <... futex resumed>) = 0 [pid 359] unlink("./8/binderfs" [pid 615] <... clone3 resumed> => {parent_tid=[619]}, 88) = 619 [pid 614] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 359] <... unlink resumed>) = 0 [pid 615] rt_sigprocmask(SIG_SETMASK, [], [pid 359] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 615] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 615] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 615] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 618 attached [pid 618] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 618] memfd_create("syzkaller", 0) = 3 [pid 618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 619 attached [pid 619] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 619] memfd_create("syzkaller", 0) = 3 [pid 619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 618] <... write resumed>) = 1048576 [pid 618] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 618] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 616] <... write resumed>) = 1048576 [pid 616] munmap(0x7fa2c44f5000, 138412032) = 0 [ 28.800196][ T602] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 616] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 617] <... write resumed>) = 1048576 [pid 617] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 617] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 359] <... umount2 resumed>) = 0 [pid 359] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 618] <... openat resumed>) = 4 [pid 618] ioctl(4, LOOP_SET_FD, 3 [pid 359] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 359] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] close(4) = 0 [pid 359] rmdir("./8/file1") = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3) = 0 [pid 359] rmdir("./8") = 0 [pid 359] mkdir("./9", 0777) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 618] <... ioctl resumed>) = 0 [pid 618] close(3) = 0 [pid 618] close(4 [pid 616] <... openat resumed>) = 4 [pid 616] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 616] close(3) = 0 [pid 616] close(4 [pid 617] <... openat resumed>) = 4 [pid 359] <... openat resumed>) = 3 [pid 359] ioctl(3, LOOP_CLR_FD [pid 617] ioctl(4, LOOP_SET_FD, 3 [pid 619] <... write resumed>) = 1048576 [pid 619] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 619] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 618] <... close resumed>) = 0 [pid 618] mkdir("./file1", 0777) = 0 [pid 618] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 616] <... close resumed>) = 0 [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 616] mkdir("./file1", 0777 [pid 359] close(3 [pid 616] <... mkdir resumed>) = 0 [pid 616] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 619] <... openat resumed>) = 4 [pid 617] <... ioctl resumed>) = 0 [pid 619] ioctl(4, LOOP_SET_FD, 3 [pid 617] close(3) = 0 [pid 617] close(4 [pid 359] <... close resumed>) = 0 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 624 [pid 619] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 624 attached [pid 619] close(3) = 0 [pid 619] close(4 [pid 624] set_robust_list(0x5555751e4760, 24) = 0 [pid 624] chdir("./9") = 0 [pid 624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 624] setpgid(0, 0) = 0 [pid 624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 624] write(3, "1000", 4) = 4 [pid 624] close(3) = 0 [pid 624] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 616] <... mount resumed>) = 0 [pid 624] write(1, "executing program\n", 18) = 18 [pid 624] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 616] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 616] chdir("./file1") = 0 [pid 616] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 624] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 624] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 624] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 624] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}./strace-static-x86_64: Process 627 attached [pid 627] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 627] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 624] <... clone3 resumed> => {parent_tid=[627]}, 88) = 627 [pid 624] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 624] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 627] <... futex resumed>) = 0 [pid 627] memfd_create("syzkaller", 0) = 3 [pid 624] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 627] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 627] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 627] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 627] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 617] <... close resumed>) = 0 [pid 617] mkdir("./file1", 0777) = 0 [ 29.025218][ T616] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 617] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 618] <... mount resumed>) = 0 [pid 618] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 618] chdir("./file1") = 0 [ 29.084363][ T618] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 618] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 627] <... openat resumed>) = 4 [pid 619] <... close resumed>) = 0 [pid 618] <... openat resumed>) = 4 [pid 616] <... openat resumed>) = 4 [pid 627] ioctl(4, LOOP_SET_FD, 3 [pid 619] mkdir("./file1", 0777 [pid 618] ioctl(4, LOOP_CLR_FD [pid 616] ioctl(4, LOOP_CLR_FD [pid 619] <... mkdir resumed>) = 0 [pid 619] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 617] <... mount resumed>) = 0 [pid 617] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 617] chdir("./file1") = 0 [pid 617] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 627] <... ioctl resumed>) = 0 [pid 627] close(3) = 0 [ 29.154093][ T617] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 627] close(4) = 0 [pid 616] <... ioctl resumed>) = 0 [pid 616] close(4 [pid 618] <... ioctl resumed>) = 0 [pid 618] close(4) = 0 [pid 618] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 618] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] <... futex resumed>) = 0 [pid 617] <... openat resumed>) = 4 [pid 617] ioctl(4, LOOP_CLR_FD) = 0 [pid 617] close(4) = 0 [pid 617] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 617] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 627] mkdir("./file1", 0777 [pid 614] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [pid 627] <... mkdir resumed>) = 0 [pid 618] <... futex resumed>) = 0 [pid 614] <... futex resumed>) = 1 [pid 613] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 618] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 614] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... futex resumed>) = 1 [pid 617] <... futex resumed>) = 0 [pid 613] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 618] <... openat resumed>) = 4 [pid 617] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 618] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 618] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 618] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 614] <... futex resumed>) = 0 [pid 618] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] <... openat resumed>) = 4 [pid 617] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [pid 613] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] <... futex resumed>) = 1 [pid 617] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 617] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [pid 613] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] <... futex resumed>) = 1 [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 618] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 618] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 618] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 618] <... futex resumed>) = 0 [pid 614] <... futex resumed>) = 1 [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 614] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 618] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 618] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 618] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 618] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 614] <... futex resumed>) = 0 [pid 614] exit_group(0) = ? [pid 618] +++ exited with 0 +++ [pid 614] +++ exited with 0 +++ [pid 617] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=614, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 358] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 358] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./10/binderfs") = 0 [pid 358] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 617] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 617] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 617] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [pid 613] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] <... futex resumed>) = 1 [pid 617] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 617] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 617] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 617] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 617] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 617] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 617] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 617] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 617] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 617] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 617] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 617] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 617] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [pid 613] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] <... futex resumed>) = 1 [pid 617] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 617] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [pid 613] exit_group(0) = ? [pid 617] <... futex resumed>) = ? [pid 617] +++ exited with 0 +++ [pid 613] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=613, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 365] restart_syscall(<... resuming interrupted clone ...> [pid 616] <... close resumed>) = 0 [pid 365] <... restart_syscall resumed>) = 0 [pid 616] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 616] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 612] <... futex resumed>) = 0 [pid 616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 616] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 365] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 616] <... openat resumed>) = 4 [pid 365] <... openat resumed>) = 3 [pid 616] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] newfstatat(3, "", [pid 616] <... futex resumed>) = 1 [pid 612] <... futex resumed>) = 0 [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 612] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 612] <... futex resumed>) = 0 [pid 365] getdents64(3, [pid 612] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] <... mmap resumed>) = 0x200000000000 [pid 365] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 616] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [ 29.232249][ T618] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.241228][ T617] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.262295][ T619] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 365] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 616] <... futex resumed>) = 1 [pid 612] <... futex resumed>) = 0 [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 612] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... mount resumed>) = 0 [pid 612] <... futex resumed>) = 0 [pid 365] newfstatat(AT_FDCWD, "./9/binderfs", [pid 612] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 619] chdir("./file1") = 0 [pid 619] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 365] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./9/binderfs") = 0 [pid 365] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 616] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 616] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] <... futex resumed>) = 1 [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 616] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 616] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] <... futex resumed>) = 1 [pid 616] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 616] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] exit_group(0) = ? [pid 616] <... futex resumed>) = ? [pid 616] +++ exited with 0 +++ [pid 612] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=612, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 364] restart_syscall(<... resuming interrupted clone ...> [pid 627] <... mount resumed>) = 0 [pid 627] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 627] chdir("./file1") = 0 [pid 627] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 364] <... restart_syscall resumed>) = 0 [pid 364] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 364] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./10/binderfs") = 0 [pid 364] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] <... umount2 resumed>) = 0 [pid 358] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 358] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] close(4) = 0 [pid 358] rmdir("./10/file1") = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] close(3) = 0 [pid 358] rmdir("./10") = 0 [pid 358] mkdir("./11", 0777) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWRexecuting program [pid 627] <... openat resumed>) = 4 [pid 627] ioctl(4, LOOP_CLR_FD) = 0 [pid 627] close(4) = 0 [pid 627] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 627] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 624] <... futex resumed>) = 0 [pid 624] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... openat resumed>) = 3 [pid 358] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 358] close(3) = 0 [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 637 [pid 627] <... futex resumed>) = 0 [pid 624] <... futex resumed>) = 1 [pid 627] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 627] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 637 attached [pid 637] set_robust_list(0x5555751e4760, 24) = 0 [pid 637] chdir("./11") = 0 [pid 637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 637] setpgid(0, 0) = 0 [pid 637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 637] write(3, "1000", 4) = 4 [pid 637] close(3 [pid 365] <... umount2 resumed>) = 0 [pid 637] <... close resumed>) = 0 [pid 637] symlink("/dev/binderfs", "./binderfs") = 0 [pid 637] write(1, "executing program\n", 18) = 18 [pid 637] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 637] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 637] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[638]}, 88) = 638 [pid 637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 637] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 638 attached [pid 638] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 638] memfd_create("syzkaller", 0) = 3 [pid 638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 624] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... openat resumed>) = 4 [pid 365] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 619] ioctl(4, LOOP_CLR_FD [pid 624] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 624] <... futex resumed>) = 1 [pid 624] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] newfstatat(AT_FDCWD, "./9/file1", [pid 627] <... futex resumed>) = 0 [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 627] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [ 29.281934][ T616] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.299125][ T627] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 627] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 624] <... futex resumed>) = 0 [pid 365] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 624] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 624] <... futex resumed>) = 0 [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 624] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 365] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] close(4) = 0 [pid 365] rmdir("./9/file1") = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] close(3) = 0 [pid 365] rmdir("./9") = 0 [pid 365] mkdir("./10", 0777) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 638] <... write resumed>) = 1048576 [pid 638] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 638] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 627] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 627] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 624] <... futex resumed>) = 0 [pid 624] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 627] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 627] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 624] <... futex resumed>) = 0 [pid 624] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 627] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 624] <... futex resumed>) = 0 [pid 624] exit_group(0) = ? [pid 627] +++ exited with 0 +++ [pid 624] +++ exited with 0 +++ [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=624, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 359] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 359] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 359] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 619] <... ioctl resumed>) = 0 [pid 365] <... openat resumed>) = 3 [pid 364] <... umount2 resumed>) = 0 [pid 359] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 619] close(4 [pid 365] ioctl(3, LOOP_CLR_FD [pid 619] <... close resumed>) = 0 [pid 365] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 619] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] close(3 [pid 619] <... futex resumed>) = 1 [pid 365] <... close resumed>) = 0 [pid 619] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 639 [pid 638] <... openat resumed>) = 4 [pid 638] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 638] close(3) = 0 [pid 638] close(4 [pid 615] <... futex resumed>) = 0 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 615] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] newfstatat(AT_FDCWD, "./9/binderfs", [pid 615] <... futex resumed>) = 1 [pid 619] <... futex resumed>) = 0 [pid 359] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 615] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] unlink("./9/binderfs" [pid 619] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 359] <... unlink resumed>) = 0 [pid 619] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 619] <... futex resumed>) = 1 [pid 615] <... futex resumed>) = 0 [pid 619] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 615] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 619] <... mmap resumed>) = 0x200000000000 [pid 615] <... futex resumed>) = 0 [pid 364] newfstatat(AT_FDCWD, "./10/file1", [pid 619] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 615] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 29.360227][ T627] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 619] <... futex resumed>) = 0 [pid 615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 364] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 639 attached [pid 615] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 615] <... futex resumed>) = 0 [pid 364] <... openat resumed>) = 4 [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 615] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 364] newfstatat(4, "", [pid 619] capset(0x200000000000, NULL [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, [pid 619] <... capset resumed>) = -1 EFAULT (Bad address) [pid 364] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 364] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] close(4) = 0 [pid 364] rmdir("./10/file1" [pid 619] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... rmdir resumed>) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] close(3) = 0 [pid 364] rmdir("./10" [pid 619] <... futex resumed>) = 1 [pid 615] <... futex resumed>) = 0 [pid 364] <... rmdir resumed>) = 0 [pid 364] mkdir("./11", 0777 [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 615] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... mkdir resumed>) = 0 [pid 615] <... futex resumed>) = 0 [pid 615] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 639] set_robust_list(0x5555751e4760, 24) = 0 [pid 639] chdir("./10") = 0 [pid 639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 639] setpgid(0, 0) = 0 [pid 639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 639] write(3, "1000", 4) = 4 [pid 639] close(3) = 0 [pid 639] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 639] write(1, "executing program\n", 18) = 18 [pid 639] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 639] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 639] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 639] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 639] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[641]}, 88) = 641 [pid 639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 639] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 641 attached [pid 641] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 641] memfd_create("syzkaller", 0) = 3 [pid 641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 619] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 619] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 615] <... futex resumed>) = 0 [pid 615] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 615] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 619] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 615] <... futex resumed>) = 0 [pid 615] exit_group(0) = ? [pid 619] +++ exited with 0 +++ [pid 615] +++ exited with 0 +++ [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=615, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 360] restart_syscall(<... resuming interrupted clone ...> [pid 641] <... write resumed>) = 1048576 [pid 641] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 641] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 360] <... restart_syscall resumed>) = 0 [pid 360] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 638] <... close resumed>) = 0 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 360] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] unlink("./9/binderfs") = 0 [pid 360] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 638] mkdir("./file1", 0777) = 0 [ 29.408012][ T619] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 638] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 364] <... openat resumed>) = 3 [pid 641] <... openat resumed>) = 4 [pid 364] ioctl(3, LOOP_CLR_FD [pid 360] <... umount2 resumed>) = 0 [pid 359] <... umount2 resumed>) = 0 [pid 364] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 360] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] close(3 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 641] ioctl(4, LOOP_SET_FD, 3 [pid 364] <... close resumed>) = 0 [pid 360] newfstatat(AT_FDCWD, "./9/file1", [pid 359] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 644 attached [pid 641] <... ioctl resumed>) = 0 [pid 360] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 641] close(3 [pid 364] <... clone resumed>, child_tidptr=0x5555751e4750) = 644 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./9/file1", [pid 644] set_robust_list(0x5555751e4760, 24 [pid 641] <... close resumed>) = 0 [pid 360] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 641] close(4 [pid 360] <... openat resumed>) = 4 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] newfstatat(4, "", [pid 359] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(4, [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 644] <... set_robust_list resumed>) = 0 [pid 360] getdents64(4, [pid 359] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] close(4) = 0 [pid 360] rmdir("./9/file1") = 0 [pid 359] <... openat resumed>) = 4 [pid 360] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] close(3) = 0 [pid 360] rmdir("./9") = 0 [pid 359] newfstatat(4, "", [pid 644] chdir("./11" [pid 360] mkdir("./10", 0777 [pid 644] <... chdir resumed>) = 0 [pid 360] <... mkdir resumed>) = 0 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 359] getdents64(4, [pid 644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 644] setpgid(0, 0 [pid 359] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 644] <... setpgid resumed>) = 0 [pid 644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 359] getdents64(4, [pid 644] write(3, "1000", 4) = 4 [pid 359] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 644] close(3) = 0 [pid 644] symlink("/dev/binderfs", "./binderfs") = 0 [pid 644] write(1, "executing program\n", 18) = 18 [pid 644] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 644] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 644] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 644] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 644] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 644] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[647]}, 88) = 647 [pid 644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 644] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 644] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 647 attached [pid 647] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 647] memfd_create("syzkaller", 0) = 3 [pid 647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 359] close(4 [pid 647] <... write resumed>) = 1048576 [pid 647] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 359] <... close resumed>) = 0 [pid 647] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 359] rmdir("./9/file1" [pid 638] <... mount resumed>) = 0 [pid 638] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 638] chdir("./file1") = 0 [pid 638] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 359] <... rmdir resumed>) = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3) = 0 [pid 359] rmdir("./9") = 0 [pid 359] mkdir("./10", 0777) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 641] <... close resumed>) = 0 [pid 359] <... openat resumed>) = 3 [pid 641] mkdir("./file1", 0777) = 0 [pid 641] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 647] <... openat resumed>) = 4 [pid 360] <... openat resumed>) = 3 [pid 359] ioctl(3, LOOP_CLR_FD [pid 360] ioctl(3, LOOP_CLR_FD [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 360] close(3 [pid 359] close(3 [pid 647] ioctl(4, LOOP_SET_FD, 3 [pid 360] <... close resumed>) = 0 [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 359] <... close resumed>) = 0 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 360] <... clone resumed>, child_tidptr=0x5555751e4750) = 649 ./strace-static-x86_64: Process 649 attached [pid 359] <... clone resumed>, child_tidptr=0x5555751e4750) = 651 [pid 647] <... ioctl resumed>) = 0 [pid 647] close(3) = 0 [pid 647] close(4./strace-static-x86_64: Process 651 attached [pid 651] set_robust_list(0x5555751e4760, 24) = 0 [pid 651] chdir("./10") = 0 [pid 651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 651] setpgid(0, 0) = 0 [pid 651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 651] write(3, "1000", 4) = 4 [pid 651] close(3) = 0 executing program [pid 651] symlink("/dev/binderfs", "./binderfs") = 0 [pid 651] write(1, "executing program\n", 18) = 18 [pid 651] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 651] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 651] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 651] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[653]}, 88) = 653 [pid 651] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 651] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 653 attached [pid 653] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 653] memfd_create("syzkaller", 0) = 3 [pid 653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 649] set_robust_list(0x5555751e4760, 24) = 0 [pid 641] <... mount resumed>) = 0 [pid 649] chdir("./10" [pid 641] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 649] <... chdir resumed>) = 0 [pid 649] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 641] <... openat resumed>) = 3 [pid 649] <... prctl resumed>) = 0 [pid 641] chdir("./file1" [pid 649] setpgid(0, 0) = 0 [pid 641] <... chdir resumed>) = 0 [pid 653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 641] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 649] <... openat resumed>) = 3 [pid 649] write(3, "1000", 4) = 4 [pid 649] close(3) = 0 [pid 649] symlink("/dev/binderfs", "./binderfs") = 0 [pid 649] write(1, "executing program\n", 18executing program ) = 18 [pid 649] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 649] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 653] <... write resumed>) = 1048576 [pid 653] munmap(0x7fa2c44f5000, 138412032 [pid 649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 653] <... munmap resumed>) = 0 [pid 653] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 649] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 649] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 649] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}./strace-static-x86_64: Process 654 attached [pid 654] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 654] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 649] <... clone3 resumed> => {parent_tid=[654]}, 88) = 654 [pid 649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 649] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = 1 [pid 654] memfd_create("syzkaller", 0) = 3 [pid 649] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 654] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 654] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 647] <... close resumed>) = 0 [pid 638] <... openat resumed>) = 4 [pid 638] ioctl(4, LOOP_CLR_FD) = 0 [pid 638] close(4) = 0 [pid 638] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 641] <... openat resumed>) = 4 [pid 641] ioctl(4, LOOP_CLR_FD) = 0 [pid 641] close(4) = 0 [pid 641] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 639] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 641] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 639] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 641] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 639] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [ 29.507100][ T638] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.545151][ T641] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 654] <... openat resumed>) = 4 [pid 653] <... openat resumed>) = 4 [pid 647] mkdir("./file1", 0777 [pid 637] <... futex resumed>) = 0 [pid 653] ioctl(4, LOOP_SET_FD, 3 [pid 641] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 647] <... mkdir resumed>) = 0 [pid 637] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 637] <... futex resumed>) = 1 [pid 647] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 637] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... futex resumed>) = 0 [pid 638] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 638] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 637] <... futex resumed>) = 0 [pid 638] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 637] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... mmap resumed>) = 0x200000000000 [pid 637] <... futex resumed>) = 0 [pid 638] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... futex resumed>) = 0 [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 654] ioctl(4, LOOP_SET_FD, 3 [pid 653] <... ioctl resumed>) = 0 [pid 637] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] close(3 [pid 637] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... close resumed>) = 0 [pid 653] close(4) = 0 [pid 653] mkdir("./file1", 0777) = 0 [pid 653] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 641] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 654] <... ioctl resumed>) = 0 [pid 654] close(3) = 0 [pid 654] close(4 [pid 641] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 639] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 641] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 641] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 641] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 641] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 641] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 641] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 641] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 641] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 641] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 641] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 641] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 641] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 639] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 641] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 639] exit_group(0) = ? [pid 641] <... futex resumed>) = ? [ 29.577416][ T641] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.597618][ T638] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 638] capset(0x200000000000, NULL [pid 641] +++ exited with 0 +++ [pid 639] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=639, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 365] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 365] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./10/binderfs") = 0 [pid 365] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 653] <... mount resumed>) = 0 [pid 638] <... capset resumed>) = -1 EFAULT (Bad address) [pid 638] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 637] <... futex resumed>) = 0 [pid 637] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 638] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 638] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 637] <... futex resumed>) = 0 [pid 637] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 638] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 637] <... futex resumed>) = 0 [pid 637] exit_group(0) = ? [pid 638] +++ exited with 0 +++ [pid 637] +++ exited with 0 +++ [pid 653] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 653] chdir("./file1") = 0 [pid 653] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=637, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 358] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 358] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 358] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./11/binderfs") = 0 [pid 358] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 647] <... mount resumed>) = 0 [pid 647] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 647] chdir("./file1") = 0 [pid 647] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 654] <... close resumed>) = 0 [pid 654] mkdir("./file1", 0777) = 0 [ 29.626957][ T653] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 29.630306][ T647] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 654] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 647] <... openat resumed>) = 4 [pid 365] <... umount2 resumed>) = 0 [pid 653] <... openat resumed>) = 4 [pid 653] ioctl(4, LOOP_CLR_FD) = 0 [pid 653] close(4) = 0 [pid 653] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 651] <... futex resumed>) = 0 [pid 653] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 651] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 653] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... futex resumed>) = 0 [pid 651] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... futex resumed>) = 1 [pid 653] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 653] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... futex resumed>) = 0 [pid 651] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... futex resumed>) = 1 [pid 358] <... umount2 resumed>) = 0 [pid 647] ioctl(4, LOOP_CLR_FD [pid 365] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./10/file1", [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] newfstatat(AT_FDCWD, "./11/file1", [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 647] <... ioctl resumed>) = 0 [pid 365] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 358] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 647] close(4 [pid 365] <... openat resumed>) = 4 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 647] <... close resumed>) = 0 [pid 365] newfstatat(4, "", [pid 358] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 647] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 647] <... futex resumed>) = 1 [pid 644] <... futex resumed>) = 0 [pid 365] getdents64(4, [pid 358] <... openat resumed>) = 4 [pid 647] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 644] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 653] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 644] <... futex resumed>) = 0 [pid 365] getdents64(4, [pid 358] newfstatat(4, "", [pid 653] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 653] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 653] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 651] <... futex resumed>) = 0 [pid 653] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 651] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 651] <... futex resumed>) = 0 [pid 653] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 651] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 653] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 653] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 653] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 653] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 653] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 653] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 653] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 653] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 653] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 653] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 653] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 651] <... futex resumed>) = 0 [pid 653] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 651] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 651] <... futex resumed>) = 0 [pid 653] ioctl(-1, SIOCGIFINDEX, NULL [pid 651] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 653] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 651] <... futex resumed>) = 0 [pid 653] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 651] exit_group(0 [pid 653] <... futex resumed>) = ? [pid 651] <... exit_group resumed>) = ? [pid 653] +++ exited with 0 +++ [pid 651] +++ exited with 0 +++ [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=651, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 359] restart_syscall(<... resuming interrupted clone ...> [pid 647] <... openat resumed>) = 4 [pid 647] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 647] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 644] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 654] <... mount resumed>) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] close(4 [pid 654] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 644] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... close resumed>) = 0 [pid 358] getdents64(4, [pid 647] <... futex resumed>) = 0 [pid 644] <... futex resumed>) = 1 [pid 365] rmdir("./10/file1" [pid 654] <... openat resumed>) = 3 [pid 647] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 644] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... rmdir resumed>) = 0 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 654] chdir("./file1" [pid 647] <... mmap resumed>) = 0x200000000000 [pid 365] getdents64(3, [pid 358] getdents64(4, [pid 647] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 647] <... futex resumed>) = 1 [pid 644] <... futex resumed>) = 0 [pid 365] close(3 [pid 647] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 644] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... close resumed>) = 0 [pid 358] close(4 [pid 647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 644] <... futex resumed>) = 0 [pid 365] rmdir("./10" [pid 654] <... chdir resumed>) = 0 [pid 644] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... close resumed>) = 0 [pid 654] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 358] rmdir("./11/file1" [pid 654] <... openat resumed>) = 4 [pid 358] <... rmdir resumed>) = 0 [pid 654] ioctl(4, LOOP_CLR_FD [pid 358] getdents64(3, [pid 654] <... ioctl resumed>) = 0 [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 654] close(4 [pid 358] close(3 [pid 654] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 654] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] rmdir("./11" [pid 654] <... futex resumed>) = 1 [pid 358] <... rmdir resumed>) = 0 [pid 654] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] mkdir("./12", 0777) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 358] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 358] close(3) = 0 [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 663 [pid 365] <... rmdir resumed>) = 0 [pid 365] mkdir("./11", 0777) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 365] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 365] close(3) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 664 ./strace-static-x86_64: Process 664 attached [pid 664] set_robust_list(0x5555751e4760, 24) = 0 [pid 664] chdir("./11") = 0 [pid 664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 664] setpgid(0, 0) = 0 [pid 664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 664] write(3, "1000", 4) = 4 [pid 664] close(3) = 0 [pid 664] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 664] write(1, "executing program\n", 18 [pid 649] <... futex resumed>) = 0 [pid 359] <... restart_syscall resumed>) = 0 [pid 664] <... write resumed>) = 18 [ 29.745030][ T653] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.761599][ T654] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 29.773997][ T647] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 649] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = 1 [pid 654] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 649] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 654] <... futex resumed>) = 0 [pid 359] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 654] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 649] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 654] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 649] <... futex resumed>) = 0 [pid 359] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 654] <... mmap resumed>) = 0x200000000000 [pid 649] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 359] <... openat resumed>) = 3 [pid 654] <... futex resumed>) = 0 [pid 649] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] newfstatat(3, "", ./strace-static-x86_64: Process 663 attached [pid 664] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 663] set_robust_list(0x5555751e4760, 24 [pid 649] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] getdents64(3, [pid 663] <... set_robust_list resumed>) = 0 [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 663] chdir("./12" [pid 359] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 663] <... chdir resumed>) = 0 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 664] <... futex resumed>) = 0 [pid 647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 359] newfstatat(AT_FDCWD, "./10/binderfs", [pid 664] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 359] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 664] <... rt_sigaction resumed>NULL, 8) = 0 [pid 664] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 663] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 647] capset(0x200000000000, NULL [pid 359] unlink("./10/binderfs" [pid 663] <... prctl resumed>) = 0 [pid 359] <... unlink resumed>) = 0 [pid 664] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 359] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 663] setpgid(0, 0 [pid 664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 663] <... setpgid resumed>) = 0 [pid 664] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 664] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 664] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[665]}, 88) = 665 [pid 664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 664] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 665 attached [pid 665] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 665] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 665] memfd_create("syzkaller", 0 [pid 663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 665] <... memfd_create resumed>) = 3 [pid 665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 663] <... openat resumed>) = 3 [pid 663] write(3, "1000", 4) = 4 [pid 654] capset(0x200000000000, NULL [pid 663] close(3) = 0 [pid 663] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 663] write(1, "executing program\n", 18 [pid 647] <... capset resumed>) = -1 EFAULT (Bad address) [pid 663] <... write resumed>) = 18 [pid 663] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] <... capset resumed>) = -1 EFAULT (Bad address) [pid 663] <... futex resumed>) = 0 [pid 663] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 663] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 654] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 647] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 654] <... futex resumed>) = 1 [pid 649] <... futex resumed>) = 0 [pid 663] <... mprotect resumed>) = 0 [pid 654] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 649] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] <... futex resumed>) = 1 [pid 644] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = 0 [pid 644] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] rt_sigprocmask(SIG_BLOCK, ~[], [pid 654] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 649] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] <... futex resumed>) = 0 [pid 663] <... rt_sigprocmask resumed>[], 8) = 0 [pid 647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 644] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 663] <... clone3 resumed> => {parent_tid=[666]}, 88) = 666 [pid 663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 663] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- ./strace-static-x86_64: Process 666 attached [pid 654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 647] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 654] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 654] sendmmsg(-1, [pid 647] sendmmsg(-1, [pid 654] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 647] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 654] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 654] <... futex resumed>) = 1 [pid 649] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] ioctl(-1, SIOCGIFINDEX, NULL [pid 649] <... futex resumed>) = 0 [pid 647] <... futex resumed>) = 1 [pid 644] <... futex resumed>) = 0 [pid 654] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 649] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 644] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = 0 [pid 647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 644] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... futex resumed>) = 1 [pid 649] <... futex resumed>) = 0 [pid 647] ioctl(-1, SIOCGIFINDEX, NULL [pid 649] exit_group(0 [pid 654] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 (errno 18446744073709551414) [pid 649] <... exit_group resumed>) = ? [pid 647] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 654] +++ exited with 0 +++ [pid 649] +++ exited with 0 +++ [pid 647] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=649, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 647] <... futex resumed>) = 1 [pid 644] <... futex resumed>) = 0 [pid 360] restart_syscall(<... resuming interrupted clone ...> [pid 644] exit_group(0) = ? [pid 665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 647] +++ exited with 0 +++ [pid 644] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=644, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 364] restart_syscall(<... resuming interrupted clone ...> [pid 666] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 666] memfd_create("syzkaller", 0) = 3 [pid 666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 665] <... write resumed>) = 1048576 [pid 665] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 665] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 666] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 364] <... restart_syscall resumed>) = 0 [pid 360] <... restart_syscall resumed>) = 0 [pid 364] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] <... openat resumed>) = 3 [pid 360] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 364] newfstatat(3, "", [pid 360] <... openat resumed>) = 3 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] newfstatat(3, "", [pid 364] getdents64(3, [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] getdents64(3, [pid 364] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] <... umount2 resumed>) = 0 [pid 364] newfstatat(AT_FDCWD, "./11/binderfs", [pid 360] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] unlink("./11/binderfs" [pid 665] <... openat resumed>) = 4 [pid 360] newfstatat(AT_FDCWD, "./10/binderfs", [pid 665] ioctl(4, LOOP_SET_FD, 3 [pid 364] <... unlink resumed>) = 0 [pid 360] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] unlink("./10/binderfs" [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... unlink resumed>) = 0 [pid 360] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 359] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 665] <... ioctl resumed>) = 0 [pid 359] close(4 [pid 665] close(3) = 0 [pid 665] close(4 [pid 359] <... close resumed>) = 0 [pid 359] rmdir("./10/file1") = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3) = 0 [pid 359] rmdir("./10") = 0 [pid 359] mkdir("./11", 0777 [pid 666] <... write resumed>) = 1048576 [pid 666] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 666] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 359] <... mkdir resumed>) = 0 [ 29.795155][ T654] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 665] <... close resumed>) = 0 [pid 665] mkdir("./file1", 0777 [pid 666] <... openat resumed>) = 4 [pid 666] ioctl(4, LOOP_SET_FD, 3 [pid 359] <... openat resumed>) = 3 [pid 359] ioctl(3, LOOP_CLR_FD [pid 665] <... mkdir resumed>) = 0 [pid 665] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 360] <... umount2 resumed>) = 0 [pid 360] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 360] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 360] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] close(4) = 0 [pid 360] rmdir("./10/file1") = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] close(3) = 0 [pid 360] rmdir("./10") = 0 [pid 360] mkdir("./11", 0777) = 0 [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 666] <... ioctl resumed>) = 0 [pid 666] close(3) = 0 [pid 666] close(4) = 0 [pid 666] mkdir("./file1", 0777) = 0 [pid 666] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 364] <... umount2 resumed>) = 0 [pid 364] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./11/file1", [pid 360] <... openat resumed>) = 3 [pid 360] ioctl(3, LOOP_CLR_FD [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 360] close(3 [pid 359] close(3 [pid 360] <... close resumed>) = 0 [pid 359] <... close resumed>) = 0 [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 360] <... clone resumed>, child_tidptr=0x5555751e4750) = 669 [pid 364] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] <... clone resumed>, child_tidptr=0x5555751e4750) = 670 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 364] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 669 attached ./strace-static-x86_64: Process 670 attached [pid 670] set_robust_list(0x5555751e4760, 24 [pid 669] set_robust_list(0x5555751e4760, 24 [pid 364] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] close(4 [pid 669] <... set_robust_list resumed>) = 0 [pid 364] <... close resumed>) = 0 [pid 364] rmdir("./11/file1") = 0 [pid 669] chdir("./11" [pid 670] <... set_robust_list resumed>) = 0 [pid 670] chdir("./11" [pid 669] <... chdir resumed>) = 0 [pid 670] <... chdir resumed>) = 0 [pid 669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 670] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 669] setpgid(0, 0 [pid 670] <... prctl resumed>) = 0 [pid 670] setpgid(0, 0 [pid 669] <... setpgid resumed>) = 0 [pid 670] <... setpgid resumed>) = 0 [pid 669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 364] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 670] <... openat resumed>) = 3 [pid 669] <... openat resumed>) = 3 [pid 364] close(3) = 0 [pid 364] rmdir("./11") = 0 [pid 669] write(3, "1000", 4) = 4 [pid 670] write(3, "1000", 4) = 4 [pid 669] close(3 [pid 670] close(3 [pid 669] <... close resumed>) = 0 [pid 670] <... close resumed>) = 0 [pid 669] symlink("/dev/binderfs", "./binderfs") = 0 [pid 670] symlink("/dev/binderfs", "./binderfs") = 0 executing program executing program [pid 669] write(1, "executing program\n", 18 [pid 670] write(1, "executing program\n", 18 [pid 364] mkdir("./12", 0777 [pid 669] <... write resumed>) = 18 [pid 670] <... write resumed>) = 18 [pid 364] <... mkdir resumed>) = 0 [pid 669] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] <... futex resumed>) = 0 [pid 670] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 669] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 670] <... rt_sigaction resumed>NULL, 8) = 0 [pid 669] <... rt_sigaction resumed>NULL, 8) = 0 [pid 670] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 669] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 670] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 669] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 670] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 670] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 669] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 670] rt_sigprocmask(SIG_BLOCK, ~[], [pid 669] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 670] <... rt_sigprocmask resumed>[], 8) = 0 [pid 670] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 669] <... clone3 resumed> => {parent_tid=[675]}, 88) = 675 [pid 669] rt_sigprocmask(SIG_SETMASK, [], [pid 670] <... clone3 resumed> => {parent_tid=[676]}, 88) = 676 [pid 669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 670] rt_sigprocmask(SIG_SETMASK, [], [pid 669] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 669] <... futex resumed>) = 0 [pid 669] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 670] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 670] <... futex resumed>) = 0 [pid 670] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 364] <... openat resumed>) = 3 [pid 364] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 364] close(3) = 0 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 677 ./strace-static-x86_64: Process 677 attached [pid 677] set_robust_list(0x5555751e4760, 24) = 0 [pid 677] chdir("./12") = 0 [pid 677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 677] setpgid(0, 0) = 0 [pid 677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 677] write(3, "1000", 4) = 4 [pid 677] close(3) = 0 [pid 677] symlink("/dev/binderfs", "./binderfs") = 0 [pid 677] write(1, "executing program\n", 18executing program ) = 18 [pid 677] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 677] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 677] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 677] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 677] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[678]}, 88) = 678 [pid 677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 677] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 678 attached [pid 678] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 678] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 678] memfd_create("syzkaller", 0) = 3 [pid 678] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 ./strace-static-x86_64: Process 676 attached ./strace-static-x86_64: Process 675 attached [pid 666] <... mount resumed>) = 0 [pid 665] <... mount resumed>) = 0 [pid 676] set_robust_list(0x7fa2cc9159a0, 24 [pid 675] set_robust_list(0x7fa2cc9159a0, 24 [pid 676] <... set_robust_list resumed>) = 0 [pid 675] <... set_robust_list resumed>) = 0 [pid 676] rt_sigprocmask(SIG_SETMASK, [], [pid 675] rt_sigprocmask(SIG_SETMASK, [], [pid 676] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 676] memfd_create("syzkaller", 0 [pid 675] memfd_create("syzkaller", 0) = 3 [pid 676] <... memfd_create resumed>) = 3 [pid 676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 676] <... mmap resumed>) = 0x7fa2c44f5000 [pid 675] <... mmap resumed>) = 0x7fa2c44f5000 [pid 678] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 666] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 666] chdir("./file1") = 0 [pid 666] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 666] ioctl(4, LOOP_CLR_FD) = 0 [pid 666] close(4) = 0 [pid 666] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = 1 [pid 666] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 666] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = 1 [pid 666] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 666] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = 1 [pid 678] <... write resumed>) = 1048576 [pid 676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 665] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 665] chdir("./file1") = 0 [pid 665] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 665] ioctl(4, LOOP_CLR_FD) = 0 [ 29.986214][ T666] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.999504][ T665] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 665] close(4 [pid 678] munmap(0x7fa2c44f5000, 138412032 [pid 676] <... write resumed>) = 1048576 [pid 666] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 665] <... close resumed>) = 0 [pid 678] <... munmap resumed>) = 0 [pid 665] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 676] munmap(0x7fa2c44f5000, 138412032 [pid 666] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 678] <... openat resumed>) = 4 [pid 666] capset(0x200000000000, NULL [pid 678] ioctl(4, LOOP_SET_FD, 3 [pid 666] <... capset resumed>) = -1 EFAULT (Bad address) [pid 665] <... futex resumed>) = 1 [pid 664] <... futex resumed>) = 0 [pid 676] <... munmap resumed>) = 0 [pid 666] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 664] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 675] <... write resumed>) = 1048576 [pid 666] <... futex resumed>) = 1 [pid 665] <... openat resumed>) = 4 [pid 664] <... futex resumed>) = 0 [pid 663] <... futex resumed>) = 0 [pid 678] <... ioctl resumed>) = 0 [pid 676] <... openat resumed>) = 4 [pid 675] munmap(0x7fa2c44f5000, 138412032 [pid 666] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 665] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] close(3 [pid 676] ioctl(4, LOOP_SET_FD, 3 [pid 675] <... munmap resumed>) = 0 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = 0 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] <... futex resumed>) = 0 [pid 678] <... close resumed>) = 0 [pid 665] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 664] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] close(4 [pid 676] <... ioctl resumed>) = 0 [pid 675] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 666] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 665] <... mmap resumed>) = 0x200000000000 [pid 664] <... futex resumed>) = 0 [pid 663] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 0 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 676] close(3 [pid 666] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 665] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... close resumed>) = 0 [pid 676] <... close resumed>) = 0 [pid 675] <... openat resumed>) = 4 [pid 666] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] <... futex resumed>) = 0 [pid 678] mkdir("./file1", 0777 [pid 676] close(4 [pid 675] ioctl(4, LOOP_SET_FD, 3 [pid 666] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 664] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 678] <... mkdir resumed>) = 0 [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 665] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 665] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 1 [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 666] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 666] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 678] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 666] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 666] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 666] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 666] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 666] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 666] sendmmsg(-1, [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 666] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 666] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 666] <... futex resumed>) = 1 [pid 663] <... futex resumed>) = 0 [pid 666] ioctl(-1, SIOCGIFINDEX, NULL [pid 663] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 663] <... futex resumed>) = 0 [pid 666] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = 0 [pid 663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 666] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] exit_group(0) = ? [pid 666] <... futex resumed>) = ? [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 666] +++ exited with 0 +++ [pid 665] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 663] +++ exited with 0 +++ [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=663, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 358] restart_syscall(<... resuming interrupted clone ...> [pid 665] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 665] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 1 [pid 665] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 665] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] exit_group(0) = ? [pid 665] <... futex resumed>) = ? [pid 358] <... restart_syscall resumed>) = 0 [pid 358] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 358] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 665] +++ exited with 0 +++ [pid 664] +++ exited with 0 +++ [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=664, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 365] restart_syscall(<... resuming interrupted clone ...> [pid 358] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./12/binderfs") = 0 [pid 358] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] <... restart_syscall resumed>) = 0 [pid 365] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./11/binderfs") = 0 [pid 365] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 676] <... close resumed>) = 0 [pid 676] mkdir("./file1", 0777 [pid 675] <... ioctl resumed>) = 0 [pid 675] close(3) = 0 [pid 675] close(4 [pid 676] <... mkdir resumed>) = 0 [ 30.022489][ T666] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.052012][ T665] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 676] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 675] <... close resumed>) = 0 [pid 675] mkdir("./file1", 0777) = 0 [pid 675] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 365] <... umount2 resumed>) = 0 [pid 358] <... umount2 resumed>) = 0 [pid 365] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./11/file1", [pid 358] newfstatat(AT_FDCWD, "./12/file1", [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 358] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 365] <... openat resumed>) = 4 [pid 358] <... openat resumed>) = 4 [pid 365] newfstatat(4, "", [pid 358] newfstatat(4, "", [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, [pid 358] getdents64(4, [pid 365] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] getdents64(4, [pid 358] getdents64(4, [pid 365] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] close(4 [pid 358] close(4 [pid 365] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 365] rmdir("./11/file1" [pid 358] rmdir("./12/file1" [pid 365] <... rmdir resumed>) = 0 [pid 358] <... rmdir resumed>) = 0 [pid 365] getdents64(3, [pid 358] getdents64(3, [pid 365] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] close(3 [pid 358] close(3 [pid 365] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 365] rmdir("./11" [pid 358] rmdir("./12" [pid 365] <... rmdir resumed>) = 0 [pid 358] <... rmdir resumed>) = 0 [pid 365] mkdir("./12", 0777 [pid 358] mkdir("./13", 0777 [pid 365] <... mkdir resumed>) = 0 [pid 358] <... mkdir resumed>) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 365] <... openat resumed>) = 3 [pid 358] <... openat resumed>) = 3 [pid 365] ioctl(3, LOOP_CLR_FD [pid 358] ioctl(3, LOOP_CLR_FD [pid 365] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 365] close(3 [pid 358] close(3 [pid 365] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 365] <... clone resumed>, child_tidptr=0x5555751e4750) = 687 [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 688 ./strace-static-x86_64: Process 687 attached [pid 687] set_robust_list(0x5555751e4760, 24) = 0 [pid 687] chdir("./12") = 0 [pid 687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 687] setpgid(0, 0) = 0 [pid 687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 687] write(3, "1000", 4) = 4 [pid 687] close(3) = 0 [pid 687] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 687] write(1, "executing program\n", 18) = 18 [pid 687] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 687] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 688 attached ) = 0x7fa2cc8f5000 [pid 687] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 688] set_robust_list(0x5555751e4760, 24 [pid 687] rt_sigprocmask(SIG_BLOCK, ~[], [pid 676] <... mount resumed>) = 0 [pid 675] <... mount resumed>) = 0 [pid 688] <... set_robust_list resumed>) = 0 [pid 676] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 688] chdir("./13" [pid 676] <... openat resumed>) = 3 [pid 688] <... chdir resumed>) = 0 [pid 676] chdir("./file1" [pid 688] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 676] <... chdir resumed>) = 0 [pid 688] <... prctl resumed>) = 0 [pid 676] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 675] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 688] setpgid(0, 0 [pid 676] <... openat resumed>) = 4 [pid 688] <... setpgid resumed>) = 0 [pid 676] ioctl(4, LOOP_CLR_FD [pid 675] <... openat resumed>) = 3 [pid 688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 676] <... ioctl resumed>) = 0 [pid 688] <... openat resumed>) = 3 [pid 676] close(4 [pid 675] chdir("./file1" [pid 688] write(3, "1000", 4 [pid 676] <... close resumed>) = 0 [pid 688] <... write resumed>) = 4 [pid 676] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] <... chdir resumed>) = 0 [pid 688] close(3 [pid 676] <... futex resumed>) = 1 [pid 688] <... close resumed>) = 0 [pid 676] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 688] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 675] <... openat resumed>) = 4 [pid 688] write(1, "executing program\n", 18) = 18 [pid 675] ioctl(4, LOOP_CLR_FD [pid 688] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] <... rt_sigprocmask resumed>[], 8) = 0 [pid 675] <... ioctl resumed>) = 0 [pid 688] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 687] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 675] close(4 [pid 688] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 675] <... close resumed>) = 0 [pid 670] <... futex resumed>) = 0 [pid 688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 687] <... clone3 resumed> => {parent_tid=[690]}, 88) = 690 [pid 675] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 670] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... mprotect resumed>) = 0 [pid 687] rt_sigprocmask(SIG_SETMASK, [], [pid 675] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 688] rt_sigprocmask(SIG_BLOCK, ~[], [pid 676] <... futex resumed>) = 0 [pid 670] <... futex resumed>) = 1 [pid 669] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... rt_sigprocmask resumed>[], 8) = 0 [pid 687] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 676] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 675] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 688] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 687] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... openat resumed>) = 4 [pid 670] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] <... futex resumed>) = 0 [pid 687] <... futex resumed>) = 0 [pid 676] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] <... openat resumed>) = 4 [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 688] <... clone3 resumed> => {parent_tid=[691]}, 88) = 691 [pid 687] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 676] <... futex resumed>) = 0 [pid 675] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 688] rt_sigprocmask(SIG_SETMASK, [], [pid 676] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 675] <... futex resumed>) = 0 [pid 670] <... futex resumed>) = 0 [pid 669] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 676] <... mmap resumed>) = 0x200000000000 [pid 675] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 670] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] <... futex resumed>) = 0 [pid 688] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] <... mmap resumed>) = 0x200000000000 [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 688] <... futex resumed>) = 0 [ 30.310472][ T676] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 30.322012][ T675] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 30.322374][ T678] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 676] <... futex resumed>) = 0 [pid 675] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 691 attached ./strace-static-x86_64: Process 690 attached [pid 688] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 678] <... mount resumed>) = 0 [pid 670] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 691] set_robust_list(0x7fa2cc9159a0, 24 [pid 690] set_robust_list(0x7fa2cc9159a0, 24 [pid 678] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 670] <... futex resumed>) = 0 [pid 669] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] <... set_robust_list resumed>) = 0 [pid 690] <... set_robust_list resumed>) = 0 [pid 678] <... openat resumed>) = 3 [pid 670] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] <... futex resumed>) = 0 [pid 691] rt_sigprocmask(SIG_SETMASK, [], [pid 690] rt_sigprocmask(SIG_SETMASK, [], [pid 678] chdir("./file1" [pid 669] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 678] <... chdir resumed>) = 0 [pid 691] memfd_create("syzkaller", 0 [pid 690] memfd_create("syzkaller", 0 [pid 691] <... memfd_create resumed>) = 3 [pid 690] <... memfd_create resumed>) = 3 [pid 678] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 690] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 691] <... mmap resumed>) = 0x7fa2c44f5000 [pid 690] <... mmap resumed>) = 0x7fa2c44f5000 [pid 678] <... openat resumed>) = 4 [pid 690] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 675] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 669] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=39000000} [pid 690] <... write resumed>) = 1048576 [pid 691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 690] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 690] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 690] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 690] close(3) = 0 [pid 690] close(4) = 0 [pid 690] mkdir("./file1", 0777) = 0 [pid 690] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 678] ioctl(4, LOOP_CLR_FD) = 0 [pid 678] close(4) = 0 [pid 678] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 677] <... futex resumed>) = 0 [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 691] <... write resumed>) = 1048576 [pid 678] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 677] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 676] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 678] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 676] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... openat resumed>) = 4 [pid 691] munmap(0x7fa2c44f5000, 138412032 [pid 676] <... futex resumed>) = 1 [pid 675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 670] <... futex resumed>) = 0 [pid 676] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 670] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] <... futex resumed>) = 0 [pid 691] <... munmap resumed>) = 0 [pid 678] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 675] capset(0x200000000000, NULL [pid 670] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 691] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 678] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 675] <... capset resumed>) = -1 EFAULT (Bad address) [pid 678] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 677] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 677] <... futex resumed>) = 0 [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 678] <... mmap resumed>) = 0x200000000000 [pid 677] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 675] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] <... openat resumed>) = 4 [pid 678] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 669] <... futex resumed>) = 0 [pid 691] ioctl(4, LOOP_SET_FD, 3 [pid 678] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 675] <... futex resumed>) = 0 [pid 677] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [ 30.348275][ T676] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.366193][ T675] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 677] <... futex resumed>) = 0 [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 669] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 676] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 676] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 670] <... futex resumed>) = 0 [pid 676] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 670] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] <... futex resumed>) = 0 [pid 676] ioctl(-1, SIOCGIFINDEX, NULL [pid 670] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 676] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 676] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 670] <... futex resumed>) = 0 [pid 676] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 670] exit_group(0 [pid 676] <... futex resumed>) = ? [pid 670] <... exit_group resumed>) = ? [pid 676] +++ exited with 0 +++ [pid 670] +++ exited with 0 +++ [pid 691] <... ioctl resumed>) = 0 [pid 691] close(3) = 0 [pid 691] close(4 [pid 675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 675] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 675] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 675] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 675] ioctl(-1, SIOCGIFINDEX, NULL [pid 669] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 675] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 669] <... futex resumed>) = 0 [pid 675] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] exit_group(0 [pid 675] <... futex resumed>) = ? [pid 669] <... exit_group resumed>) = ? [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 675] +++ exited with 0 +++ [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=670, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 359] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 359] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] unlink("./11/binderfs") = 0 [pid 359] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 678] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 678] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 677] <... futex resumed>) = 0 [pid 677] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 678] <... futex resumed>) = 1 [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 678] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 678] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 677] <... futex resumed>) = 0 [pid 677] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 677] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 678] <... futex resumed>) = 1 [pid 678] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 678] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 677] <... futex resumed>) = 0 [pid 677] exit_group(0) = ? [pid 678] <... futex resumed>) = ? [pid 678] +++ exited with 0 +++ [pid 677] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=677, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 364] restart_syscall(<... resuming interrupted clone ...> [pid 669] +++ exited with 0 +++ [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=669, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 360] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 360] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 360] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] unlink("./11/binderfs") = 0 [pid 360] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] <... restart_syscall resumed>) = 0 [pid 364] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 364] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./12/binderfs", [pid 691] <... close resumed>) = 0 [pid 690] <... mount resumed>) = 0 [pid 364] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./12/binderfs") = 0 [pid 364] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 691] mkdir("./file1", 0777) = 0 [pid 690] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 691] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 690] <... openat resumed>) = 3 [pid 690] chdir("./file1") = 0 [ 30.407334][ T678] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.413539][ T675] syz-executor346 (675) used greatest stack depth: 20792 bytes left [ 30.428763][ T690] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 690] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 690] ioctl(4, LOOP_CLR_FD) = 0 [pid 690] close(4) = 0 [pid 690] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] <... futex resumed>) = 0 [pid 687] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... futex resumed>) = 0 [pid 687] <... futex resumed>) = 1 [pid 690] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 687] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... openat resumed>) = 4 [pid 690] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] <... futex resumed>) = 0 [pid 687] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... futex resumed>) = 0 [pid 687] <... futex resumed>) = 1 [pid 690] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 687] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 690] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 691] <... mount resumed>) = 0 [pid 687] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 690] <... futex resumed>) = 0 [pid 687] <... futex resumed>) = 1 [pid 691] chdir("./file1" [pid 687] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] <... chdir resumed>) = 0 [pid 690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 691] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 690] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 690] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 687] <... futex resumed>) = 0 [pid 687] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 690] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 690] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 690] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 687] <... futex resumed>) = 0 [pid 687] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 690] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 687] <... futex resumed>) = 0 [pid 687] exit_group(0) = ? [pid 690] +++ exited with 0 +++ [pid 687] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=687, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 365] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 365] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./12/binderfs") = 0 [ 30.546009][ T690] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 365] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] <... umount2 resumed>) = 0 [pid 691] <... openat resumed>) = 4 [pid 364] <... umount2 resumed>) = 0 [pid 360] <... umount2 resumed>) = 0 [pid 691] ioctl(4, LOOP_CLR_FD) = 0 [pid 691] close(4) = 0 [pid 364] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 691] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 688] <... futex resumed>) = 0 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 691] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 688] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 691] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 360] newfstatat(AT_FDCWD, "./11/file1", [pid 359] newfstatat(AT_FDCWD, "./11/file1", [pid 691] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 688] <... futex resumed>) = 0 [pid 364] newfstatat(AT_FDCWD, "./12/file1", [pid 691] <... openat resumed>) = 4 [pid 688] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 691] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 691] <... futex resumed>) = 0 [pid 688] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 691] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 688] <... futex resumed>) = 0 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 691] <... mmap resumed>) = 0x200000000000 [pid 688] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 691] <... futex resumed>) = 0 [pid 688] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 688] <... futex resumed>) = 0 [pid 364] <... openat resumed>) = 4 [pid 360] <... openat resumed>) = 4 [pid 359] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 688] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] newfstatat(4, "", [pid 360] newfstatat(4, "", [pid 359] <... openat resumed>) = 4 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] newfstatat(4, "", [pid 364] getdents64(4, [pid 360] getdents64(4, [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 360] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] getdents64(4, [pid 364] getdents64(4, [pid 360] getdents64(4, [pid 359] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 364] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] getdents64(4, [pid 364] close(4 [pid 360] close(4 [pid 359] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] <... close resumed>) = 0 [pid 360] <... close resumed>) = 0 [pid 359] close(4 [pid 364] rmdir("./12/file1" [pid 360] rmdir("./11/file1" [pid 359] <... close resumed>) = 0 [pid 364] <... rmdir resumed>) = 0 [pid 360] <... rmdir resumed>) = 0 [pid 359] rmdir("./11/file1" [pid 364] getdents64(3, [pid 360] getdents64(3, [pid 359] <... rmdir resumed>) = 0 [pid 364] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] getdents64(3, [pid 364] close(3 [pid 360] close(3 [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] <... close resumed>) = 0 [pid 360] <... close resumed>) = 0 [pid 359] close(3 [pid 364] rmdir("./12" [pid 360] rmdir("./11" [pid 359] <... close resumed>) = 0 [pid 364] <... rmdir resumed>) = 0 [pid 360] <... rmdir resumed>) = 0 [pid 359] rmdir("./11" [pid 364] mkdir("./13", 0777 [pid 360] mkdir("./12", 0777 [pid 359] <... rmdir resumed>) = 0 [pid 364] <... mkdir resumed>) = 0 [pid 360] <... mkdir resumed>) = 0 [pid 359] mkdir("./12", 0777 [pid 691] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 359] <... mkdir resumed>) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 691] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 691] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 691] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 688] <... futex resumed>) = 0 [pid 688] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 688] <... futex resumed>) = 0 [pid 688] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 691] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 691] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 691] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 691] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 365] <... umount2 resumed>) = 0 [pid 691] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 691] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 691] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 691] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 691] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 691] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 691] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 691] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 365] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] <... openat resumed>) = 3 [pid 360] <... openat resumed>) = 3 [pid 359] <... openat resumed>) = 3 [pid 688] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] ioctl(3, LOOP_CLR_FD [pid 360] ioctl(3, LOOP_CLR_FD [pid 359] ioctl(3, LOOP_CLR_FD [pid 688] <... futex resumed>) = 1 [pid 365] newfstatat(AT_FDCWD, "./12/file1", [pid 364] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 688] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] close(3 [pid 359] close(3 [pid 364] close(3 [pid 365] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... close resumed>) = 0 [pid 691] <... futex resumed>) = 0 [pid 691] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 691] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 688] <... futex resumed>) = 0 [pid 691] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 688] exit_group(0 [pid 691] <... futex resumed>) = ? [pid 688] <... exit_group resumed>) = ? [pid 691] +++ exited with 0 +++ [pid 688] +++ exited with 0 +++ [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=688, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 358] restart_syscall(<... resuming interrupted clone ...> [pid 359] <... close resumed>) = 0 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 699 [pid 364] <... close resumed>) = 0 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 358] <... restart_syscall resumed>) = 0 [pid 364] <... clone resumed>, child_tidptr=0x5555751e4750) = 700 [pid 358] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 358] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./13/binderfs") = 0 [pid 358] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 701 ./strace-static-x86_64: Process 701 attached [pid 701] set_robust_list(0x5555751e4760, 24) = 0 [pid 701] chdir("./12") = 0 [pid 701] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 701] setpgid(0, 0) = 0 [pid 701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 700 attached [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 700] set_robust_list(0x5555751e4760, 24 [pid 701] <... openat resumed>) = 3 [pid 700] <... set_robust_list resumed>) = 0 [pid 700] chdir("./13") = 0 [pid 701] write(3, "1000", 4) = 4 [pid 701] close(3 [pid 700] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 701] <... close resumed>) = 0 [pid 700] <... prctl resumed>) = 0 [pid 700] setpgid(0, 0 [pid 701] symlink("/dev/binderfs", "./binderfs") = 0 [pid 700] <... setpgid resumed>) = 0 [pid 700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 365] <... openat resumed>) = 4 ./strace-static-x86_64: Process 699 attached [pid 365] newfstatat(4, "", [pid 699] set_robust_list(0x5555751e4760, 24 [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 699] <... set_robust_list resumed>) = 0 [pid 365] getdents64(4, [pid 700] <... openat resumed>) = 3 [pid 365] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 699] chdir("./12" [pid 365] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 699] <... chdir resumed>) = 0 [pid 365] close(4 [pid 699] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 365] <... close resumed>) = 0 [pid 700] write(3, "1000", 4 [pid 365] rmdir("./12/file1" [pid 701] write(1, "executing program\n", 18 [pid 700] <... write resumed>) = 4 [pid 701] <... write resumed>) = 18 [pid 700] close(3) = 0 [pid 701] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] symlink("/dev/binderfs", "./binderfs" [pid 365] <... rmdir resumed>) = 0 [pid 701] <... futex resumed>) = 0 executing program [pid 700] <... symlink resumed>) = 0 [pid 699] <... prctl resumed>) = 0 [pid 365] getdents64(3, [pid 701] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 365] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 699] setpgid(0, 0 [pid 365] close(3 [pid 701] <... rt_sigaction resumed>NULL, 8) = 0 [pid 701] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 699] <... setpgid resumed>) = 0 executing program [pid 365] <... close resumed>) = 0 [pid 701] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 365] rmdir("./12" [pid 701] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 701] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 701] rt_sigprocmask(SIG_BLOCK, ~[], [pid 699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 365] <... rmdir resumed>) = 0 [pid 700] write(1, "executing program\n", 18 [pid 701] <... rt_sigprocmask resumed>[], 8) = 0 [pid 700] <... write resumed>) = 18 [pid 365] mkdir("./13", 0777 [pid 701] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 700] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 700] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 365] <... mkdir resumed>) = 0 [pid 700] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 699] <... openat resumed>) = 3 [pid 700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 699] write(3, "1000", 4 [pid 701] <... clone3 resumed> => {parent_tid=[702]}, 88) = 702 [pid 700] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 701] rt_sigprocmask(SIG_SETMASK, [], [pid 700] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 701] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 700] <... mprotect resumed>) = 0 [pid 701] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] rt_sigprocmask(SIG_BLOCK, ~[], [pid 699] <... write resumed>) = 4 [pid 701] <... futex resumed>) = 0 [pid 700] <... rt_sigprocmask resumed>[], 8) = 0 [pid 701] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 700] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}./strace-static-x86_64: Process 703 attached [pid 699] close(3 [pid 700] <... clone3 resumed> => {parent_tid=[703]}, 88) = 703 [pid 700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 700] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 702 attached [pid 702] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 702] memfd_create("syzkaller", 0 [pid 699] <... close resumed>) = 0 [pid 702] <... memfd_create resumed>) = 3 [pid 702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 699] symlink("/dev/binderfs", "./binderfs" [pid 703] set_robust_list(0x7fa2cc9159a0, 24 [pid 699] <... symlink resumed>) = 0 [pid 703] <... set_robust_list resumed>) = 0 executing program [pid 699] write(1, "executing program\n", 18 [pid 703] rt_sigprocmask(SIG_SETMASK, [], [pid 699] <... write resumed>) = 18 [pid 699] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 699] <... futex resumed>) = 0 [pid 699] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 699] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 699] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [ 30.614182][ T691] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 699] rt_sigprocmask(SIG_BLOCK, ~[], [pid 703] memfd_create("syzkaller", 0 [pid 699] <... rt_sigprocmask resumed>[], 8) = 0 [pid 365] <... openat resumed>) = 3 [pid 358] <... umount2 resumed>) = 0 [pid 358] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] ioctl(3, LOOP_CLR_FD [pid 358] newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 358] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] close(4) = 0 [pid 358] rmdir("./13/file1") = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] close(3) = 0 [pid 358] rmdir("./13") = 0 [pid 358] mkdir("./14", 0777) = 0 [pid 699] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 365] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 365] close(3 [pid 358] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 699] <... clone3 resumed> => {parent_tid=[704]}, 88) = 704 [pid 365] <... close resumed>) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 699] rt_sigprocmask(SIG_SETMASK, [], [pid 358] close(3) = 0 [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 699] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 706 [pid 365] <... clone resumed>, child_tidptr=0x5555751e4750) = 705 [pid 699] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 705 attached [pid 705] set_robust_list(0x5555751e4760, 24) = 0 [pid 705] chdir("./13") = 0 [pid 705] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 704 attached [pid 699] <... futex resumed>) = 0 [pid 705] setpgid(0, 0 [pid 704] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 704] rt_sigprocmask(SIG_SETMASK, [], [pid 705] <... setpgid resumed>) = 0 [pid 704] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 704] memfd_create("syzkaller", 0) = 3 [pid 705] <... openat resumed>) = 3 [pid 704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 699] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 705] write(3, "1000", 4) = 4 [pid 705] close(3) = 0 [pid 705] symlink("/dev/binderfs", "./binderfs") = 0 [pid 705] write(1, "executing program\n", 18 [pid 703] <... memfd_create resumed>) = 3 executing program ./strace-static-x86_64: Process 706 attached [pid 705] <... write resumed>) = 18 [pid 705] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 705] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 705] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 705] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 705] rt_sigprocmask(SIG_BLOCK, ~[], [pid 703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 705] <... rt_sigprocmask resumed>[], 8) = 0 [pid 705] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[707]}, 88) = 707 [pid 705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 705] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 705] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 703] <... mmap resumed>) = 0x7fa2c44f5000 [pid 702] <... write resumed>) = 1048576 [pid 706] set_robust_list(0x5555751e4760, 24) = 0 [pid 706] chdir("./14" [pid 704] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 706] <... chdir resumed>) = 0 [pid 702] munmap(0x7fa2c44f5000, 138412032 [pid 706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 706] setpgid(0, 0) = 0 [pid 706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 702] <... munmap resumed>) = 0 [pid 702] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 702] ioctl(4, LOOP_SET_FD, 3 [pid 706] <... openat resumed>) = 3 [pid 706] write(3, "1000", 4) = 4 [pid 706] close(3) = 0 [pid 706] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 706] write(1, "executing program\n", 18) = 18 [pid 706] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 707 attached [pid 703] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 706] <... futex resumed>) = 0 [pid 706] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 706] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 704] <... write resumed>) = 1048576 [pid 702] <... ioctl resumed>) = 0 [pid 702] close(3) = 0 [pid 702] close(4 [pid 704] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 704] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 707] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 707] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 707] memfd_create("syzkaller", 0) = 3 [pid 707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 706] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 706] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 703] <... write resumed>) = 1048576 [pid 706] <... clone3 resumed> => {parent_tid=[709]}, 88) = 709 [pid 706] rt_sigprocmask(SIG_SETMASK, [], [pid 703] munmap(0x7fa2c44f5000, 138412032 [pid 706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 706] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 706] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 703] <... munmap resumed>) = 0 [pid 703] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 709 attached [pid 709] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 709] memfd_create("syzkaller", 0) = 3 [pid 707] <... write resumed>) = 1048576 [pid 709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 707] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 707] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 709] <... write resumed>) = 1048576 [pid 704] <... openat resumed>) = 4 [pid 702] <... close resumed>) = 0 [pid 709] munmap(0x7fa2c44f5000, 138412032 [pid 704] ioctl(4, LOOP_SET_FD, 3 [pid 702] mkdir("./file1", 0777) = 0 [pid 702] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 709] <... munmap resumed>) = 0 [pid 709] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 707] <... openat resumed>) = 4 [pid 707] ioctl(4, LOOP_SET_FD, 3 [pid 703] <... openat resumed>) = 4 [pid 703] ioctl(4, LOOP_SET_FD, 3 [pid 704] <... ioctl resumed>) = 0 [pid 704] close(3) = 0 [pid 704] close(4 [pid 709] <... openat resumed>) = 4 [pid 704] <... close resumed>) = 0 [pid 707] <... ioctl resumed>) = 0 [pid 704] mkdir("./file1", 0777 [pid 703] <... ioctl resumed>) = 0 [pid 702] <... mount resumed>) = 0 [pid 707] close(3 [pid 704] <... mkdir resumed>) = 0 [pid 703] close(3 [pid 702] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 707] <... close resumed>) = 0 [pid 704] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 703] <... close resumed>) = 0 [pid 702] <... openat resumed>) = 3 [pid 707] close(4 [pid 703] close(4 [pid 702] chdir("./file1" [pid 703] <... close resumed>) = 0 [pid 702] <... chdir resumed>) = 0 [pid 703] mkdir("./file1", 0777 [pid 702] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 709] ioctl(4, LOOP_SET_FD, 3 [pid 707] <... close resumed>) = 0 [pid 703] <... mkdir resumed>) = 0 [pid 702] <... openat resumed>) = 4 [pid 703] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 702] ioctl(4, LOOP_CLR_FD) = 0 [pid 702] close(4 [pid 707] mkdir("./file1", 0777 [pid 702] <... close resumed>) = 0 [pid 702] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 701] <... futex resumed>) = 0 [pid 702] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 701] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 701] <... futex resumed>) = 0 [pid 707] <... mkdir resumed>) = 0 [pid 702] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 701] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 702] <... openat resumed>) = 4 [pid 702] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 701] <... futex resumed>) = 0 [pid 702] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 701] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 701] <... futex resumed>) = 0 [pid 702] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 701] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... mmap resumed>) = 0x200000000000 [pid 702] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 701] <... futex resumed>) = 0 [pid 702] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 701] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 701] <... futex resumed>) = 0 [pid 709] <... ioctl resumed>) = 0 [pid 709] close(3) = 0 [pid 709] close(4 [pid 701] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 702] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 702] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 701] <... futex resumed>) = 0 [pid 701] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... mount resumed>) = 0 [pid 701] <... futex resumed>) = 0 [pid 703] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 702] <... futex resumed>) = 1 [pid 701] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... openat resumed>) = 3 [pid 703] chdir("./file1" [pid 702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 703] <... chdir resumed>) = 0 [pid 703] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 704] <... mount resumed>) = 0 [pid 702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 704] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 704] chdir("./file1") = 0 [pid 704] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 709] <... close resumed>) = 0 [pid 709] mkdir("./file1", 0777) = 0 [pid 709] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 702] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 702] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 702] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 701] <... futex resumed>) = 0 [pid 701] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 701] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] <... mount resumed>) = 0 [pid 707] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 702] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 707] <... openat resumed>) = 3 [pid 707] chdir("./file1" [pid 702] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 701] <... futex resumed>) = 0 [pid 707] <... chdir resumed>) = 0 [pid 701] exit_group(0) = ? [pid 707] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 702] +++ exited with 0 +++ [pid 701] +++ exited with 0 +++ [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=701, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 360] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 360] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 360] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] unlink("./12/binderfs") = 0 [ 30.835010][ T702] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 360] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 703] <... openat resumed>) = 4 [pid 703] ioctl(4, LOOP_CLR_FD [pid 704] <... openat resumed>) = 4 [pid 703] <... ioctl resumed>) = 0 [pid 703] close(4 [pid 360] <... umount2 resumed>) = 0 [pid 707] <... openat resumed>) = 4 [pid 704] ioctl(4, LOOP_CLR_FD [pid 703] <... close resumed>) = 0 [pid 360] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 707] ioctl(4, LOOP_CLR_FD [pid 704] <... ioctl resumed>) = 0 [pid 703] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 707] <... ioctl resumed>) = 0 [pid 704] close(4 [pid 703] <... futex resumed>) = 1 [pid 700] <... futex resumed>) = 0 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 703] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] <... close resumed>) = 0 [pid 707] close(4 [pid 704] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] <... futex resumed>) = 0 [pid 360] newfstatat(AT_FDCWD, "./12/file1", [pid 707] <... close resumed>) = 0 [pid 704] <... futex resumed>) = 1 [pid 703] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 700] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... futex resumed>) = 0 [pid 707] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 703] <... openat resumed>) = 4 [pid 699] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 707] <... futex resumed>) = 1 [pid 705] <... futex resumed>) = 0 [pid 704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 703] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = 0 [pid 360] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 707] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 705] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 703] <... futex resumed>) = 1 [pid 700] <... futex resumed>) = 0 [pid 699] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 705] <... futex resumed>) = 0 [pid 704] <... openat resumed>) = 4 [pid 703] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 707] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 705] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 704] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... openat resumed>) = 4 [pid 707] <... openat resumed>) = 4 [pid 704] <... futex resumed>) = 1 [pid 703] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 700] <... futex resumed>) = 0 [pid 699] <... futex resumed>) = 0 [pid 360] newfstatat(4, "", [pid 707] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 703] <... mmap resumed>) = 0x200000000000 [pid 700] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 707] <... futex resumed>) = 1 [pid 705] <... futex resumed>) = 0 [pid 704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 703] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] <... futex resumed>) = 0 [pid 360] getdents64(4, [pid 707] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 705] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 703] <... futex resumed>) = 0 [pid 700] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 705] <... futex resumed>) = 0 [pid 704] <... mmap resumed>) = 0x200000000000 [pid 700] <... futex resumed>) = 0 [pid 360] getdents64(4, [pid 707] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 705] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 704] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 709] <... mount resumed>) = 0 [pid 707] <... mmap resumed>) = 0x200000000000 [pid 704] <... futex resumed>) = 1 [pid 703] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 699] <... futex resumed>) = 0 [pid 360] close(4 [pid 709] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 707] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 703] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 699] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... close resumed>) = 0 [pid 709] <... openat resumed>) = 3 [pid 707] <... futex resumed>) = 1 [pid 705] <... futex resumed>) = 0 [pid 704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 703] capset(0x200000000000, NULL [pid 699] <... futex resumed>) = 0 [pid 360] rmdir("./12/file1" [pid 709] chdir("./file1" [pid 707] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 705] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... rmdir resumed>) = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] close(3) = 0 [pid 360] rmdir("./12") = 0 [pid 360] mkdir("./13", 0777) = 0 [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 703] <... capset resumed>) = -1 EFAULT (Bad address) [pid 703] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 703] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 699] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 709] <... chdir resumed>) = 0 [pid 709] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 705] <... futex resumed>) = 0 [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 700] <... futex resumed>) = 0 [pid 705] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 700] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 700] <... futex resumed>) = 1 [pid 700] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 704] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 704] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 699] <... futex resumed>) = 0 [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 699] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 699] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 704] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 704] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = 0 [pid 699] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 704] <... futex resumed>) = 1 [pid 704] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 704] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = 0 [pid 699] exit_group(0) = ? [pid 704] <... futex resumed>) = ? [pid 704] +++ exited with 0 +++ [pid 699] +++ exited with 0 +++ [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=699, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 359] restart_syscall(<... resuming interrupted clone ...> [pid 703] <... futex resumed>) = 0 [pid 703] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 703] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 703] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 703] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 703] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 703] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 703] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 703] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 703] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 703] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 703] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 703] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 703] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... futex resumed>) = 0 [pid 700] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 1 [pid 703] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 703] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... futex resumed>) = 0 [pid 700] exit_group(0) = ? [pid 703] <... futex resumed>) = ? [pid 703] +++ exited with 0 +++ [pid 700] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=700, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 364] restart_syscall(<... resuming interrupted clone ...> [pid 359] <... restart_syscall resumed>) = 0 [pid 359] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 359] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] unlink("./12/binderfs") = 0 [pid 359] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 707] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 364] <... restart_syscall resumed>) = 0 [pid 364] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 707] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 364] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 707] capset(0x200000000000, NULL [pid 364] <... openat resumed>) = 3 [pid 364] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./13/binderfs") = 0 [pid 364] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 707] <... capset resumed>) = -1 EFAULT (Bad address) [pid 707] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... futex resumed>) = 0 [pid 707] <... futex resumed>) = 1 [pid 705] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 707] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 705] <... futex resumed>) = 0 [pid 707] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 705] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... openat resumed>) = 3 [pid 707] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 707] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 707] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 707] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 707] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 707] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 707] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 707] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 707] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 707] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 707] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... futex resumed>) = 0 [pid 705] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 705] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] <... futex resumed>) = 1 [pid 707] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 707] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... futex resumed>) = 0 [pid 705] exit_group(0) = ? [pid 707] <... futex resumed>) = ? [pid 707] +++ exited with 0 +++ [pid 705] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=705, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 365] restart_syscall(<... resuming interrupted clone ...> [pid 709] <... openat resumed>) = 4 [pid 365] <... restart_syscall resumed>) = 0 [pid 360] ioctl(3, LOOP_CLR_FD [pid 709] ioctl(4, LOOP_CLR_FD) = 0 [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 709] close(4 [pid 365] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 709] <... close resumed>) = 0 [pid 365] <... openat resumed>) = 3 [pid 360] close(3 [pid 709] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] <... close resumed>) = 0 [pid 709] <... futex resumed>) = 1 [pid 706] <... futex resumed>) = 0 [pid 365] getdents64(3, [pid 359] <... umount2 resumed>) = 0 [pid 365] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./13/binderfs", [pid 706] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 709] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 706] <... futex resumed>) = 0 [pid 365] unlink("./13/binderfs" [pid 359] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] <... unlink resumed>) = 0 [pid 706] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 709] <... openat resumed>) = 4 [pid 360] <... clone resumed>, child_tidptr=0x5555751e4750) = 724 [pid 709] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 709] <... futex resumed>) = 1 [pid 706] <... futex resumed>) = 0 [pid 709] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 706] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] newfstatat(AT_FDCWD, "./12/file1", ./strace-static-x86_64: Process 724 attached [pid 709] <... mmap resumed>) = 0x200000000000 [pid 706] <... futex resumed>) = 0 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 709] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 709] <... futex resumed>) = 0 [pid 706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 709] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 706] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 706] <... futex resumed>) = 0 [pid 359] <... openat resumed>) = 4 [pid 706] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] set_robust_list(0x5555751e4760, 24) = 0 [pid 724] chdir("./13") = 0 [pid 724] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 724] setpgid(0, 0) = 0 [pid 724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 724] write(3, "1000", 4) = 4 [ 30.912635][ T703] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.930806][ T704] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.938241][ T707] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters executing program [pid 724] close(3) = 0 [pid 724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 724] write(1, "executing program\n", 18) = 18 [pid 724] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 724] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 724] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 724] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 724] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[725]}, 88) = 725 [pid 724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 724] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 724] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 359] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] close(4) = 0 [pid 359] rmdir("./12/file1") = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3) = 0 [pid 359] rmdir("./12") = 0 [pid 359] mkdir("./13", 0777) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 725 attached [pid 725] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 725] memfd_create("syzkaller", 0) = 3 [pid 725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 725] <... write resumed>) = 1048576 [pid 725] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 725] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 709] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 709] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 709] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 709] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 709] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 709] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... umount2 resumed>) = 0 [pid 359] <... openat resumed>) = 3 [pid 364] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] ioctl(3, LOOP_CLR_FD [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] <... ioctl resumed>) = 0 [pid 364] newfstatat(AT_FDCWD, "./13/file1", [pid 359] close(3 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] <... close resumed>) = 0 [pid 364] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 359] <... clone resumed>, child_tidptr=0x5555751e4750) = 726 [pid 364] <... openat resumed>) = 4 [pid 364] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 364] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] close(4) = 0 [pid 364] rmdir("./13/file1") = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] close(3) = 0 [pid 364] rmdir("./13") = 0 [pid 364] mkdir("./14", 0777) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 726 attached [pid 726] set_robust_list(0x5555751e4760, 24) = 0 [pid 726] chdir("./13") = 0 [pid 726] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 726] setpgid(0, 0) = 0 executing program [pid 726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 726] write(3, "1000", 4) = 4 [pid 726] close(3) = 0 [pid 726] symlink("/dev/binderfs", "./binderfs") = 0 [pid 726] write(1, "executing program\n", 18) = 18 [pid 726] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 726] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 726] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 726] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 726] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 726] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[727]}, 88) = 727 [pid 726] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 726] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 726] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 727 attached [pid 709] <... futex resumed>) = 1 [pid 706] <... futex resumed>) = 0 [pid 706] exit_group(0) = ? [pid 727] set_robust_list(0x7fa2cc9159a0, 24 [pid 709] +++ exited with 0 +++ [pid 706] +++ exited with 0 +++ [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=706, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 358] restart_syscall(<... resuming interrupted clone ...> [pid 727] <... set_robust_list resumed>) = 0 [pid 727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 727] memfd_create("syzkaller", 0) = 3 [pid 727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 358] <... restart_syscall resumed>) = 0 [pid 358] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 358] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./14/binderfs") = 0 [pid 358] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 30.978893][ T709] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 727] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 727] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 727] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 725] <... openat resumed>) = 4 [pid 365] <... umount2 resumed>) = 0 [pid 364] <... openat resumed>) = 3 [pid 358] <... umount2 resumed>) = 0 [pid 727] ioctl(4, LOOP_SET_FD, 3 [pid 365] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] ioctl(3, LOOP_CLR_FD [pid 358] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 725] ioctl(4, LOOP_SET_FD, 3 [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./13/file1", [pid 358] newfstatat(AT_FDCWD, "./14/file1", [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 358] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 365] <... openat resumed>) = 4 [pid 358] <... openat resumed>) = 4 [pid 365] newfstatat(4, "", [pid 358] newfstatat(4, "", [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, [pid 358] getdents64(4, [pid 365] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] getdents64(4, [pid 358] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] close(4 [pid 358] getdents64(4, [pid 365] <... close resumed>) = 0 [pid 365] rmdir("./13/file1" [pid 358] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] <... rmdir resumed>) = 0 [pid 365] getdents64(3, [pid 358] close(4 [pid 365] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] close(3 [pid 358] <... close resumed>) = 0 [pid 365] <... close resumed>) = 0 [pid 358] rmdir("./14/file1" [pid 365] rmdir("./13") = 0 [pid 358] <... rmdir resumed>) = 0 [pid 365] mkdir("./14", 0777 [pid 358] getdents64(3, [pid 365] <... mkdir resumed>) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] close(3) = 0 [pid 358] rmdir("./14") = 0 [pid 358] mkdir("./15", 0777) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 727] <... ioctl resumed>) = 0 [pid 364] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 725] <... ioctl resumed>) = 0 [pid 365] <... openat resumed>) = 3 [pid 364] close(3 [pid 358] <... openat resumed>) = 3 [pid 725] close(3 [pid 365] ioctl(3, LOOP_CLR_FD [pid 364] <... close resumed>) = 0 [pid 725] <... close resumed>) = 0 [pid 365] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 725] close(4 [pid 365] close(3 [pid 358] ioctl(3, LOOP_CLR_FD [pid 364] <... clone resumed>, child_tidptr=0x5555751e4750) = 730 ./strace-static-x86_64: Process 730 attached [pid 730] set_robust_list(0x5555751e4760, 24) = 0 [pid 730] chdir("./14") = 0 [pid 730] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 730] setpgid(0, 0) = 0 [pid 730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 730] write(3, "1000", 4) = 4 [pid 730] close(3) = 0 [pid 730] symlink("/dev/binderfs", "./binderfs") = 0 [pid 730] write(1, "executing program\n", 18) = 18 [pid 730] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 730] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 730] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 730] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 730] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 730] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[731]}, 88) = 731 [pid 727] close(3 [pid 730] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 730] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 731 attached [pid 731] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 731] memfd_create("syzkaller", 0 [pid 727] <... close resumed>) = 0 [pid 727] close(4 [pid 731] <... memfd_create resumed>) = 3 [pid 731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 731] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 731] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 731] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 725] <... close resumed>) = 0 [pid 365] <... close resumed>) = 0 [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 358] close(3) = 0 [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 732 ./strace-static-x86_64: Process 732 attached [pid 732] set_robust_list(0x5555751e4760, 24) = 0 [pid 725] mkdir("./file1", 0777 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 732] chdir("./15") = 0 [pid 732] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 732] setpgid(0, 0) = 0 [pid 732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 732] write(3, "1000", 4) = 4 [pid 732] close(3) = 0 [pid 732] symlink("/dev/binderfs", "./binderfs" [pid 725] <... mkdir resumed>) = 0 [pid 365] <... clone resumed>, child_tidptr=0x5555751e4750) = 733 executing program [pid 725] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 732] <... symlink resumed>) = 0 [pid 732] write(1, "executing program\n", 18) = 18 [pid 732] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 732] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 732] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 732] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[734]}, 88) = 734 [pid 732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 732] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 734 attached [pid 734] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 734] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 734] memfd_create("syzkaller", 0./strace-static-x86_64: Process 733 attached ) = 3 [pid 734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 733] set_robust_list(0x5555751e4760, 24) = 0 [pid 733] chdir("./14") = 0 [pid 733] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 733] setpgid(0, 0) = 0 [pid 733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 733] write(3, "1000", 4) = 4 [pid 733] close(3) = 0 [pid 733] symlink("/dev/binderfs", "./binderfs") = 0 [pid 733] write(1, "executing program\n", 18executing program ) = 18 [pid 733] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 733] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 734] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 733] <... rt_sigaction resumed>NULL, 8) = 0 [pid 733] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 733] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 733] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 733] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}./strace-static-x86_64: Process 735 attached => {parent_tid=[735]}, 88) = 735 [pid 735] set_robust_list(0x7fa2cc9159a0, 24 [pid 733] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 735] <... set_robust_list resumed>) = 0 [pid 733] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 735] rt_sigprocmask(SIG_SETMASK, [], [pid 733] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 735] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 735] memfd_create("syzkaller", 0 [pid 734] <... write resumed>) = 1048576 [pid 734] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 734] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 735] <... memfd_create resumed>) = 3 [pid 731] <... openat resumed>) = 4 [pid 727] <... close resumed>) = 0 [pid 727] mkdir("./file1", 0777 [pid 735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 731] ioctl(4, LOOP_SET_FD, 3 [pid 727] <... mkdir resumed>) = 0 [pid 727] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 735] <... mmap resumed>) = 0x7fa2c44f5000 [pid 731] <... ioctl resumed>) = 0 [pid 731] close(3 [pid 734] <... openat resumed>) = 4 [pid 734] ioctl(4, LOOP_SET_FD, 3 [pid 731] <... close resumed>) = 0 [pid 731] close(4 [pid 735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 734] <... ioctl resumed>) = 0 [pid 734] close(3) = 0 [pid 734] close(4) = 0 [pid 734] mkdir("./file1", 0777) = 0 [pid 734] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 735] <... write resumed>) = 1048576 [pid 735] munmap(0x7fa2c44f5000, 138412032 [pid 727] <... mount resumed>) = 0 [pid 735] <... munmap resumed>) = 0 [pid 727] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 735] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 727] <... openat resumed>) = 3 [pid 727] chdir("./file1") = 0 [pid 727] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 725] <... mount resumed>) = 0 [pid 725] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 725] chdir("./file1") = 0 [pid 725] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 735] <... openat resumed>) = 4 [pid 731] <... close resumed>) = 0 [pid 727] <... openat resumed>) = 4 [pid 735] ioctl(4, LOOP_SET_FD, 3 [pid 731] mkdir("./file1", 0777 [pid 727] ioctl(4, LOOP_CLR_FD [pid 731] <... mkdir resumed>) = 0 [pid 731] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 735] <... ioctl resumed>) = 0 [pid 735] close(3 [pid 727] <... ioctl resumed>) = 0 [pid 735] <... close resumed>) = 0 [pid 727] close(4 [pid 735] close(4 [pid 727] <... close resumed>) = 0 [pid 735] <... close resumed>) = 0 [pid 727] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 726] <... futex resumed>) = 0 [pid 735] mkdir("./file1", 0777 [pid 726] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 726] <... futex resumed>) = 0 [pid 735] <... mkdir resumed>) = 0 [pid 726] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... openat resumed>) = 4 [pid 735] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 727] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 726] <... futex resumed>) = 0 [pid 727] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 726] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... mmap resumed>) = 0x200000000000 [pid 726] <... futex resumed>) = 0 [pid 727] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... futex resumed>) = 0 [pid 725] <... openat resumed>) = 4 [pid 727] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 725] ioctl(4, LOOP_CLR_FD [pid 726] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... ioctl resumed>) = 0 [pid 727] <... futex resumed>) = 0 [pid 726] <... futex resumed>) = 1 [pid 725] close(4 [pid 726] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] <... close resumed>) = 0 [pid 725] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 724] <... futex resumed>) = 0 [pid 725] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 724] <... futex resumed>) = 0 [pid 725] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 724] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] <... openat resumed>) = 4 [pid 725] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 724] <... futex resumed>) = 0 [pid 725] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 724] <... futex resumed>) = 0 [pid 725] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 724] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] <... mmap resumed>) = 0x200000000000 [pid 725] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 724] <... futex resumed>) = 0 [pid 725] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 724] <... futex resumed>) = 0 [pid 734] <... mount resumed>) = 0 [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 727] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 727] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 727] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 734] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 726] <... futex resumed>) = 0 [pid 725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 726] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... mount resumed>) = 0 [pid 734] chdir("./file1") = 0 [pid 734] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 731] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 734] ioctl(4, LOOP_CLR_FD [pid 731] <... openat resumed>) = 3 [pid 734] <... ioctl resumed>) = 0 [pid 734] close(4) = 0 [pid 726] <... futex resumed>) = 1 [pid 726] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] chdir("./file1" [pid 734] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... chdir resumed>) = 0 [pid 734] <... futex resumed>) = 1 [pid 732] <... futex resumed>) = 0 [pid 731] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 732] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 734] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 732] <... futex resumed>) = 0 [pid 731] <... openat resumed>) = 4 [pid 732] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 734] <... openat resumed>) = 4 [pid 731] ioctl(4, LOOP_CLR_FD [pid 734] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... ioctl resumed>) = 0 [pid 734] <... futex resumed>) = 1 [pid 732] <... futex resumed>) = 0 [pid 731] close(4 [pid 732] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 734] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 732] <... futex resumed>) = 0 [pid 731] <... close resumed>) = 0 [pid 732] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 734] <... mmap resumed>) = 0x200000000000 [pid 731] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 734] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... futex resumed>) = 1 [pid 730] <... futex resumed>) = 0 [ 31.255931][ T727] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.280776][ T725] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 734] <... futex resumed>) = 1 [pid 732] <... futex resumed>) = 0 [pid 731] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 730] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 732] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... openat resumed>) = 4 [pid 730] <... futex resumed>) = 0 [pid 727] <... futex resumed>) = 0 [pid 725] capset(0x200000000000, NULL [pid 732] <... futex resumed>) = 0 [pid 725] <... capset resumed>) = -1 EFAULT (Bad address) [pid 732] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 724] <... futex resumed>) = 0 [pid 725] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 724] <... futex resumed>) = 0 [pid 725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 724] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 730] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 735] <... mount resumed>) = 0 [pid 734] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 731] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 735] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 735] <... openat resumed>) = 3 [pid 725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 735] chdir("./file1" [pid 731] <... futex resumed>) = 1 [pid 725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 730] <... futex resumed>) = 0 [pid 735] <... chdir resumed>) = 0 [pid 731] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 735] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 725] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 735] <... openat resumed>) = 4 [pid 725] sendmmsg(-1, [pid 735] ioctl(4, LOOP_CLR_FD [pid 725] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 735] <... ioctl resumed>) = 0 [pid 725] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] close(4 [pid 725] <... futex resumed>) = 1 [pid 724] <... futex resumed>) = 0 [pid 735] <... close resumed>) = 0 [pid 734] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 730] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 725] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 730] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 724] <... futex resumed>) = 0 [pid 735] <... futex resumed>) = 1 [pid 733] <... futex resumed>) = 0 [pid 731] <... mmap resumed>) = 0x200000000000 [pid 730] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 733] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 730] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 725] ioctl(-1, SIOCGIFINDEX, NULL [pid 724] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] <... openat resumed>) = 4 [pid 733] <... futex resumed>) = 0 [pid 731] <... futex resumed>) = 0 [pid 730] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 725] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 735] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 734] capset(0x200000000000, NULL [pid 733] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = 1 [pid 724] <... futex resumed>) = 0 [pid 735] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] exit_group(0 [pid 725] <... futex resumed>) = ? [pid 724] <... exit_group resumed>) = ? [pid 734] <... capset resumed>) = -1 EFAULT (Bad address) [pid 725] +++ exited with 0 +++ [pid 724] +++ exited with 0 +++ [pid 734] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] <... futex resumed>) = 0 [pid 734] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 732] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 734] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 732] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 734] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 734] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 734] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 734] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 734] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 734] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 734] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 734] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 734] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 734] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 734] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 734] <... futex resumed>) = 1 [pid 734] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 734] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] exit_group(0) = ? [pid 734] <... futex resumed>) = ? [pid 734] +++ exited with 0 +++ [pid 732] +++ exited with 0 +++ [pid 730] <... futex resumed>) = 0 [pid 730] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 727] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 727] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] <... futex resumed>) = 0 [pid 726] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 726] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... futex resumed>) = 1 [pid 727] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 727] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] <... futex resumed>) = 0 [pid 726] exit_group(0) = ? [pid 727] <... futex resumed>) = ? [pid 727] +++ exited with 0 +++ [pid 726] +++ exited with 0 +++ [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=726, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 359] restart_syscall(<... resuming interrupted clone ...> [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=724, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 360] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 31.307041][ T734] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.335733][ T731] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 360] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 360] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] <... restart_syscall resumed>) = 0 [pid 360] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./13/binderfs", [pid 359] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] unlink("./13/binderfs" [pid 359] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] <... unlink resumed>) = 0 [pid 359] <... openat resumed>) = 3 [pid 360] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] unlink("./13/binderfs") = 0 [pid 359] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 733] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=732, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 735] <... futex resumed>) = 0 [pid 733] <... futex resumed>) = 1 [pid 731] capset(0x200000000000, NULL [pid 735] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 733] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] <... capset resumed>) = -1 EFAULT (Bad address) [pid 735] <... mmap resumed>) = 0x200000000000 [pid 731] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 735] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 731] <... futex resumed>) = 1 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 735] <... futex resumed>) = 1 [pid 733] <... futex resumed>) = 0 [pid 731] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 730] <... futex resumed>) = 0 [pid 358] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 733] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... openat resumed>) = 3 [pid 733] <... futex resumed>) = 0 [pid 358] newfstatat(3, "", [pid 733] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./15/binderfs") = 0 [pid 358] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 731] <... futex resumed>) = 0 [pid 730] <... futex resumed>) = 1 [pid 731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 730] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 731] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 731] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 731] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 730] <... futex resumed>) = 0 [pid 731] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 730] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 735] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 731] <... futex resumed>) = 0 [pid 730] <... futex resumed>) = 1 [pid 731] ioctl(-1, SIOCGIFINDEX, NULL [pid 730] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 735] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 731] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 730] <... futex resumed>) = 0 [pid 735] capset(0x200000000000, NULL [pid 731] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 730] exit_group(0 [pid 731] <... futex resumed>) = ? [pid 730] <... exit_group resumed>) = ? [pid 735] <... capset resumed>) = -1 EFAULT (Bad address) [pid 731] +++ exited with 0 +++ [pid 730] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=730, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 735] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] restart_syscall(<... resuming interrupted clone ...> [pid 735] <... futex resumed>) = 1 [pid 733] <... futex resumed>) = 0 [pid 733] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 733] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 735] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 735] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 735] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 735] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 735] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 735] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 735] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 735] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 735] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 735] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 735] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 735] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 733] <... futex resumed>) = 0 [pid 735] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 733] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 733] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 735] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 735] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 735] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 733] <... futex resumed>) = 0 [pid 733] exit_group(0) = ? [pid 735] +++ exited with 0 +++ [pid 733] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=733, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 365] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 365] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./14/binderfs") = 0 [pid 365] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] <... restart_syscall resumed>) = 0 [pid 364] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... umount2 resumed>) = 0 [pid 360] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 360] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 360] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] close(4) = 0 [pid 360] rmdir("./13/file1") = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] close(3) = 0 [pid 360] rmdir("./13" [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... rmdir resumed>) = 0 [pid 364] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] mkdir("./14", 0777 [pid 364] <... openat resumed>) = 3 [pid 360] <... mkdir resumed>) = 0 [pid 364] newfstatat(3, "", [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./14/binderfs") = 0 [ 31.353057][ T735] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 364] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] <... umount2 resumed>) = 0 [pid 359] <... umount2 resumed>) = 0 [pid 358] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 358] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] close(4) = 0 [pid 358] rmdir("./15/file1") = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] close(3) = 0 [pid 358] rmdir("./15") = 0 [pid 358] mkdir("./16", 0777) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 360] <... openat resumed>) = 3 [pid 360] ioctl(3, LOOP_CLR_FD [pid 359] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 359] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] <... umount2 resumed>) = 0 [pid 365] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] getdents64(4, [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./14/file1", [pid 359] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] getdents64(4, [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 359] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] <... openat resumed>) = 4 [pid 359] close(4 [pid 365] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] <... close resumed>) = 0 [pid 365] getdents64(4, [pid 359] rmdir("./13/file1" [pid 365] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] <... rmdir resumed>) = 0 [pid 365] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] getdents64(3, [pid 365] close(4 [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] <... close resumed>) = 0 [pid 359] close(3 [pid 365] rmdir("./14/file1" [pid 359] <... close resumed>) = 0 [pid 359] rmdir("./13" [pid 365] <... rmdir resumed>) = 0 [pid 359] <... rmdir resumed>) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] mkdir("./14", 0777 [pid 365] close(3) = 0 [pid 359] <... mkdir resumed>) = 0 [pid 365] rmdir("./14" [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 365] <... rmdir resumed>) = 0 [pid 365] mkdir("./15", 0777) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 364] <... umount2 resumed>) = 0 [pid 364] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 360] close(3 [pid 365] <... openat resumed>) = 3 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... close resumed>) = 0 [pid 359] <... openat resumed>) = 3 [pid 358] <... openat resumed>) = 3 [pid 365] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 365] close(3) = 0 [pid 359] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 359] close(3) = 0 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 365] <... clone resumed>, child_tidptr=0x5555751e4750) = 750 [pid 359] <... clone resumed>, child_tidptr=0x5555751e4750) = 751 [pid 358] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 358] close(3) = 0 [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 752 [pid 364] newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 364] newfstatat(4, "", [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 364] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] close(4) = 0 [pid 364] rmdir("./14/file1") = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] close(3) = 0 [pid 364] rmdir("./14") = 0 [pid 364] mkdir("./15", 0777) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 360] <... clone resumed>, child_tidptr=0x5555751e4750) = 753 [pid 364] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 364] close(3) = 0 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 751 attached [pid 751] set_robust_list(0x5555751e4760, 24 [pid 364] <... clone resumed>, child_tidptr=0x5555751e4750) = 754 [pid 751] <... set_robust_list resumed>) = 0 [pid 751] chdir("./14") = 0 [pid 751] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 751] setpgid(0, 0) = 0 [pid 751] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 753 attached [pid 753] set_robust_list(0x5555751e4760, 24) = 0 [pid 753] chdir("./14" [pid 751] write(3, "1000", 4) = 4 [pid 751] close(3) = 0 [pid 751] symlink("/dev/binderfs", "./binderfs") = 0 [pid 753] <... chdir resumed>) = 0 [pid 753] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 753] setpgid(0, 0) = 0 [pid 753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 751] write(1, "executing program\n", 18) = 18 [pid 751] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 753] write(3, "1000", 4 [pid 751] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 753] <... write resumed>) = 4 [pid 751] <... rt_sigaction resumed>NULL, 8) = 0 [pid 753] close(3 [pid 751] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 753] <... close resumed>) = 0 [pid 753] symlink("/dev/binderfs", "./binderfs" [pid 751] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 751] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 751] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 751] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 751] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}executing program [pid 753] <... symlink resumed>) = 0 [pid 751] <... clone3 resumed> => {parent_tid=[755]}, 88) = 755 [pid 751] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 751] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 751] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 753] write(1, "executing program\n", 18) = 18 [pid 753] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 753] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 753] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 753] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 753] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 753] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[756]}, 88) = 756 [pid 753] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 752 attached ./strace-static-x86_64: Process 750 attached ./strace-static-x86_64: Process 754 attached NULL, 8) = 0 [pid 753] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 753] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 752] set_robust_list(0x5555751e4760, 24 [pid 754] set_robust_list(0x5555751e4760, 24 [pid 752] <... set_robust_list resumed>) = 0 [pid 750] set_robust_list(0x5555751e4760, 24 [pid 754] <... set_robust_list resumed>) = 0 [pid 752] chdir("./16" [pid 750] <... set_robust_list resumed>) = 0 [pid 754] chdir("./15" [pid 750] chdir("./15" [pid 752] <... chdir resumed>) = 0 [pid 754] <... chdir resumed>) = 0 [pid 752] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 754] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 750] <... chdir resumed>) = 0 [pid 754] <... prctl resumed>) = 0 [pid 752] <... prctl resumed>) = 0 [pid 750] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 754] setpgid(0, 0 [pid 752] setpgid(0, 0 [pid 754] <... setpgid resumed>) = 0 [pid 750] <... prctl resumed>) = 0 [pid 752] <... setpgid resumed>) = 0 [pid 750] setpgid(0, 0 [pid 754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 752] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 750] <... setpgid resumed>) = 0 [pid 754] <... openat resumed>) = 3 ./strace-static-x86_64: Process 755 attached [pid 750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 752] <... openat resumed>) = 3 [pid 750] <... openat resumed>) = 3 [pid 754] write(3, "1000", 4 [pid 752] write(3, "1000", 4 [pid 750] write(3, "1000", 4 [pid 754] <... write resumed>) = 4 [pid 752] <... write resumed>) = 4 [pid 750] <... write resumed>) = 4 [pid 754] close(3 [pid 752] close(3 [pid 750] close(3 [pid 754] <... close resumed>) = 0 [pid 752] <... close resumed>) = 0 [pid 750] <... close resumed>) = 0 [pid 754] symlink("/dev/binderfs", "./binderfs" [pid 752] symlink("/dev/binderfs", "./binderfs" [pid 750] symlink("/dev/binderfs", "./binderfs"executing program executing program executing program [pid 754] <... symlink resumed>) = 0 [pid 755] set_robust_list(0x7fa2cc9159a0, 24 [pid 750] <... symlink resumed>) = 0 [pid 755] <... set_robust_list resumed>) = 0 [pid 754] write(1, "executing program\n", 18 [pid 752] <... symlink resumed>) = 0 [pid 750] write(1, "executing program\n", 18 [pid 754] <... write resumed>) = 18 [pid 752] write(1, "executing program\n", 18 [pid 750] <... write resumed>) = 18 [pid 754] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 752] <... write resumed>) = 18 [pid 754] <... futex resumed>) = 0 [pid 750] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 752] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] <... futex resumed>) = 0 [pid 754] <... rt_sigaction resumed>NULL, 8) = 0 [pid 752] <... futex resumed>) = 0 [pid 750] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 754] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 752] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 750] <... rt_sigaction resumed>NULL, 8) = 0 [pid 754] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 752] <... rt_sigaction resumed>NULL, 8) = 0 [pid 750] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 752] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 754] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 752] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 754] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 752] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 754] <... mprotect resumed>) = 0 [pid 750] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 752] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 754] rt_sigprocmask(SIG_BLOCK, ~[], [pid 752] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 750] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 754] <... rt_sigprocmask resumed>[], 8) = 0 [pid 752] <... mprotect resumed>) = 0 [pid 750] <... mprotect resumed>) = 0 [pid 754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 752] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 750] rt_sigprocmask(SIG_BLOCK, ~[], [pid 752] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 750] <... rt_sigprocmask resumed>[], 8) = 0 [pid 754] <... clone3 resumed> => {parent_tid=[757]}, 88) = 757 [pid 754] rt_sigprocmask(SIG_SETMASK, [], [pid 750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 754] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 752] <... clone3 resumed> => {parent_tid=[758]}, 88) = 758 [pid 754] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 752] rt_sigprocmask(SIG_SETMASK, [], [pid 750] <... clone3 resumed> => {parent_tid=[759]}, 88) = 759 [pid 754] <... futex resumed>) = 0 [pid 752] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 750] rt_sigprocmask(SIG_SETMASK, [], [pid 754] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 752] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 752] <... futex resumed>) = 0 [pid 750] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 752] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 755] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 755] memfd_create("syzkaller", 0) = 3 [pid 755] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 ./strace-static-x86_64: Process 756 attached [pid 756] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 756] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 756] memfd_create("syzkaller", 0) = 3 [pid 756] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 ./strace-static-x86_64: Process 758 attached [pid 758] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 758] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 758] memfd_create("syzkaller", 0./strace-static-x86_64: Process 759 attached ./strace-static-x86_64: Process 757 attached ) = 3 [pid 758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 757] set_robust_list(0x7fa2cc9159a0, 24 [pid 759] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 759] rt_sigprocmask(SIG_SETMASK, [], [pid 757] <... set_robust_list resumed>) = 0 [pid 755] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 759] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 759] memfd_create("syzkaller", 0) = 3 [pid 759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 757] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 757] memfd_create("syzkaller", 0) = 3 [pid 757] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 756] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 759] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 755] <... write resumed>) = 1048576 [pid 757] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 758] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 757] <... write resumed>) = 1048576 [pid 759] <... write resumed>) = 1048576 [pid 759] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 759] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 759] ioctl(4, LOOP_SET_FD, 3 [pid 756] <... write resumed>) = 1048576 [pid 756] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 756] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 759] <... ioctl resumed>) = 0 [pid 759] close(3) = 0 [pid 759] close(4) = 0 [pid 759] mkdir("./file1", 0777) = 0 [pid 756] <... openat resumed>) = 4 [pid 756] ioctl(4, LOOP_SET_FD, 3 [pid 757] munmap(0x7fa2c44f5000, 138412032 [pid 755] munmap(0x7fa2c44f5000, 138412032 [pid 759] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 755] <... munmap resumed>) = 0 [pid 755] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 757] <... munmap resumed>) = 0 [pid 757] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 758] <... write resumed>) = 1048576 [pid 756] <... ioctl resumed>) = 0 [pid 756] close(3) = 0 [pid 756] close(4 [pid 758] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 758] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 755] <... openat resumed>) = 4 [pid 758] <... openat resumed>) = 4 [pid 756] <... close resumed>) = 0 [pid 756] mkdir("./file1", 0777 [pid 755] ioctl(4, LOOP_SET_FD, 3 [pid 756] <... mkdir resumed>) = 0 [pid 756] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 758] ioctl(4, LOOP_SET_FD, 3 [pid 755] <... ioctl resumed>) = 0 [pid 757] <... openat resumed>) = 4 [pid 755] close(3) = 0 [pid 757] ioctl(4, LOOP_SET_FD, 3 [pid 755] close(4 [pid 759] <... mount resumed>) = 0 [pid 759] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 759] chdir("./file1") = 0 [pid 759] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 758] <... ioctl resumed>) = 0 [pid 758] close(3) = 0 [pid 758] close(4 [pid 755] <... close resumed>) = 0 [pid 759] <... openat resumed>) = 4 [pid 757] <... ioctl resumed>) = 0 [pid 755] mkdir("./file1", 0777 [pid 759] ioctl(4, LOOP_CLR_FD [pid 757] close(3 [pid 759] <... ioctl resumed>) = 0 [pid 757] <... close resumed>) = 0 [pid 759] close(4 [pid 757] close(4 [pid 759] <... close resumed>) = 0 [pid 759] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 750] <... futex resumed>) = 0 [pid 759] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 750] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 750] <... futex resumed>) = 0 [pid 759] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 750] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... openat resumed>) = 4 [pid 755] <... mkdir resumed>) = 0 [pid 759] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 759] <... futex resumed>) = 1 [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 759] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 750] <... futex resumed>) = 0 [pid 759] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 750] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 759] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 759] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 759] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 759] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 759] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 759] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 750] <... futex resumed>) = 0 [pid 750] exit_group(0) = ? [pid 759] +++ exited with 0 +++ [pid 750] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=750, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 365] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 365] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./15/binderfs") = 0 [pid 365] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 757] <... close resumed>) = 0 [pid 757] mkdir("./file1", 0777) = 0 [ 31.818247][ T759] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 757] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 758] <... close resumed>) = 0 [pid 758] mkdir("./file1", 0777) = 0 [pid 758] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 756] <... mount resumed>) = 0 [pid 756] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 756] chdir("./file1") = 0 [pid 756] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 758] <... mount resumed>) = 0 [pid 756] <... openat resumed>) = 4 [pid 758] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 758] chdir("./file1") = 0 [pid 758] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 758] ioctl(4, LOOP_CLR_FD) = 0 [pid 758] close(4) = 0 [pid 758] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 752] <... futex resumed>) = 0 [pid 758] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 752] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] ioctl(4, LOOP_CLR_FD [pid 752] <... futex resumed>) = 0 [pid 758] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 756] <... ioctl resumed>) = 0 [pid 752] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] <... openat resumed>) = 4 [pid 756] close(4 [pid 758] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 752] <... futex resumed>) = 0 [pid 758] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 752] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 752] <... futex resumed>) = 0 [pid 758] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 752] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] <... mmap resumed>) = 0x200000000000 [pid 758] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 752] <... futex resumed>) = 0 [pid 758] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 752] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 752] <... futex resumed>) = 0 [pid 757] <... mount resumed>) = 0 [pid 756] <... close resumed>) = 0 [pid 752] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... umount2 resumed>) = 0 [pid 757] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 756] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 757] <... openat resumed>) = 3 [pid 756] <... futex resumed>) = 1 [pid 753] <... futex resumed>) = 0 [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 757] chdir("./file1" [pid 755] <... mount resumed>) = 0 [pid 755] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 755] chdir("./file1") = 0 [pid 755] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 756] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] ioctl(4, LOOP_CLR_FD [pid 753] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] newfstatat(AT_FDCWD, "./15/file1", [pid 757] <... chdir resumed>) = 0 [pid 755] <... ioctl resumed>) = 0 [pid 755] close(4) = 0 [pid 755] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 755] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] <... futex resumed>) = 0 [pid 751] <... futex resumed>) = 0 [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 757] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 758] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 757] <... openat resumed>) = 4 [pid 756] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 753] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 758] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 758] capset(0x200000000000, NULL [pid 756] <... openat resumed>) = 4 [pid 751] <... futex resumed>) = 1 [pid 757] ioctl(4, LOOP_CLR_FD [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 757] <... ioctl resumed>) = 0 [pid 756] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 751] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 757] close(4 [pid 756] <... futex resumed>) = 1 [pid 753] <... futex resumed>) = 0 [pid 757] <... close resumed>) = 0 [pid 756] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... openat resumed>) = 4 [pid 757] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 753] <... futex resumed>) = 0 [pid 365] newfstatat(4, "", [pid 757] <... futex resumed>) = 1 [pid 756] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 753] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 756] <... mmap resumed>) = 0x200000000000 [pid 755] <... futex resumed>) = 0 [pid 754] <... futex resumed>) = 0 [pid 365] getdents64(4, [pid 756] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 754] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = 1 [pid 753] <... futex resumed>) = 0 [pid 365] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 756] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 753] <... futex resumed>) = 0 [pid 365] getdents64(4, [pid 757] <... futex resumed>) = 0 [pid 755] <... openat resumed>) = 4 [pid 754] <... futex resumed>) = 1 [pid 757] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 755] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] <... openat resumed>) = 4 [pid 755] <... futex resumed>) = 1 [pid 751] <... futex resumed>) = 0 [pid 757] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 751] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] <... futex resumed>) = 1 [pid 755] <... mmap resumed>) = 0x200000000000 [pid 754] <... futex resumed>) = 0 [pid 751] <... futex resumed>) = 0 [pid 757] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 755] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 751] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] <... mmap resumed>) = 0x200000000000 [pid 755] <... futex resumed>) = 0 [pid 754] <... futex resumed>) = 0 [pid 751] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 31.959325][ T758] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.994649][ T756] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 758] <... capset resumed>) = -1 EFAULT (Bad address) [pid 757] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 754] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 753] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 757] <... futex resumed>) = 0 [pid 365] close(4 [pid 757] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] <... close resumed>) = 0 [pid 365] rmdir("./15/file1") = 0 [pid 365] getdents64(3, [pid 754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 751] <... futex resumed>) = 0 [pid 365] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] close(3 [pid 754] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 751] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] <... futex resumed>) = 0 [pid 755] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 754] <... futex resumed>) = 1 [pid 758] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... close resumed>) = 0 [pid 365] rmdir("./15") = 0 [pid 365] mkdir("./16", 0777) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 365] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 365] close(3) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 775 ./strace-static-x86_64: Process 775 attached [pid 775] set_robust_list(0x5555751e4760, 24) = 0 [pid 775] chdir("./16") = 0 [pid 775] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 775] setpgid(0, 0) = 0 [pid 775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 775] write(3, "1000", 4) = 4 [pid 775] close(3) = 0 [pid 775] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 775] write(1, "executing program\n", 18) = 18 [pid 775] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 775] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 775] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 775] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 775] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 775] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 775] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[776]}, 88) = 776 [pid 775] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 775] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 752] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 775] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 776 attached [pid 776] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 776] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 758] <... futex resumed>) = 0 [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 755] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 752] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 756] capset(0x200000000000, NULL [pid 755] capset(0x200000000000, NULL [pid 752] <... futex resumed>) = 0 [pid 758] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 756] <... capset resumed>) = -1 EFAULT (Bad address) [pid 755] <... capset resumed>) = -1 EFAULT (Bad address) [pid 752] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 756] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 756] <... futex resumed>) = 1 [pid 755] <... futex resumed>) = 1 [pid 751] <... futex resumed>) = 0 [pid 758] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 756] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 751] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 755] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 753] <... futex resumed>) = 0 [pid 751] <... futex resumed>) = 0 [pid 758] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 755] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 751] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 755] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 753] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 776] memfd_create("syzkaller", 0 [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 758] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 756] <... futex resumed>) = 0 [pid 755] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 753] <... futex resumed>) = 1 [pid 776] <... memfd_create resumed>) = 3 [pid 757] capset(0x200000000000, NULL [pid 753] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 776] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 758] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 757] <... capset resumed>) = -1 EFAULT (Bad address) [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 755] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 776] <... mmap resumed>) = 0x7fa2c44f5000 [pid 758] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 757] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 755] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 758] sendmmsg(-1, [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 755] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 758] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 757] <... futex resumed>) = 1 [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 755] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 754] <... futex resumed>) = 0 [pid 758] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 755] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 754] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = 1 [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 755] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 754] <... futex resumed>) = 0 [pid 752] <... futex resumed>) = 0 [pid 758] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 755] sendmmsg(-1, [pid 754] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 752] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 755] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 752] <... futex resumed>) = 0 [pid 758] ioctl(-1, SIOCGIFINDEX, NULL [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 755] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 752] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 758] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 755] <... futex resumed>) = 1 [pid 751] <... futex resumed>) = 0 [pid 758] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 755] ioctl(-1, SIOCGIFINDEX, NULL [pid 751] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = 1 [pid 756] sendmmsg(-1, [pid 755] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 752] <... futex resumed>) = 0 [pid 751] <... futex resumed>) = 0 [pid 758] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 755] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 752] exit_group(0 [pid 751] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] <... futex resumed>) = ? [pid 756] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] <... futex resumed>) = 0 [pid 752] <... exit_group resumed>) = ? [pid 751] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 758] +++ exited with 0 +++ [pid 756] <... futex resumed>) = 1 [pid 755] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] <... futex resumed>) = 0 [pid 752] +++ exited with 0 +++ [pid 751] exit_group(0 [pid 756] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] <... futex resumed>) = ? [pid 753] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 751] <... exit_group resumed>) = ? [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=752, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 755] +++ exited with 0 +++ [pid 753] <... futex resumed>) = 0 [pid 751] +++ exited with 0 +++ [pid 358] restart_syscall(<... resuming interrupted clone ...> [pid 756] ioctl(-1, SIOCGIFINDEX, NULL [pid 753] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=751, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 756] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 359] restart_syscall(<... resuming interrupted clone ...> [pid 756] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 753] <... futex resumed>) = 0 [pid 756] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] exit_group(0 [pid 756] <... futex resumed>) = ? [pid 753] <... exit_group resumed>) = ? [pid 776] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 756] +++ exited with 0 +++ [pid 753] +++ exited with 0 +++ [pid 776] <... write resumed>) = 1048576 [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=753, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 360] restart_syscall(<... resuming interrupted clone ...> [pid 776] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 776] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 776] ioctl(4, LOOP_SET_FD, 3 [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 776] <... ioctl resumed>) = 0 [pid 776] close(3) = 0 [pid 776] close(4) = 0 [pid 776] mkdir("./file1", 0777) = 0 [pid 776] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 360] <... restart_syscall resumed>) = 0 [pid 359] <... restart_syscall resumed>) = 0 [pid 358] <... restart_syscall resumed>) = 0 [pid 360] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 360] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 358] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 360] getdents64(3, [pid 359] <... openat resumed>) = 3 [pid 358] <... openat resumed>) = 3 [pid 757] sendmmsg(-1, [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 757] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 360] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] newfstatat(3, "", [pid 358] newfstatat(3, "", [pid 757] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 757] <... futex resumed>) = 1 [pid 754] <... futex resumed>) = 0 [pid 360] newfstatat(AT_FDCWD, "./14/binderfs", [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 757] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 754] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] unlink("./14/binderfs" [pid 359] getdents64(3, [pid 358] getdents64(3, [pid 757] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 754] <... futex resumed>) = 0 [pid 360] <... unlink resumed>) = 0 [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 757] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 754] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 757] <... futex resumed>) = 0 [pid 754] exit_group(0 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 754] <... exit_group resumed>) = ? [pid 359] newfstatat(AT_FDCWD, "./14/binderfs", [pid 358] newfstatat(AT_FDCWD, "./16/binderfs", [pid 359] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] unlink("./14/binderfs" [pid 358] unlink("./16/binderfs" [pid 359] <... unlink resumed>) = 0 [pid 358] <... unlink resumed>) = 0 [pid 359] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 757] +++ exited with 0 +++ [pid 754] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=754, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 364] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 364] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 364] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./15/binderfs") = 0 [pid 776] <... mount resumed>) = 0 [pid 364] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 776] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 776] chdir("./file1") = 0 [ 31.996313][ T755] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.024673][ T757] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 776] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 360] <... umount2 resumed>) = 0 [pid 360] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 360] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 360] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] close(4) = 0 [pid 360] rmdir("./14/file1") = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] close(3) = 0 [pid 360] rmdir("./14") = 0 [pid 360] mkdir("./15", 0777) = 0 [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 360] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 360] close(3) = 0 [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 780 ./strace-static-x86_64: Process 780 attached [pid 780] set_robust_list(0x5555751e4760, 24) = 0 [pid 780] chdir("./15") = 0 [pid 780] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 780] setpgid(0, 0) = 0 [pid 780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 780] write(3, "1000", 4) = 4 [pid 780] close(3) = 0 [pid 780] symlink("/dev/binderfs", "./binderfs") = 0 [pid 780] write(1, "executing program\n", 18executing program ) = 18 [pid 780] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 780] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 780] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 780] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 780] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 780] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 780] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[781]}, 88) = 781 [pid 359] <... umount2 resumed>) = 0 [pid 776] <... openat resumed>) = 4 [pid 358] <... umount2 resumed>) = 0 [pid 776] ioctl(4, LOOP_CLR_FD) = 0 [pid 776] close(4) = 0 [pid 776] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 775] <... futex resumed>) = 0 [pid 776] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 775] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... umount2 resumed>) = 0 [pid 776] <... openat resumed>) = 4 [pid 775] <... futex resumed>) = 0 [pid 776] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 775] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 776] <... futex resumed>) = 0 [pid 775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 775] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 776] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 775] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 776] <... mmap resumed>) = 0x200000000000 [pid 776] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 775] <... futex resumed>) = 0 ./strace-static-x86_64: Process 781 attached [pid 780] rt_sigprocmask(SIG_SETMASK, [], [pid 775] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./14/file1", [pid 358] newfstatat(AT_FDCWD, "./16/file1", [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 358] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 359] <... openat resumed>) = 4 [pid 358] <... openat resumed>) = 4 [pid 359] newfstatat(4, "", [pid 358] newfstatat(4, "", [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(4, [pid 358] getdents64(4, [pid 359] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] getdents64(4, [pid 358] getdents64(4, [pid 359] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] close(4 [pid 358] close(4 [pid 359] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 359] rmdir("./14/file1" [pid 358] rmdir("./16/file1" [pid 359] <... rmdir resumed>) = 0 [pid 358] <... rmdir resumed>) = 0 [pid 359] getdents64(3, [pid 358] getdents64(3, [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3 [pid 358] close(3 [pid 359] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 359] rmdir("./14" [pid 358] rmdir("./16" [pid 359] <... rmdir resumed>) = 0 [pid 358] <... rmdir resumed>) = 0 [pid 359] mkdir("./15", 0777 [pid 358] mkdir("./17", 0777 [pid 359] <... mkdir resumed>) = 0 [pid 358] <... mkdir resumed>) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 359] <... openat resumed>) = 3 [pid 358] <... openat resumed>) = 3 [pid 359] ioctl(3, LOOP_CLR_FD [pid 358] ioctl(3, LOOP_CLR_FD [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 359] close(3 [pid 358] close(3 [pid 781] set_robust_list(0x7fa2cc9159a0, 24 [pid 780] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 775] <... futex resumed>) = 0 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 775] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 364] newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 364] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] <... clone resumed>, child_tidptr=0x5555751e4750) = 782 [pid 364] getdents64(4, [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 783 [pid 364] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] close(4) = 0 [pid 364] rmdir("./15/file1") = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] close(3) = 0 [pid 364] rmdir("./15") = 0 [pid 781] <... set_robust_list resumed>) = 0 [pid 780] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 781] rt_sigprocmask(SIG_SETMASK, [], [pid 780] <... futex resumed>) = 0 [pid 781] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 780] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 781] memfd_create("syzkaller", 0 [pid 776] capset(0x200000000000, NULL [pid 364] mkdir("./16", 0777 [pid 781] <... memfd_create resumed>) = 3 [pid 776] <... capset resumed>) = -1 EFAULT (Bad address) [pid 364] <... mkdir resumed>) = 0 [pid 781] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 776] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 781] <... mmap resumed>) = 0x7fa2c44f5000 [pid 776] <... futex resumed>) = 1 [pid 775] <... futex resumed>) = 0 ./strace-static-x86_64: Process 783 attached ./strace-static-x86_64: Process 782 attached [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 775] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 775] <... futex resumed>) = 0 [pid 783] set_robust_list(0x5555751e4760, 24 [pid 782] set_robust_list(0x5555751e4760, 24 [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 775] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] <... openat resumed>) = 3 [pid 783] <... set_robust_list resumed>) = 0 [pid 782] <... set_robust_list resumed>) = 0 [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 364] ioctl(3, LOOP_CLR_FD [pid 783] chdir("./17" [pid 782] chdir("./15" [pid 364] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 783] <... chdir resumed>) = 0 [pid 782] <... chdir resumed>) = 0 [pid 364] close(3 [pid 783] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 782] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 781] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 783] <... prctl resumed>) = 0 [pid 782] <... prctl resumed>) = 0 [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 364] <... close resumed>) = 0 [pid 783] setpgid(0, 0 [pid 782] setpgid(0, 0 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 783] <... setpgid resumed>) = 0 [pid 782] <... setpgid resumed>) = 0 [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 783] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 782] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 364] <... clone resumed>, child_tidptr=0x5555751e4750) = 784 [pid 783] <... openat resumed>) = 3 [pid 782] <... openat resumed>) = 3 [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 783] write(3, "1000", 4 [pid 782] write(3, "1000", 4 [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 783] <... write resumed>) = 4 [pid 782] <... write resumed>) = 4 [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 783] close(3 [pid 782] close(3 [pid 783] <... close resumed>) = 0 [pid 782] <... close resumed>) = 0 [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 783] symlink("/dev/binderfs", "./binderfs" [pid 782] symlink("/dev/binderfs", "./binderfs" [pid 776] sendmmsg(-1, [pid 783] <... symlink resumed>) = 0 [pid 776] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 783] write(1, "executing program\n", 18 [pid 782] <... symlink resumed>) = 0 executing program [pid 776] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] <... write resumed>) = 18 executing program [pid 782] write(1, "executing program\n", 18 [pid 783] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 776] <... futex resumed>) = 1 [pid 775] <... futex resumed>) = 0 [pid 783] <... futex resumed>) = 0 [pid 782] <... write resumed>) = 18 [pid 776] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 775] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 782] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 776] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 775] <... futex resumed>) = 0 [pid 783] <... rt_sigaction resumed>NULL, 8) = 0 [pid 782] <... futex resumed>) = 0 [pid 776] ioctl(-1, SIOCGIFINDEX, NULL [pid 775] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 783] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 782] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 776] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 783] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 782] <... rt_sigaction resumed>NULL, 8) = 0 [pid 776] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 782] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 783] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 782] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 776] <... futex resumed>) = 1 [pid 775] <... futex resumed>) = 0 [pid 783] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 782] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 776] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 783] <... mprotect resumed>) = 0 [pid 782] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 775] exit_group(0 [pid 783] rt_sigprocmask(SIG_BLOCK, ~[], [pid 782] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 783] <... rt_sigprocmask resumed>[], 8) = 0 [pid 782] <... mprotect resumed>) = 0 [pid 776] <... futex resumed>) = ? [pid 775] <... exit_group resumed>) = ? [pid 783] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 782] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 776] +++ exited with 0 +++ [pid 783] <... clone3 resumed> => {parent_tid=[785]}, 88) = 785 [pid 782] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 783] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 782] <... clone3 resumed> => {parent_tid=[786]}, 88) = 786 [pid 775] +++ exited with 0 +++ [pid 783] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 782] rt_sigprocmask(SIG_SETMASK, [], [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=775, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 783] <... futex resumed>) = 0 [pid 782] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 365] restart_syscall(<... resuming interrupted clone ...> [pid 783] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 782] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 782] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 786 attached [pid 786] set_robust_list(0x7fa2cc9159a0, 24 [pid 781] <... write resumed>) = 1048576 [pid 786] <... set_robust_list resumed>) = 0 [pid 786] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 781] munmap(0x7fa2c44f5000, 138412032./strace-static-x86_64: Process 784 attached [pid 786] memfd_create("syzkaller", 0 [pid 781] <... munmap resumed>) = 0 [pid 786] <... memfd_create resumed>) = 3 [pid 786] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 781] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 785 attached [pid 784] set_robust_list(0x5555751e4760, 24 [pid 781] <... openat resumed>) = 4 [pid 781] ioctl(4, LOOP_SET_FD, 3 [pid 365] <... restart_syscall resumed>) = 0 [pid 784] <... set_robust_list resumed>) = 0 [pid 365] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 785] set_robust_list(0x7fa2cc9159a0, 24 [pid 784] chdir("./16" [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 785] <... set_robust_list resumed>) = 0 [pid 784] <... chdir resumed>) = 0 [pid 781] <... ioctl resumed>) = 0 [pid 365] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", [pid 784] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 781] close(3 [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 785] rt_sigprocmask(SIG_SETMASK, [], [pid 784] <... prctl resumed>) = 0 [pid 365] getdents64(3, [pid 785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 784] setpgid(0, 0 [pid 781] <... close resumed>) = 0 [pid 365] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./16/binderfs" [pid 784] <... setpgid resumed>) = 0 [pid 781] close(4 [pid 365] <... unlink resumed>) = 0 [pid 785] memfd_create("syzkaller", 0 [pid 781] <... close resumed>) = 0 [pid 365] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 781] mkdir("./file1", 0777 [pid 786] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 785] <... memfd_create resumed>) = 3 [pid 784] <... openat resumed>) = 3 [pid 781] <... mkdir resumed>) = 0 [pid 785] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 784] write(3, "1000", 4 [pid 781] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 785] <... mmap resumed>) = 0x7fa2c44f5000 [pid 784] <... write resumed>) = 4 [ 32.216767][ T776] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 786] <... write resumed>) = 1048576 [pid 785] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 784] close(3 [pid 786] munmap(0x7fa2c44f5000, 138412032 [pid 785] <... write resumed>) = 1048576 [pid 784] <... close resumed>) = 0 [pid 784] symlink("/dev/binderfs", "./binderfs" [pid 785] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 785] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 784] <... symlink resumed>) = 0 executing program [pid 784] write(1, "executing program\n", 18) = 18 [pid 784] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] <... munmap resumed>) = 0 [pid 784] <... futex resumed>) = 0 [pid 786] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 784] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 784] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 784] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 784] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 784] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}./strace-static-x86_64: Process 788 attached [pid 788] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 784] <... clone3 resumed> => {parent_tid=[788]}, 88) = 788 [pid 788] rt_sigprocmask(SIG_SETMASK, [], [pid 784] rt_sigprocmask(SIG_SETMASK, [], [pid 788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 784] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 788] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 784] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 788] memfd_create("syzkaller", 0) = 3 [pid 788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 788] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 788] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 788] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 786] <... openat resumed>) = 4 [pid 785] <... openat resumed>) = 4 [pid 786] ioctl(4, LOOP_SET_FD, 3 [pid 785] ioctl(4, LOOP_SET_FD, 3 [pid 786] <... ioctl resumed>) = 0 [pid 788] <... openat resumed>) = 4 [pid 786] close(3 [pid 785] <... ioctl resumed>) = 0 [pid 365] <... umount2 resumed>) = 0 [pid 788] ioctl(4, LOOP_SET_FD, 3 [pid 786] <... close resumed>) = 0 [pid 785] close(3 [pid 365] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 786] close(4 [pid 785] <... close resumed>) = 0 [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 785] close(4 [pid 365] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 365] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] close(4) = 0 [pid 365] rmdir("./16/file1") = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] close(3) = 0 [pid 365] rmdir("./16") = 0 [pid 365] mkdir("./17", 0777) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 788] <... ioctl resumed>) = 0 [pid 786] <... close resumed>) = 0 [pid 785] <... close resumed>) = 0 [pid 365] <... openat resumed>) = 3 [pid 788] close(3 [pid 786] mkdir("./file1", 0777 [pid 785] mkdir("./file1", 0777 [pid 365] ioctl(3, LOOP_CLR_FD [pid 788] <... close resumed>) = 0 [pid 786] <... mkdir resumed>) = 0 [pid 785] <... mkdir resumed>) = 0 [pid 365] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 788] close(4 [pid 786] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 785] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 365] close(3 [pid 788] <... close resumed>) = 0 [pid 365] <... close resumed>) = 0 [pid 788] mkdir("./file1", 0777 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 788] <... mkdir resumed>) = 0 [pid 788] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 365] <... clone resumed>, child_tidptr=0x5555751e4750) = 793 ./strace-static-x86_64: Process 793 attached [pid 793] set_robust_list(0x5555751e4760, 24) = 0 [pid 793] chdir("./17" [pid 781] <... mount resumed>) = 0 [pid 781] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 781] chdir("./file1") = 0 [pid 781] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 781] ioctl(4, LOOP_CLR_FD) = 0 [pid 781] close(4) = 0 [pid 793] <... chdir resumed>) = 0 [pid 781] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 780] <... futex resumed>) = 0 [pid 793] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 785] <... mount resumed>) = 0 [pid 781] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 780] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 780] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 781] <... openat resumed>) = 4 [pid 781] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 781] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 785] chdir("./file1") = 0 [pid 785] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 785] ioctl(4, LOOP_CLR_FD) = 0 [pid 785] close(4) = 0 [pid 785] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 783] <... futex resumed>) = 0 [pid 780] <... futex resumed>) = 0 [pid 783] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 780] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] <... futex resumed>) = 0 [pid 781] <... futex resumed>) = 0 [pid 783] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 780] <... futex resumed>) = 1 [pid 781] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 780] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 785] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 781] <... mmap resumed>) = 0x200000000000 [pid 785] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 781] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] <... futex resumed>) = 1 [pid 781] <... futex resumed>) = 1 [pid 783] <... futex resumed>) = 0 [pid 781] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 783] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 780] <... futex resumed>) = 0 [pid 783] <... futex resumed>) = 0 [pid 780] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 781] <... futex resumed>) = 0 [pid 780] <... futex resumed>) = 1 [pid 785] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 785] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 785] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 783] <... futex resumed>) = 0 [pid 780] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 793] <... prctl resumed>) = 0 [pid 793] setpgid(0, 0) = 0 [pid 793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 793] write(3, "1000", 4) = 4 [pid 793] close(3) = 0 [pid 793] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 793] write(1, "executing program\n", 18) = 18 [pid 793] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 793] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 793] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 793] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 793] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[800]}, 88) = 800 [pid 793] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 793] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 788] <... mount resumed>) = 0 [pid 788] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 788] chdir("./file1") = 0 [pid 788] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 788] ioctl(4, LOOP_CLR_FD) = 0 [pid 788] close(4) = 0 [pid 788] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 784] <... futex resumed>) = 0 [pid 788] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 784] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] <... openat resumed>) = 4 [pid 784] <... futex resumed>) = 0 [pid 788] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 784] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 788] <... futex resumed>) = 0 [pid 784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 788] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 784] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] <... mmap resumed>) = 0x200000000000 [pid 784] <... futex resumed>) = 0 [pid 788] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 784] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 788] <... futex resumed>) = 0 [pid 784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 800 attached [pid 784] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 781] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 783] <... futex resumed>) = 1 [pid 783] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 781] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 781] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 781] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 780] <... futex resumed>) = 0 [pid 780] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 780] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 781] <... futex resumed>) = 1 [pid 781] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 781] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 800] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 800] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 800] memfd_create("syzkaller", 0 [pid 781] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 800] <... memfd_create resumed>) = 3 [pid 781] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 800] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 781] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 781] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 781] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 781] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 781] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 800] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 788] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 786] <... mount resumed>) = 0 [pid 785] <... futex resumed>) = 0 [pid 784] <... futex resumed>) = 0 [pid 781] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 800] <... write resumed>) = 1048576 [pid 788] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 786] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 800] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 800] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 800] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 800] close(3) = 0 [pid 800] close(4 [pid 784] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 781] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 781] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 781] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 780] <... futex resumed>) = 0 [pid 780] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 780] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 781] <... futex resumed>) = 1 [pid 781] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 781] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 780] <... futex resumed>) = 0 [pid 780] exit_group(0) = ? [pid 781] <... futex resumed>) = ? [pid 781] +++ exited with 0 +++ [pid 780] +++ exited with 0 +++ [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=780, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 360] restart_syscall(<... resuming interrupted clone ...> [pid 788] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 788] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 784] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 788] <... futex resumed>) = 1 [pid 788] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 786] <... openat resumed>) = 3 [pid 785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 786] chdir("./file1" [pid 788] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 360] <... restart_syscall resumed>) = 0 [pid 786] <... chdir resumed>) = 0 [pid 360] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 360] newfstatat(3, "", [pid 786] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 788] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 360] unlink("./15/binderfs" [pid 788] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 785] capset(0x200000000000, NULL [pid 360] <... unlink resumed>) = 0 [pid 360] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 788] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 788] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 788] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 788] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 788] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 788] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 785] <... capset resumed>) = -1 EFAULT (Bad address) [pid 788] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 785] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] <... futex resumed>) = 0 [pid 783] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 783] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 788] sendmmsg(-1, [pid 785] <... futex resumed>) = 1 [pid 788] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 788] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 788] <... futex resumed>) = 1 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 784] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 788] ioctl(-1, SIOCGIFINDEX, NULL [pid 785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 788] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 788] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 788] <... futex resumed>) = 1 [pid 784] <... futex resumed>) = 0 [pid 784] exit_group(0) = ? [pid 785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 788] +++ exited with 0 +++ [pid 784] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=784, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 364] restart_syscall(<... resuming interrupted clone ...> [pid 785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 785] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 785] sendmmsg(-1, [pid 364] <... restart_syscall resumed>) = 0 [pid 785] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 785] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 785] <... futex resumed>) = 1 [pid 783] <... futex resumed>) = 0 [pid 785] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 783] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 783] <... futex resumed>) = 0 [pid 364] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 785] ioctl(-1, SIOCGIFINDEX, NULL [pid 783] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 785] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 364] <... openat resumed>) = 3 [pid 785] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] newfstatat(3, "", [pid 785] <... futex resumed>) = 1 [pid 783] <... futex resumed>) = 0 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 785] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 783] exit_group(0 [pid 364] getdents64(3, [pid 785] <... futex resumed>) = ? [pid 783] <... exit_group resumed>) = ? [pid 364] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./16/binderfs") = 0 [pid 364] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 785] +++ exited with 0 +++ [pid 783] +++ exited with 0 +++ [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=783, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 358] restart_syscall(<... resuming interrupted clone ...> [pid 800] <... close resumed>) = 0 [pid 786] <... openat resumed>) = 4 [pid 786] ioctl(4, LOOP_CLR_FD [pid 358] <... restart_syscall resumed>) = 0 [pid 358] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 800] mkdir("./file1", 0777 [pid 358] <... openat resumed>) = 3 [pid 358] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./17/binderfs", [pid 800] <... mkdir resumed>) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 800] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 358] unlink("./17/binderfs") = 0 [ 32.365024][ T781] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.376059][ T788] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.397153][ T785] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 358] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 786] <... ioctl resumed>) = 0 [pid 786] close(4 [pid 800] <... mount resumed>) = 0 [pid 800] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 800] chdir("./file1") = 0 [pid 800] openat(AT_FDCWD, "/dev/loop4", O_RDWRexecuting program [pid 364] <... umount2 resumed>) = 0 [pid 360] <... umount2 resumed>) = 0 [pid 364] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 364] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 364] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] close(4) = 0 [pid 364] rmdir("./16/file1") = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] close(3) = 0 [pid 364] rmdir("./16") = 0 [pid 364] mkdir("./17", 0777) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 364] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 364] close(3) = 0 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 806 ./strace-static-x86_64: Process 806 attached [pid 806] set_robust_list(0x5555751e4760, 24) = 0 [pid 806] chdir("./17") = 0 [pid 806] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 806] setpgid(0, 0) = 0 [pid 786] <... close resumed>) = 0 [pid 786] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 782] <... futex resumed>) = 0 [pid 786] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 806] write(3, "1000", 4) = 4 [pid 806] close(3) = 0 [pid 806] symlink("/dev/binderfs", "./binderfs") = 0 [pid 806] write(1, "executing program\n", 18) = 18 [pid 806] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 806] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 806] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 806] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[807]}, 88) = 807 [pid 806] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 806] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 807 attached [pid 807] set_robust_list(0x7fa2cc9159a0, 24 [pid 782] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 807] <... set_robust_list resumed>) = 0 [pid 807] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 807] memfd_create("syzkaller", 0) = 3 [pid 807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 358] <... umount2 resumed>) = 0 [pid 782] <... futex resumed>) = 1 [pid 786] <... futex resumed>) = 0 [pid 786] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 782] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 786] <... openat resumed>) = 4 [pid 786] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 782] <... futex resumed>) = 0 [pid 786] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 782] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] <... mmap resumed>) = 0x200000000000 [pid 782] <... futex resumed>) = 0 [pid 786] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 782] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 786] <... futex resumed>) = 0 [pid 782] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 807] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 800] <... openat resumed>) = 4 [pid 782] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 800] ioctl(4, LOOP_CLR_FD [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 800] <... ioctl resumed>) = 0 [pid 360] newfstatat(AT_FDCWD, "./15/file1", [pid 358] newfstatat(AT_FDCWD, "./17/file1", [pid 800] close(4 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 800] <... close resumed>) = 0 [pid 360] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 800] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 800] <... futex resumed>) = 1 [pid 360] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 358] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 800] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] <... openat resumed>) = 4 [pid 358] <... openat resumed>) = 4 [pid 360] newfstatat(4, "", [pid 358] newfstatat(4, "", [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(4, [pid 358] getdents64(4, [pid 360] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 360] getdents64(4, [pid 358] getdents64(4, [pid 360] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] close(4 [pid 358] close(4 [pid 360] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 360] rmdir("./15/file1" [pid 358] rmdir("./17/file1" [pid 360] <... rmdir resumed>) = 0 [pid 358] <... rmdir resumed>) = 0 [pid 360] getdents64(3, [pid 358] getdents64(3, [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] close(3 [pid 358] close(3 [pid 360] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 793] <... futex resumed>) = 0 [pid 360] rmdir("./15" [pid 358] rmdir("./17" [pid 360] <... rmdir resumed>) = 0 [pid 358] <... rmdir resumed>) = 0 [pid 360] mkdir("./16", 0777 [pid 358] mkdir("./18", 0777 [pid 793] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 782] <... futex resumed>) = 0 [pid 360] <... mkdir resumed>) = 0 [pid 358] <... mkdir resumed>) = 0 [pid 800] <... futex resumed>) = 0 [pid 793] <... futex resumed>) = 1 [pid 782] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 800] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 793] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 800] <... openat resumed>) = 4 [pid 360] <... openat resumed>) = 3 [pid 800] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... openat resumed>) = 3 [pid 800] <... futex resumed>) = 1 [pid 793] <... futex resumed>) = 0 [pid 360] ioctl(3, LOOP_CLR_FD [pid 800] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] ioctl(3, LOOP_CLR_FD [pid 800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 800] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 793] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] close(3 [pid 358] close(3 [pid 800] <... mmap resumed>) = 0x200000000000 [pid 360] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 800] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 800] <... futex resumed>) = 1 [pid 793] <... futex resumed>) = 0 [pid 800] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... clone resumed>, child_tidptr=0x5555751e4750) = 808 [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 809 [pid 800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 ./strace-static-x86_64: Process 809 attached ./strace-static-x86_64: Process 808 attached [pid 807] <... write resumed>) = 1048576 [pid 793] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 786] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 808] set_robust_list(0x5555751e4760, 24 [pid 807] munmap(0x7fa2c44f5000, 138412032 [pid 786] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 809] set_robust_list(0x5555751e4760, 24 [pid 808] <... set_robust_list resumed>) = 0 [pid 807] <... munmap resumed>) = 0 [pid 800] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 786] capset(0x200000000000, NULL [pid 808] chdir("./16" [pid 807] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 786] <... capset resumed>) = -1 EFAULT (Bad address) [pid 809] <... set_robust_list resumed>) = 0 [pid 808] <... chdir resumed>) = 0 [pid 807] <... openat resumed>) = 4 [pid 800] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 786] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 809] chdir("./18" [pid 808] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 807] ioctl(4, LOOP_SET_FD, 3 [pid 786] <... futex resumed>) = 1 [pid 782] <... futex resumed>) = 0 [pid 809] <... chdir resumed>) = 0 [pid 808] <... prctl resumed>) = 0 [pid 807] <... ioctl resumed>) = 0 [pid 800] capset(0x200000000000, NULL [pid 786] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 782] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 808] setpgid(0, 0 [pid 807] close(3 [pid 786] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 782] <... futex resumed>) = 0 [pid 808] <... setpgid resumed>) = 0 [pid 807] <... close resumed>) = 0 [pid 786] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 782] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 809] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 807] close(4 [pid 786] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 809] <... prctl resumed>) = 0 [pid 808] <... openat resumed>) = 3 [pid 807] <... close resumed>) = 0 [pid 800] <... capset resumed>) = -1 EFAULT (Bad address) [pid 786] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 809] setpgid(0, 0 [pid 808] write(3, "1000", 4 [pid 807] mkdir("./file1", 0777 [pid 800] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 809] <... setpgid resumed>) = 0 [pid 808] <... write resumed>) = 4 [pid 807] <... mkdir resumed>) = 0 [pid 786] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 808] close(3 [pid 807] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue"executing program executing program [pid 800] <... futex resumed>) = 1 [pid 793] <... futex resumed>) = 0 [pid 786] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 809] <... openat resumed>) = 3 [pid 808] <... close resumed>) = 0 [pid 793] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 809] write(3, "1000", 4 [pid 808] symlink("/dev/binderfs", "./binderfs" [pid 793] <... futex resumed>) = 0 [pid 786] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 809] <... write resumed>) = 4 [pid 808] <... symlink resumed>) = 0 [pid 793] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 786] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 809] close(3 [pid 808] write(1, "executing program\n", 18 [pid 786] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 809] <... close resumed>) = 0 [pid 808] <... write resumed>) = 18 [pid 800] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 786] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 809] symlink("/dev/binderfs", "./binderfs" [pid 808] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] sendmmsg(-1, [pid 808] <... futex resumed>) = 0 [pid 786] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 808] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 786] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 809] <... symlink resumed>) = 0 [pid 808] <... rt_sigaction resumed>NULL, 8) = 0 [pid 786] <... futex resumed>) = 1 [pid 782] <... futex resumed>) = 0 [pid 809] write(1, "executing program\n", 18 [pid 808] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 800] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 786] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 782] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 809] <... write resumed>) = 18 [pid 808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 786] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 782] <... futex resumed>) = 0 [pid 809] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 786] ioctl(-1, SIOCGIFINDEX, NULL [pid 782] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 809] <... futex resumed>) = 0 [pid 808] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 800] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 786] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 809] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 808] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 786] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 809] <... rt_sigaction resumed>NULL, 8) = 0 [pid 808] <... mprotect resumed>) = 0 [pid 800] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 786] <... futex resumed>) = 1 [pid 782] <... futex resumed>) = 0 [pid 809] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 808] rt_sigprocmask(SIG_BLOCK, ~[], [pid 786] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 782] exit_group(0 [pid 809] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 808] <... rt_sigprocmask resumed>[], 8) = 0 [pid 800] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 786] <... futex resumed>) = ? [pid 782] <... exit_group resumed>) = ? [pid 809] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 808] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 786] +++ exited with 0 +++ [pid 782] +++ exited with 0 +++ [pid 809] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 800] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=782, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 809] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 808] <... clone3 resumed> => {parent_tid=[811]}, 88) = 811 [pid 809] <... mprotect resumed>) = 0 [pid 808] rt_sigprocmask(SIG_SETMASK, [], [pid 800] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 808] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 809] rt_sigprocmask(SIG_BLOCK, ~[], [pid 808] <... futex resumed>) = 0 [pid 809] <... rt_sigprocmask resumed>[], 8) = 0 [pid 808] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 800] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 809] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}./strace-static-x86_64: Process 811 attached [pid 811] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 811] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 809] <... clone3 resumed> => {parent_tid=[812]}, 88) = 812 [pid 800] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 809] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 809] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 809] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 811] memfd_create("syzkaller", 0 [pid 800] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- ./strace-static-x86_64: Process 812 attached [pid 812] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 811] <... memfd_create resumed>) = 3 [pid 812] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 812] memfd_create("syzkaller", 0 [pid 811] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 800] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 811] <... mmap resumed>) = 0x7fa2c44f5000 [pid 800] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 812] <... memfd_create resumed>) = 3 [pid 800] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 812] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 800] <... futex resumed>) = 1 [pid 793] <... futex resumed>) = 0 [pid 800] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 800] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 800] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = 0 [pid 800] <... futex resumed>) = 1 [pid 793] exit_group(0 [pid 800] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] <... exit_group resumed>) = ? [pid 800] +++ exited with 0 +++ [pid 793] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=793, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 365] restart_syscall(<... resuming interrupted clone ...> [pid 811] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 365] <... restart_syscall resumed>) = 0 [pid 365] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] <... openat resumed>) = 3 [pid 359] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 365] newfstatat(3, "", [pid 359] <... openat resumed>) = 3 [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] newfstatat(3, "", [pid 365] getdents64(3, [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] getdents64(3, [pid 365] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] newfstatat(AT_FDCWD, "./17/binderfs", [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] newfstatat(AT_FDCWD, "./15/binderfs", [pid 365] unlink("./17/binderfs" [pid 359] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] <... unlink resumed>) = 0 [pid 359] unlink("./15/binderfs" [pid 365] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] <... unlink resumed>) = 0 [pid 359] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 807] <... mount resumed>) = 0 [pid 807] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 807] chdir("./file1") = 0 [pid 807] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 811] <... write resumed>) = 1048576 [pid 812] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 811] munmap(0x7fa2c44f5000, 138412032 [pid 812] <... write resumed>) = 1048576 [pid 811] <... munmap resumed>) = 0 [pid 811] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 812] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 812] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 365] <... umount2 resumed>) = 0 [pid 365] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 32.586713][ T786] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.613552][ T800] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 365] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 365] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] close(4) = 0 [pid 365] rmdir("./17/file1") = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] close(3) = 0 [pid 365] rmdir("./17") = 0 [pid 365] mkdir("./18", 0777) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 807] <... openat resumed>) = 4 [pid 365] <... openat resumed>) = 3 [pid 365] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 365] close(3) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 815 ./strace-static-x86_64: Process 815 attached [pid 815] set_robust_list(0x5555751e4760, 24) = 0 [pid 815] chdir("./18" [pid 811] <... openat resumed>) = 4 [pid 807] ioctl(4, LOOP_CLR_FD [pid 815] <... chdir resumed>) = 0 [pid 815] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 815] setpgid(0, 0) = 0 [pid 815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 815] write(3, "1000", 4) = 4 [pid 359] <... umount2 resumed>) = 0 [pid 815] close(3) = 0 [pid 815] symlink("/dev/binderfs", "./binderfs") = 0 [pid 807] <... ioctl resumed>) = 0 executing program [pid 815] write(1, "executing program\n", 18) = 18 [pid 815] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 811] ioctl(4, LOOP_SET_FD, 3 [pid 807] close(4 [pid 812] <... openat resumed>) = 4 [pid 359] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 815] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 815] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 815] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 815] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 815] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 807] <... close resumed>) = 0 [pid 815] <... clone3 resumed> => {parent_tid=[816]}, 88) = 816 [pid 815] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 815] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 815] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 816 attached [pid 816] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 816] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 816] memfd_create("syzkaller", 0) = 3 [pid 816] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 807] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 807] <... futex resumed>) = 1 [pid 806] <... futex resumed>) = 0 [pid 807] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 806] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] newfstatat(AT_FDCWD, "./15/file1", [pid 807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 806] <... futex resumed>) = 0 [pid 807] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 806] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 807] <... openat resumed>) = 4 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 807] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 806] <... futex resumed>) = 0 [pid 359] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 807] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 806] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 806] <... futex resumed>) = 0 [pid 807] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 806] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] <... openat resumed>) = 4 [pid 807] <... mmap resumed>) = 0x200000000000 [pid 807] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] newfstatat(4, "", [pid 807] <... futex resumed>) = 1 [pid 806] <... futex resumed>) = 0 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 807] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 806] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 359] getdents64(4, [pid 806] <... futex resumed>) = 0 [pid 806] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 816] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 812] ioctl(4, LOOP_SET_FD, 3 [pid 811] <... ioctl resumed>) = 0 [pid 359] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] close(4) = 0 [pid 359] rmdir("./15/file1") = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3) = 0 [pid 359] rmdir("./15") = 0 [pid 359] mkdir("./16", 0777) = 0 [pid 811] close(3) = 0 [pid 811] close(4 [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 807] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 807] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 807] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 807] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = 0 [pid 807] <... futex resumed>) = 1 [pid 806] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 807] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 807] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 807] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 807] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 807] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 816] <... write resumed>) = 1048576 [pid 816] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 816] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 807] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 807] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 807] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 807] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 807] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 807] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 807] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 807] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 806] <... futex resumed>) = 0 [pid 806] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 807] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 807] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 806] <... futex resumed>) = 0 [pid 806] exit_group(0) = ? [pid 807] +++ exited with 0 +++ [pid 806] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=806, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 364] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 364] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 364] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./17/binderfs") = 0 [pid 364] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 811] <... close resumed>) = 0 [pid 359] <... openat resumed>) = 3 [pid 359] ioctl(3, LOOP_CLR_FD [pid 811] mkdir("./file1", 0777) = 0 [ 32.723439][ T807] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 811] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 812] <... ioctl resumed>) = 0 [pid 812] close(3) = 0 [pid 812] close(4) = 0 [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 359] close(3 [pid 812] mkdir("./file1", 0777 [pid 359] <... close resumed>) = 0 [pid 816] <... openat resumed>) = 4 [pid 812] <... mkdir resumed>) = 0 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 812] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue"./strace-static-x86_64: Process 819 attached [pid 816] ioctl(4, LOOP_SET_FD, 3 [pid 359] <... clone resumed>, child_tidptr=0x5555751e4750) = 819 [pid 819] set_robust_list(0x5555751e4760, 24) = 0 [pid 819] chdir("./16") = 0 [pid 819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 819] setpgid(0, 0) = 0 [pid 819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 819] write(3, "1000", 4) = 4 [pid 819] close(3 [pid 811] <... mount resumed>) = 0 [pid 811] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 811] chdir("./file1") = 0 [pid 811] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 819] <... close resumed>) = 0 [pid 819] symlink("/dev/binderfs", "./binderfs") = 0 [pid 819] write(1, "executing program\n", 18) = 18 [pid 819] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 819] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 819] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 819] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 819] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}./strace-static-x86_64: Process 822 attached => {parent_tid=[822]}, 88) = 822 [pid 822] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 822] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 822] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 819] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 819] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 822] <... futex resumed>) = 0 [pid 819] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 822] memfd_create("syzkaller", 0) = 3 [pid 822] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 822] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 822] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 822] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 816] <... ioctl resumed>) = 0 [pid 811] <... openat resumed>) = 4 [pid 364] <... umount2 resumed>) = 0 [pid 811] ioctl(4, LOOP_CLR_FD) = 0 [pid 816] close(3) = 0 [pid 811] close(4 [pid 816] close(4) = 0 [pid 816] mkdir("./file1", 0777 [pid 811] <... close resumed>) = 0 [pid 811] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 811] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 816] <... mkdir resumed>) = 0 [pid 364] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 816] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 808] <... futex resumed>) = 0 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 808] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] newfstatat(AT_FDCWD, "./17/file1", [pid 811] <... futex resumed>) = 0 [pid 808] <... futex resumed>) = 1 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 812] <... mount resumed>) = 0 [pid 808] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 811] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 812] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 364] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 811] <... openat resumed>) = 4 [pid 364] <... openat resumed>) = 4 [pid 812] <... openat resumed>) = 3 [pid 811] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 812] chdir("./file1" [pid 811] <... futex resumed>) = 1 [pid 808] <... futex resumed>) = 0 [pid 812] <... chdir resumed>) = 0 [pid 808] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] newfstatat(4, "", [pid 811] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 812] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 808] <... futex resumed>) = 0 [pid 811] <... mmap resumed>) = 0x200000000000 [pid 808] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 811] <... futex resumed>) = 0 [pid 808] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 364] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] close(4) = 0 [pid 364] rmdir("./17/file1") = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] close(3) = 0 [pid 364] rmdir("./17") = 0 [pid 364] mkdir("./18", 0777) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 808] <... futex resumed>) = 0 [pid 808] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 811] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 811] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 811] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 808] <... futex resumed>) = 0 [pid 808] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 808] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 811] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 811] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 811] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 811] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 811] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 811] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 811] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 811] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 811] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 811] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 811] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 811] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 808] <... futex resumed>) = 0 [pid 808] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 808] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 811] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 808] <... futex resumed>) = 0 [pid 811] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 808] exit_group(0) = ? [pid 811] <... futex resumed>) = ? [pid 811] +++ exited with 0 +++ [pid 808] +++ exited with 0 +++ [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=808, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 360] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 360] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 360] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] unlink("./16/binderfs") = 0 [pid 360] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 822] <... openat resumed>) = 4 [pid 812] <... openat resumed>) = 4 [pid 822] ioctl(4, LOOP_SET_FD, 3 [pid 812] ioctl(4, LOOP_CLR_FD [pid 822] <... ioctl resumed>) = 0 [pid 812] <... ioctl resumed>) = 0 [pid 822] close(3 [pid 812] close(4 [pid 822] <... close resumed>) = 0 [pid 812] <... close resumed>) = 0 [pid 822] close(4 [pid 812] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 812] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 809] <... futex resumed>) = 0 [pid 809] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 812] <... futex resumed>) = 0 [pid 809] <... futex resumed>) = 1 [pid 812] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 809] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 812] <... openat resumed>) = 4 [pid 812] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 809] <... futex resumed>) = 0 [pid 812] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 809] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 812] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 809] <... futex resumed>) = 0 [pid 812] <... mmap resumed>) = 0x200000000000 [pid 809] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 812] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 812] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 809] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 809] <... futex resumed>) = 0 [ 32.912320][ T811] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 809] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 812] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 812] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 812] capset(0x200000000000, NULL [pid 816] <... mount resumed>) = 0 [pid 812] <... capset resumed>) = -1 EFAULT (Bad address) [pid 812] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 812] <... futex resumed>) = 1 [pid 809] <... futex resumed>) = 0 [pid 812] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 809] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 809] <... futex resumed>) = 0 [pid 809] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 812] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 816] <... openat resumed>) = 3 [pid 816] chdir("./file1" [pid 812] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 816] <... chdir resumed>) = 0 [pid 816] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 812] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 812] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 812] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 812] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 812] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 812] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 812] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 812] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 812] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 812] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 812] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 812] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 809] <... futex resumed>) = 0 [pid 809] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 812] <... futex resumed>) = 0 [pid 809] <... futex resumed>) = 1 [pid 812] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 809] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 812] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 812] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 809] exit_group(0 [pid 812] <... futex resumed>) = ? [pid 809] <... exit_group resumed>) = ? [pid 812] +++ exited with 0 +++ [pid 809] +++ exited with 0 +++ [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=809, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 358] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 358] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 358] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./18/binderfs") = 0 [pid 358] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 822] <... close resumed>) = 0 [pid 364] <... openat resumed>) = 3 [pid 360] <... umount2 resumed>) = 0 [pid 364] ioctl(3, LOOP_CLR_FD [pid 360] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./16/file1", [pid 822] mkdir("./file1", 0777 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 360] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(4, [pid 822] <... mkdir resumed>) = 0 [pid 360] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 822] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 360] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] close(4) = 0 [pid 360] rmdir("./16/file1") = 0 [pid 360] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] close(3) = 0 [pid 360] rmdir("./16") = 0 [pid 360] mkdir("./17", 0777) = 0 [ 32.960092][ T812] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 358] <... umount2 resumed>) = 0 [pid 358] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 358] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] close(4) = 0 [pid 358] rmdir("./18/file1") = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] close(3) = 0 [pid 358] rmdir("./18") = 0 [pid 358] mkdir("./19", 0777) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 816] <... openat resumed>) = 4 [pid 364] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 816] ioctl(4, LOOP_CLR_FD [pid 364] close(3 [pid 360] <... openat resumed>) = 3 [pid 816] <... ioctl resumed>) = 0 [pid 364] <... close resumed>) = 0 [pid 360] ioctl(3, LOOP_CLR_FD [pid 816] close(4 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 816] <... close resumed>) = 0 [pid 360] close(3 [pid 816] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... clone resumed>, child_tidptr=0x5555751e4750) = 829 [pid 360] <... close resumed>) = 0 [pid 816] <... futex resumed>) = 1 [pid 815] <... futex resumed>) = 0 [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 358] <... openat resumed>) = 3 [pid 816] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] <... futex resumed>) = 0 [pid 360] <... clone resumed>, child_tidptr=0x5555751e4750) = 830 [pid 358] ioctl(3, LOOP_CLR_FD [pid 816] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 815] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 829 attached [pid 816] <... openat resumed>) = 4 [pid 829] set_robust_list(0x5555751e4760, 24 [pid 816] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] close(3 [pid 829] <... set_robust_list resumed>) = 0 [pid 816] <... futex resumed>) = 1 [pid 815] <... futex resumed>) = 0 [pid 816] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... close resumed>) = 0 [pid 829] chdir("./18" [pid 816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] <... futex resumed>) = 0 [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 816] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 815] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 816] <... mmap resumed>) = 0x200000000000 [pid 816] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 816] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 833 [pid 815] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] <... chdir resumed>) = 0 [pid 816] <... futex resumed>) = 0 [pid 815] <... futex resumed>) = 1 [pid 829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 822] <... mount resumed>) = 0 [pid 815] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 822] chdir("./file1") = 0 [pid 822] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 822] ioctl(4, LOOP_CLR_FD) = 0 [pid 822] close(4) = 0 [pid 822] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 819] <... futex resumed>) = 0 [pid 822] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 819] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 819] <... futex resumed>) = 0 [pid 822] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 819] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... openat resumed>) = 4 [pid 822] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 819] <... futex resumed>) = 0 [pid 822] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 819] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 819] <... futex resumed>) = 0 [pid 822] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 819] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... mmap resumed>) = 0x200000000000 [pid 822] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 819] <... futex resumed>) = 0 [pid 822] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 819] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 819] <... futex resumed>) = 0 ./strace-static-x86_64: Process 833 attached [pid 829] setpgid(0, 0 [pid 819] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 829] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 830 attached [pid 830] set_robust_list(0x5555751e4760, 24 [pid 829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 830] <... set_robust_list resumed>) = 0 [pid 830] chdir("./17" [pid 829] <... openat resumed>) = 3 [pid 830] <... chdir resumed>) = 0 [pid 829] write(3, "1000", 4 [pid 830] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 829] <... write resumed>) = 4 [pid 830] <... prctl resumed>) = 0 [pid 830] setpgid(0, 0 [pid 829] close(3 [pid 830] <... setpgid resumed>) = 0 [pid 830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 830] write(3, "1000", 4) = 4 [pid 830] close(3) = 0 [pid 830] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 830] write(1, "executing program\n", 18) = 18 [pid 830] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 830] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 830] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 830] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 830] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 830] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 830] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[834]}, 88) = 834 [pid 830] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 830] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 830] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 829] <... close resumed>) = 0 [pid 833] set_robust_list(0x5555751e4760, 24 [pid 829] symlink("/dev/binderfs", "./binderfs" [pid 833] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 834 attached [pid 834] set_robust_list(0x7fa2cc9159a0, 24 [pid 829] <... symlink resumed>) = 0 executing program [pid 833] chdir("./19" [pid 829] write(1, "executing program\n", 18 [pid 833] <... chdir resumed>) = 0 [pid 829] <... write resumed>) = 18 [pid 833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 829] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] setpgid(0, 0 [pid 829] <... futex resumed>) = 0 [pid 833] <... setpgid resumed>) = 0 [pid 829] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 829] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 833] <... openat resumed>) = 3 [pid 833] write(3, "1000", 4 [pid 829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 833] <... write resumed>) = 4 [pid 829] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 833] close(3 [pid 829] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 833] <... close resumed>) = 0 [pid 829] <... mprotect resumed>) = 0 [pid 833] symlink("/dev/binderfs", "./binderfs" [pid 829] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 829] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 834] <... set_robust_list resumed>) = 0 [pid 833] <... symlink resumed>) = 0 [pid 829] <... clone3 resumed> => {parent_tid=[835]}, 88) = 835 [pid 829] rt_sigprocmask(SIG_SETMASK, [], [pid 833] write(1, "executing program\n", 18 [pid 829] <... rt_sigprocmask resumed>NULL, 8) = 0 executing program [pid 833] <... write resumed>) = 18 [pid 829] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] <... futex resumed>) = 0 [pid 833] <... futex resumed>) = 0 [pid 833] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 829] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 833] <... rt_sigaction resumed>NULL, 8) = 0 [pid 833] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 834] rt_sigprocmask(SIG_SETMASK, [], [pid 833] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 833] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 834] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 834] memfd_create("syzkaller", 0 [pid 833] <... mprotect resumed>) = 0 [pid 834] <... memfd_create resumed>) = 3 [pid 833] rt_sigprocmask(SIG_BLOCK, ~[], [pid 834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 833] <... rt_sigprocmask resumed>[], 8) = 0 [pid 834] <... mmap resumed>) = 0x7fa2c44f5000 [pid 833] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}./strace-static-x86_64: Process 835 attached => {parent_tid=[836]}, 88) = 836 [pid 833] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 833] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 833] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 835] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 835] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 835] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 836 attached [pid 836] set_robust_list(0x7fa2cc9159a0, 24 [pid 816] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 836] <... set_robust_list resumed>) = 0 [pid 836] rt_sigprocmask(SIG_SETMASK, [], [pid 822] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 816] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 816] capset(0x200000000000, NULL [pid 836] memfd_create("syzkaller", 0 [pid 835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 816] <... capset resumed>) = -1 EFAULT (Bad address) [pid 836] <... memfd_create resumed>) = 3 [pid 835] <... mmap resumed>) = 0x7fa2c44f5000 [pid 816] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 816] <... futex resumed>) = 1 [pid 815] <... futex resumed>) = 0 [pid 836] <... mmap resumed>) = 0x7fa2c44f5000 [pid 822] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 816] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 815] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 816] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 816] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 816] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 816] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 816] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 816] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 816] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 822] capset(0x200000000000, NULL [pid 816] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 816] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 816] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 816] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 816] sendmmsg(-1, [pid 822] <... capset resumed>) = -1 EFAULT (Bad address) [pid 816] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 822] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = 1 [pid 819] <... futex resumed>) = 0 [pid 816] <... futex resumed>) = 1 [pid 815] <... futex resumed>) = 0 [pid 819] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 815] <... futex resumed>) = 0 [pid 816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 816] ioctl(-1, SIOCGIFINDEX, NULL [pid 819] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 816] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 822] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 816] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 815] <... futex resumed>) = 0 [pid 816] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 815] exit_group(0 [pid 816] <... futex resumed>) = ? [pid 815] <... exit_group resumed>) = ? [pid 816] +++ exited with 0 +++ [pid 815] +++ exited with 0 +++ [pid 822] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=815, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 365] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 365] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", [pid 822] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./18/binderfs") = 0 [pid 365] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 834] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 822] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 822] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 822] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 822] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 822] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 822] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 822] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 836] <... write resumed>) = 1048576 [pid 822] sendmmsg(-1, [pid 835] <... write resumed>) = 1048576 [pid 835] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 835] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 836] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 836] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 822] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 822] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... futex resumed>) = 1 [pid 822] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 822] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] exit_group(0) = ? [pid 822] <... futex resumed>) = ? [pid 834] <... write resumed>) = 1048576 [pid 834] munmap(0x7fa2c44f5000, 138412032 [pid 822] +++ exited with 0 +++ [pid 819] +++ exited with 0 +++ [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=819, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 359] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 834] <... munmap resumed>) = 0 [pid 834] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 359] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 359] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] unlink("./16/binderfs") = 0 [ 33.080739][ T816] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.085289][ T822] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 359] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] <... umount2 resumed>) = 0 [pid 365] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 365] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] close(4) = 0 [pid 365] rmdir("./18/file1") = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] close(3) = 0 [pid 835] <... openat resumed>) = 4 [pid 365] rmdir("./18" [pid 835] ioctl(4, LOOP_SET_FD, 3 [pid 365] <... rmdir resumed>) = 0 [pid 836] <... openat resumed>) = 4 [pid 835] <... ioctl resumed>) = 0 [pid 365] mkdir("./19", 0777 [pid 836] ioctl(4, LOOP_SET_FD, 3 [pid 835] close(3 [pid 365] <... mkdir resumed>) = 0 [pid 835] <... close resumed>) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 835] close(4 [pid 834] <... openat resumed>) = 4 [pid 834] ioctl(4, LOOP_SET_FD, 3 [pid 359] <... umount2 resumed>) = 0 [pid 836] <... ioctl resumed>) = 0 [pid 835] <... close resumed>) = 0 [pid 365] <... openat resumed>) = 3 [pid 359] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 836] close(3 [pid 835] mkdir("./file1", 0777 [pid 834] <... ioctl resumed>) = 0 [pid 365] ioctl(3, LOOP_CLR_FD [pid 836] <... close resumed>) = 0 [pid 835] <... mkdir resumed>) = 0 [pid 834] close(3 [pid 836] close(4 [pid 835] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 834] <... close resumed>) = 0 [pid 834] close(4 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 359] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] close(4) = 0 [pid 359] rmdir("./16/file1") = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3) = 0 [pid 359] rmdir("./16") = 0 [pid 359] mkdir("./17", 0777) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 365] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 365] close(3 [pid 835] <... mount resumed>) = 0 [pid 835] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 835] chdir("./file1") = 0 [pid 835] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 836] <... close resumed>) = 0 [pid 836] mkdir("./file1", 0777) = 0 [pid 836] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 835] <... openat resumed>) = 4 [pid 834] <... close resumed>) = 0 [pid 365] <... close resumed>) = 0 [pid 359] <... openat resumed>) = 3 [pid 835] ioctl(4, LOOP_CLR_FD [pid 834] mkdir("./file1", 0777 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 359] ioctl(3, LOOP_CLR_FD [pid 834] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 842 attached [pid 834] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 365] <... clone resumed>, child_tidptr=0x5555751e4750) = 842 [pid 842] set_robust_list(0x5555751e4760, 24) = 0 [pid 842] chdir("./19") = 0 [pid 842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 842] setpgid(0, 0) = 0 [pid 842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 842] write(3, "1000", 4) = 4 [pid 842] close(3) = 0 [pid 842] symlink("/dev/binderfs", "./binderfs") = 0 [pid 842] write(1, "executing program\n", 18executing program ) = 18 [pid 842] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 842] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 842] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 842] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 842] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 842] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 842] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}./strace-static-x86_64: Process 843 attached => {parent_tid=[843]}, 88) = 843 [pid 843] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 843] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 843] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 842] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 842] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 843] <... futex resumed>) = 0 [pid 843] memfd_create("syzkaller", 0 [pid 842] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 843] <... memfd_create resumed>) = 3 [pid 843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 835] <... ioctl resumed>) = 0 [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 835] close(4 [pid 359] close(3 [pid 835] <... close resumed>) = 0 [pid 359] <... close resumed>) = 0 [pid 835] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 829] <... futex resumed>) = 0 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 835] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 829] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 829] <... futex resumed>) = 0 [pid 835] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 829] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 835] <... openat resumed>) = 4 [pid 835] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 829] <... futex resumed>) = 0 [pid 359] <... clone resumed>, child_tidptr=0x5555751e4750) = 844 [pid 835] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 829] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 829] <... futex resumed>) = 0 [pid 835] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 829] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 835] <... mmap resumed>) = 0x200000000000 [pid 835] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 829] <... futex resumed>) = 0 [pid 835] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 829] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 829] <... futex resumed>) = 0 [pid 829] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 844 attached [pid 844] set_robust_list(0x5555751e4760, 24) = 0 [pid 843] <... write resumed>) = 1048576 [pid 844] chdir("./17" [pid 843] munmap(0x7fa2c44f5000, 138412032 [pid 834] <... mount resumed>) = 0 [pid 844] <... chdir resumed>) = 0 [pid 843] <... munmap resumed>) = 0 [pid 834] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 843] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 834] <... openat resumed>) = 3 [pid 844] setpgid(0, 0 [pid 843] <... openat resumed>) = 4 [pid 844] <... setpgid resumed>) = 0 [pid 834] chdir("./file1" [pid 844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 843] ioctl(4, LOOP_SET_FD, 3 [pid 834] <... chdir resumed>) = 0 [pid 844] <... openat resumed>) = 3 [pid 844] write(3, "1000", 4 [pid 834] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 844] <... write resumed>) = 4 [pid 844] close(3) = 0 [pid 844] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 844] write(1, "executing program\n", 18) = 18 [pid 844] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 844] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 844] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 843] <... ioctl resumed>) = 0 [pid 844] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 834] <... openat resumed>) = 4 [pid 844] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 843] close(3 [pid 834] ioctl(4, LOOP_CLR_FD [pid 844] <... mprotect resumed>) = 0 [pid 843] <... close resumed>) = 0 [pid 834] <... ioctl resumed>) = 0 [pid 844] rt_sigprocmask(SIG_BLOCK, ~[], [pid 843] close(4 [pid 834] close(4 [pid 844] <... rt_sigprocmask resumed>[], 8) = 0 [pid 843] <... close resumed>) = 0 [pid 834] <... close resumed>) = 0 [pid 844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 843] mkdir("./file1", 0777 [pid 834] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 830] <... futex resumed>) = 0 [pid 843] <... mkdir resumed>) = 0 [pid 844] <... clone3 resumed> => {parent_tid=[849]}, 88) = 849 [pid 834] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [ 33.337827][ T835] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 830] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] <... mount resumed>) = 0 [pid 830] <... futex resumed>) = 0 [pid 830] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 834] <... openat resumed>) = 4 [pid 844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 844] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 844] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 834] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 830] <... futex resumed>) = 0 [pid 834] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 830] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 834] <... mmap resumed>) = 0x200000000000 [pid 830] <... futex resumed>) = 0 [pid 834] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 834] <... futex resumed>) = 0 [pid 830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 830] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 843] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 830] <... futex resumed>) = 0 [pid 836] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 836] chdir("./file1" [pid 830] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 836] <... chdir resumed>) = 0 [pid 836] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 835] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- ./strace-static-x86_64: Process 849 attached [pid 849] set_robust_list(0x7fa2cc9159a0, 24 [pid 835] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 849] <... set_robust_list resumed>) = 0 [pid 849] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 849] memfd_create("syzkaller", 0 [pid 835] capset(0x200000000000, NULL [pid 849] <... memfd_create resumed>) = 3 [pid 835] <... capset resumed>) = -1 EFAULT (Bad address) [pid 849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 835] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 834] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 849] <... mmap resumed>) = 0x7fa2c44f5000 [pid 835] <... futex resumed>) = 1 [pid 829] <... futex resumed>) = 0 [pid 849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 829] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 829] <... futex resumed>) = 0 [pid 835] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 829] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 835] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 835] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 835] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 835] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 835] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 835] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 835] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 835] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 835] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 835] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 835] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] <... futex resumed>) = 0 [pid 835] <... futex resumed>) = 1 [pid 829] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 829] <... futex resumed>) = 0 [pid 835] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 835] <... futex resumed>) = 0 [pid 835] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 829] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 829] exit_group(0 [pid 835] <... futex resumed>) = ? [pid 829] <... exit_group resumed>) = ? [pid 835] +++ exited with 0 +++ [pid 829] +++ exited with 0 +++ [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=829, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 364] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 364] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 364] newfstatat(3, "", [pid 834] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 364] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] unlink("./18/binderfs" [pid 834] capset(0x200000000000, NULL [pid 364] <... unlink resumed>) = 0 [pid 364] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 834] <... capset resumed>) = -1 EFAULT (Bad address) [pid 834] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 830] <... futex resumed>) = 0 [pid 849] <... write resumed>) = 1048576 [pid 830] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 849] munmap(0x7fa2c44f5000, 138412032 [pid 834] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 830] <... futex resumed>) = 0 [pid 830] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 834] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 849] <... munmap resumed>) = 0 [pid 834] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 849] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 834] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 834] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 834] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 834] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 834] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 834] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 834] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 834] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 834] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 834] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 830] <... futex resumed>) = 0 [pid 834] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 830] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 830] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 834] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 834] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 830] <... futex resumed>) = 0 [pid 834] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 830] exit_group(0) = ? [pid 834] <... futex resumed>) = ? [pid 834] +++ exited with 0 +++ [pid 830] +++ exited with 0 +++ [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=830, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 360] restart_syscall(<... resuming interrupted clone ...> [pid 836] <... openat resumed>) = 4 [pid 364] <... umount2 resumed>) = 0 [pid 836] ioctl(4, LOOP_CLR_FD) = 0 [pid 836] close(4) = 0 [pid 364] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... restart_syscall resumed>) = 0 [pid 836] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 836] <... futex resumed>) = 1 [pid 833] <... futex resumed>) = 0 [pid 364] newfstatat(AT_FDCWD, "./18/file1", [pid 836] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 833] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 833] <... futex resumed>) = 0 [pid 364] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 836] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 833] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 836] <... openat resumed>) = 4 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 836] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 836] <... futex resumed>) = 1 [pid 833] <... futex resumed>) = 0 [pid 360] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 836] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 833] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... openat resumed>) = 4 [pid 836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 360] <... openat resumed>) = 3 [pid 836] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 833] <... futex resumed>) = 0 [pid 364] newfstatat(4, "", [pid 836] <... mmap resumed>) = 0x200000000000 [pid 833] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] newfstatat(3, "", [pid 836] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 836] <... futex resumed>) = 0 [ 33.374229][ T834] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 833] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, [pid 833] <... futex resumed>) = 0 [pid 364] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 360] getdents64(3, [pid 833] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] getdents64(4, [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] close(4 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] <... close resumed>) = 0 [pid 360] newfstatat(AT_FDCWD, "./17/binderfs", [pid 364] rmdir("./18/file1" [pid 360] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] <... rmdir resumed>) = 0 [pid 360] unlink("./17/binderfs" [pid 364] getdents64(3, [pid 360] <... unlink resumed>) = 0 [pid 364] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] close(3) = 0 [pid 364] rmdir("./18") = 0 [pid 364] mkdir("./19", 0777) = 0 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 836] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 836] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 836] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 836] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 849] <... openat resumed>) = 4 [pid 833] <... futex resumed>) = 0 [pid 833] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 833] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 849] ioctl(4, LOOP_SET_FD, 3 [pid 836] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 836] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 836] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 836] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 836] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 836] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 836] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 836] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 836] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 836] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 836] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 836] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 836] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 833] <... futex resumed>) = 0 [pid 833] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 833] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 836] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 836] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 833] <... futex resumed>) = 0 [pid 836] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 833] exit_group(0) = ? [pid 836] <... futex resumed>) = ? [pid 836] +++ exited with 0 +++ [pid 833] +++ exited with 0 +++ [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=833, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 358] restart_syscall(<... resuming interrupted clone ...> [pid 843] <... mount resumed>) = 0 [pid 843] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 843] chdir("./file1") = 0 [pid 843] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 358] <... restart_syscall resumed>) = 0 [pid 358] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 358] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./19/binderfs") = 0 [pid 358] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] <... openat resumed>) = 3 [pid 364] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 33.425825][ T836] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 364] close(3) = 0 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555751e4750) = 853 ./strace-static-x86_64: Process 853 attached [pid 849] <... ioctl resumed>) = 0 [pid 849] close(3) = 0 [pid 853] set_robust_list(0x5555751e4760, 24 [pid 849] close(4 [pid 853] <... set_robust_list resumed>) = 0 [pid 853] chdir("./19") = 0 [pid 853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 853] setpgid(0, 0) = 0 [pid 853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 853] write(3, "1000", 4) = 4 [pid 853] close(3) = 0 [pid 853] symlink("/dev/binderfs", "./binderfs") = 0 [pid 853] write(1, "executing program\n", 18executing program ) = 18 [pid 853] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 853] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 853] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 853] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 853] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 853] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}./strace-static-x86_64: Process 855 attached => {parent_tid=[855]}, 88) = 855 [pid 855] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 855] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 855] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 853] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 853] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 855] <... futex resumed>) = 0 [pid 855] memfd_create("syzkaller", 0 [pid 853] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 855] <... memfd_create resumed>) = 3 [pid 855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 855] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 855] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 843] <... openat resumed>) = 4 [pid 360] <... umount2 resumed>) = 0 [pid 843] ioctl(4, LOOP_CLR_FD) = 0 [pid 843] close(4) = 0 [pid 843] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 842] <... futex resumed>) = 0 [pid 843] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 842] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 843] <... openat resumed>) = 4 [pid 842] <... futex resumed>) = 0 [pid 843] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 842] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 843] <... futex resumed>) = 0 [pid 842] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 843] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 842] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 843] <... mmap resumed>) = 0x200000000000 [pid 842] <... futex resumed>) = 0 [pid 843] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 842] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 843] <... futex resumed>) = 0 [pid 842] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 849] <... close resumed>) = 0 [pid 842] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] <... umount2 resumed>) = 0 [pid 849] mkdir("./file1", 0777 [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 849] <... mkdir resumed>) = 0 [pid 842] <... futex resumed>) = 0 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 849] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 842] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] newfstatat(AT_FDCWD, "./17/file1", [pid 358] newfstatat(AT_FDCWD, "./19/file1", [pid 855] <... openat resumed>) = 4 [pid 855] ioctl(4, LOOP_SET_FD, 3 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 358] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 358] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 855] <... ioctl resumed>) = 0 [pid 855] close(3) = 0 [pid 855] close(4) = 0 [pid 855] mkdir("./file1", 0777 [pid 358] <... openat resumed>) = 4 [pid 360] <... openat resumed>) = 4 [pid 358] newfstatat(4, "", [pid 360] newfstatat(4, "", [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(4, [pid 360] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 360] getdents64(4, [pid 358] getdents64(4, [pid 360] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 360] close(4 [pid 358] close(4 [pid 360] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 360] rmdir("./17/file1" [pid 358] rmdir("./19/file1" [pid 360] <... rmdir resumed>) = 0 [pid 358] <... rmdir resumed>) = 0 [pid 360] getdents64(3, [pid 358] getdents64(3, [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 360] close(3 [pid 358] close(3 [pid 360] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 358] rmdir("./19" [pid 360] rmdir("./17" [pid 358] <... rmdir resumed>) = 0 [pid 360] <... rmdir resumed>) = 0 [pid 360] mkdir("./18", 0777 [pid 358] mkdir("./20", 0777 [pid 855] <... mkdir resumed>) = 0 [pid 360] <... mkdir resumed>) = 0 [pid 855] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 358] <... mkdir resumed>) = 0 [pid 360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 843] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 843] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 843] capset(0x200000000000, NULL [pid 849] <... mount resumed>) = 0 [pid 849] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 843] <... capset resumed>) = -1 EFAULT (Bad address) [pid 843] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 849] <... openat resumed>) = 3 [pid 842] <... futex resumed>) = 0 [pid 842] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 842] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 843] <... futex resumed>) = 1 [pid 843] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 849] chdir("./file1" [pid 843] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 843] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 849] <... chdir resumed>) = 0 [pid 849] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 843] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 843] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 843] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 843] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 843] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 843] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 843] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 843] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 843] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 843] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 842] <... futex resumed>) = 0 [pid 842] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 842] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 843] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 843] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 842] <... futex resumed>) = 0 [pid 842] exit_group(0 [pid 843] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 842] <... exit_group resumed>) = ? [pid 843] <... futex resumed>) = ? [pid 843] +++ exited with 0 +++ [pid 842] +++ exited with 0 +++ [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=842, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 365] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 365] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 365] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 365] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] unlink("./19/binderfs" [pid 849] <... openat resumed>) = 4 [pid 365] <... unlink resumed>) = 0 [pid 360] <... openat resumed>) = 3 [pid 358] <... openat resumed>) = 3 [pid 849] ioctl(4, LOOP_CLR_FD [pid 365] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] ioctl(3, LOOP_CLR_FD [pid 358] ioctl(3, LOOP_CLR_FD [pid 849] <... ioctl resumed>) = 0 [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 33.521967][ T843] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 849] close(4 [pid 360] close(3 [pid 358] close(3 [pid 849] <... close resumed>) = 0 [pid 360] <... close resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 849] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 849] <... futex resumed>) = 1 [pid 844] <... futex resumed>) = 0 [pid 849] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] <... clone resumed>, child_tidptr=0x5555751e4750) = 860 [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 862 [pid 849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 844] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 849] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 844] <... futex resumed>) = 0 [pid 849] <... openat resumed>) = 4 [pid 849] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 844] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 849] <... futex resumed>) = 0 [pid 844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 849] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 844] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 849] <... futex resumed>) = 0 [pid 844] <... futex resumed>) = 1 [pid 849] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 844] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 849] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 849] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 844] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 849] <... futex resumed>) = 0 [pid 844] <... futex resumed>) = 1 [pid 844] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 855] <... mount resumed>) = 0 [pid 855] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 855] chdir("./file1") = 0 [pid 855] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 855] ioctl(4, LOOP_CLR_FD) = 0 [pid 855] close(4) = 0 [pid 855] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 853] <... futex resumed>) = 0 [pid 853] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 853] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 855] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 853] <... futex resumed>) = 0 [pid 853] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 853] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 855] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 853] <... futex resumed>) = 0 [pid 853] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 853] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 862 attached ./strace-static-x86_64: Process 860 attached [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 855] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 862] set_robust_list(0x5555751e4760, 24) = 0 [pid 860] set_robust_list(0x5555751e4760, 24 [pid 855] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 849] capset(0x200000000000, NULL [pid 862] chdir("./20" [pid 860] <... set_robust_list resumed>) = 0 [pid 855] capset(0x200000000000, NULL [pid 849] <... capset resumed>) = -1 EFAULT (Bad address) [pid 862] <... chdir resumed>) = 0 [pid 862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 862] setpgid(0, 0) = 0 executing program [pid 860] chdir("./18" [pid 862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 862] write(3, "1000", 4) = 4 [pid 862] close(3) = 0 [pid 862] symlink("/dev/binderfs", "./binderfs") = 0 [pid 862] write(1, "executing program\n", 18) = 18 [pid 862] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 862] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 862] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 862] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 862] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 862] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[864]}, 88) = 864 [pid 862] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 862] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 862] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 365] <... umount2 resumed>) = 0 [pid 860] <... chdir resumed>) = 0 [pid 860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 849] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] setpgid(0, 0 [pid 849] <... futex resumed>) = 1 [pid 844] <... futex resumed>) = 0 [pid 844] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 844] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 860] <... setpgid resumed>) = 0 [pid 860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 855] <... capset resumed>) = -1 EFAULT (Bad address) [pid 860] <... openat resumed>) = 3 [pid 855] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 365] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 860] write(3, "1000", 4 [pid 855] <... futex resumed>) = 1 [pid 853] <... futex resumed>) = 0 [pid 853] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 853] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 860] <... write resumed>) = 4 [pid 855] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 860] close(3 [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 860] <... close resumed>) = 0 [pid 855] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 860] symlink("/dev/binderfs", "./binderfs" [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 860] <... symlink resumed>) = 0 [pid 855] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 860] write(1, "executing program\n", 18 [pid 855] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 860] <... write resumed>) = 18 [pid 860] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 365] newfstatat(AT_FDCWD, "./19/file1", [pid 860] <... futex resumed>) = 0 [pid 860] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 860] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 855] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 860] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 860] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 855] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 860] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 860] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 855] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 860] <... mprotect resumed>) = 0 [pid 860] rt_sigprocmask(SIG_BLOCK, ~[], [pid 855] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 864 attached [pid 860] <... rt_sigprocmask resumed>[], 8) = 0 [pid 860] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 860] <... clone3 resumed> => {parent_tid=[865]}, 88) = 865 [pid 855] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 860] rt_sigprocmask(SIG_SETMASK, [], [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 365] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 860] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 855] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 849] sendmmsg(-1, [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 860] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 849] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 855] sendmmsg(-1, [pid 365] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 864] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 864] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 865 attached [pid 860] <... futex resumed>) = 0 [pid 855] <... sendmmsg resumed>[{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 849] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... openat resumed>) = 4 [pid 860] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 844] <... futex resumed>) = 0 [pid 849] <... futex resumed>) = 1 [pid 855] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 844] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] newfstatat(4, "", [pid 849] ioctl(-1, SIOCGIFINDEX, NULL [pid 844] <... futex resumed>) = 0 [pid 855] <... futex resumed>) = 1 [pid 853] <... futex resumed>) = 0 [pid 849] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 844] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 855] ioctl(-1, SIOCGIFINDEX, NULL [pid 853] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 849] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 855] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 853] <... futex resumed>) = 0 [pid 849] <... futex resumed>) = 0 [pid 365] getdents64(4, [pid 855] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 853] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 844] exit_group(0 [pid 855] <... futex resumed>) = 0 [pid 853] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 844] <... exit_group resumed>) = ? [pid 853] exit_group(0) = ? [pid 864] memfd_create("syzkaller", 0 [pid 365] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 864] <... memfd_create resumed>) = 3 [pid 864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 855] +++ exited with 0 +++ [pid 853] +++ exited with 0 +++ [pid 365] getdents64(4, [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=853, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 365] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 364] restart_syscall(<... resuming interrupted clone ...> [pid 865] set_robust_list(0x7fa2cc9159a0, 24 [pid 849] +++ exited with 0 +++ [pid 844] +++ exited with 0 +++ [pid 365] close(4 [pid 865] <... set_robust_list resumed>) = 0 [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=844, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 865] rt_sigprocmask(SIG_SETMASK, [], [pid 365] <... close resumed>) = 0 [pid 359] restart_syscall(<... resuming interrupted clone ...> [pid 865] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 365] rmdir("./19/file1") = 0 [pid 865] memfd_create("syzkaller", 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 865] <... memfd_create resumed>) = 3 [pid 365] close(3) = 0 [pid 865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 365] rmdir("./19" [pid 865] <... mmap resumed>) = 0x7fa2c44f5000 [pid 365] <... rmdir resumed>) = 0 [pid 365] mkdir("./20", 0777 [pid 359] <... restart_syscall resumed>) = 0 [pid 364] <... restart_syscall resumed>) = 0 [pid 359] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 364] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 359] <... openat resumed>) = 3 [pid 364] <... openat resumed>) = 3 [pid 359] newfstatat(3, "", [pid 364] newfstatat(3, "", [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] getdents64(3, [pid 364] getdents64(3, [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 364] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./17/binderfs", [pid 364] newfstatat(AT_FDCWD, "./19/binderfs", [pid 359] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] unlink("./17/binderfs" [pid 364] unlink("./19/binderfs" [pid 359] <... unlink resumed>) = 0 [pid 364] <... unlink resumed>) = 0 [pid 359] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 864] <... write resumed>) = 1048576 [pid 864] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 864] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 864] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 864] close(3) = 0 [pid 864] close(4 [pid 865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 365] <... mkdir resumed>) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 865] <... write resumed>) = 1048576 [pid 865] munmap(0x7fa2c44f5000, 138412032) = 0 [ 33.587101][ T849] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.607648][ T855] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 865] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 864] <... close resumed>) = 0 [pid 864] mkdir("./file1", 0777) = 0 [pid 864] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 865] <... openat resumed>) = 4 [pid 365] <... openat resumed>) = 3 [pid 364] <... umount2 resumed>) = 0 [pid 865] ioctl(4, LOOP_SET_FD, 3 [pid 365] ioctl(3, LOOP_CLR_FD [pid 364] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] <... umount2 resumed>) = 0 [pid 365] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 365] close(3 [pid 364] newfstatat(AT_FDCWD, "./19/file1", [pid 359] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] <... close resumed>) = 0 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 364] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] newfstatat(AT_FDCWD, "./17/file1", [pid 365] <... clone resumed>, child_tidptr=0x5555751e4750) = 867 [pid 364] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 364] newfstatat(4, "", [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] getdents64(4, [pid 359] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 364] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 359] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 364] close(4) = 0 [pid 359] <... openat resumed>) = 4 [pid 364] rmdir("./19/file1"./strace-static-x86_64: Process 867 attached ) = 0 [pid 359] newfstatat(4, "", [pid 364] getdents64(3, [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 364] <... getdents64 resumed>0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 364] close(3 [pid 359] getdents64(4, [pid 364] <... close resumed>) = 0 [pid 364] rmdir("./19" [pid 359] <... getdents64 resumed>0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 867] set_robust_list(0x5555751e4760, 24 [pid 364] <... rmdir resumed>) = 0 [pid 359] getdents64(4, [pid 867] <... set_robust_list resumed>) = 0 [pid 867] chdir("./20") = 0 [pid 867] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 867] setpgid(0, 0 [pid 364] mkdir("./20", 0777 [pid 359] <... getdents64 resumed>0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 867] <... setpgid resumed>) = 0 [pid 364] <... mkdir resumed>) = 0 [pid 359] close(4 [pid 364] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 359] <... close resumed>) = 0 [pid 359] rmdir("./17/file1" [pid 867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 359] <... rmdir resumed>) = 0 [pid 359] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 359] close(3) = 0 [pid 359] rmdir("./17" [pid 867] <... openat resumed>) = 3 [pid 359] <... rmdir resumed>) = 0 [pid 867] write(3, "1000", 4) = 4 [pid 359] mkdir("./18", 0777 [pid 867] close(3) = 0 [pid 867] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 867] write(1, "executing program\n", 18) = 18 [pid 867] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 867] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 867] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 867] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 867] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 867] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 867] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[871]}, 88) = 871 [pid 867] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 867] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 867] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 864] <... mount resumed>) = 0 [pid 364] <... openat resumed>) = 3 [pid 864] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 359] <... mkdir resumed>) = 0 [pid 364] ioctl(3, LOOP_CLR_FD [pid 865] <... ioctl resumed>) = 0 [pid 364] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 359] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 364] close(3 [pid 865] close(3 [pid 359] <... openat resumed>) = 3 [pid 865] <... close resumed>) = 0 [pid 864] <... openat resumed>) = 3 [pid 364] <... close resumed>) = 0 [pid 359] ioctl(3, LOOP_CLR_FD [pid 864] chdir("./file1") = 0 [pid 864] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 864] ioctl(4, LOOP_CLR_FD [pid 865] close(4 [pid 364] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 359] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 864] <... ioctl resumed>) = 0 [pid 864] close(4) = 0 [pid 864] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 862] <... futex resumed>) = 0 [pid 359] close(3 [pid 364] <... clone resumed>, child_tidptr=0x5555751e4750) = 872 [pid 864] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 862] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 864] <... openat resumed>) = 4 [pid 862] <... futex resumed>) = 0 [pid 864] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 862] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 864] <... futex resumed>) = 0 [pid 862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 864] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 862] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 864] <... mmap resumed>) = 0x200000000000 [pid 862] <... futex resumed>) = 0 [pid 864] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 862] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 864] <... futex resumed>) = 0 [pid 862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 871 attached [pid 862] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 871] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 871] memfd_create("syzkaller", 0) = 3 [pid 871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 871] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 871] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 862] <... futex resumed>) = 0 [pid 862] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 872 attached [pid 872] set_robust_list(0x5555751e4760, 24) = 0 [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 872] chdir("./20" [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 872] <... chdir resumed>) = 0 [pid 864] capset(0x200000000000, NULL [pid 872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 872] setpgid(0, 0) = 0 [pid 864] <... capset resumed>) = -1 EFAULT (Bad address) [pid 872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 864] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... openat resumed>) = 3 [pid 872] write(3, "1000", 4 [pid 864] <... futex resumed>) = 1 [pid 862] <... futex resumed>) = 0 [pid 862] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 862] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] <... write resumed>) = 4 [pid 872] close(3 [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 872] <... close resumed>) = 0 [pid 872] symlink("/dev/binderfs", "./binderfs") = 0 [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 872] write(1, "executing program\n", 18executing program ) = 18 [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 872] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 872] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 872] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 872] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 872] <... mmap resumed>) = 0x7fa2cc8f5000 [pid 872] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 872] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 872] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}./strace-static-x86_64: Process 873 attached => {parent_tid=[873]}, 88) = 873 [pid 873] set_robust_list(0x7fa2cc9159a0, 24 [pid 872] rt_sigprocmask(SIG_SETMASK, [], [pid 873] <... set_robust_list resumed>) = 0 [pid 872] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 872] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 873] rt_sigprocmask(SIG_SETMASK, [], [pid 872] <... futex resumed>) = 0 [pid 873] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 872] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 873] memfd_create("syzkaller", 0) = 3 [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 864] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 864] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 862] <... futex resumed>) = 0 [pid 862] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 862] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 864] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 864] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 862] <... futex resumed>) = 0 [pid 862] exit_group(0) = ? [pid 864] +++ exited with 0 +++ [pid 862] +++ exited with 0 +++ [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=862, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 358] restart_syscall(<... resuming interrupted clone ...> [pid 873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 873] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 873] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 358] <... restart_syscall resumed>) = 0 [pid 358] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 358] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./20/binderfs") = 0 [pid 358] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 865] <... close resumed>) = 0 [pid 865] mkdir("./file1", 0777 [pid 359] <... close resumed>) = 0 [pid 865] <... mkdir resumed>) = 0 [pid 865] mount("/dev/loop2", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 871] <... openat resumed>) = 4 [pid 359] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 871] ioctl(4, LOOP_SET_FD, 3 [pid 873] <... openat resumed>) = 4 [pid 871] <... ioctl resumed>) = 0 [pid 359] <... clone resumed>, child_tidptr=0x5555751e4750) = 874 [pid 871] close(3) = 0 [pid 871] close(4 [pid 873] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 874 attached [pid 874] set_robust_list(0x5555751e4760, 24) = 0 [pid 874] chdir("./18") = 0 [pid 874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 874] setpgid(0, 0) = 0 [pid 874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 874] write(3, "1000", 4) = 4 [pid 874] close(3) = 0 [pid 874] symlink("/dev/binderfs", "./binderfs") = 0 [pid 874] write(1, "executing program\n", 18executing program ) = 18 [pid 874] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 865] <... mount resumed>) = 0 [pid 874] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, [pid 865] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 865] chdir("./file1") = 0 [pid 865] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 874] <... rt_sigaction resumed>NULL, 8) = 0 [pid 874] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 874] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 874] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 874] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0}./strace-static-x86_64: Process 878 attached [pid 878] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 878] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 878] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 874] <... clone3 resumed> => {parent_tid=[878]}, 88) = 878 [pid 874] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 874] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 878] <... futex resumed>) = 0 [pid 874] <... futex resumed>) = 1 [pid 874] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 878] memfd_create("syzkaller", 0) = 3 [pid 878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 878] munmap(0x7fa2c44f5000, 138412032) = 0 [ 33.835631][ T864] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 878] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 871] <... close resumed>) = 0 [pid 871] mkdir("./file1", 0777) = 0 [pid 878] <... openat resumed>) = 4 [pid 873] <... ioctl resumed>) = 0 [pid 871] mount("/dev/loop4", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 865] <... openat resumed>) = 4 [pid 878] ioctl(4, LOOP_SET_FD, 3 [pid 873] close(3 [pid 865] ioctl(4, LOOP_CLR_FD [pid 873] <... close resumed>) = 0 [pid 873] close(4 [pid 878] <... ioctl resumed>) = 0 [pid 358] <... umount2 resumed>) = 0 [pid 878] close(3) = 0 [pid 878] close(4 [pid 358] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 358] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] close(4) = 0 [pid 358] rmdir("./20/file1") = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] close(3) = 0 [pid 358] rmdir("./20") = 0 [pid 358] mkdir("./21", 0777) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 871] <... mount resumed>) = 0 [pid 871] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 871] chdir("./file1") = 0 [pid 871] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 878] <... close resumed>) = 0 [pid 865] <... ioctl resumed>) = 0 [pid 878] mkdir("./file1", 0777 [pid 865] close(4 [pid 878] <... mkdir resumed>) = 0 [pid 878] mount("/dev/loop1", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 873] <... close resumed>) = 0 [pid 871] <... openat resumed>) = 4 [pid 873] mkdir("./file1", 0777 [pid 865] <... close resumed>) = 0 [pid 871] ioctl(4, LOOP_CLR_FD) = 0 [pid 871] close(4) = 0 [pid 865] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 867] <... futex resumed>) = 0 [pid 871] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 867] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 867] <... futex resumed>) = 0 [pid 871] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 867] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 873] <... mkdir resumed>) = 0 [pid 871] <... openat resumed>) = 4 [pid 865] <... futex resumed>) = 1 [pid 860] <... futex resumed>) = 0 [pid 873] mount("/dev/loop3", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 871] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 865] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 860] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] <... futex resumed>) = 1 [pid 867] <... futex resumed>) = 0 [pid 871] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 867] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 867] <... futex resumed>) = 0 [pid 871] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 867] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 871] <... mmap resumed>) = 0x200000000000 [pid 871] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 865] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 860] <... futex resumed>) = 0 [pid 871] <... futex resumed>) = 1 [pid 867] <... futex resumed>) = 0 [pid 865] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 871] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 867] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 867] <... futex resumed>) = 0 [pid 867] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 865] <... openat resumed>) = 4 [pid 358] <... openat resumed>) = 3 [pid 865] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] ioctl(3, LOOP_CLR_FD [pid 871] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 865] <... futex resumed>) = 1 [pid 860] <... futex resumed>) = 0 [pid 358] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 871] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 871] capset(0x200000000000, NULL [pid 865] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 860] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] close(3 [pid 873] <... mount resumed>) = 0 [pid 865] <... mmap resumed>) = 0x200000000000 [pid 860] <... futex resumed>) = 0 [pid 358] <... close resumed>) = 0 [pid 873] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 873] chdir("./file1") = 0 [pid 873] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 873] ioctl(4, LOOP_CLR_FD) = 0 [pid 873] close(4) = 0 [pid 873] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 873] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 872] <... futex resumed>) = 0 [pid 865] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 executing program [pid 860] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 872] <... futex resumed>) = 1 [pid 865] <... futex resumed>) = 0 [pid 860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 873] <... futex resumed>) = 0 [pid 873] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 872] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 860] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 873] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 873] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 871] <... capset resumed>) = -1 EFAULT (Bad address) [pid 871] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 867] <... futex resumed>) = 0 [pid 867] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 867] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 871] <... futex resumed>) = 1 [pid 871] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 871] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 871] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 871] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 871] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 871] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 871] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 871] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 871] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 871] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 871] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 871] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 871] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 867] <... futex resumed>) = 0 [pid 867] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 867] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 871] <... futex resumed>) = 1 [pid 871] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 871] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 867] <... futex resumed>) = 0 [pid 867] exit_group(0) = ? [pid 871] <... futex resumed>) = ? [pid 871] +++ exited with 0 +++ [pid 867] +++ exited with 0 +++ ./strace-static-x86_64: Process 885 attached [pid 885] set_robust_list(0x5555751e4760, 24) = 0 [pid 885] chdir("./21") = 0 [pid 885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 885] setpgid(0, 0) = 0 [pid 885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 885] write(3, "1000", 4) = 4 [pid 885] close(3) = 0 [pid 885] symlink("/dev/binderfs", "./binderfs") = 0 [pid 885] write(1, "executing program\n", 18) = 18 [pid 885] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] rt_sigaction(SIGRT_1, {sa_handler=0x7fa2cc97f800, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa2cc928c00}, NULL, 8) = 0 [pid 885] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa2cc8f5000 [pid 885] mprotect(0x7fa2cc8f6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 885] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc915990, parent_tid=0x7fa2cc915990, exit_signal=0, stack=0x7fa2cc8f5000, stack_size=0x20240, tls=0x7fa2cc9156c0} => {parent_tid=[887]}, 88) = 887 [pid 885] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 885] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 887 attached [pid 887] set_robust_list(0x7fa2cc9159a0, 24) = 0 [pid 887] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 887] memfd_create("syzkaller", 0) = 3 [pid 887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2c44f5000 [pid 887] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 872] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 365] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=867, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 872] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... futex resumed>) = 0 [pid 358] <... clone resumed>, child_tidptr=0x5555751e4750) = 885 [pid 872] <... futex resumed>) = 1 [pid 860] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 873] <... futex resumed>) = 0 [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 873] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 365] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 873] <... mmap resumed>) = 0x200000000000 [pid 365] <... openat resumed>) = 3 [pid 873] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] newfstatat(3, "", [pid 873] <... futex resumed>) = 1 [pid 872] <... futex resumed>) = 0 [pid 365] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 34.051439][ T871] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.073157][ T865] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 878] <... mount resumed>) = 0 [pid 872] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] getdents64(3, [pid 872] <... futex resumed>) = 0 [pid 872] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 878] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 365] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 878] <... openat resumed>) = 3 [pid 878] chdir("./file1" [pid 365] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 878] <... chdir resumed>) = 0 [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 878] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 365] newfstatat(AT_FDCWD, "./20/binderfs", [pid 878] <... openat resumed>) = 4 [pid 365] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 878] ioctl(4, LOOP_CLR_FD [pid 365] unlink("./20/binderfs" [pid 878] <... ioctl resumed>) = 0 [pid 365] <... unlink resumed>) = 0 [pid 878] close(4) = 0 [pid 365] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 887] <... write resumed>) = 1048576 [pid 887] munmap(0x7fa2c44f5000, 138412032) = 0 [pid 887] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 887] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 887] close(3) = 0 [pid 887] close(4) = 0 [pid 887] mkdir("./file1", 0777) = 0 [pid 887] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_NOATIME|MS_REC, ",errors=continue" [pid 878] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 874] <... futex resumed>) = 0 [pid 874] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 878] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004 [pid 874] <... futex resumed>) = 0 [pid 874] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 878] <... openat resumed>) = 4 [pid 878] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 874] <... futex resumed>) = 0 [pid 874] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 878] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0 [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 874] <... futex resumed>) = 0 [pid 873] capset(0x200000000000, NULL [pid 878] <... mmap resumed>) = 0x200000000000 [pid 874] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 878] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 873] <... capset resumed>) = -1 EFAULT (Bad address) [pid 873] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... futex resumed>) = 0 [pid 872] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 873] <... futex resumed>) = 1 [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 878] <... futex resumed>) = 1 [pid 874] <... futex resumed>) = 0 [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 874] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 874] <... futex resumed>) = 0 [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 873] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 873] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... futex resumed>) = 0 [pid 872] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 873] <... futex resumed>) = 1 [pid 873] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 873] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... futex resumed>) = 0 [pid 872] exit_group(0) = ? [pid 873] <... futex resumed>) = ? [pid 873] +++ exited with 0 +++ [pid 872] +++ exited with 0 +++ [pid 887] <... mount resumed>) = 0 [pid 887] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 887] chdir("./file1") = 0 [pid 887] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 887] ioctl(4, LOOP_CLR_FD) = 0 [pid 887] close(4) = 0 [pid 887] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 885] <... futex resumed>) = 0 [pid 885] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 887] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_DIRECT, 004) = 4 [pid 887] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 885] <... futex resumed>) = 0 [pid 885] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 887] mmap(0x200000000000, 8192, PROT_WRITE|PROT_EXEC, MAP_SHARED|MAP_FIXED, 4, 0) = 0x200000000000 [pid 887] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 885] <... futex resumed>) = 0 [pid 885] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 874] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 865] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 860] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 860] futex(0x7fa2cc9e16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=872, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 860] <... futex resumed>) = 0 [pid 860] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 887] capset(0x200000000000, NULL [pid 860] <... mmap resumed>) = 0x7fa2cc8d4000 [pid 364] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 860] mprotect(0x7fa2cc8d5000, 131072, PROT_READ|PROT_WRITE [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 860] <... mprotect resumed>) = 0 [pid 860] rt_sigprocmask(SIG_BLOCK, ~[], [pid 364] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 860] <... rt_sigprocmask resumed>[], 8) = 0 [pid 887] <... capset resumed>) = -1 EFAULT (Bad address) [pid 887] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 885] <... futex resumed>) = 0 [pid 860] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa2cc8f4990, parent_tid=0x7fa2cc8f4990, exit_signal=0, stack=0x7fa2cc8d4000, stack_size=0x20240, tls=0x7fa2cc8f46c0} [pid 885] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... openat resumed>) = 3 [pid 885] <... futex resumed>) = 0 [pid 885] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] newfstatat(3, "", [pid 860] <... clone3 resumed> => {parent_tid=[892]}, 88) = 892 [pid 364] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 860] rt_sigprocmask(SIG_SETMASK, [], [pid 887] <... futex resumed>) = 1 [pid 364] getdents64(3, [pid 860] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 364] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 860] futex(0x7fa2cc9e16d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 860] <... futex resumed>) = 0 [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 860] futex(0x7fa2cc9e16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 364] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 364] unlink("./20/binderfs") = 0 [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 364] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 887] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 887] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 885] <... futex resumed>) = 0 [pid 885] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 887] <... futex resumed>) = 1 [pid 887] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 887] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 885] <... futex resumed>) = 0 [pid 885] exit_group(0) = ? [pid 887] <... futex resumed>) = ? [pid 865] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- ./strace-static-x86_64: Process 892 attached [pid 892] set_robust_list(0x7fa2cc8f49a0, 24) = 0 [pid 892] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 892] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 892] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 892] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 887] +++ exited with 0 +++ [pid 885] +++ exited with 0 +++ [pid 892] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 358] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=885, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 358] restart_syscall(<... resuming interrupted clone ...> [pid 865] capset(0x200000000000, NULL [pid 892] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 892] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 865] <... capset resumed>) = -1 EFAULT (Bad address) [pid 892] futex(0x7fa2cc9e16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... futex resumed>) = 0 [pid 860] futex(0x7fa2cc9e16d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 860] futex(0x7fa2cc9e16dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 892] <... futex resumed>) = 1 [pid 892] ioctl(-1, SIOCGIFINDEX, NULL) = -1 EBADF (Bad file descriptor) [pid 892] futex(0x7fa2cc9e16dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... futex resumed>) = 0 [pid 892] <... futex resumed>) = 1 [pid 865] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 892] futex(0x7fa2cc9e16d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 865] <... futex resumed>) = 0 [pid 878] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 878] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000004} --- [pid 878] capset(0x200000000000, NULL) = -1 EFAULT (Bad address) [pid 878] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 874] <... futex resumed>) = 0 [pid 874] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 874] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 860] exit_group(0 [pid 892] <... futex resumed>) = ? [pid 860] <... exit_group resumed>) = ? [pid 892] +++ exited with 0 +++ [pid 358] <... restart_syscall resumed>) = 0 [pid 358] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 358] newfstatat(3, "", [pid 878] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000040} --- [pid 358] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(3, [pid 878] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000042} --- [pid 358] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 358] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 878] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000044} --- [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] unlink("./21/binderfs" [pid 878] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000045} --- [pid 358] <... unlink resumed>) = 0 [pid 358] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 878] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000046} --- [pid 878] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000047} --- [pid 878] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000000} --- [pid 878] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000008} --- [pid 878] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000000000c} --- [pid 878] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000010} --- [pid 878] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000011} --- [pid 878] sendmmsg(-1, [{msg_hdr={msg_name=0x200000000040, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=0x200000000000, msg_controllen=24, msg_flags=0}}], 1, 0) = -1 EBADF (Bad file descriptor) [pid 878] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 874] <... futex resumed>) = 0 [pid 878] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 874] futex(0x7fa2cc9e16c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 878] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 874] <... futex resumed>) = 0 [pid 878] ioctl(-1, SIOCGIFINDEX, NULL [pid 874] futex(0x7fa2cc9e16cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 878] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 878] futex(0x7fa2cc9e16cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 874] <... futex resumed>) = 0 [pid 878] futex(0x7fa2cc9e16c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 874] exit_group(0) = ? [pid 878] <... futex resumed>) = ? [pid 865] +++ exited with 0 +++ [pid 860] +++ exited with 0 +++ [pid 360] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=860, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 360] restart_syscall(<... resuming interrupted clone ...> [pid 878] +++ exited with 0 +++ [pid 874] +++ exited with 0 +++ [pid 359] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=874, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 359] restart_syscall(<... resuming interrupted clone ...> [pid 360] <... restart_syscall resumed>) = 0 [pid 359] <... restart_syscall resumed>) = 0 [pid 360] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 359] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] <... openat resumed>) = 3 [pid 359] <... openat resumed>) = 3 [pid 360] newfstatat(3, "", [pid 359] newfstatat(3, "", [pid 360] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 359] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 360] getdents64(3, [pid 359] getdents64(3, [pid 360] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 359] <... getdents64 resumed>0x5555751e57f0 /* 4 entries */, 32768) = 112 [pid 360] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] newfstatat(AT_FDCWD, "./18/binderfs", [pid 359] newfstatat(AT_FDCWD, "./18/binderfs", [pid 360] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 359] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 360] unlink("./18/binderfs" [pid 359] unlink("./18/binderfs" [pid 360] <... unlink resumed>) = 0 [pid 359] <... unlink resumed>) = 0 [pid 360] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 34.089223][ T873] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.113889][ T878] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.119622][ T887] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.167360][ T580] ------------[ cut here ]------------ [ 34.172772][ T580] kernel BUG at fs/ext4/inode.c:2844! [ 34.178729][ T580] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 34.184613][ T580] CPU: 1 PID: 580 Comm: kworker/u4:3 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 34.194493][ T580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 34.204829][ T580] Workqueue: writeback wb_workfn (flush-7:2) [ 34.210906][ T580] RIP: 0010:ext4_writepages+0x3c96/0x3cc0 [ 34.216458][ T580] Code: 99 9b ff 31 ff 89 de e8 b8 99 9b ff 45 84 f6 75 2e e8 9e 97 9b ff 49 bf 00 00 00 00 00 fc ff df e9 1d f9 ff ff e8 8a 97 9b ff <0f> 0b e8 83 97 9b ff 0f 0b e8 7c 97 9b ff e8 b7 a0 37 ff eb 99 e8 [ 34.235900][ T580] RSP: 0018:ffff8881e4b070e0 EFLAGS: 00010293 [ 34.242248][ T580] RAX: ffffffff81c8b376 RBX: 0000010000000000 RCX: ffff8881e4804ec0 [ 34.250086][ T580] RDX: 0000000000000000 RSI: 0000010000000000 RDI: 0000000000000000 [ 34.257861][ T580] RBP: ffff8881e4b074d0 R08: ffffffff81c87fc6 R09: ffffed103b9fd955 [ 34.265795][ T580] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881dcfecb50 [ 34.273703][ T580] R13: 0000000000000001 R14: 0000010410000000 R15: dffffc0000000000 [ 34.281701][ T580] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.290477][ T580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.296991][ T580] CR2: 00007ffdabcb4f98 CR3: 00000001ed1ca000 CR4: 00000000003406a0 [ 34.304880][ T580] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.312774][ T580] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.320672][ T580] Call Trace: [ 34.324328][ T580] ? __die+0xb4/0x100 [ 34.328139][ T580] ? die+0x26/0x50 [ 34.331692][ T580] ? do_trap+0x1e7/0x340 [ 34.336025][ T580] ? ext4_writepages+0x3c96/0x3cc0 [ 34.341453][ T580] ? ext4_writepages+0x3c96/0x3cc0 [ 34.346393][ T580] ? do_invalid_op+0xfb/0x110 [ 34.350921][ T580] ? ext4_writepages+0x3c96/0x3cc0 [ 34.355951][ T580] ? invalid_op+0x1e/0x30 [ 34.360111][ T580] ? ext4_writepages+0x8e6/0x3cc0 [ 34.365406][ T580] ? ext4_writepages+0x3c96/0x3cc0 [ 34.370530][ T580] ? ext4_writepages+0x3c96/0x3cc0 [ 34.376172][ T580] ? pagecache_get_page+0x5d6/0x750 [ 34.381205][ T580] ? mark_page_accessed+0x26f/0x640 [ 34.386420][ T580] ? deref_stack_reg+0x15c/0x1f0 [ 34.391300][ T580] ? get_reg+0x220/0x220 [ 34.395371][ T580] ? unwind_next_frame+0x176a/0x1ea0 [ 34.400584][ T580] ? ext4_readpage+0x2e0/0x2e0 [ 34.405189][ T580] ? deref_stack_reg+0x15c/0x1f0 [ 34.409961][ T580] ? get_reg+0x220/0x220 [ 34.414041][ T580] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 34.419851][ T580] ? preempt_count_add+0x8f/0x180 [ 34.424735][ T580] ? ret_from_fork+0x1f/0x30 [ 34.429137][ T580] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 34.435232][ T580] ? ext4_readpage+0x2e0/0x2e0 [ 34.439908][ T580] do_writepages+0x12b/0x270 [ 34.444413][ T580] ? __writepage+0x110/0x110 [ 34.448844][ T580] ? _raw_spin_lock+0xa4/0x1b0 [ 34.453439][ T580] ? _raw_spin_trylock_bh+0x190/0x190 [ 34.458645][ T580] ? check_preemption_disabled+0x9f/0x320 [ 34.464289][ T580] ? _raw_spin_lock+0xa4/0x1b0 [ 34.468889][ T580] __writeback_single_inode+0xd9/0xcc0 [ 34.474185][ T580] writeback_sb_inodes+0x9e0/0x1800 [ 34.479220][ T580] ? _raw_spin_lock+0xa4/0x1b0 [ 34.483829][ T580] ? queue_io+0x500/0x500 [ 34.487982][ T580] ? writeback_sb_inodes+0x1800/0x1800 [ 34.493367][ T580] ? queue_io+0x358/0x500 [ 34.497531][ T580] wb_writeback+0x403/0xd70 [ 34.501878][ T580] ? wb_io_lists_depopulated+0x170/0x170 [ 34.507342][ T580] ? set_worker_desc+0x158/0x1c0 [ 34.512117][ T580] ? check_preemption_disabled+0x9f/0x320 [ 34.518222][ T580] ? kthread_data+0x4e/0xc0 [ 34.522559][ T580] wb_workfn+0x3b6/0x1230 [ 34.526729][ T580] ? inode_wait_for_writeback+0x280/0x280 [ 34.532278][ T580] ? switch_mm_irqs_off+0x35a/0xab0 [ 34.537314][ T580] ? _raw_spin_unlock_irq+0x4a/0x60 [ 34.542347][ T580] ? finish_task_switch+0x130/0x590 [ 34.547474][ T580] ? __schedule+0xb0d/0x1320 [ 34.551899][ T580] ? _raw_spin_lock_irqsave+0x210/0x210 [ 34.557373][ T580] ? read_word_at_a_time+0xe/0x20 [ 34.562244][ T580] ? strscpy+0x89/0x220 [pid 359] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] <... umount2 resumed>) = 0 [pid 358] <... umount2 resumed>) = 0 [pid 358] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 365] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 365] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 365] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 365] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 365] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 365] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 365] close(4) = 0 [pid 365] rmdir("./20/file1") = 0 [pid 365] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 365] close(3) = 0 [pid 365] rmdir("./20") = 0 [pid 365] mkdir("./21", 0777) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 358] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 358] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 358] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 358] getdents64(4, 0x5555751ed830 /* 2 entries */, 32768) = 48 [pid 358] getdents64(4, 0x5555751ed830 /* 0 entries */, 32768) = 0 [pid 358] close(4) = 0 [pid 358] rmdir("./21/file1") = 0 [pid 358] getdents64(3, 0x5555751e57f0 /* 0 entries */, 32768) = 0 [pid 358] close(3) = 0 [pid 358] rmdir("./21") = 0 [pid 358] mkdir("./22", 0777) = 0 [ 34.566394][ T580] process_one_work+0x765/0xd20 [ 34.571080][ T580] worker_thread+0xaef/0x1470 [ 34.575599][ T580] kthread+0x2da/0x360 [ 34.579508][ T580] ? worker_clr_flags+0x170/0x170 [ 34.584723][ T580] ? kthread_blkcg+0xd0/0xd0 [ 34.589130][ T580] ret_from_fork+0x1f/0x30 [ 34.593475][ T580] Modules linked in: [ 34.600534][ T580] ---[ end trace 206e709a18608d3c ]--- [ 34.605933][ T580] RIP: 0010:ext4_writepages+0x3c96/0x3cc0 [ 34.611897][ T580] Code: 99 9b ff 31 ff 89 de e8 b8 99 9b ff 45 84 f6 75 2e e8 9e 97 9b ff 49 bf 00 00 00 00 00 fc ff df e9 1d f9 ff ff e8 8a 97 9b ff <0f> 0b e8 83 97 9b ff 0f 0b e8 7c 97 9b ff e8 b7 a0 37 ff eb 99 e8 [ 34.632310][ T580] RSP: 0018:ffff8881e4b070e0 EFLAGS: 00010293 [ 34.638297][ T580] RAX: ffffffff81c8b376 RBX: 0000010000000000 RCX: ffff8881e4804ec0 [ 34.646127][ T580] RDX: 0000000000000000 RSI: 0000010000000000 RDI: 0000000000000000 [ 34.654008][ T580] RBP: ffff8881e4b074d0 R08: ffffffff81c87fc6 R09: ffffed103b9fd955 [ 34.661793][ T580] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881dcfecb50 [ 34.670083][ T580] R13: 0000000000000001 R14: 0000010410000000 R15: dffffc0000000000 [ 34.677918][ T580] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.686650][ T580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.693045][ T580] CR2: 00007ffdabcb4f98 CR3: 00000001eec3d000 CR4: 00000000003406a0 [ 34.700932][ T580] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.708967][ T580] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.717211][ T580] Kernel panic - not syncing: Fatal exception [ 34.723607][ T580] Kernel Offset: disabled [ 34.727735][ T580] Rebooting in 86400 seconds..