./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3991618192 <...> e(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 2988] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 2985] <... futex resumed>) = 0 [pid 2983] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 2989] <... write resumed>) = 196608 [pid 2987] <... open resumed>) = 4 [pid 2985] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./80/binderfs", [pid 2989] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 2989] <... futex resumed>) = 1 [pid 2985] <... futex resumed>) = 0 [pid 374] unlink("./80/binderfs" [pid 2989] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2985] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2989] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2989] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 2985] <... futex resumed>) = 0 [pid 374] <... unlink resumed>) = 0 [pid 2989] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2985] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 2989] <... futex resumed>) = 0 [pid 2987] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2989] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2985] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2989] <... futex resumed>) = 0 [pid 2985] <... futex resumed>) = 1 [pid 2984] <... futex resumed>) = 0 [pid 2984] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2985] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2984] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2989] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 2987] <... futex resumed>) = 1 [pid 2989] <... open resumed>) = 6 [pid 2989] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2987] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 2989] <... futex resumed>) = 1 [pid 2985] <... futex resumed>) = 0 [pid 2989] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 2987] <... openat resumed>) = 5 [pid 2985] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2982] <... write resumed>) = 1048576 [pid 3000] <... write resumed>) = 1048576 [pid 3000] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3000] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 2987] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2985] <... futex resumed>) = 0 [pid 2982] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2987] <... futex resumed>) = 1 [pid 2985] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2984] <... futex resumed>) = 0 [pid 2987] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2984] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2987] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2984] <... futex resumed>) = 0 [pid 2987] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 2984] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2987] <... write resumed>) = 196608 [pid 2982] <... futex resumed>) = 1 [pid 2981] <... futex resumed>) = 0 [pid 2987] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2981] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2987] <... futex resumed>) = 1 [pid 2984] <... futex resumed>) = 0 [pid 2981] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2987] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 2984] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2982] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 2984] <... futex resumed>) = 0 [pid 2984] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2987] <... mount resumed>) = 0 [pid 2987] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2984] <... futex resumed>) = 0 [pid 2987] <... futex resumed>) = 1 [pid 2984] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2987] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 2984] <... futex resumed>) = 0 [pid 2984] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2988] <... write resumed>) = 1048576 [pid 2988] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2983] <... futex resumed>) = 0 [pid 2988] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 2983] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 66.041479][ T2987] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/80/bus supports timestamps until 2038 (0x7fffffff) [ 66.062069][ T2989] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 66.071522][ T2989] ext4 filesystem being mounted at /root/syzkaller.43WzWH/81/bus supports timestamps until 2038 (0x7fffffff) [pid 2983] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3000] <... openat resumed>) = 4 [pid 2988] <... openat resumed>) = 7 [pid 2987] <... open resumed>) = 6 [pid 374] <... umount2 resumed>) = 0 [pid 3000] ioctl(4, LOOP_SET_FD, 3 [pid 2987] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2987] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./80/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./80/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./80/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./80") = 0 [pid 374] mkdir("./81", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 2988] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2988] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2989] <... write resumed>) = 1048576 [pid 2984] <... futex resumed>) = 0 [pid 2984] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2987] <... futex resumed>) = 0 [pid 2985] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2984] <... futex resumed>) = 1 [pid 2983] <... futex resumed>) = 0 [pid 2989] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2985] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2983] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2987] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 2984] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2989] <... futex resumed>) = 0 [pid 2988] <... futex resumed>) = 0 [pid 2985] <... futex resumed>) = 0 [pid 2983] <... futex resumed>) = 1 [pid 2982] <... openat resumed>) = 7 [ 66.120075][ T2988] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 66.120179][ T2982] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 66.134079][ T2988] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 66.149150][ T2982] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 2989] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 2988] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 2985] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2983] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3000] <... ioctl resumed>) = 0 [pid 2988] <... openat resumed>) = 8 [pid 2987] <... write resumed>) = 1048576 [pid 2982] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2981] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 374] <... openat resumed>) = 3 [pid 3000] close(3 [pid 2988] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2981] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] ioctl(3, LOOP_CLR_FD [pid 3000] <... close resumed>) = 0 [pid 2988] <... futex resumed>) = 1 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3000] mkdir("./bus", 0777 [pid 2988] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] close(3 [pid 2983] <... futex resumed>) = 0 [pid 2981] <... futex resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3000] <... mkdir resumed>) = 0 [pid 2983] exit_group(0 [pid 2981] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3005 [pid 3000] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 2988] <... futex resumed>) = ? [pid 2983] <... exit_group resumed>) = ? [pid 2988] +++ exited with 0 +++ [pid 2983] +++ exited with 0 +++ ./strace-static-x86_64: Process 3005 attached [pid 2987] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2982] <... futex resumed>) = 1 [pid 2981] <... futex resumed>) = 0 [pid 3005] set_robust_list(0x55555713c5e0, 24 [pid 2987] <... futex resumed>) = 1 [pid 2984] <... futex resumed>) = 0 [pid 2982] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 2981] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=38000000} [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2983, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 3005] <... set_robust_list resumed>) = 0 [pid 2987] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 2984] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2982] <... openat resumed>) = 8 [pid 3005] chdir("./81" [pid 2984] <... futex resumed>) = 0 [pid 2982] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3005] <... chdir resumed>) = 0 [pid 2982] <... futex resumed>) = 1 [pid 376] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3005] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 2982] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3005] <... prctl resumed>) = 0 [pid 376] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3005] setpgid(0, 0 [pid 376] <... openat resumed>) = 3 [pid 3005] <... setpgid resumed>) = 0 [pid 376] fstat(3, [pid 3005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3005] <... openat resumed>) = 3 [pid 376] getdents64(3, [pid 3005] write(3, "1000", 4 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3005] <... write resumed>) = 4 [pid 376] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3005] close(3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3005] <... close resumed>) = 0 [pid 376] lstat("./82/binderfs", [pid 3005] symlink("/dev/binderfs", "./binderfs" [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3005] <... symlink resumed>) = 0 [pid 376] unlink("./82/binderfs" [pid 3005] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... unlink resumed>) = 0 [pid 3005] <... futex resumed>) = 0 [pid 376] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3005] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3005] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3006], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3006 [pid 3005] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3005] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3006 attached [pid 2989] <... openat resumed>) = 7 [pid 2984] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2981] <... futex resumed>) = 0 [pid 3006] set_robust_list(0x7f64ff0649e0, 24 [pid 2989] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 66.168085][ T2989] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 66.186452][ T2989] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 66.198722][ T2987] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 2981] exit_group(0 [pid 3006] <... set_robust_list resumed>) = 0 [pid 2989] <... futex resumed>) = 1 [pid 2981] <... exit_group resumed>) = ? [pid 2985] <... futex resumed>) = 0 [pid 3006] memfd_create("syzkaller", 0 [pid 2989] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 2985] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2982] <... futex resumed>) = ? [pid 3006] <... memfd_create resumed>) = 3 [pid 2989] <... openat resumed>) = 8 [pid 2985] <... futex resumed>) = 0 [pid 3006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 2989] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2987] <... openat resumed>) = 7 [pid 2985] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2982] +++ exited with 0 +++ [pid 2981] +++ exited with 0 +++ [pid 3006] <... mmap resumed>) = 0x7f64f6c44000 [pid 2989] <... futex resumed>) = 0 [pid 2987] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2981, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 2989] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2987] <... futex resumed>) = 1 [pid 2985] exit_group(0 [pid 2984] <... futex resumed>) = 0 [pid 2989] <... futex resumed>) = ? [pid 2987] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 2985] <... exit_group resumed>) = ? [pid 2984] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2989] +++ exited with 0 +++ [pid 2987] <... openat resumed>) = 8 [pid 2984] <... futex resumed>) = 0 [pid 372] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 2987] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2984] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 2987] <... futex resumed>) = 0 [pid 2984] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 2987] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2984] exit_group(0 [pid 372] <... openat resumed>) = 3 [pid 2987] <... futex resumed>) = ? [pid 2984] <... exit_group resumed>) = ? [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./79/binderfs") = 0 [pid 3006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 372] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3006] <... write resumed>) = 1048576 [pid 3006] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3006] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3000] <... mount resumed>) = 0 [pid 3000] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3000] chdir("./bus") = 0 [pid 3000] ioctl(4, LOOP_CLR_FD [pid 2985] +++ exited with 0 +++ [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./82/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./82/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./82") = 0 [pid 376] mkdir("./83", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2985, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 376] <... close resumed>) = 0 [pid 2987] +++ exited with 0 +++ [pid 2984] +++ exited with 0 +++ [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3009 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2984, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 377] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3009 attached [pid 3009] set_robust_list(0x55555713c5e0, 24 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3009] <... set_robust_list resumed>) = 0 [pid 3009] chdir("./83") = 0 [pid 3009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3009] setpgid(0, 0) = 0 [pid 3009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3009] <... openat resumed>) = 3 [pid 3009] write(3, "1000", 4) = 4 [pid 3009] close(3) = 0 [pid 3009] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3009] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] <... openat resumed>) = 3 [pid 3009] <... mmap resumed>) = 0x7f64ff044000 [pid 377] fstat(3, [pid 3009] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3009] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3010], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3010 [pid 3009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3010 attached [pid 3010] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 375] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3010] memfd_create("syzkaller", 0) = 3 [pid 3010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] getdents64(3, [pid 375] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] <... openat resumed>) = 3 [pid 377] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] fstat(3, [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] lstat("./81/binderfs", [pid 375] getdents64(3, [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] unlink("./81/binderfs" [pid 375] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] <... unlink resumed>) = 0 [pid 375] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] unlink("./80/binderfs") = 0 [pid 375] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3006] <... openat resumed>) = 4 [pid 3000] <... ioctl resumed>) = 0 [pid 3000] close(4) = 0 [pid 3000] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2998] <... futex resumed>) = 0 [pid 3000] chdir("./file0" [pid 2998] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3000] <... chdir resumed>) = 0 [pid 2998] <... futex resumed>) = 0 [pid 3006] ioctl(4, LOOP_SET_FD, 3 [pid 3000] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2998] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3000] <... futex resumed>) = 0 [pid 2998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3000] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 2998] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3000] <... open resumed>) = 4 [pid 2998] <... futex resumed>) = 0 [pid 3000] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2998] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3000] <... futex resumed>) = 0 [pid 2998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3000] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 2998] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3000] <... openat resumed>) = 5 [pid 2998] <... futex resumed>) = 0 [pid 3000] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2998] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3000] <... futex resumed>) = 0 [pid 2998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3000] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 2998] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3000] <... write resumed>) = 196608 [pid 2998] <... futex resumed>) = 0 [pid 2998] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3000] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2998] <... futex resumed>) = 0 [pid 2998] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2998] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3000] <... futex resumed>) = 1 [pid 3000] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3006] <... ioctl resumed>) = 0 [pid 3006] close(3 [pid 3000] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 2998] <... futex resumed>) = 0 [pid 2998] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2998] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3000] <... futex resumed>) = 1 [pid 3000] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3006] <... close resumed>) = 0 [pid 3006] mkdir("./bus", 0777) = 0 [pid 3006] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3010] <... write resumed>) = 1048576 [pid 3010] munmap(0x7f64f6c44000, 1048576) = 0 [ 66.213289][ T2987] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 66.237295][ T3000] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 66.246299][ T3000] ext4 filesystem being mounted at /root/syzkaller.k3ECep/83/bus supports timestamps until 2038 (0x7fffffff) [pid 3010] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./81/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./81/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./81") = 0 [pid 377] mkdir("./82", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 2998] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2998] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2998] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2998] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2998] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2998] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2998] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 2998] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2998] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3012], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3012 [pid 2998] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2998] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3012 attached [pid 3012] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3012] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 3012] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2998] <... futex resumed>) = 0 [pid 2998] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2998] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3012] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3000] <... open resumed>) = 6 [pid 3000] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3000] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3012] <... openat resumed>) = 7 [pid 3012] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2998] <... futex resumed>) = 0 [pid 2998] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3000] <... futex resumed>) = 0 [pid 2998] <... futex resumed>) = 1 [pid 3000] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 2998] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3000] <... openat resumed>) = 8 [pid 3000] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2998] <... futex resumed>) = 0 [pid 3000] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2998] exit_group(0 [pid 3000] <... futex resumed>) = ? [pid 2998] <... exit_group resumed>) = ? [pid 3000] +++ exited with 0 +++ [pid 3006] <... mount resumed>) = 0 [pid 3006] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3010] <... openat resumed>) = 4 [pid 3006] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 3006] chdir("./bus") = 0 [pid 3006] ioctl(4, LOOP_CLR_FD) = 0 [pid 3006] close(4 [pid 3012] +++ exited with 0 +++ [pid 3010] ioctl(4, LOOP_SET_FD, 3 [pid 3006] <... close resumed>) = 0 [pid 2998] +++ exited with 0 +++ [pid 377] <... openat resumed>) = 3 [pid 372] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3006] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] <... umount2 resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2998, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3006] <... futex resumed>) = 1 [pid 3005] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3006] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3005] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3010] <... ioctl resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] lstat("./79/bus", [pid 3010] close(3 [pid 3006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3005] <... futex resumed>) = 0 [pid 377] close(3 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3010] <... close resumed>) = 0 [pid 3006] chdir("./file0" [pid 3005] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 375] lstat("./80/bus", [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3010] mkdir("./bus", 0777 [pid 3006] <... chdir resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3006] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... openat resumed>) = 3 [pid 3010] <... mkdir resumed>) = 0 [pid 3006] <... futex resumed>) = 1 [pid 3005] <... futex resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3016 [pid 375] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] fstat(3, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3010] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3006] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3005] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] openat(AT_FDCWD, "./79/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3005] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./80/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] getdents64(3, ./strace-static-x86_64: Process 3016 attached [pid 3006] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3005] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... openat resumed>) = 4 [pid 372] <... openat resumed>) = 4 [pid 3016] set_robust_list(0x55555713c5e0, 24 [pid 375] fstat(4, [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] fstat(4, [pid 3016] <... set_robust_list resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3016] chdir("./82" [pid 375] getdents64(4, [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] getdents64(4, [pid 3016] <... chdir resumed>) = 0 [pid 3006] <... open resumed>) = 4 [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] lstat("./83/binderfs", [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3016] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 375] getdents64(4, [pid 372] getdents64(4, [pid 3016] <... prctl resumed>) = 0 [pid 3006] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3016] setpgid(0, 0 [pid 3006] <... futex resumed>) = 1 [pid 3005] <... futex resumed>) = 0 [pid 375] close(4 [pid 373] unlink("./83/binderfs" [pid 372] close(4 [pid 3016] <... setpgid resumed>) = 0 [pid 3006] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3005] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3005] <... futex resumed>) = 0 [pid 375] rmdir("./80/bus" [pid 373] <... unlink resumed>) = 0 [pid 372] rmdir("./79/bus" [pid 3016] <... openat resumed>) = 3 [pid 3006] <... openat resumed>) = 5 [pid 3005] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... rmdir resumed>) = 0 [pid 373] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... rmdir resumed>) = 0 [pid 3016] write(3, "1000", 4 [pid 3006] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] getdents64(3, [pid 372] getdents64(3, [pid 3016] <... write resumed>) = 4 [pid 3005] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3016] close(3 [pid 3006] <... futex resumed>) = 0 [pid 3005] <... futex resumed>) = 0 [pid 375] close(3 [pid 372] close(3 [pid 3016] <... close resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3016] symlink("/dev/binderfs", "./binderfs" [pid 3005] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] rmdir("./80" [pid 372] rmdir("./79" [pid 3016] <... symlink resumed>) = 0 [pid 3006] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 375] <... rmdir resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 3016] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] mkdir("./81", 0777 [pid 372] mkdir("./80", 0777 [pid 3016] <... futex resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 3016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3016] <... mmap resumed>) = 0x7f64ff044000 [pid 3016] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3016] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3018], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3018 [pid 3016] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3016] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3006] <... write resumed>) = 196608 ./strace-static-x86_64: Process 3018 attached [pid 3006] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3005] <... futex resumed>) = 0 [pid 3006] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3005] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3005] <... futex resumed>) = 0 [pid 3006] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3005] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3006] <... mount resumed>) = 0 [pid 3006] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3005] <... futex resumed>) = 0 [pid 3006] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3005] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3005] <... futex resumed>) = 0 [pid 3006] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [ 66.345569][ T3006] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 66.354727][ T3006] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/81/bus supports timestamps until 2038 (0x7fffffff) [pid 3005] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3018] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3018] memfd_create("syzkaller", 0) = 3 [pid 3018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3018] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3018] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3010] <... mount resumed>) = 0 [pid 3010] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3010] chdir("./bus") = 0 [pid 3010] ioctl(4, LOOP_CLR_FD [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./83/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 3006] <... open resumed>) = 6 [pid 375] ioctl(3, LOOP_CLR_FD [pid 372] ioctl(3, LOOP_CLR_FD [pid 373] getdents64(4, [pid 3006] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3006] <... futex resumed>) = 1 [pid 3005] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 3005] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 3006] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3005] <... futex resumed>) = 0 [pid 373] close(4 [pid 372] close(3 [pid 373] <... close resumed>) = 0 [pid 373] rmdir("./83/bus" [pid 3005] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./83") = 0 [pid 373] mkdir("./84", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3020 ./strace-static-x86_64: Process 3020 attached [pid 3020] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3020] chdir("./84") = 0 [pid 3020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3020] setpgid(0, 0) = 0 [pid 3020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3020] write(3, "1000", 4) = 4 [pid 3020] close(3) = 0 [pid 3020] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3020] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3020] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3020] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3020] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3021], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3021 [pid 3020] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3020] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3021 attached [pid 3021] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3021] memfd_create("syzkaller", 0) = 3 [pid 3021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3023 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3022 [pid 3021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 3022 attached [pid 3010] <... ioctl resumed>) = 0 [pid 3018] <... openat resumed>) = 4 [pid 3010] close(4 [pid 3018] ioctl(4, LOOP_SET_FD, 3 [pid 3010] <... close resumed>) = 0 [pid 3010] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3009] <... futex resumed>) = 0 [pid 3010] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3009] <... futex resumed>) = 0 [pid 3010] chdir("./file0" [pid 3009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3022] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3010] <... chdir resumed>) = 0 [pid 3010] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3009] <... futex resumed>) = 0 [pid 3010] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3009] <... futex resumed>) = 0 [pid 3010] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3022] chdir("./80" [pid 3010] <... open resumed>) = 4 [pid 3010] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3009] <... futex resumed>) = 0 [pid 3022] <... chdir resumed>) = 0 [pid 3022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3022] <... prctl resumed>) = 0 [pid 3010] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3022] setpgid(0, 0 [pid 3010] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3009] <... futex resumed>) = 0 [pid 3022] <... setpgid resumed>) = 0 [pid 3010] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3009] <... futex resumed>) = 0 [pid 3010] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3022] write(3, "1000", 4) = 4 [pid 3022] close(3) = 0 [pid 3022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3022] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3010] <... write resumed>) = 196608 [pid 3010] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3009] <... futex resumed>) = 0 [pid 3010] <... futex resumed>) = 1 [pid 3009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3010] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3022] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3010] <... mount resumed>) = 0 [pid 3022] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3010] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3009] <... futex resumed>) = 0 [pid 3009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3010] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3009] <... futex resumed>) = 0 [pid 3009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3022] <... clone resumed>, parent_tid=[3025], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3025 [pid 3022] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3022] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3023 attached [pid 3023] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3018] <... ioctl resumed>) = 0 [pid 3010] <... open resumed>) = 6 [pid 3018] close(3) = 0 [pid 3018] mkdir("./bus", 0777) = 0 [pid 3018] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [ 66.400242][ T3010] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 66.409440][ T3010] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/83/bus supports timestamps until 2038 (0x7fffffff) [pid 3010] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3009] <... futex resumed>) = 0 [pid 3009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3010] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3009] <... futex resumed>) = 0 [pid 3021] <... write resumed>) = 1048576 [pid 3009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3021] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3006] <... write resumed>) = 1048576 [pid 3006] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3005] <... futex resumed>) = 0 [pid 3005] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3005] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3006] <... futex resumed>) = 1 [pid 3006] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3023] chdir("./81") = 0 [pid 3023] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3021] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 3021] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 3025 attached [pid 3025] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3025] memfd_create("syzkaller", 0 [pid 3023] <... prctl resumed>) = 0 [pid 3025] <... memfd_create resumed>) = 3 [pid 3023] setpgid(0, 0) = 0 [pid 3025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3010] <... write resumed>) = 1048576 [pid 3023] write(3, "1000", 4) = 4 [pid 3010] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3023] close(3 [pid 3010] <... futex resumed>) = 1 [pid 3009] <... futex resumed>) = 0 [pid 3009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3023] <... close resumed>) = 0 [pid 3010] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3009] <... futex resumed>) = 0 [pid 3009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3023] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3023] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3023] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3021] <... ioctl resumed>) = 0 [pid 3021] close(3) = 0 [pid 3021] mkdir("./bus", 0777) = 0 [pid 3021] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3023] <... mprotect resumed>) = 0 [pid 3025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3025] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3025] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 66.461130][ T3006] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 66.484285][ T3010] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 66.498856][ T3010] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 3025] ioctl(4, LOOP_SET_FD, 3 [pid 3023] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3010] <... openat resumed>) = 7 [pid 3005] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3005] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3005] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3005] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3030], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3030 [pid 3005] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3005] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3031 attached ./strace-static-x86_64: Process 3030 attached [pid 3010] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3009] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3030] set_robust_list(0x7f64f6d439e0, 24 [pid 3023] <... clone resumed>, parent_tid=[3031], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3031 [pid 3010] <... futex resumed>) = 0 [pid 3009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3030] <... set_robust_list resumed>) = 0 [pid 3023] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3010] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3009] <... futex resumed>) = 0 [pid 3030] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3023] <... futex resumed>) = 0 [pid 3010] <... openat resumed>) = 8 [pid 3009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3023] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3010] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3009] <... futex resumed>) = 0 [pid 3010] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3009] exit_group(0 [pid 3010] <... futex resumed>) = ? [pid 3009] <... exit_group resumed>) = ? [pid 3031] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3031] memfd_create("syzkaller", 0) = 3 [pid 3031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3025] <... ioctl resumed>) = 0 [pid 3010] +++ exited with 0 +++ [pid 3009] +++ exited with 0 +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3009, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./83/binderfs") = 0 [pid 376] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3031] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3031] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 3031] ioctl(4, LOOP_SET_FD, 3 [pid 3018] <... mount resumed>) = 0 [pid 3018] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3018] chdir("./bus") = 0 [pid 3018] ioctl(4, LOOP_CLR_FD [pid 3025] close(3) = 0 [pid 3025] mkdir("./bus", 0777) = 0 [pid 3025] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3030] <... openat resumed>) = 8 [pid 3006] <... openat resumed>) = 7 [pid 3030] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3006] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3030] <... futex resumed>) = 1 [pid 3006] <... futex resumed>) = 0 [pid 3030] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3006] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3005] <... futex resumed>) = 0 [pid 3005] exit_group(0 [pid 3031] <... ioctl resumed>) = 0 [pid 3031] close(3) = 0 [pid 3031] mkdir("./bus", 0777) = 0 [ 66.509460][ T3018] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 66.511523][ T3006] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 66.521018][ T3018] ext4 filesystem being mounted at /root/syzkaller.43WzWH/82/bus supports timestamps until 2038 (0x7fffffff) [ 66.543261][ T3021] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 3031] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3030] <... futex resumed>) = ? [pid 3021] <... mount resumed>) = 0 [pid 3018] <... ioctl resumed>) = 0 [pid 3006] <... futex resumed>) = ? [pid 3005] <... exit_group resumed>) = ? [pid 3030] +++ exited with 0 +++ [pid 3021] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3018] close(4 [pid 3006] +++ exited with 0 +++ [pid 3005] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3005, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 374] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3021] <... openat resumed>) = 3 [pid 3018] <... close resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./81/binderfs") = 0 [pid 374] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3021] chdir("./bus" [pid 3018] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3018] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3016] <... futex resumed>) = 0 [pid 3016] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3021] <... chdir resumed>) = 0 [pid 3016] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3021] ioctl(4, LOOP_CLR_FD [pid 3018] <... futex resumed>) = 0 [pid 3018] chdir("./file0") = 0 [pid 3018] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3016] <... futex resumed>) = 0 [pid 3016] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3018] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3016] <... futex resumed>) = 0 [pid 3016] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3018] <... open resumed>) = 4 [pid 3018] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3016] <... futex resumed>) = 0 [pid 3016] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3018] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3016] <... futex resumed>) = 0 [pid 3018] <... openat resumed>) = 5 [pid 3016] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3018] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3016] <... futex resumed>) = 0 [pid 3016] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3018] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3016] <... futex resumed>) = 0 [pid 3016] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3018] <... write resumed>) = 196608 [pid 3018] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3016] <... futex resumed>) = 0 [pid 3018] <... futex resumed>) = 1 [pid 3016] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3016] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 66.552857][ T3021] ext4 filesystem being mounted at /root/syzkaller.k3ECep/84/bus supports timestamps until 2038 (0x7fffffff) [pid 3018] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3018] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3016] <... futex resumed>) = 0 [pid 3025] <... mount resumed>) = 0 [pid 3025] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3025] chdir("./bus") = 0 [pid 3025] ioctl(4, LOOP_CLR_FD [pid 3018] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3016] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3018] <... futex resumed>) = 0 [pid 3016] <... futex resumed>) = 1 [pid 3018] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3016] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./83/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 3031] <... mount resumed>) = 0 [pid 3031] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3031] chdir("./bus") = 0 [pid 3031] ioctl(4, LOOP_CLR_FD [pid 376] rmdir("./83/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./83") = 0 [pid 376] mkdir("./84", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3021] <... ioctl resumed>) = 0 [pid 3018] <... open resumed>) = 6 [pid 3025] <... ioctl resumed>) = 0 [pid 3021] close(4 [pid 3018] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = 0 [pid 3021] <... close resumed>) = 0 [pid 3018] <... futex resumed>) = 1 [pid 3016] <... futex resumed>) = 0 [pid 3021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3018] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3016] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3021] <... futex resumed>) = 1 [pid 3020] <... futex resumed>) = 0 [pid 374] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3021] chdir("./file0" [pid 3020] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3016] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3031] <... ioctl resumed>) = 0 [pid 3021] <... chdir resumed>) = 0 [pid 3020] <... futex resumed>) = 0 [pid 3016] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3020] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3021] <... futex resumed>) = 0 [pid 3020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3021] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3020] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3020] <... futex resumed>) = 0 [pid 3021] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3020] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] lstat("./81/bus", [pid 3031] close(4 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3031] <... close resumed>) = 0 [pid 3031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3031] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3023] <... futex resumed>) = 0 [pid 3021] <... open resumed>) = 4 [pid 376] <... openat resumed>) = 3 [pid 374] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3023] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] ioctl(3, LOOP_CLR_FD [pid 3023] <... futex resumed>) = 1 [pid 3021] <... futex resumed>) = 1 [pid 3020] <... futex resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3023] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3020] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 3020] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 3020] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3039 [ 66.588018][ T3025] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 66.597832][ T3031] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 66.601891][ T3025] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/80/bus supports timestamps until 2038 (0x7fffffff) [ 66.609293][ T3031] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/81/bus supports timestamps until 2038 (0x7fffffff) [pid 3025] close(4) = 0 [pid 3025] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3022] <... futex resumed>) = 0 [pid 3025] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3022] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3022] <... futex resumed>) = 0 [pid 3025] chdir("./file0" [pid 3022] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3025] <... chdir resumed>) = 0 [pid 3025] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3022] <... futex resumed>) = 0 [pid 3025] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3022] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3025] <... open resumed>) = 4 [pid 3022] <... futex resumed>) = 0 [pid 3021] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 374] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3025] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3022] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3021] <... openat resumed>) = 5 [pid 374] <... openat resumed>) = 4 [pid 3025] <... futex resumed>) = 0 [pid 3022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] fstat(4, [pid 3025] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3022] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3021] <... futex resumed>) = 1 [pid 3020] <... futex resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3025] <... openat resumed>) = 5 [pid 3022] <... futex resumed>) = 0 [pid 3021] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3020] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(4, [pid 3025] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3022] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3020] <... futex resumed>) = 0 [pid 3025] <... futex resumed>) = 0 [pid 3022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3021] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3020] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3025] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3022] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3022] <... futex resumed>) = 0 [pid 3025] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3022] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3025] <... write resumed>) = 196608 [pid 3021] <... write resumed>) = 196608 [pid 374] getdents64(4, [pid 3031] <... futex resumed>) = 0 [pid 3025] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3031] chdir("./file0" [pid 3025] <... futex resumed>) = 1 [pid 3022] <... futex resumed>) = 0 [pid 3021] <... futex resumed>) = 1 [pid 3020] <... futex resumed>) = 0 [pid 3018] <... write resumed>) = 1048576 [pid 374] close(4 [pid 3031] <... chdir resumed>) = 0 [pid 3025] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3022] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3021] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3020] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3018] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... close resumed>) = 0 [pid 3031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3025] <... mount resumed>) = 0 [pid 3022] <... futex resumed>) = 0 [pid 3021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3020] <... futex resumed>) = 0 [pid 3018] <... futex resumed>) = 1 [pid 3016] <... futex resumed>) = 0 [pid 374] rmdir("./81/bus" [pid 3031] <... futex resumed>) = 1 [pid 3025] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3023] <... futex resumed>) = 0 [pid 3022] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3021] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3020] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3016] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3031] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3025] <... futex resumed>) = 0 [pid 3023] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3021] <... mount resumed>) = 0 [pid 3016] <... futex resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 3025] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3023] <... futex resumed>) = 0 [pid 3022] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3016] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] getdents64(3, [pid 3031] <... open resumed>) = 4 [pid 3025] <... open resumed>) = 6 [pid 3023] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3022] <... futex resumed>) = 0 [pid 3021] <... futex resumed>) = 1 [pid 3020] <... futex resumed>) = 0 [pid 3018] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3025] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3022] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3021] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3020] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(3 [pid 3031] <... futex resumed>) = 1 [pid 3025] <... futex resumed>) = 0 [pid 3023] <... futex resumed>) = 0 [pid 3022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3020] <... futex resumed>) = 0 [pid 3025] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3022] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3022] <... futex resumed>) = 0 [pid 3025] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3022] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... close resumed>) = 0 [pid 3023] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3020] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] rmdir("./81" [pid 3021] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3031] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3023] <... futex resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 3023] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3021] <... open resumed>) = 6 [pid 374] mkdir("./82", 0777 [pid 3031] <... openat resumed>) = 5 [pid 3021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3020] <... futex resumed>) = 0 [pid 3031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... mkdir resumed>) = 0 [pid 3031] <... futex resumed>) = 1 [pid 3023] <... futex resumed>) = 0 [pid 3021] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3020] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3031] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3023] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3020] <... futex resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 3023] <... futex resumed>) = 0 [pid 3021] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3020] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] ioctl(3, LOOP_CLR_FD [pid 3023] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3039 attached [pid 3039] set_robust_list(0x55555713c5e0, 24 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3040 [pid 3039] <... set_robust_list resumed>) = 0 [pid 3039] chdir("./84" [pid 3031] <... write resumed>) = 196608 [pid 3039] <... chdir resumed>) = 0 [pid 3039] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3039] setpgid(0, 0) = 0 [pid 3039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3039] write(3, "1000", 4) = 4 [pid 3031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3040 attached ) = 1 [pid 3023] <... futex resumed>) = 0 [pid 3031] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3025] <... write resumed>) = 1048576 [pid 3023] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3023] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3039] close(3) = 0 [pid 3039] symlink("/dev/binderfs", "./binderfs" [pid 3040] set_robust_list(0x55555713c5e0, 24 [pid 3031] <... mount resumed>) = 0 [pid 3025] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3040] <... set_robust_list resumed>) = 0 [pid 3039] <... symlink resumed>) = 0 [pid 3039] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3040] chdir("./82" [pid 3031] <... futex resumed>) = 1 [pid 3025] <... futex resumed>) = 1 [pid 3023] <... futex resumed>) = 0 [pid 3022] <... futex resumed>) = 0 [pid 3039] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3021] <... write resumed>) = 1048576 [pid 3039] <... mprotect resumed>) = 0 [pid 3039] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3041], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3041 [pid 3039] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3039] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3041 attached [pid 3041] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3041] memfd_create("syzkaller", 0) = 3 [pid 3041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3040] <... chdir resumed>) = 0 [pid 3031] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3025] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3023] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3022] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3040] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3023] <... futex resumed>) = 0 [pid 3022] <... futex resumed>) = 0 [pid 3021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3040] <... prctl resumed>) = 0 [pid 3031] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3025] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3023] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3022] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3021] <... futex resumed>) = 1 [pid 3016] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3020] <... futex resumed>) = 0 [pid 3040] setpgid(0, 0 [pid 3031] <... open resumed>) = 6 [ 66.687637][ T3018] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 66.726885][ T3018] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 3041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3041] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3041] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 3041] ioctl(4, LOOP_SET_FD, 3 [pid 3018] <... openat resumed>) = 7 [pid 3018] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3018] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3021] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3016] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3016] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3018] <... futex resumed>) = 0 [pid 3018] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3018] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3016] <... futex resumed>) = 0 [pid 3016] exit_group(0) = ? [pid 3018] <... futex resumed>) = ? [pid 3020] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3021] <... futex resumed>) = 0 [pid 3020] <... futex resumed>) = 1 [pid 3021] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3020] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3040] <... setpgid resumed>) = 0 [pid 3031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3031] <... futex resumed>) = 1 [pid 3040] <... openat resumed>) = 3 [pid 3031] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3040] write(3, "1000", 4) = 4 [pid 3040] close(3) = 0 [pid 3040] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3040] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3040] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3040] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3043], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3043 [pid 3040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3043 attached [pid 3043] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3043] memfd_create("syzkaller", 0) = 3 [pid 3043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3023] <... futex resumed>) = 0 [pid 3023] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3031] <... futex resumed>) = 0 [pid 3023] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3031] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3041] <... ioctl resumed>) = 0 [pid 3043] <... write resumed>) = 1048576 [pid 3043] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3043] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 3043] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3043] close(3) = 0 [pid 3043] mkdir("./bus", 0777) = 0 [pid 3043] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3018] +++ exited with 0 +++ [pid 3016] +++ exited with 0 +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3016, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 3041] close(3) = 0 [pid 3041] mkdir("./bus", 0777 [pid 377] <... restart_syscall resumed>) = 0 [pid 377] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./82/binderfs") = 0 [pid 377] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3041] <... mkdir resumed>) = 0 [ 66.736949][ T3025] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 66.748669][ T3021] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 66.776649][ T3025] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 3041] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3022] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3020] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3020] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3020] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3020] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3020] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3047], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3047 [pid 3020] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3020] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3043] <... mount resumed>) = 0 [pid 3043] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3043] chdir("./bus") = 0 [pid 3043] ioctl(4, LOOP_CLR_FD [pid 3022] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3022] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3022] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3049], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3049 [pid 3022] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3022] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3049 attached [pid 3049] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3049] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 3047 attached [pid 3047] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3047] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3031] <... write resumed>) = 1048576 [pid 3025] <... openat resumed>) = 7 [pid 3023] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3021] <... openat resumed>) = 7 [pid 3031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3025] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3023] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3031] <... futex resumed>) = 0 [pid 3025] <... futex resumed>) = 0 [pid 3023] <... futex resumed>) = 0 [pid 3031] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3025] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 66.792267][ T3043] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 66.804775][ T3043] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/82/bus supports timestamps until 2038 (0x7fffffff) [ 66.811864][ T3021] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 66.824279][ T3041] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 3023] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3049] <... openat resumed>) = 8 [pid 3047] <... openat resumed>) = 8 [pid 3021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3021] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3049] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3047] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3041] <... mount resumed>) = 0 [pid 3020] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3049] <... futex resumed>) = 1 [pid 3047] <... futex resumed>) = 0 [pid 3022] <... futex resumed>) = 0 [pid 3020] exit_group(0 [pid 3049] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3022] exit_group(0 [pid 3021] <... futex resumed>) = ? [pid 3020] <... exit_group resumed>) = ? [pid 3049] <... futex resumed>) = ? [pid 3047] +++ exited with 0 +++ [pid 3022] <... exit_group resumed>) = ? [pid 3021] +++ exited with 0 +++ [pid 3049] +++ exited with 0 +++ [pid 3041] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3041] chdir("./bus") = 0 [pid 3041] ioctl(4, LOOP_CLR_FD [pid 3025] <... futex resumed>) = ? [pid 3031] <... openat resumed>) = 7 [pid 3031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3031] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3043] <... ioctl resumed>) = 0 [pid 3023] <... futex resumed>) = 0 [pid 3020] +++ exited with 0 +++ [pid 377] <... umount2 resumed>) = 0 [pid 3023] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3023] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./82/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 3043] close(4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3020, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3043] <... close resumed>) = 0 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./82/bus" [pid 3043] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3025] +++ exited with 0 +++ [pid 3022] +++ exited with 0 +++ [pid 3043] <... futex resumed>) = 1 [pid 3040] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3022, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3043] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./82" [pid 3043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3043] chdir("./file0" [pid 3040] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3043] <... chdir resumed>) = 0 [pid 3040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... rmdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3043] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] <... openat resumed>) = 3 [pid 3043] <... futex resumed>) = 0 [pid 3040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] fstat(3, [pid 3043] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3040] <... futex resumed>) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] mkdir("./83", 0777 [pid 3040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... mkdir resumed>) = 0 [pid 373] getdents64(3, [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3043] <... open resumed>) = 4 [pid 377] <... openat resumed>) = 3 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] ioctl(3, LOOP_CLR_FD [pid 3043] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3043] <... futex resumed>) = 1 [pid 3040] <... futex resumed>) = 0 [pid 373] lstat("./84/binderfs", [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3043] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3040] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3043] <... openat resumed>) = 5 [pid 3040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] close(3 [pid 3043] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] unlink("./84/binderfs" [pid 372] <... openat resumed>) = 3 [pid 3043] <... futex resumed>) = 0 [pid 3040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 3040] <... futex resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 372] fstat(3, [pid 3043] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3051 ./strace-static-x86_64: Process 3051 attached [pid 3051] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3051] chdir("./83") = 0 [pid 3051] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3051] setpgid(0, 0) = 0 [pid 3051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3051] write(3, "1000", 4) = 4 [pid 3051] close(3) = 0 [pid 3051] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3051] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3051] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3043] <... write resumed>) = 196608 [pid 372] getdents64(3, [pid 3051] <... mprotect resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./80/binderfs", [pid 3051] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./80/binderfs" [pid 3051] <... clone resumed>, parent_tid=[3052], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3052 [pid 3051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 372] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 3052 attached [pid 372] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3052] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3052] memfd_create("syzkaller", 0) = 3 [pid 3052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3043] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3040] <... futex resumed>) = 0 [pid 3043] <... futex resumed>) = 1 [pid 3040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3043] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3040] <... futex resumed>) = 0 [pid 3040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3043] <... mount resumed>) = 0 [pid 3043] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3040] <... futex resumed>) = 0 [pid 3043] <... futex resumed>) = 1 [pid 3040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3043] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3040] <... futex resumed>) = 0 [pid 3043] <... open resumed>) = 6 [pid 3040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3043] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3040] <... futex resumed>) = 0 [pid 3040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3043] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3040] <... futex resumed>) = 0 [pid 3040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3041] <... ioctl resumed>) = 0 [pid 3041] close(4 [pid 3031] <... futex resumed>) = 0 [pid 3031] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3023] <... futex resumed>) = 0 [pid 3023] exit_group(0) = ? [pid 3052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3052] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3052] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./80/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./80/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./80/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./80") = 0 [pid 372] mkdir("./81", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3043] <... write resumed>) = 1048576 [pid 3043] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3040] <... futex resumed>) = 0 [pid 3043] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 66.829214][ T3031] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 66.834395][ T3041] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/84/bus supports timestamps until 2038 (0x7fffffff) [ 66.849071][ T3031] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 3040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3041] <... close resumed>) = 0 [pid 3031] +++ exited with 0 +++ [pid 3023] +++ exited with 0 +++ [pid 3052] <... openat resumed>) = 4 [pid 373] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 3052] ioctl(4, LOOP_SET_FD, 3 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3023, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 372] ioctl(3, LOOP_CLR_FD [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... restart_syscall resumed>) = 0 [pid 372] close(3 [pid 375] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, [pid 3041] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3041] <... futex resumed>) = 1 [pid 3039] <... futex resumed>) = 0 [pid 375] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3041] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3039] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3039] <... futex resumed>) = 0 [pid 375] lstat("./81/binderfs", [pid 3039] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3041] chdir("./file0" [pid 375] unlink("./81/binderfs" [pid 3041] <... chdir resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 375] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3043] <... openat resumed>) = 7 [pid 3041] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3052] <... ioctl resumed>) = 0 [pid 3041] <... futex resumed>) = 1 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... close resumed>) = 0 [pid 3041] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] lstat("./84/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./84/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./84") = 0 [pid 373] mkdir("./85", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3054 [pid 3043] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3040] <... futex resumed>) = 0 [pid 3040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3039] <... futex resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3052] close(3 [pid 3040] <... futex resumed>) = 0 [pid 3040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3039] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3052] <... close resumed>) = 0 [pid 3043] <... futex resumed>) = 1 [pid 3041] <... futex resumed>) = 0 [pid 3039] <... futex resumed>) = 1 [pid 3043] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3041] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3039] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3052] mkdir("./bus", 0777 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3055 [pid 3043] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3040] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3055 attached ./strace-static-x86_64: Process 3054 attached [pid 3052] <... mkdir resumed>) = 0 [pid 3043] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3041] <... open resumed>) = 4 [pid 3040] exit_group(0 [pid 3043] <... futex resumed>) = ? [pid 3040] <... exit_group resumed>) = ? [pid 3055] set_robust_list(0x55555713c5e0, 24 [pid 3054] set_robust_list(0x55555713c5e0, 24 [pid 3052] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3043] +++ exited with 0 +++ [pid 3041] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3040] +++ exited with 0 +++ [pid 3055] <... set_robust_list resumed>) = 0 [pid 3054] <... set_robust_list resumed>) = 0 [pid 3041] <... futex resumed>) = 1 [pid 3039] <... futex resumed>) = 0 [pid 3054] chdir("./85" [pid 3041] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3039] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3040, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 3054] <... chdir resumed>) = 0 [pid 3039] <... futex resumed>) = 0 [pid 3054] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3054] setpgid(0, 0 [pid 3041] <... openat resumed>) = 5 [pid 3039] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3054] <... setpgid resumed>) = 0 [pid 3041] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3041] <... futex resumed>) = 1 [pid 3039] <... futex resumed>) = 0 [pid 374] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3041] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3039] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... openat resumed>) = 3 [pid 3041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3039] <... futex resumed>) = 0 [pid 374] fstat(3, [pid 3041] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3039] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3054] <... openat resumed>) = 3 [pid 3054] write(3, "1000", 4) = 4 [pid 3054] close(3) = 0 [pid 3054] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3054] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3054] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3054] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3056], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3056 [pid 3054] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3054] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3056 attached [pid 3056] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3056] memfd_create("syzkaller", 0) = 3 [pid 3056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3041] <... write resumed>) = 196608 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./82/binderfs", [pid 3041] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./82/binderfs" [pid 3041] <... futex resumed>) = 1 [pid 3039] <... futex resumed>) = 0 [pid 374] <... unlink resumed>) = 0 [pid 3039] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3041] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3039] <... futex resumed>) = 0 [pid 374] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3039] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3041] <... mount resumed>) = 0 [pid 3041] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3039] <... futex resumed>) = 0 [pid 3039] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3039] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3041] <... futex resumed>) = 1 [ 66.912142][ T3043] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 66.926388][ T3043] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 3055] chdir("./81" [pid 3041] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3055] <... chdir resumed>) = 0 [pid 3055] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3055] <... prctl resumed>) = 0 [pid 3055] setpgid(0, 0) = 0 [pid 3055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3055] write(3, "1000", 4) = 4 [pid 3055] close(3) = 0 [pid 3055] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3055] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3055] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3055] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3057 attached , parent_tid=[3057], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3057 [pid 3056] <... write resumed>) = 1048576 [pid 3055] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3057] set_robust_list(0x7f64ff0649e0, 24 [pid 3056] munmap(0x7f64f6c44000, 1048576 [pid 3055] <... futex resumed>) = 0 [pid 3057] <... set_robust_list resumed>) = 0 [pid 3056] <... munmap resumed>) = 0 [pid 3055] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3056] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3057] memfd_create("syzkaller", 0) = 3 [pid 3057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 375] <... umount2 resumed>) = 0 [pid 3057] <... write resumed>) = 1048576 [pid 3057] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3057] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 375] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./81/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./81/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./81") = 0 [pid 375] mkdir("./82", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3052] <... mount resumed>) = 0 [pid 3052] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3052] chdir("./bus") = 0 [pid 3052] ioctl(4, LOOP_CLR_FD [pid 3039] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3039] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3039] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3039] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3039] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3060], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3060 [pid 3039] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3039] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3060 attached [pid 3060] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3060] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 3060] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3039] <... futex resumed>) = 0 [pid 3039] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3039] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3060] <... futex resumed>) = 1 [pid 3060] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 [pid 3060] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3039] <... futex resumed>) = 0 [pid 3039] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3039] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3060] <... futex resumed>) = 1 [pid 3060] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3060] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3039] <... futex resumed>) = 0 [pid 3060] <... futex resumed>) = 1 [pid 3060] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3056] <... openat resumed>) = 4 [pid 3056] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3056] close(3) = 0 [pid 3056] mkdir("./bus", 0777 [pid 3057] <... openat resumed>) = 4 [pid 3056] <... mkdir resumed>) = 0 [pid 3052] <... ioctl resumed>) = 0 [pid 3041] <... open resumed>) = 6 [pid 375] <... openat resumed>) = 3 [pid 3057] ioctl(4, LOOP_SET_FD, 3 [pid 3056] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3052] close(4 [pid 375] ioctl(3, LOOP_CLR_FD [pid 3052] <... close resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3052] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 3052] <... futex resumed>) = 1 [pid 3052] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3051] <... futex resumed>) = 0 [pid 3041] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3039] exit_group(0 [pid 3051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3041] <... futex resumed>) = -1 (errno 18446744073709551414) [pid 3039] <... exit_group resumed>) = ? [pid 3051] <... futex resumed>) = 1 [pid 3041] +++ exited with 0 +++ [pid 3051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3052] <... futex resumed>) = 0 [pid 3052] chdir("./file0") = 0 [pid 3052] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3060] <... futex resumed>) = ? [pid 3052] <... futex resumed>) = 1 [pid 3051] <... futex resumed>) = 0 [pid 3052] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 3051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3052] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3052] <... open resumed>) = 4 [pid 3052] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3051] <... futex resumed>) = 0 [pid 3052] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3051] <... futex resumed>) = 0 [pid 3052] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3052] <... openat resumed>) = 5 [pid 3052] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3051] <... futex resumed>) = 0 [pid 3052] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3052] <... write resumed>) = 196608 [pid 3051] <... futex resumed>) = 0 [pid 3051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3052] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3052] <... futex resumed>) = 0 [pid 3051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3052] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3051] <... futex resumed>) = 0 [pid 3051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3052] <... mount resumed>) = 0 [pid 3060] +++ exited with 0 +++ [pid 3057] <... ioctl resumed>) = 0 [pid 3052] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3039] +++ exited with 0 +++ [pid 375] <... close resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 3057] close(3 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3057] <... close resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3057] mkdir("./bus", 0777 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3063 [pid 374] lstat("./82/bus", [pid 3057] <... mkdir resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3057] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 374] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 3052] <... futex resumed>) = 1 [pid 3051] <... futex resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3039, si_uid=0, si_status=0, si_utime=1, si_stime=3} --- [pid 374] close(4 [pid 3052] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... close resumed>) = 0 [pid 3051] <... futex resumed>) = 0 [pid 374] rmdir("./82/bus" [pid 3052] <... open resumed>) = 6 [pid 3051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... rmdir resumed>) = 0 [pid 3052] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 66.995699][ T3052] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 67.004855][ T3052] ext4 filesystem being mounted at /root/syzkaller.43WzWH/83/bus supports timestamps until 2038 (0x7fffffff) [pid 376] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] getdents64(3, [pid 3052] <... futex resumed>) = 0 [pid 3051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3052] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3051] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] close(3 [pid 3051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... openat resumed>) = 3 [pid 374] <... close resumed>) = 0 [pid 374] rmdir("./82") = 0 [pid 374] mkdir("./83", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3./strace-static-x86_64: Process 3063 attached [pid 376] fstat(3, [pid 374] <... close resumed>) = 0 [pid 3063] set_robust_list(0x55555713c5e0, 24 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3063] <... set_robust_list resumed>) = 0 [pid 376] getdents64(3, [pid 3063] chdir("./82" [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3063] <... chdir resumed>) = 0 [pid 376] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3066 [pid 3063] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3063] <... prctl resumed>) = 0 [pid 376] lstat("./84/binderfs", ./strace-static-x86_64: Process 3066 attached [pid 3063] setpgid(0, 0 [pid 3052] <... write resumed>) = 1048576 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3066] set_robust_list(0x55555713c5e0, 24 [pid 3063] <... setpgid resumed>) = 0 [pid 376] unlink("./84/binderfs" [pid 3063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 376] <... unlink resumed>) = 0 [pid 3063] <... openat resumed>) = 3 [pid 376] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3063] write(3, "1000", 4) = 4 [pid 3063] close(3) = 0 [pid 3063] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3063] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3063] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3063] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3063] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3069], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3069 [pid 3063] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3063] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3052] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3051] <... futex resumed>) = 0 [pid 3052] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3051] <... futex resumed>) = 0 [pid 3052] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3069 attached [pid 3066] <... set_robust_list resumed>) = 0 [pid 3057] <... mount resumed>) = 0 [pid 3069] set_robust_list(0x7f64ff0649e0, 24 [pid 3066] chdir("./83" [pid 3057] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3069] <... set_robust_list resumed>) = 0 [ 67.066291][ T3057] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 67.079668][ T3057] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/81/bus supports timestamps until 2038 (0x7fffffff) [ 67.088982][ T3052] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 67.092230][ T3056] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 3066] <... chdir resumed>) = 0 [pid 3057] <... openat resumed>) = 3 [pid 3069] memfd_create("syzkaller", 0 [pid 3066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3057] chdir("./bus" [pid 3069] <... memfd_create resumed>) = 3 [pid 3066] <... prctl resumed>) = 0 [pid 3057] <... chdir resumed>) = 0 [pid 3069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3066] setpgid(0, 0 [pid 3057] ioctl(4, LOOP_CLR_FD [pid 3069] <... mmap resumed>) = 0x7f64f6c44000 [pid 3066] <... setpgid resumed>) = 0 [pid 3057] <... ioctl resumed>) = 0 [pid 3069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3057] close(4 [pid 3056] <... mount resumed>) = 0 [pid 3052] <... openat resumed>) = 7 [pid 3069] <... write resumed>) = 1048576 [pid 3066] <... openat resumed>) = 3 [pid 3056] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3069] munmap(0x7f64f6c44000, 1048576 [pid 3066] write(3, "1000", 4 [pid 3052] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3069] <... munmap resumed>) = 0 [pid 3066] <... write resumed>) = 4 [pid 3056] <... openat resumed>) = 3 [pid 3052] <... futex resumed>) = 1 [pid 3051] <... futex resumed>) = 0 [pid 3069] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3066] close(3 [pid 3056] chdir("./bus" [pid 3052] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3066] <... close resumed>) = 0 [pid 3056] <... chdir resumed>) = 0 [pid 3052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3051] <... futex resumed>) = 0 [pid 3066] symlink("/dev/binderfs", "./binderfs" [pid 3056] ioctl(4, LOOP_CLR_FD [pid 3052] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3066] <... symlink resumed>) = 0 [pid 3052] <... openat resumed>) = 8 [pid 3066] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3052] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3066] <... futex resumed>) = 0 [pid 3052] <... futex resumed>) = 1 [pid 3051] <... futex resumed>) = 0 [pid 3066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3052] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3051] exit_group(0 [pid 3066] <... mmap resumed>) = 0x7f64ff044000 [pid 3052] <... futex resumed>) = ? [pid 3051] <... exit_group resumed>) = ? [pid 3066] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3052] +++ exited with 0 +++ [pid 3066] <... mprotect resumed>) = 0 [pid 3066] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3070 attached , parent_tid=[3070], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3070 [pid 3070] set_robust_list(0x7f64ff0649e0, 24 [pid 3066] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3066] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3070] <... set_robust_list resumed>) = 0 [pid 3070] memfd_create("syzkaller", 0) = 3 [pid 3070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3070] munmap(0x7f64f6c44000, 1048576) = 0 [ 67.114038][ T3052] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 67.123840][ T3056] ext4 filesystem being mounted at /root/syzkaller.k3ECep/85/bus supports timestamps until 2038 (0x7fffffff) [pid 3070] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3069] <... openat resumed>) = 4 [pid 3057] <... close resumed>) = 0 [pid 3056] <... ioctl resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 3069] ioctl(4, LOOP_SET_FD, 3 [pid 3051] +++ exited with 0 +++ [pid 376] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3057] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3056] close(4 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3051, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3057] <... futex resumed>) = 1 [pid 3055] <... futex resumed>) = 0 [pid 376] lstat("./84/bus", [pid 3057] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3055] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3055] <... futex resumed>) = 0 [pid 377] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3057] chdir("./file0" [pid 3055] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3057] <... chdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3069] <... ioctl resumed>) = 0 [pid 3057] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3056] <... close resumed>) = 0 [pid 377] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... openat resumed>) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./84/bus" [pid 3069] close(3 [pid 3057] <... futex resumed>) = 1 [pid 3056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3055] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 376] <... rmdir resumed>) = 0 [pid 3069] <... close resumed>) = 0 [pid 3057] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3056] <... futex resumed>) = 1 [pid 3055] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3054] <... futex resumed>) = 0 [pid 377] fstat(3, [pid 376] getdents64(3, [pid 3069] mkdir("./bus", 0777 [pid 3057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3055] <... futex resumed>) = 0 [pid 3054] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3 [pid 3069] <... mkdir resumed>) = 0 [pid 3057] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3055] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3054] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 376] <... close resumed>) = 0 [pid 3069] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3056] chdir("./file0" [pid 3054] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] rmdir("./84" [pid 3057] <... open resumed>) = 4 [pid 3056] <... chdir resumed>) = 0 [pid 377] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... rmdir resumed>) = 0 [pid 3057] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] mkdir("./85", 0777 [pid 3057] <... futex resumed>) = 1 [pid 3056] <... futex resumed>) = 1 [pid 3055] <... futex resumed>) = 0 [pid 3054] <... futex resumed>) = 0 [pid 377] lstat("./83/binderfs", [pid 376] <... mkdir resumed>) = 0 [pid 3057] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3055] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3054] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3072 ./strace-static-x86_64: Process 3072 attached [pid 3055] <... futex resumed>) = 0 [pid 3056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3054] <... futex resumed>) = 0 [pid 377] unlink("./83/binderfs" [pid 3057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3070] <... openat resumed>) = 4 [pid 3056] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3055] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3054] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... unlink resumed>) = 0 [pid 3072] set_robust_list(0x55555713c5e0, 24 [pid 377] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3072] <... set_robust_list resumed>) = 0 [pid 3056] <... open resumed>) = 4 [pid 3070] ioctl(4, LOOP_SET_FD, 3 [pid 3057] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3057] <... openat resumed>) = 5 [pid 3056] <... futex resumed>) = 1 [pid 3054] <... futex resumed>) = 0 [pid 3057] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3054] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3057] <... futex resumed>) = 1 [pid 3056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3055] <... futex resumed>) = 0 [pid 3054] <... futex resumed>) = 0 [pid 3057] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3056] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3055] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3054] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3057] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3056] <... openat resumed>) = 5 [pid 3055] <... futex resumed>) = 0 [pid 3072] chdir("./85") = 0 [pid 3072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3072] setpgid(0, 0) = 0 [pid 3072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3057] <... write resumed>) = 196608 [pid 3056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3055] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3057] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3056] <... futex resumed>) = 1 [pid 3055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3054] <... futex resumed>) = 0 [pid 3057] <... futex resumed>) = 0 [pid 3056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3055] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3054] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3057] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3055] <... futex resumed>) = 0 [pid 3054] <... futex resumed>) = 0 [pid 3057] <... mount resumed>) = 0 [pid 3056] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3055] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3054] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3057] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3072] <... openat resumed>) = 3 [pid 3072] write(3, "1000", 4) = 4 [pid 3072] close(3) = 0 [pid 3072] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3057] <... futex resumed>) = 0 [pid 3056] <... write resumed>) = 196608 [pid 3055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3072] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3057] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3055] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3072] <... futex resumed>) = 0 [pid 3070] <... ioctl resumed>) = 0 [pid 3057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3056] <... futex resumed>) = 1 [pid 3055] <... futex resumed>) = 0 [pid 3054] <... futex resumed>) = 0 [pid 3057] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3055] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3054] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3070] close(3) = 0 [pid 3056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3054] <... futex resumed>) = 0 [pid 3070] mkdir("./bus", 0777 [pid 3056] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3054] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3072] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3070] <... mkdir resumed>) = 0 [pid 3072] <... mmap resumed>) = 0x7f64ff044000 [pid 3072] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3072] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3076], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3076 [pid 3072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3076 attached [pid 3076] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3076] memfd_create("syzkaller", 0) = 3 [pid 3076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3056] <... mount resumed>) = 0 [pid 3070] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3054] <... futex resumed>) = 0 [pid 3076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3076] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3076] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3054] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3056] <... futex resumed>) = 0 [pid 3054] <... futex resumed>) = 1 [pid 3056] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3054] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3069] <... mount resumed>) = 0 [pid 3069] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3069] chdir("./bus") = 0 [pid 3069] ioctl(4, LOOP_CLR_FD [pid 3056] <... open resumed>) = 6 [pid 3056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3057] <... open resumed>) = 6 [pid 3056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3057] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3055] <... futex resumed>) = 0 [pid 3057] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3055] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3054] <... futex resumed>) = 0 [pid 3057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3055] <... futex resumed>) = 0 [pid 3054] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3057] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3055] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3076] <... openat resumed>) = 4 [pid 3069] <... ioctl resumed>) = 0 [pid 3056] <... futex resumed>) = 0 [pid 3054] <... futex resumed>) = 1 [pid 377] <... umount2 resumed>) = 0 [pid 3076] ioctl(4, LOOP_SET_FD, 3 [pid 3069] close(4 [ 67.217190][ T3069] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 67.226563][ T3069] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/82/bus supports timestamps until 2038 (0x7fffffff) [pid 3056] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3054] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3057] <... write resumed>) = 1048576 [pid 3057] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3055] <... futex resumed>) = 0 [pid 3055] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3055] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3057] <... futex resumed>) = 1 [pid 3057] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3076] <... ioctl resumed>) = 0 [pid 3069] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3076] close(3 [pid 3069] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./83/bus", [pid 3076] <... close resumed>) = 0 [pid 3069] <... futex resumed>) = 1 [pid 3063] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3076] mkdir("./bus", 0777 [pid 3069] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3063] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3076] <... mkdir resumed>) = 0 [pid 3069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3063] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3076] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3069] chdir("./file0" [pid 3063] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3069] <... chdir resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 3069] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(4, [pid 3069] <... futex resumed>) = 1 [pid 3063] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3069] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3063] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 3069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3063] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3069] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3063] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 3056] <... write resumed>) = 1048576 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3069] <... open resumed>) = 4 [pid 3056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(4 [pid 3070] <... mount resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 377] rmdir("./83/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./83") = 0 [pid 377] mkdir("./84", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3080 [pid 3069] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3063] <... futex resumed>) = 0 [pid 3056] <... futex resumed>) = 1 [pid 3069] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3063] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3063] <... futex resumed>) = 0 [pid 3069] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3063] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3069] <... openat resumed>) = 5 [pid 3069] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3063] <... futex resumed>) = 0 [pid 3069] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3063] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3063] <... futex resumed>) = 0 [pid 3055] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3054] <... futex resumed>) = 0 [pid 3056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3069] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3063] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3055] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3054] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3080 attached [ 67.272743][ T3057] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 67.288182][ T3070] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 67.297933][ T3070] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/83/bus supports timestamps until 2038 (0x7fffffff) [ 67.311068][ T3057] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 3070] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3057] <... openat resumed>) = 7 [pid 3056] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3055] <... futex resumed>) = 0 [pid 3054] <... futex resumed>) = 0 [pid 3080] set_robust_list(0x55555713c5e0, 24 [pid 3070] <... openat resumed>) = 3 [pid 3069] <... write resumed>) = 196608 [pid 3057] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3054] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3080] <... set_robust_list resumed>) = 0 [pid 3070] chdir("./bus" [pid 3057] <... futex resumed>) = 0 [pid 3055] <... mmap resumed>) = 0x7f64f6d23000 [pid 3080] chdir("./84" [pid 3070] <... chdir resumed>) = 0 [pid 3057] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3055] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3080] <... chdir resumed>) = 0 [pid 3070] ioctl(4, LOOP_CLR_FD [pid 3055] <... mprotect resumed>) = 0 [pid 3080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3070] <... ioctl resumed>) = 0 [pid 3055] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3080] <... prctl resumed>) = 0 [pid 3070] close(4 [pid 3080] setpgid(0, 0 [pid 3070] <... close resumed>) = 0 [pid 3055] <... clone resumed>, parent_tid=[3083], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3083 [pid 3080] <... setpgid resumed>) = 0 [pid 3070] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3055] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3070] <... futex resumed>) = 1 [pid 3066] <... futex resumed>) = 0 [pid 3055] <... futex resumed>) = 0 [pid 3080] <... openat resumed>) = 3 [pid 3070] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3066] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3055] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3080] write(3, "1000", 4 [pid 3070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3066] <... futex resumed>) = 0 [pid 3080] <... write resumed>) = 4 [pid 3070] chdir("./file0" [pid 3066] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3080] close(3 [pid 3070] <... chdir resumed>) = 0 [pid 3080] <... close resumed>) = 0 [pid 3070] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3080] symlink("/dev/binderfs", "./binderfs" [pid 3070] <... futex resumed>) = 1 [pid 3066] <... futex resumed>) = 0 [pid 3080] <... symlink resumed>) = 0 [pid 3070] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3066] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3080] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3066] <... futex resumed>) = 0 [pid 3080] <... futex resumed>) = 0 [pid 3070] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3066] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3070] <... open resumed>) = 4 [pid 3080] <... mmap resumed>) = 0x7f64ff044000 [pid 3070] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3080] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3070] <... futex resumed>) = 1 [pid 3066] <... futex resumed>) = 0 [pid 3080] <... mprotect resumed>) = 0 [pid 3070] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3066] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3080] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3066] <... futex resumed>) = 0 [pid 3070] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3066] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3080] <... clone resumed>, parent_tid=[3084], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3084 [pid 3070] <... openat resumed>) = 5 [pid 3080] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3070] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3080] <... futex resumed>) = 0 [pid 3070] <... futex resumed>) = 1 [pid 3066] <... futex resumed>) = 0 [pid 3080] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3070] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3066] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3066] <... futex resumed>) = 0 [pid 3070] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3066] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3076] <... mount resumed>) = 0 [pid 3070] <... write resumed>) = 196608 [pid 3069] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3070] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3066] <... futex resumed>) = 0 [pid 3070] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3066] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3066] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3083 attached [pid 3070] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3066] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3083] set_robust_list(0x7f64f6d439e0, 24 [pid 3070] <... mount resumed>) = 0 [pid 3083] <... set_robust_list resumed>) = 0 [pid 3070] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3083] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3070] <... futex resumed>) = 1 [pid 3066] <... futex resumed>) = 0 [pid 3070] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3066] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3083] <... openat resumed>) = 8 [pid 3070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3066] <... futex resumed>) = 0 [pid 3083] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3070] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3066] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3083] <... futex resumed>) = 1 [pid 3070] <... open resumed>) = 6 [pid 3055] <... futex resumed>) = 0 [pid 3083] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3070] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3055] exit_group(0 [pid 3083] <... futex resumed>) = ? [pid 3070] <... futex resumed>) = 1 [pid 3066] <... futex resumed>) = 0 [pid 3057] <... futex resumed>) = ? [pid 3055] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 3084 attached [pid 3083] +++ exited with 0 +++ [pid 3076] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3070] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3069] <... futex resumed>) = 1 [pid 3066] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3063] <... futex resumed>) = 0 [pid 3057] +++ exited with 0 +++ [pid 3056] <... openat resumed>) = 7 [pid 3055] +++ exited with 0 +++ [pid 3084] set_robust_list(0x7f64ff0649e0, 24 [pid 3076] <... openat resumed>) = 3 [pid 3070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3069] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3066] <... futex resumed>) = 0 [pid 3063] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3055, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3070] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3066] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3084] <... set_robust_list resumed>) = 0 [pid 3076] chdir("./bus" [pid 3069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3063] <... futex resumed>) = 0 [pid 3056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3084] memfd_create("syzkaller", 0 [pid 3076] <... chdir resumed>) = 0 [pid 3069] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3063] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3084] <... memfd_create resumed>) = 3 [pid 3076] ioctl(4, LOOP_CLR_FD [pid 3069] <... mount resumed>) = 0 [pid 3056] <... futex resumed>) = 1 [pid 3054] <... futex resumed>) = 0 [pid 3084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3076] <... ioctl resumed>) = 0 [pid 3069] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3054] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3084] <... mmap resumed>) = 0x7f64f6c44000 [pid 3076] close(4 [pid 3069] <... futex resumed>) = 1 [pid 3063] <... futex resumed>) = 0 [pid 3056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3054] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3076] <... close resumed>) = 0 [pid 3069] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3063] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3056] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 372] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3076] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3063] <... futex resumed>) = 0 [pid 3056] <... openat resumed>) = 8 [pid 372] <... openat resumed>) = 3 [pid 3076] <... futex resumed>) = 1 [pid 3072] <... futex resumed>) = 0 [pid 3069] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3063] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3054] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] fstat(3, [pid 3076] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3069] <... open resumed>) = 6 [pid 3056] <... futex resumed>) = 0 [pid 3054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3072] <... futex resumed>) = 0 [pid 3069] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3054] exit_group(0 [pid 372] getdents64(3, [pid 3076] chdir("./file0" [pid 3072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3069] <... futex resumed>) = 1 [pid 3063] <... futex resumed>) = 0 [pid 3056] <... futex resumed>) = ? [pid 3054] <... exit_group resumed>) = ? [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3076] <... chdir resumed>) = 0 [pid 3069] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3063] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3076] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3063] <... futex resumed>) = 0 [pid 3056] +++ exited with 0 +++ [pid 3054] +++ exited with 0 +++ [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3076] <... futex resumed>) = 1 [pid 3072] <... futex resumed>) = 0 [pid 3069] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3063] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] lstat("./81/binderfs", [pid 3076] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3054, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3072] <... futex resumed>) = 0 [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 372] unlink("./81/binderfs" [pid 3076] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... restart_syscall resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 3070] <... write resumed>) = 1048576 [pid 372] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3076] <... open resumed>) = 4 [pid 3070] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3076] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3070] <... futex resumed>) = 1 [pid 3066] <... futex resumed>) = 0 [pid 373] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3076] <... futex resumed>) = 1 [pid 3072] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3076] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3072] <... futex resumed>) = 0 [pid 3066] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... openat resumed>) = 3 [pid 3076] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3070] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3066] <... futex resumed>) = 0 [pid 373] fstat(3, [pid 3076] <... openat resumed>) = 5 [pid 3069] <... write resumed>) = 1048576 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3076] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(3, [pid 3076] <... futex resumed>) = 1 [pid 3072] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3076] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3072] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3076] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] lstat("./85/binderfs", [pid 3076] <... write resumed>) = 196608 [pid 3066] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3076] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3069] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] unlink("./85/binderfs" [pid 3076] <... futex resumed>) = 1 [pid 3072] <... futex resumed>) = 0 [pid 3063] <... futex resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 3076] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3069] <... futex resumed>) = 1 [pid 3063] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 67.326547][ T3076] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 67.326667][ T3056] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 67.335891][ T3076] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/85/bus supports timestamps until 2038 (0x7fffffff) [ 67.361685][ T3056] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 373] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3072] <... futex resumed>) = 0 [pid 3069] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3063] <... futex resumed>) = 0 [pid 3076] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3076] <... mount resumed>) = 0 [pid 3076] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3063] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3076] <... futex resumed>) = 1 [pid 3072] <... futex resumed>) = 0 [pid 3076] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3072] <... futex resumed>) = 0 [pid 3076] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3084] <... write resumed>) = 1048576 [pid 3084] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3084] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3070] <... openat resumed>) = 7 [pid 3070] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3070] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3066] <... futex resumed>) = 0 [pid 3066] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3066] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3070] <... futex resumed>) = 0 [pid 3070] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3070] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3066] <... futex resumed>) = 0 [pid 3066] exit_group(0) = ? [pid 3070] <... futex resumed>) = ? [pid 3069] <... openat resumed>) = 7 [pid 3076] <... open resumed>) = 6 [pid 3069] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3076] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3072] <... futex resumed>) = 0 [pid 3076] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3069] <... futex resumed>) = 1 [pid 3063] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 3063] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3063] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./81/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./81/bus" [pid 3072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... rmdir resumed>) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./81") = 0 [pid 372] mkdir("./82", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3069] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3069] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3063] <... futex resumed>) = 0 [pid 3063] exit_group(0) = ? [pid 3069] <... futex resumed>) = ? [pid 3076] <... write resumed>) = 1048576 [pid 3076] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3072] <... futex resumed>) = 0 [pid 3072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3076] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3072] <... futex resumed>) = 0 [ 67.413173][ T3070] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 67.416606][ T3069] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 67.431734][ T3070] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 67.441244][ T3069] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 3072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3076] <... openat resumed>) = 7 [pid 3076] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3076] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3072] <... futex resumed>) = 0 [pid 3072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3076] <... futex resumed>) = 0 [pid 3076] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3076] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3072] <... futex resumed>) = 0 [pid 3076] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3072] exit_group(0) = ? [pid 3076] <... futex resumed>) = ? [pid 3084] <... openat resumed>) = 4 [pid 3076] +++ exited with 0 +++ [pid 3072] +++ exited with 0 +++ [pid 3069] +++ exited with 0 +++ [pid 3063] +++ exited with 0 +++ [pid 372] <... openat resumed>) = 3 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3063, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 372] ioctl(3, LOOP_CLR_FD [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... restart_syscall resumed>) = 0 [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3085 [pid 375] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./82/binderfs") = 0 [pid 375] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3084] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 3085 attached [pid 3085] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3085] chdir("./82") = 0 [pid 3085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3085] setpgid(0, 0) = 0 [pid 3085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3085] write(3, "1000", 4) = 4 [pid 3085] close(3) = 0 [pid 3085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3085] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3085] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3085] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 373] <... umount2 resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3072, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 3085] <... clone resumed>, parent_tid=[3087], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3087 [pid 3085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3087 attached [pid 3087] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3084] <... ioctl resumed>) = 0 [pid 3084] close(3 [pid 3087] memfd_create("syzkaller", 0) = 3 [pid 3087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3084] <... close resumed>) = 0 [pid 376] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3084] mkdir("./bus", 0777 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3084] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3087] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3087] ioctl(4, LOOP_SET_FD, 3 [pid 376] <... openat resumed>) = 3 [pid 376] fstat(3, [pid 3084] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] lstat("./85/bus", [pid 3070] +++ exited with 0 +++ [pid 3066] +++ exited with 0 +++ [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] lstat("./85/binderfs", [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3066, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 373] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./85/binderfs" [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 67.475388][ T3076] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 67.489505][ T3076] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 373] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... unlink resumed>) = 0 [pid 373] <... openat resumed>) = 4 [pid 376] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] fstat(4, [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3087] <... ioctl resumed>) = 0 [pid 3087] close(3) = 0 [pid 3087] mkdir("./bus", 0777 [pid 373] getdents64(4, [pid 374] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] <... openat resumed>) = 3 [pid 374] fstat(3, [pid 373] getdents64(4, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3087] <... mkdir resumed>) = 0 [pid 3087] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 374] getdents64(3, [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] close(4) = 0 [pid 374] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] rmdir("./85/bus") = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] getdents64(3, [pid 374] lstat("./83/binderfs", [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] close(3 [pid 374] unlink("./83/binderfs" [pid 373] <... close resumed>) = 0 [pid 374] <... unlink resumed>) = 0 [pid 373] rmdir("./85" [pid 374] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... rmdir resumed>) = 0 [pid 373] mkdir("./86", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 375] <... umount2 resumed>) = 0 [pid 375] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./82/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./82/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./82") = 0 [pid 375] mkdir("./83", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3 [pid 3084] <... mount resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3084] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3091 ./strace-static-x86_64: Process 3091 attached [pid 3084] chdir("./bus") = 0 [pid 3084] ioctl(4, LOOP_CLR_FD [pid 3091] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3091] chdir("./83") = 0 [pid 3091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3091] setpgid(0, 0) = 0 [pid 3091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3091] write(3, "1000", 4) = 4 [pid 3091] close(3) = 0 [pid 3091] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3091] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3091] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3091] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3094], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3094 [pid 3091] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3091] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3094 attached [ 67.555275][ T3084] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 67.564316][ T3084] ext4 filesystem being mounted at /root/syzkaller.43WzWH/84/bus supports timestamps until 2038 (0x7fffffff) [ 67.585995][ T3087] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 3094] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3087] <... mount resumed>) = 0 [pid 3094] memfd_create("syzkaller", 0 [pid 3087] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3094] <... memfd_create resumed>) = 3 [pid 3087] <... openat resumed>) = 3 [pid 3094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3087] chdir("./bus" [pid 3094] <... mmap resumed>) = 0x7f64f6c44000 [pid 3087] <... chdir resumed>) = 0 [pid 3094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3087] ioctl(4, LOOP_CLR_FD [pid 3094] <... write resumed>) = 1048576 [pid 3094] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3094] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3084] <... ioctl resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3084] close(4) = 0 [pid 3084] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3084] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3095 [pid 376] <... umount2 resumed>) = 0 [pid 3087] <... ioctl resumed>) = 0 [pid 3087] close(4) = 0 [pid 3087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3087] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3085] <... futex resumed>) = 0 [pid 3080] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3095 attached [pid 3095] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3095] chdir("./86") = 0 [pid 3095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3095] setpgid(0, 0) = 0 [pid 3095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3095] write(3, "1000", 4) = 4 [pid 3095] close(3) = 0 [pid 3095] symlink("/dev/binderfs", "./binderfs") = 0 [ 67.595233][ T3087] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/82/bus supports timestamps until 2038 (0x7fffffff) [pid 3085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3080] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3095] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3095] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3095] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... umount2 resumed>) = 0 [pid 3095] <... clone resumed>, parent_tid=[3096], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3096 [pid 3095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3096 attached [pid 3096] set_robust_list(0x7f64ff0649e0, 24 [pid 3087] <... futex resumed>) = 0 [pid 3085] <... futex resumed>) = 1 [pid 3084] <... futex resumed>) = 0 [pid 3080] <... futex resumed>) = 1 [pid 3087] chdir("./file0" [pid 3085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3084] chdir("./file0" [pid 3080] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3094] <... openat resumed>) = 4 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3084] <... chdir resumed>) = 0 [pid 3087] <... chdir resumed>) = 0 [pid 3084] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] lstat("./85/bus", [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3084] <... futex resumed>) = 1 [pid 3080] <... futex resumed>) = 0 [pid 3094] ioctl(4, LOOP_SET_FD, 3 [pid 3087] <... futex resumed>) = 1 [pid 3085] <... futex resumed>) = 0 [pid 3084] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3080] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] lstat("./83/bus", [pid 3087] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3080] <... futex resumed>) = 0 [pid 3087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3087] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3085] <... futex resumed>) = 0 [pid 3084] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3080] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3084] <... open resumed>) = 4 [pid 3087] <... open resumed>) = 4 [pid 3084] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3084] <... futex resumed>) = 1 [pid 3080] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 374] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3087] <... futex resumed>) = 1 [pid 3085] <... futex resumed>) = 0 [pid 3084] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3087] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3080] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3085] <... futex resumed>) = 0 [pid 3084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3080] <... futex resumed>) = 0 [pid 376] fstat(4, [pid 374] <... openat resumed>) = 4 [pid 3087] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3084] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3080] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] fstat(4, [pid 3087] <... openat resumed>) = 5 [pid 3084] <... openat resumed>) = 5 [pid 376] getdents64(4, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3084] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3087] <... futex resumed>) = 1 [pid 3085] <... futex resumed>) = 0 [pid 3084] <... futex resumed>) = 1 [pid 3080] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, [pid 3096] <... set_robust_list resumed>) = 0 [pid 3096] memfd_create("syzkaller", 0) = 3 [pid 3096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3087] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3084] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3080] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3087] <... write resumed>) = 196608 [pid 3085] <... futex resumed>) = 0 [pid 3084] <... write resumed>) = 196608 [pid 3080] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] getdents64(4, [pid 3087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3084] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3080] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] close(4 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3087] <... futex resumed>) = 0 [pid 3085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3084] <... futex resumed>) = 0 [pid 3080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... close resumed>) = 0 [pid 374] close(4 [pid 3087] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3084] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3080] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] rmdir("./85/bus" [pid 374] <... close resumed>) = 0 [pid 3087] <... mount resumed>) = 0 [pid 3085] <... futex resumed>) = 0 [pid 3084] <... mount resumed>) = 0 [pid 3080] <... futex resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 374] rmdir("./83/bus" [pid 3087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3084] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3080] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(3, [pid 374] <... rmdir resumed>) = 0 [pid 3087] <... futex resumed>) = 0 [pid 3085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3084] <... futex resumed>) = 0 [pid 3080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] getdents64(3, [pid 3094] <... ioctl resumed>) = 0 [pid 3087] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3084] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3080] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3094] close(3 [pid 3087] <... open resumed>) = 6 [pid 3085] <... futex resumed>) = 0 [pid 3084] <... open resumed>) = 6 [pid 3080] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 374] close(3 [pid 3094] <... close resumed>) = 0 [pid 3087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3084] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3080] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] rmdir("./85" [pid 374] <... close resumed>) = 0 [pid 3094] mkdir("./bus", 0777 [pid 3087] <... futex resumed>) = 0 [pid 3085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3084] <... futex resumed>) = 0 [pid 3080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... rmdir resumed>) = 0 [pid 374] rmdir("./83" [pid 3096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3094] <... mkdir resumed>) = 0 [pid 3087] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3084] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3080] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3085] <... futex resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 3085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3080] <... futex resumed>) = 0 [pid 374] mkdir("./84", 0777 [pid 3080] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] mkdir("./86", 0777 [pid 374] <... mkdir resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 3 [pid 3084] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 376] ioctl(3, LOOP_CLR_FD [pid 374] ioctl(3, LOOP_CLR_FD [pid 3096] <... write resumed>) = 1048576 [pid 3096] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3096] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 3096] ioctl(4, LOOP_SET_FD, 3 [pid 3094] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3087] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] close(3 [pid 374] close(3 [pid 376] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3099 [pid 3084] <... write resumed>) = 1048576 [pid 3084] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3080] <... futex resumed>) = 0 [pid 3080] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3080] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3100 [pid 3084] <... futex resumed>) = 1 [pid 3084] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3096] <... ioctl resumed>) = 0 [pid 3096] close(3) = 0 [pid 3096] mkdir("./bus", 0777) = 0 [pid 3096] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue"./strace-static-x86_64: Process 3100 attached ./strace-static-x86_64: Process 3099 attached [pid 3100] set_robust_list(0x55555713c5e0, 24 [pid 3099] set_robust_list(0x55555713c5e0, 24 [pid 3100] <... set_robust_list resumed>) = 0 [pid 3099] <... set_robust_list resumed>) = 0 [pid 3100] chdir("./84" [pid 3099] chdir("./86" [pid 3100] <... chdir resumed>) = 0 [pid 3099] <... chdir resumed>) = 0 [pid 3100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3100] <... prctl resumed>) = 0 [pid 3099] <... prctl resumed>) = 0 [pid 3100] setpgid(0, 0 [pid 3099] setpgid(0, 0 [pid 3085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3085] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3085] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3085] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3103], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3103 [pid 3085] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3103 attached [pid 3100] <... setpgid resumed>) = 0 [pid 3099] <... setpgid resumed>) = 0 [pid 3085] <... futex resumed>) = 0 [pid 3094] <... mount resumed>) = 0 [pid 3103] set_robust_list(0x7f64f6d439e0, 24 [pid 3085] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3080] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3080] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3087] <... write resumed>) = 1048576 [pid 3080] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3080] <... clone resumed>, parent_tid=[3104], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3104 [pid 3087] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3080] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3080] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3104 attached [pid 3104] set_robust_list(0x7f64f6d439e0, 24) = 0 [ 67.689267][ T3084] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 67.712084][ T3094] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 67.722384][ T3094] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/83/bus supports timestamps until 2038 (0x7fffffff) [pid 3104] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3100] write(3, "1000", 4) = 4 [pid 3100] close(3) = 0 [pid 3100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3100] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3100] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3100] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3103] <... set_robust_list resumed>) = 0 [pid 3099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3094] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 3105 attached [pid 3103] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3100] <... clone resumed>, parent_tid=[3105], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3105 [pid 3099] <... openat resumed>) = 3 [pid 3094] <... openat resumed>) = 3 [pid 3104] <... openat resumed>) = 8 [pid 3084] <... openat resumed>) = 7 [pid 3100] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3099] write(3, "1000", 4 [pid 3094] chdir("./bus" [pid 3100] <... futex resumed>) = 0 [pid 3099] <... write resumed>) = 4 [pid 3094] <... chdir resumed>) = 0 [pid 3104] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3100] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3099] close(3 [pid 3094] ioctl(4, LOOP_CLR_FD [pid 3104] <... futex resumed>) = 1 [pid 3099] <... close resumed>) = 0 [pid 3094] <... ioctl resumed>) = 0 [pid 3080] <... futex resumed>) = 0 [pid 3104] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3099] symlink("/dev/binderfs", "./binderfs" [pid 3094] close(4 [pid 3099] <... symlink resumed>) = 0 [pid 3094] <... close resumed>) = 0 [pid 3099] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3094] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3099] <... futex resumed>) = 0 [pid 3094] <... futex resumed>) = 1 [pid 3091] <... futex resumed>) = 0 [pid 3105] set_robust_list(0x7f64ff0649e0, 24 [pid 3099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3094] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3091] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3105] <... set_robust_list resumed>) = 0 [pid 3099] <... mmap resumed>) = 0x7f64ff044000 [pid 3094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3091] <... futex resumed>) = 0 [pid 3105] memfd_create("syzkaller", 0 [pid 3099] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3094] chdir("./file0" [pid 3091] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3105] <... memfd_create resumed>) = 3 [pid 3099] <... mprotect resumed>) = 0 [pid 3105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3099] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3105] <... mmap resumed>) = 0x7f64f6c44000 ./strace-static-x86_64: Process 3106 attached [pid 3099] <... clone resumed>, parent_tid=[3106], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3106 [pid 3094] <... chdir resumed>) = 0 [pid 3084] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3106] set_robust_list(0x7f64ff0649e0, 24 [pid 3084] <... futex resumed>) = 0 [pid 3106] <... set_robust_list resumed>) = 0 [pid 3084] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3106] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3105] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3105] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 3105] ioctl(4, LOOP_SET_FD, 3 [pid 3099] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3106] <... futex resumed>) = 0 [pid 3103] <... openat resumed>) = 7 [pid 3099] <... futex resumed>) = 1 [pid 3094] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3106] memfd_create("syzkaller", 0 [pid 3099] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3094] <... futex resumed>) = 1 [pid 3091] <... futex resumed>) = 0 [pid 3080] exit_group(0 [pid 3106] <... memfd_create resumed>) = 3 [pid 3104] <... futex resumed>) = ? [pid 3094] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3091] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3084] <... futex resumed>) = ? [pid 3080] <... exit_group resumed>) = ? [pid 3106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3104] +++ exited with 0 +++ [pid 3091] <... futex resumed>) = 0 [pid 3084] +++ exited with 0 +++ [pid 3080] +++ exited with 0 +++ [pid 3094] <... open resumed>) = 4 [pid 3106] <... mmap resumed>) = 0x7f64f6c44000 [pid 3091] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3105] <... ioctl resumed>) = 0 [pid 3103] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3094] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3080, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 3094] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./84/binderfs") = 0 [pid 377] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3105] close(3) = 0 [pid 3105] mkdir("./bus", 0777) = 0 [pid 3105] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3091] <... futex resumed>) = 0 [pid 3085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3091] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3094] <... futex resumed>) = 0 [pid 3091] <... futex resumed>) = 1 [pid 3087] <... futex resumed>) = 0 [pid 3085] <... futex resumed>) = 1 [pid 3094] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3091] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3087] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3094] <... openat resumed>) = 5 [pid 3087] <... openat resumed>) = 8 [pid 3106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3094] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3094] <... futex resumed>) = 1 [pid 3091] <... futex resumed>) = 0 [pid 3087] <... futex resumed>) = 1 [pid 3085] <... futex resumed>) = 0 [pid 3103] <... futex resumed>) = 0 [ 67.734695][ T3084] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 67.744768][ T3103] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 67.759135][ T3103] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 67.777620][ T3096] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 3103] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3106] <... write resumed>) = 1048576 [pid 3094] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3091] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3087] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3085] exit_group(0 [pid 3094] <... write resumed>) = 196608 [pid 3091] <... futex resumed>) = 0 [pid 3087] <... futex resumed>) = ? [pid 3085] <... exit_group resumed>) = ? [pid 3103] <... futex resumed>) = ? [pid 3094] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3091] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3087] +++ exited with 0 +++ [pid 3103] +++ exited with 0 +++ [pid 3094] <... futex resumed>) = 0 [pid 3091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3085] +++ exited with 0 +++ [pid 3094] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3091] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3085, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3094] <... mount resumed>) = 0 [pid 3091] <... futex resumed>) = 0 [pid 3094] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3091] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3094] <... futex resumed>) = 0 [pid 3091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3094] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3091] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3094] <... open resumed>) = 6 [pid 3091] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3094] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3091] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... openat resumed>) = 3 [pid 3094] <... futex resumed>) = 0 [pid 3091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] fstat(3, [pid 3094] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3091] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3091] <... futex resumed>) = 0 [pid 372] getdents64(3, [pid 3094] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3091] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3106] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3106] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 3106] ioctl(4, LOOP_SET_FD, 3 [pid 372] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./82/binderfs") = 0 [pid 3106] <... ioctl resumed>) = 0 [pid 3096] <... mount resumed>) = 0 [pid 3106] close(3) = 0 [pid 3106] mkdir("./bus", 0777) = 0 [pid 3106] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 372] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3096] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3096] chdir("./bus") = 0 [ 67.790487][ T3096] ext4 filesystem being mounted at /root/syzkaller.k3ECep/86/bus supports timestamps until 2038 (0x7fffffff) [ 67.819549][ T3106] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 67.819839][ T3105] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 3096] ioctl(4, LOOP_CLR_FD [pid 3094] <... write resumed>) = 1048576 [pid 3091] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3091] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3091] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3091] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3091] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3115], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3115 [pid 3091] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3091] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3115 attached [pid 3115] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3115] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3106] <... mount resumed>) = 0 [pid 3105] <... mount resumed>) = 0 [pid 3094] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3094] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3105] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3105] chdir("./bus") = 0 [pid 3105] ioctl(4, LOOP_CLR_FD [pid 3106] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3106] chdir("./bus") = 0 [pid 3106] ioctl(4, LOOP_CLR_FD [pid 3115] <... openat resumed>) = 7 [pid 3115] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3115] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3091] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 3091] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3094] <... futex resumed>) = 0 [pid 3091] <... futex resumed>) = 1 [pid 377] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3094] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3091] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3094] <... openat resumed>) = 8 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3094] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3091] <... futex resumed>) = 0 [pid 377] lstat("./84/bus", [pid 3094] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3091] exit_group(0 [pid 3094] <... futex resumed>) = ? [pid 3091] <... exit_group resumed>) = ? [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3115] <... futex resumed>) = ? [pid 3094] +++ exited with 0 +++ [pid 377] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./84/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./84") = 0 [pid 377] mkdir("./85", 0777) = 0 [ 67.829403][ T3106] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/86/bus supports timestamps until 2038 (0x7fffffff) [ 67.837573][ T3105] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/84/bus supports timestamps until 2038 (0x7fffffff) [ 67.854067][ T3115] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 67.874867][ T3115] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3106] <... ioctl resumed>) = 0 [pid 3105] <... ioctl resumed>) = 0 [pid 3096] <... ioctl resumed>) = 0 [pid 3115] +++ exited with 0 +++ [pid 3106] close(4 [pid 3105] close(4 [pid 3096] close(4 [pid 3091] +++ exited with 0 +++ [pid 377] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 3105] <... close resumed>) = 0 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3091, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 375] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3096] <... close resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] unlink("./83/binderfs" [pid 372] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3105] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3096] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... unlink resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3096] <... futex resumed>) = 1 [pid 3095] <... futex resumed>) = 0 [pid 377] close(3 [pid 375] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3096] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 372] lstat("./82/bus", [pid 3096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3095] <... futex resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3096] chdir("./file0" [pid 3095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3106] <... close resumed>) = 0 [pid 3106] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3105] <... futex resumed>) = 1 [pid 3100] <... futex resumed>) = 0 [pid 3096] <... chdir resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3116 [pid 372] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3100] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3096] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3100] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3096] <... futex resumed>) = 1 [pid 3095] <... futex resumed>) = 0 [pid 3105] chdir("./file0" [pid 3100] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3096] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3095] <... futex resumed>) = 0 [pid 3106] <... futex resumed>) = 1 [pid 3105] <... chdir resumed>) = 0 [pid 3099] <... futex resumed>) = 0 [pid 3096] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... openat resumed>) = 4 [pid 3106] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3105] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3099] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3105] <... futex resumed>) = 1 [pid 3100] <... futex resumed>) = 0 [pid 3099] <... futex resumed>) = 0 [pid 3096] <... open resumed>) = 4 [pid 372] fstat(4, [pid 3106] chdir("./file0" [pid 3099] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3100] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3106] <... chdir resumed>) = 0 [pid 3105] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3100] <... futex resumed>) = 0 [pid 3096] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3106] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3106] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3116 attached [pid 3116] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3116] chdir("./85") = 0 [pid 3116] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3116] setpgid(0, 0) = 0 [pid 3116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3100] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3099] <... futex resumed>) = 0 [pid 3096] <... futex resumed>) = 1 [pid 3095] <... futex resumed>) = 0 [pid 372] getdents64(4, [pid 3099] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3096] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3106] <... futex resumed>) = 0 [pid 3099] <... futex resumed>) = 1 [pid 3096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3095] <... futex resumed>) = 0 [pid 3105] <... open resumed>) = 4 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3106] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3099] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3096] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3105] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(4, [pid 3096] <... openat resumed>) = 5 [pid 3116] <... openat resumed>) = 3 [pid 3096] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3106] <... open resumed>) = 4 [pid 3105] <... futex resumed>) = 1 [pid 3100] <... futex resumed>) = 0 [pid 3096] <... futex resumed>) = 1 [pid 3095] <... futex resumed>) = 0 [pid 372] close(4 [pid 3100] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3096] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3106] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3105] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3100] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3116] write(3, "1000", 4) = 4 [pid 3116] close(3) = 0 [pid 3116] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3116] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3116] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3116] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3096] <... write resumed>) = 196608 [pid 3100] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3095] <... futex resumed>) = 0 [pid 3106] <... futex resumed>) = 1 [pid 3105] <... openat resumed>) = 5 [pid 3099] <... futex resumed>) = 0 [pid 3096] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] rmdir("./82/bus" [pid 3116] <... clone resumed>, parent_tid=[3117], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3117 [pid 3106] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3105] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3099] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3096] <... futex resumed>) = 0 [pid 3095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3116] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3099] <... futex resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 3095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3116] <... futex resumed>) = 0 [pid 3106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3105] <... futex resumed>) = 1 [pid 3100] <... futex resumed>) = 0 [pid 3099] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3096] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3095] <... futex resumed>) = 0 [pid 372] getdents64(3, [pid 3116] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3106] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3105] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3100] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3096] <... mount resumed>) = 0 [pid 3095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3106] <... openat resumed>) = 5 [pid 3100] <... futex resumed>) = 0 [pid 3096] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 3106] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3100] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3096] <... futex resumed>) = 1 [pid 3095] <... futex resumed>) = 0 [pid 3106] <... futex resumed>) = 1 [pid 3099] <... futex resumed>) = 0 [pid 3096] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 3106] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3099] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3095] <... futex resumed>) = 0 [pid 3106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3099] <... futex resumed>) = 0 [pid 3095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] rmdir("./82" [pid 3106] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3099] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... rmdir resumed>) = 0 [pid 372] mkdir("./83", 0777./strace-static-x86_64: Process 3117 attached [pid 3117] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3117] memfd_create("syzkaller", 0) = 3 [pid 3117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3106] <... write resumed>) = 196608 [pid 372] <... mkdir resumed>) = 0 [pid 3106] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3106] <... futex resumed>) = 1 [pid 3099] <... futex resumed>) = 0 [pid 3099] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3106] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3099] <... futex resumed>) = 0 [pid 3106] <... mount resumed>) = 0 [pid 3099] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3106] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3105] <... write resumed>) = 196608 [pid 3106] <... futex resumed>) = 1 [pid 3099] <... futex resumed>) = 0 [pid 3099] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3106] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3099] <... futex resumed>) = 0 [pid 3099] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3105] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3100] <... futex resumed>) = 0 [pid 3105] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3100] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3100] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3105] <... mount resumed>) = 0 [pid 3105] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3100] <... futex resumed>) = 0 [pid 3100] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3100] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3105] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 375] <... umount2 resumed>) = 0 [pid 3096] <... open resumed>) = 6 [pid 372] <... openat resumed>) = 3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 3106] <... open resumed>) = 6 [pid 3096] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 3106] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3096] <... futex resumed>) = 1 [pid 3095] <... futex resumed>) = 0 [pid 3106] <... futex resumed>) = 1 [pid 3099] <... futex resumed>) = 0 [pid 3096] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 3106] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3099] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3095] <... futex resumed>) = 0 [pid 375] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3117] <... write resumed>) = 1048576 [pid 3117] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3117] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3105] <... open resumed>) = 6 [pid 3099] <... futex resumed>) = 0 [pid 3096] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3105] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3099] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3105] <... futex resumed>) = 1 [pid 3105] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3117] <... openat resumed>) = 4 [pid 3117] ioctl(4, LOOP_SET_FD, 3 [pid 3100] <... futex resumed>) = 0 [pid 375] lstat("./83/bus", [pid 3100] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3118 [pid 3105] <... futex resumed>) = 0 [pid 3100] <... futex resumed>) = 1 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3105] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3100] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./83/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./83") = 0 [pid 375] mkdir("./84", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 3118 attached [pid 3118] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3118] chdir("./83") = 0 [pid 3118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3118] setpgid(0, 0) = 0 [pid 3118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3118] write(3, "1000", 4) = 4 [pid 3118] close(3) = 0 [pid 3117] <... ioctl resumed>) = 0 [pid 3106] <... write resumed>) = 1048576 [pid 3096] <... write resumed>) = 1048576 [pid 375] <... openat resumed>) = 3 [pid 3118] symlink("/dev/binderfs", "./binderfs" [pid 3117] close(3 [pid 3106] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3096] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] ioctl(3, LOOP_CLR_FD [pid 3118] <... symlink resumed>) = 0 [pid 3117] <... close resumed>) = 0 [pid 3106] <... futex resumed>) = 1 [pid 3099] <... futex resumed>) = 0 [pid 3096] <... futex resumed>) = 1 [pid 3095] <... futex resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3118] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3117] mkdir("./bus", 0777 [pid 3106] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3099] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3096] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 3118] <... futex resumed>) = 0 [pid 3117] <... mkdir resumed>) = 0 [pid 3105] <... write resumed>) = 1048576 [pid 3099] <... futex resumed>) = 0 [pid 3117] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3105] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3100] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3099] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3095] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 3118] <... mmap resumed>) = 0x7f64ff044000 [pid 3100] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3118] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3100] <... futex resumed>) = 0 [pid 3118] <... mprotect resumed>) = 0 [pid 3100] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3120 [pid 3118] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3121], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3121 [pid 3118] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3118] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3121 attached [pid 3121] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3121] memfd_create("syzkaller", 0) = 3 [pid 3121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 3120 attached [pid 3120] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3120] chdir("./84") = 0 [pid 3120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3120] setpgid(0, 0) = 0 [pid 3120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3120] write(3, "1000", 4) = 4 [pid 3120] close(3) = 0 [pid 3120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3120] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3120] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3120] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3122], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3122 [pid 3120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3122 attached [pid 3106] <... openat resumed>) = 7 [pid 3105] <... futex resumed>) = 1 [pid 3100] <... futex resumed>) = 0 [pid 3106] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3100] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=39000000} [pid 3106] <... futex resumed>) = 1 [pid 3099] <... futex resumed>) = 0 [pid 3105] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 68.010661][ T3106] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 68.026851][ T3096] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 68.030669][ T3106] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 3106] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3099] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3099] <... futex resumed>) = 0 [pid 3106] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3099] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3106] <... openat resumed>) = 8 [pid 3106] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3099] <... futex resumed>) = 0 [pid 3106] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3099] exit_group(0 [pid 3106] <... futex resumed>) = ? [pid 3099] <... exit_group resumed>) = ? [pid 3106] +++ exited with 0 +++ [pid 3099] +++ exited with 0 +++ [pid 3122] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3122] memfd_create("syzkaller", 0) = 3 [pid 3122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3121] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3121] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3121] ioctl(4, LOOP_SET_FD, 3 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3099, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 376] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3122] <... write resumed>) = 1048576 [pid 3096] <... openat resumed>) = 7 [pid 3096] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3095] <... futex resumed>) = 0 [pid 3095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3096] <... futex resumed>) = 1 [pid 3122] munmap(0x7f64f6c44000, 1048576 [pid 3096] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3122] <... munmap resumed>) = 0 [pid 3096] <... openat resumed>) = 8 [pid 3096] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3095] <... futex resumed>) = 0 [pid 3095] exit_group(0) = ? [pid 3096] <... futex resumed>) = ? [pid 3122] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3121] <... ioctl resumed>) = 0 [pid 3121] close(3) = 0 [pid 3121] mkdir("./bus", 0777) = 0 [pid 3121] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 376] <... openat resumed>) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./86/binderfs") = 0 [pid 376] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3122] <... openat resumed>) = 4 [pid 3122] ioctl(4, LOOP_SET_FD, 3 [pid 3096] +++ exited with 0 +++ [pid 3095] +++ exited with 0 +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3095, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 3100] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 373] <... restart_syscall resumed>) = 0 [pid 3100] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 373] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3100] <... mmap resumed>) = 0x7f64f6d23000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3100] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 373] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3100] <... mprotect resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 3100] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3100] <... clone resumed>, parent_tid=[3126], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3126 [pid 373] getdents64(3, [pid 3100] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3100] <... futex resumed>) = 0 [pid 373] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3100] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./86/binderfs") = 0 [pid 373] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3105] <... openat resumed>) = 7 [pid 3105] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3105] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3126 attached [pid 3122] <... ioctl resumed>) = 0 [pid 3122] close(3) = 0 [pid 3122] mkdir("./bus", 0777) = 0 [ 68.053525][ T3096] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 68.054249][ T3105] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 68.078285][ T3105] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 68.090880][ T3117] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [pid 3122] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3126] set_robust_list(0x7f64f6d439e0, 24 [pid 3117] <... mount resumed>) = 0 [pid 3126] <... set_robust_list resumed>) = 0 [pid 3126] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3126] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3126] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3117] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3117] chdir("./bus") = 0 [pid 3117] ioctl(4, LOOP_CLR_FD [pid 3100] <... futex resumed>) = 0 [pid 3100] exit_group(0 [pid 3126] <... futex resumed>) = ? [pid 3100] <... exit_group resumed>) = ? [pid 3126] +++ exited with 0 +++ [pid 3105] <... futex resumed>) = ? [pid 3121] <... mount resumed>) = 0 [pid 3121] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3121] chdir("./bus") = 0 [pid 3121] ioctl(4, LOOP_CLR_FD [pid 3122] <... mount resumed>) = 0 [pid 3122] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3122] chdir("./bus") = 0 [pid 3122] ioctl(4, LOOP_CLR_FD [pid 3121] <... ioctl resumed>) = 0 [pid 3117] <... ioctl resumed>) = 0 [pid 3105] +++ exited with 0 +++ [pid 3100] +++ exited with 0 +++ [pid 376] <... umount2 resumed>) = 0 [pid 3121] close(4 [pid 3117] close(4 [pid 376] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3100, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- [pid 3121] <... close resumed>) = 0 [pid 3117] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3121] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3117] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] lstat("./86/bus", [pid 3121] <... futex resumed>) = 1 [pid 3118] <... futex resumed>) = 0 [pid 3117] <... futex resumed>) = 1 [pid 3116] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3121] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3118] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3117] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3116] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3118] <... futex resumed>) = 0 [pid 3117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3116] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3121] chdir("./file0" [pid 3118] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3117] chdir("./file0" [pid 3116] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... openat resumed>) = 3 [pid 3122] <... ioctl resumed>) = 0 [pid 3121] <... chdir resumed>) = 0 [pid 3117] <... chdir resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 374] fstat(3, [pid 3122] close(4 [pid 3121] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 68.100108][ T3117] ext4 filesystem being mounted at /root/syzkaller.43WzWH/85/bus supports timestamps until 2038 (0x7fffffff) [ 68.112786][ T3121] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 68.115955][ T3122] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 68.122068][ T3121] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/83/bus supports timestamps until 2038 (0x7fffffff) [ 68.131060][ T3122] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/84/bus supports timestamps until 2038 (0x7fffffff) [pid 376] fstat(4, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3122] <... close resumed>) = 0 [pid 3121] <... futex resumed>) = 1 [pid 3118] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, [pid 3122] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3121] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3118] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3122] <... futex resumed>) = 1 [pid 3121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3120] <... futex resumed>) = 0 [pid 3118] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3122] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3121] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3118] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3117] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = 0 [pid 3122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3121] <... open resumed>) = 4 [pid 3120] <... futex resumed>) = 0 [pid 3117] <... futex resumed>) = 1 [pid 3116] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] lstat("./84/binderfs", [pid 3122] chdir("./file0" [pid 3121] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3117] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3116] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(4 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3122] <... chdir resumed>) = 0 [pid 3121] <... futex resumed>) = 1 [pid 3118] <... futex resumed>) = 0 [pid 3117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3116] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 374] unlink("./84/binderfs" [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3122] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3121] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3118] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3117] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3116] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] rmdir("./86/bus" [pid 374] <... unlink resumed>) = 0 [pid 373] lstat("./86/bus", [pid 3122] <... futex resumed>) = 1 [pid 3121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3120] <... futex resumed>) = 0 [pid 3118] <... futex resumed>) = 0 [pid 3117] <... open resumed>) = 4 [pid 376] <... rmdir resumed>) = 0 [pid 374] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3122] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3121] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3118] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3117] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 373] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3121] <... openat resumed>) = 5 [pid 3120] <... futex resumed>) = 0 [pid 3117] <... futex resumed>) = 1 [pid 3116] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3122] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3121] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3117] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3116] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 373] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3121] <... futex resumed>) = 1 [pid 3118] <... futex resumed>) = 0 [pid 3117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3116] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 373] <... openat resumed>) = 4 [pid 3122] <... open resumed>) = 4 [pid 3121] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3118] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3117] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3116] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] rmdir("./86" [pid 373] fstat(4, [pid 3122] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3118] <... futex resumed>) = 0 [pid 3117] <... openat resumed>) = 5 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3122] <... futex resumed>) = 1 [pid 3121] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3120] <... futex resumed>) = 0 [pid 3118] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3117] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3122] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3117] <... futex resumed>) = 1 [pid 3116] <... futex resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 373] getdents64(4, [pid 3122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3120] <... futex resumed>) = 0 [pid 3117] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3116] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] mkdir("./87", 0777 [pid 3122] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3116] <... futex resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 3122] <... openat resumed>) = 5 [pid 3117] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3116] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3122] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3121] <... write resumed>) = 196608 [pid 3117] <... write resumed>) = 196608 [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3122] <... futex resumed>) = 1 [pid 3121] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3120] <... futex resumed>) = 0 [pid 3117] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(4, [pid 3122] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3121] <... futex resumed>) = 1 [pid 3120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3118] <... futex resumed>) = 0 [pid 3117] <... futex resumed>) = 1 [pid 3116] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3121] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3120] <... futex resumed>) = 0 [pid 3118] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3117] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3116] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3122] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3118] <... futex resumed>) = 0 [pid 3117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3116] <... futex resumed>) = 0 [pid 373] close(4 [pid 3122] <... write resumed>) = 196608 [pid 3121] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3118] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3117] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3116] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... close resumed>) = 0 [pid 3122] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3121] <... mount resumed>) = 0 [pid 3117] <... mount resumed>) = 0 [pid 373] rmdir("./86/bus" [pid 3122] <... futex resumed>) = 1 [pid 3121] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3120] <... futex resumed>) = 0 [pid 3117] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3122] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3117] <... futex resumed>) = 1 [pid 3116] <... futex resumed>) = 0 [pid 3122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3121] <... futex resumed>) = 1 [pid 3120] <... futex resumed>) = 0 [pid 3118] <... futex resumed>) = 0 [pid 3117] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3116] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... rmdir resumed>) = 0 [pid 3122] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3121] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3118] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3116] <... futex resumed>) = 0 [pid 3122] <... mount resumed>) = 0 [pid 3121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3118] <... futex resumed>) = 0 [pid 3117] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3116] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(3, [pid 3122] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3121] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3118] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3122] <... futex resumed>) = 1 [pid 3120] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3122] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 3122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3120] <... futex resumed>) = 0 [pid 3122] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... close resumed>) = 0 [pid 373] rmdir("./86") = 0 [pid 373] mkdir("./87", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3122] <... open resumed>) = 6 [pid 3121] <... open resumed>) = 6 [pid 3117] <... open resumed>) = 6 [pid 376] <... openat resumed>) = 3 [pid 374] <... umount2 resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 3122] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3121] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3117] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] ioctl(3, LOOP_CLR_FD [pid 374] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3122] <... futex resumed>) = 1 [pid 3121] <... futex resumed>) = 1 [pid 3120] <... futex resumed>) = 0 [pid 3118] <... futex resumed>) = 0 [pid 3117] <... futex resumed>) = 1 [pid 3116] <... futex resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] ioctl(3, LOOP_CLR_FD [pid 3122] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3121] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3118] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3117] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3116] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 374] lstat("./84/bus", [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3120] <... futex resumed>) = 0 [pid 3118] <... futex resumed>) = 0 [pid 3117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3116] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] close(3 [pid 3122] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3121] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3118] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3117] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3116] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3132 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3133 [pid 374] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./84/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./84") = 0 [pid 374] mkdir("./85", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3132 attached , child_tidptr=0x55555713c5d0) = 3134 [pid 3132] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3132] chdir("./87") = 0 [pid 3132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3132] setpgid(0, 0) = 0 [pid 3132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3132] write(3, "1000", 4) = 4 [pid 3132] close(3) = 0 [pid 3132] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3132] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3132] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3132] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3132] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3135], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3135 [pid 3132] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3132] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3134 attached [pid 3134] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3134] chdir("./85") = 0 ./strace-static-x86_64: Process 3133 attached [pid 3134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3121] <... write resumed>) = 1048576 [pid 3117] <... write resumed>) = 1048576 [pid 3134] <... prctl resumed>) = 0 [pid 3133] set_robust_list(0x55555713c5e0, 24 [pid 3121] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3117] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3134] setpgid(0, 0 [pid 3133] <... set_robust_list resumed>) = 0 [pid 3121] <... futex resumed>) = 1 [pid 3118] <... futex resumed>) = 0 [pid 3117] <... futex resumed>) = 1 [pid 3116] <... futex resumed>) = 0 [pid 3134] <... setpgid resumed>) = 0 [pid 3133] chdir("./87" [pid 3121] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3118] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3117] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3116] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3135 attached [pid 3134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3133] <... chdir resumed>) = 0 [pid 3122] <... write resumed>) = 1048576 [pid 3118] <... futex resumed>) = 0 [pid 3117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3116] <... futex resumed>) = 0 [pid 3135] set_robust_list(0x7f64ff0649e0, 24 [pid 3133] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3122] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3117] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3116] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3135] <... set_robust_list resumed>) = 0 [pid 3134] <... openat resumed>) = 3 [pid 3133] <... prctl resumed>) = 0 [pid 3122] <... futex resumed>) = 1 [pid 3120] <... futex resumed>) = 0 [pid 3118] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3135] memfd_create("syzkaller", 0 [pid 3133] setpgid(0, 0 [pid 3122] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3135] <... memfd_create resumed>) = 3 [pid 3133] <... setpgid resumed>) = 0 [pid 3135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3135] <... mmap resumed>) = 0x7f64f6c44000 [pid 3133] <... openat resumed>) = 3 [pid 3133] write(3, "1000", 4 [pid 3135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3133] <... write resumed>) = 4 [pid 3133] close(3) = 0 [pid 3133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3133] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3133] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3133] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3136], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3136 [pid 3133] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3133] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3134] write(3, "1000", 4 [pid 3120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3122] <... futex resumed>) = 0 [pid 3120] <... futex resumed>) = 1 [pid 3134] <... write resumed>) = 4 [pid 3122] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 3136 attached [pid 3135] <... write resumed>) = 1048576 [pid 3134] close(3 [pid 3121] <... openat resumed>) = 7 [pid 3120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3136] set_robust_list(0x7f64ff0649e0, 24 [pid 3134] <... close resumed>) = 0 [pid 3121] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3136] <... set_robust_list resumed>) = 0 [pid 3134] symlink("/dev/binderfs", "./binderfs" [pid 3121] <... futex resumed>) = 1 [pid 3118] <... futex resumed>) = 0 [pid 3136] memfd_create("syzkaller", 0 [pid 3134] <... symlink resumed>) = 0 [pid 3121] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3118] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3136] <... memfd_create resumed>) = 3 [pid 3134] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3118] <... futex resumed>) = 0 [pid 3136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3134] <... futex resumed>) = 0 [pid 3121] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3118] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3136] <... mmap resumed>) = 0x7f64f6c44000 [pid 3134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3121] <... openat resumed>) = 8 [pid 3136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3134] <... mmap resumed>) = 0x7f64ff044000 [pid 3121] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 68.278764][ T3121] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 68.285931][ T3117] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 68.293987][ T3121] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 3134] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3121] <... futex resumed>) = 1 [pid 3118] <... futex resumed>) = 0 [pid 3134] <... mprotect resumed>) = 0 [pid 3121] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3118] exit_group(0 [pid 3134] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3121] <... futex resumed>) = ? [pid 3118] <... exit_group resumed>) = ? [pid 3121] +++ exited with 0 +++ [pid 3118] +++ exited with 0 +++ [pid 3134] <... clone resumed>, parent_tid=[3137], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3137 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3118, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3134] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3134] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 372] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./83/binderfs") = 0 [pid 372] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3135] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3135] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 3135] ioctl(4, LOOP_SET_FD, 3 [pid 3136] <... write resumed>) = 1048576 [pid 3136] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3136] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 3137 attached [pid 3137] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3137] memfd_create("syzkaller", 0) = 3 [pid 3137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3117] <... openat resumed>) = 7 [pid 3117] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3116] <... futex resumed>) = 0 [pid 3116] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3116] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3117] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3117] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3116] <... futex resumed>) = 0 [pid 3116] exit_group(0) = ? [pid 3135] <... ioctl resumed>) = 0 [pid 3137] <... write resumed>) = 1048576 [pid 3137] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3137] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 3137] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3136] <... openat resumed>) = 4 [pid 3135] close(3 [pid 3136] ioctl(4, LOOP_SET_FD, 3 [pid 3135] <... close resumed>) = 0 [pid 3117] +++ exited with 0 +++ [pid 3116] +++ exited with 0 +++ [pid 3135] mkdir("./bus", 0777) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3116, si_uid=0, si_status=0, si_utime=1, si_stime=5} --- [pid 3135] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, [pid 3137] close(3 [pid 3122] <... openat resumed>) = 7 [pid 3136] <... ioctl resumed>) = 0 [pid 3122] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3122] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3136] close(3 [pid 3120] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3136] <... close resumed>) = 0 [pid 377] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3120] <... futex resumed>) = 1 [pid 3136] mkdir("./bus", 0777 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3136] <... mkdir resumed>) = 0 [pid 3120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] lstat("./85/binderfs", [pid 3136] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./85/binderfs" [pid 3137] <... close resumed>) = 0 [pid 3122] <... futex resumed>) = 0 [pid 377] <... unlink resumed>) = 0 [pid 377] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3137] mkdir("./bus", 0777 [pid 3122] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3122] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3122] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3120] <... futex resumed>) = 0 [pid 3120] exit_group(0) = ? [pid 3122] <... futex resumed>) = ? [pid 3137] <... mkdir resumed>) = 0 [ 68.317653][ T3122] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 68.337307][ T3117] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 68.346587][ T3122] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 3137] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3135] <... mount resumed>) = 0 [pid 3135] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3135] chdir("./bus") = 0 [pid 3135] ioctl(4, LOOP_CLR_FD [pid 3136] <... mount resumed>) = 0 [pid 3136] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3136] chdir("./bus") = 0 [pid 3136] ioctl(4, LOOP_CLR_FD [pid 3135] <... ioctl resumed>) = 0 [pid 3122] +++ exited with 0 +++ [pid 3120] +++ exited with 0 +++ [pid 3135] close(4 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3120, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- [pid 3135] <... close resumed>) = 0 [pid 3135] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3132] <... futex resumed>) = 0 [pid 375] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3135] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3132] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3132] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3135] chdir("./file0" [pid 3132] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... openat resumed>) = 3 [pid 3136] <... ioctl resumed>) = 0 [pid 3135] <... chdir resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 375] fstat(3, [pid 372] <... umount2 resumed>) = 0 [pid 3136] close(4 [pid 3135] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3136] <... close resumed>) = 0 [pid 3135] <... futex resumed>) = 1 [pid 3132] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] getdents64(3, [pid 372] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3136] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3135] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3132] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./85/bus", [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3136] <... futex resumed>) = 1 [pid 3135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3133] <... futex resumed>) = 0 [pid 3132] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3136] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3135] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3133] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3132] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3135] <... open resumed>) = 4 [pid 3133] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./84/binderfs", [pid 372] lstat("./83/bus", [pid 3136] chdir("./file0" [pid 3135] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3133] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3136] <... chdir resumed>) = 0 [pid 3135] <... futex resumed>) = 1 [pid 3132] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 375] unlink("./84/binderfs" [pid 3136] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3135] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3132] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(4, [pid 375] <... unlink resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3136] <... futex resumed>) = 1 [pid 3135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3133] <... futex resumed>) = 0 [pid 3132] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3136] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3135] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3133] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3132] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 3136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3135] <... openat resumed>) = 5 [pid 3133] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3136] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3135] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3133] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 372] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3136] <... open resumed>) = 4 [pid 3135] <... futex resumed>) = 1 [pid 3132] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3136] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3135] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3132] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(4 [pid 372] <... openat resumed>) = 4 [pid 3136] <... futex resumed>) = 1 [pid 3135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3133] <... futex resumed>) = 0 [pid 3132] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 3136] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3135] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3133] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3132] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] rmdir("./85/bus" [pid 372] fstat(4, [pid 3136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3135] <... write resumed>) = 196608 [pid 3133] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3136] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3135] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3133] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(3, [pid 372] getdents64(4, [pid 3136] <... openat resumed>) = 5 [pid 3135] <... futex resumed>) = 1 [pid 3132] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3136] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3135] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3132] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3136] <... futex resumed>) = 1 [pid 3135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3133] <... futex resumed>) = 0 [pid 3132] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 372] getdents64(4, [ 68.375717][ T3135] ext4 filesystem being mounted at /root/syzkaller.k3ECep/87/bus supports timestamps until 2038 (0x7fffffff) [ 68.395724][ T3136] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/87/bus supports timestamps until 2038 (0x7fffffff) [pid 3136] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3135] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3133] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3132] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] rmdir("./85" [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3135] <... mount resumed>) = 0 [pid 3133] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 3136] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3135] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3133] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] mkdir("./86", 0777 [pid 3136] <... write resumed>) = 196608 [pid 3135] <... futex resumed>) = 1 [pid 3132] <... futex resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 3136] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3135] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3132] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3136] <... futex resumed>) = 1 [pid 3135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3133] <... futex resumed>) = 0 [pid 3132] <... futex resumed>) = 0 [pid 3136] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3135] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3133] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3132] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3133] <... futex resumed>) = 0 [pid 3136] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3133] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3136] <... mount resumed>) = 0 [pid 3136] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3133] <... futex resumed>) = 0 [pid 3136] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3133] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3133] <... futex resumed>) = 0 [pid 3136] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3133] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] close(4) = 0 [pid 372] rmdir("./83/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./83") = 0 [pid 372] mkdir("./84", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3137] <... mount resumed>) = 0 [pid 3137] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3137] chdir("./bus") = 0 [pid 3137] ioctl(4, LOOP_CLR_FD) = 0 [pid 3136] <... open resumed>) = 6 [pid 3135] <... open resumed>) = 6 [pid 377] <... openat resumed>) = 3 [pid 375] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 3136] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3135] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] ioctl(3, LOOP_CLR_FD [pid 3137] close(4 [pid 3136] <... futex resumed>) = 1 [pid 3135] <... futex resumed>) = 1 [pid 3133] <... futex resumed>) = 0 [pid 3132] <... futex resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3136] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3135] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3133] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3132] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 375] lstat("./84/bus", [pid 372] close(3 [pid 3136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3133] <... futex resumed>) = 0 [pid 3132] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... close resumed>) = 0 [pid 3136] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3135] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3133] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3132] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3147 [pid 375] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3148 [pid 375] <... openat resumed>) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./84/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3137] <... close resumed>) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./84") = 0 [pid 3137] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 68.452878][ T3137] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/85/bus supports timestamps until 2038 (0x7fffffff) [pid 375] mkdir("./85", 0777 [pid 3137] <... futex resumed>) = 1 [pid 3134] <... futex resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 3135] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 3147 attached ./strace-static-x86_64: Process 3148 attached [pid 3137] chdir("./file0" [pid 3134] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3135] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3137] <... chdir resumed>) = 0 [pid 3134] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 3137] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3136] <... write resumed>) = 1048576 [pid 3135] <... futex resumed>) = 1 [pid 3134] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3132] <... futex resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 3147] set_robust_list(0x55555713c5e0, 24 [pid 3137] <... futex resumed>) = 0 [pid 3136] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3132] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3137] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3136] <... futex resumed>) = 1 [pid 3134] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3133] <... futex resumed>) = 0 [pid 3132] <... futex resumed>) = 0 [pid 375] close(3 [pid 3136] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3134] <... futex resumed>) = 0 [pid 3133] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3132] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 3148] set_robust_list(0x55555713c5e0, 24 [pid 3147] <... set_robust_list resumed>) = 0 [pid 3137] <... open resumed>) = 4 [pid 3135] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3134] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3148] <... set_robust_list resumed>) = 0 [pid 3147] chdir("./86" [pid 3137] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3133] <... futex resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3148] chdir("./84" [pid 3147] <... chdir resumed>) = 0 [pid 3137] <... futex resumed>) = 0 [pid 3134] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3148] <... chdir resumed>) = 0 [pid 3147] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3137] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3134] <... futex resumed>) = 0 [pid 3148] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3147] <... prctl resumed>) = 0 [pid 3137] <... openat resumed>) = 5 [pid 3134] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3148] <... prctl resumed>) = 0 [pid 3147] setpgid(0, 0 [pid 3137] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3148] setpgid(0, 0 [pid 3147] <... setpgid resumed>) = 0 [pid 3137] <... futex resumed>) = 0 [pid 3134] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3148] <... setpgid resumed>) = 0 [pid 3147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3137] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3134] <... futex resumed>) = 0 [pid 3148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3147] <... openat resumed>) = 3 [pid 3137] <... write resumed>) = 196608 [pid 3134] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3148] <... openat resumed>) = 3 [pid 3147] write(3, "1000", 4 [pid 3137] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3148] write(3, "1000", 4 [pid 3147] <... write resumed>) = 4 [pid 3137] <... futex resumed>) = 1 [pid 3134] <... futex resumed>) = 0 [pid 3148] <... write resumed>) = 4 [pid 3147] close(3 [pid 3137] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3134] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3148] close(3 [pid 3147] <... close resumed>) = 0 [pid 3137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3134] <... futex resumed>) = 0 [pid 3148] <... close resumed>) = 0 [pid 3147] symlink("/dev/binderfs", "./binderfs" [pid 3137] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3134] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3148] symlink("/dev/binderfs", "./binderfs" [pid 3147] <... symlink resumed>) = 0 [pid 3137] <... mount resumed>) = 0 [pid 3148] <... symlink resumed>) = 0 [pid 3147] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3136] <... openat resumed>) = 7 [pid 3133] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3147] <... futex resumed>) = 0 [pid 3137] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3136] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3148] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3149 [pid 3147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3137] <... futex resumed>) = 1 [pid 3136] <... futex resumed>) = 0 [pid 3134] <... futex resumed>) = 0 [pid 3133] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3148] <... futex resumed>) = 0 [pid 3136] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3134] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3133] <... futex resumed>) = 0 [pid 3137] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3147] <... mmap resumed>) = 0x7f64ff044000 [pid 3136] <... openat resumed>) = 8 [pid 3136] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3136] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3149 attached [pid 3149] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3149] chdir("./85") = 0 [pid 3149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3149] setpgid(0, 0) = 0 [pid 3149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3149] write(3, "1000", 4) = 4 [pid 3149] close(3) = 0 [pid 3149] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3149] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3149] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3149] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3150], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3150 [pid 3149] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3149] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3150 attached [pid 3150] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3150] memfd_create("syzkaller", 0) = 3 [pid 3150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3134] <... futex resumed>) = 0 [pid 3134] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3133] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3147] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3137] <... open resumed>) = 6 [pid 3133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3148] <... mmap resumed>) = 0x7f64ff044000 [pid 3133] exit_group(0 [pid 3137] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3136] <... futex resumed>) = ? [pid 3133] <... exit_group resumed>) = ? [pid 3134] <... futex resumed>) = 0 [pid 3137] <... futex resumed>) = 1 [pid 3147] <... mprotect resumed>) = 0 [pid 3148] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3136] +++ exited with 0 +++ [pid 3134] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3133] +++ exited with 0 +++ [pid 3134] <... futex resumed>) = 0 [pid 3134] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3133, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./87/binderfs") = 0 [pid 376] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3150] <... write resumed>) = 1048576 [pid 3150] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3150] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 3150] ioctl(4, LOOP_SET_FD, 3 [pid 3137] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3150] <... ioctl resumed>) = 0 [pid 3150] close(3) = 0 [pid 3150] mkdir("./bus", 0777) = 0 [pid 3150] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3147] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3152], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3152 [pid 3147] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3147] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3148] <... mprotect resumed>) = 0 [pid 3148] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3153], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3153 [pid 3148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3135] <... openat resumed>) = 7 [pid 3135] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3132] <... futex resumed>) = 0 [pid 3132] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3132] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3135] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3135] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3132] <... futex resumed>) = 0 [pid 3132] exit_group(0) = ? [pid 3135] +++ exited with 0 +++ [pid 3132] +++ exited with 0 +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3132, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./87/binderfs") = 0 [pid 373] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3152 attached [pid 3152] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3152] memfd_create("syzkaller", 0) = 3 [pid 3152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3152] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3152] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 3153 attached [pid 3153] set_robust_list(0x7f64ff0649e0, 24) = 0 [ 68.517702][ T3136] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 68.526282][ T3135] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 68.532129][ T3136] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 68.555721][ T3135] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 3153] memfd_create("syzkaller", 0) = 3 [pid 3137] <... write resumed>) = 1048576 [pid 3137] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3134] <... futex resumed>) = 0 [pid 3134] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3134] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3137] <... futex resumed>) = 1 [pid 3137] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3150] <... mount resumed>) = 0 [pid 3153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3153] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3153] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3150] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3150] chdir("./bus") = 0 [pid 3150] ioctl(4, LOOP_CLR_FD [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3137] <... openat resumed>) = 7 [pid 3137] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3134] <... futex resumed>) = 0 [pid 3137] <... futex resumed>) = 1 [pid 376] lstat("./87/bus", [pid 3137] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3134] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3137] <... openat resumed>) = 8 [pid 3134] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3137] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3134] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3137] <... futex resumed>) = 0 [pid 3134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3137] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3134] exit_group(0 [pid 376] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3134] <... exit_group resumed>) = ? [pid 376] <... openat resumed>) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3137] <... futex resumed>) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./87/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./87") = 0 [pid 376] mkdir("./88", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3153] <... openat resumed>) = 4 [pid 3152] <... openat resumed>) = 4 [pid 3150] <... ioctl resumed>) = 0 [pid 3137] +++ exited with 0 +++ [pid 3134] +++ exited with 0 +++ [pid 376] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 3153] ioctl(4, LOOP_SET_FD, 3 [pid 3152] ioctl(4, LOOP_SET_FD, 3 [pid 3150] close(4 [pid 376] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3153] <... ioctl resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3134, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3153] close(3 [pid 374] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] lstat("./87/bus", [pid 3153] <... close resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3153] mkdir("./bus", 0777 [pid 374] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3153] <... mkdir resumed>) = 0 [pid 3152] <... ioctl resumed>) = 0 [pid 3150] <... close resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... openat resumed>) = 3 [pid 3153] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3152] close(3 [pid 3150] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 68.593291][ T3150] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/85/bus supports timestamps until 2038 (0x7fffffff) [ 68.605827][ T3137] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 68.620123][ T3137] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 376] close(3 [pid 374] fstat(3, [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3152] <... close resumed>) = 0 [pid 3150] <... futex resumed>) = 1 [pid 3149] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3152] mkdir("./bus", 0777 [pid 3150] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3149] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] getdents64(3, [pid 373] <... openat resumed>) = 4 [pid 3152] <... mkdir resumed>) = 0 [pid 3150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3149] <... futex resumed>) = 0 [pid 3152] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3150] chdir("./file0" [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] fstat(4, [pid 3149] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3158 attached [pid 3150] <... chdir resumed>) = 0 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3158 [pid 374] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3158] set_robust_list(0x55555713c5e0, 24 [pid 3150] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] getdents64(4, [pid 3158] <... set_robust_list resumed>) = 0 [pid 3150] <... futex resumed>) = 1 [pid 3149] <... futex resumed>) = 0 [pid 374] lstat("./85/binderfs", [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3158] chdir("./88" [pid 3150] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3149] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] getdents64(4, [pid 3158] <... chdir resumed>) = 0 [pid 3150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3149] <... futex resumed>) = 0 [pid 374] unlink("./85/binderfs" [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3150] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3149] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... unlink resumed>) = 0 [pid 373] close(4 [pid 3150] <... open resumed>) = 4 [pid 374] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 3150] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./87/bus" [pid 3150] <... futex resumed>) = 1 [pid 3149] <... futex resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 3150] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3149] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(3, [pid 3150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3149] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3150] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3149] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] close(3 [pid 3150] <... openat resumed>) = 5 [pid 373] <... close resumed>) = 0 [pid 3150] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./87" [pid 3150] <... futex resumed>) = 1 [pid 3149] <... futex resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 3150] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3149] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] mkdir("./88", 0777 [pid 3150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3149] <... futex resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 3150] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3149] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3150] <... write resumed>) = 196608 [pid 373] <... openat resumed>) = 3 [pid 3150] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] ioctl(3, LOOP_CLR_FD [pid 3150] <... futex resumed>) = 1 [pid 3149] <... futex resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3150] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3149] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 3150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3149] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 3150] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3149] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3150] <... mount resumed>) = 0 [pid 3150] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3161 [pid 3150] <... futex resumed>) = 1 [pid 3149] <... futex resumed>) = 0 [pid 3150] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3149] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3149] <... futex resumed>) = 0 [pid 3150] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3149] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3150] <... open resumed>) = 6 [pid 3150] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3149] <... futex resumed>) = 0 [pid 3150] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3149] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3149] <... futex resumed>) = 0 [pid 3150] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3149] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3161 attached [pid 3158] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3153] <... mount resumed>) = 0 [pid 3161] set_robust_list(0x55555713c5e0, 24 [pid 3158] <... prctl resumed>) = 0 [pid 3153] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3161] <... set_robust_list resumed>) = 0 [pid 3158] setpgid(0, 0 [pid 3153] <... openat resumed>) = 3 [pid 3161] chdir("./88" [pid 3158] <... setpgid resumed>) = 0 [pid 3153] chdir("./bus" [pid 3161] <... chdir resumed>) = 0 [pid 3158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3153] <... chdir resumed>) = 0 [pid 3161] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3158] <... openat resumed>) = 3 [pid 3153] ioctl(4, LOOP_CLR_FD [pid 3161] <... prctl resumed>) = 0 [pid 3158] write(3, "1000", 4 [pid 3153] <... ioctl resumed>) = 0 [pid 3161] setpgid(0, 0 [pid 3158] <... write resumed>) = 4 [pid 3153] close(4 [pid 3161] <... setpgid resumed>) = 0 [pid 3158] close(3 [pid 3153] <... close resumed>) = 0 [pid 3161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3158] <... close resumed>) = 0 [pid 3153] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3161] <... openat resumed>) = 3 [pid 3158] symlink("/dev/binderfs", "./binderfs" [pid 3153] <... futex resumed>) = 1 [pid 3161] write(3, "1000", 4 [pid 3158] <... symlink resumed>) = 0 [pid 3153] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3148] <... futex resumed>) = 0 [pid 3161] <... write resumed>) = 4 [pid 3158] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3161] close(3 [pid 3158] <... futex resumed>) = 0 [pid 3148] <... futex resumed>) = 1 [pid 3153] <... futex resumed>) = 0 [pid 3161] <... close resumed>) = 0 [pid 3158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3161] symlink("/dev/binderfs", "./binderfs" [pid 3158] <... mmap resumed>) = 0x7f64ff044000 [pid 3153] chdir("./file0" [pid 3158] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3158] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3153] <... chdir resumed>) = 0 [pid 3161] <... symlink resumed>) = 0 [pid 3161] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3158] <... clone resumed>, parent_tid=[3164], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3164 [pid 3153] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3161] <... futex resumed>) = 0 [pid 3158] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3158] <... futex resumed>) = 0 [pid 3153] <... futex resumed>) = 1 [pid 3148] <... futex resumed>) = 0 [pid 3161] <... mmap resumed>) = 0x7f64ff044000 [pid 3158] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3153] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3161] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3148] <... futex resumed>) = 0 [pid 3161] <... mprotect resumed>) = 0 [pid 3153] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3161] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3165 attached ./strace-static-x86_64: Process 3164 attached [pid 3153] <... open resumed>) = 4 [pid 3150] <... write resumed>) = 1048576 [pid 3161] <... clone resumed>, parent_tid=[3165], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3165 [pid 3153] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3161] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3153] <... futex resumed>) = 1 [pid 3148] <... futex resumed>) = 0 [pid 3161] <... futex resumed>) = 0 [pid 3153] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3161] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3148] <... futex resumed>) = 0 [pid 3153] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3153] <... openat resumed>) = 5 [pid 3153] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3148] <... futex resumed>) = 0 [pid 3153] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3148] <... futex resumed>) = 0 [pid 3153] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3153] <... write resumed>) = 196608 [pid 3153] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3148] <... futex resumed>) = 0 [pid 3153] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3148] <... futex resumed>) = 0 [pid 3153] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3153] <... mount resumed>) = 0 [pid 3153] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3148] <... futex resumed>) = 0 [pid 3153] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3148] <... futex resumed>) = 0 [pid 3153] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3165] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3152] <... mount resumed>) = 0 [pid 3164] set_robust_list(0x7f64ff0649e0, 24 [pid 3150] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3152] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3165] memfd_create("syzkaller", 0 [pid 3150] <... futex resumed>) = 1 [pid 3149] <... futex resumed>) = 0 [pid 3165] <... memfd_create resumed>) = 3 [pid 3164] <... set_robust_list resumed>) = 0 [pid 3152] <... openat resumed>) = 3 [pid 3149] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3150] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3149] <... futex resumed>) = 0 [pid 3149] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 68.682760][ T3153] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/84/bus supports timestamps until 2038 (0x7fffffff) [ 68.714591][ T3152] ext4 filesystem being mounted at /root/syzkaller.43WzWH/86/bus supports timestamps until 2038 (0x7fffffff) [pid 3165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3165] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3165] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3164] memfd_create("syzkaller", 0) = 3 [pid 3164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3152] chdir("./bus") = 0 [pid 3152] ioctl(4, LOOP_CLR_FD [pid 3164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3164] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3164] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3150] <... openat resumed>) = 7 [pid 3150] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3149] <... futex resumed>) = 0 [pid 3149] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3149] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3150] <... futex resumed>) = 1 [pid 3150] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3150] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3149] <... futex resumed>) = 0 [pid 3149] exit_group(0) = ? [pid 3150] <... futex resumed>) = ? [pid 3165] <... openat resumed>) = 4 [pid 3153] <... open resumed>) = 6 [pid 3152] <... ioctl resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 3165] ioctl(4, LOOP_SET_FD, 3 [pid 3153] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3152] close(4 [pid 374] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3165] <... ioctl resumed>) = 0 [pid 3153] <... futex resumed>) = 1 [pid 3152] <... close resumed>) = 0 [pid 3148] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3165] close(3 [pid 3153] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] lstat("./85/bus", [pid 3165] <... close resumed>) = 0 [pid 3153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3152] <... futex resumed>) = 1 [pid 3148] <... futex resumed>) = 0 [pid 3147] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3165] mkdir("./bus", 0777 [pid 3153] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3152] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3147] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3165] <... mkdir resumed>) = 0 [pid 3164] <... openat resumed>) = 4 [pid 3164] ioctl(4, LOOP_SET_FD, 3 [pid 3152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3152] chdir("./file0") = 0 [pid 3152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3165] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3153] <... write resumed>) = 1048576 [pid 3152] <... futex resumed>) = 0 [pid 3147] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3153] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3152] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3147] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 68.729070][ T3150] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 68.743832][ T3150] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 374] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3153] <... futex resumed>) = 1 [pid 3148] <... futex resumed>) = 0 [pid 3147] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... openat resumed>) = 4 [pid 3148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3153] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3148] <... futex resumed>) = 0 [pid 3147] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] fstat(4, [pid 3152] <... futex resumed>) = 0 [pid 3148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3147] <... futex resumed>) = 1 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3152] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3147] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] getdents64(4, [pid 3164] <... ioctl resumed>) = 0 [pid 3152] <... open resumed>) = 4 [pid 3150] +++ exited with 0 +++ [pid 3149] +++ exited with 0 +++ [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3164] close(3 [pid 3152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3149, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3164] <... close resumed>) = 0 [pid 3152] <... futex resumed>) = 1 [pid 3147] <... futex resumed>) = 0 [pid 3164] mkdir("./bus", 0777 [pid 3152] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3147] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3164] <... mkdir resumed>) = 0 [pid 3152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3147] <... futex resumed>) = 0 [pid 375] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3164] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3152] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3147] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3152] <... openat resumed>) = 5 [pid 375] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 3 [pid 374] getdents64(4, [pid 3152] <... futex resumed>) = 1 [pid 3147] <... futex resumed>) = 0 [pid 375] fstat(3, [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3152] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3147] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] close(4 [pid 3152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3147] <... futex resumed>) = 0 [pid 375] getdents64(3, [pid 374] <... close resumed>) = 0 [pid 3152] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3147] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] rmdir("./85/bus" [pid 3153] <... openat resumed>) = 7 [pid 3152] <... write resumed>) = 196608 [pid 375] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... rmdir resumed>) = 0 [pid 3152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] getdents64(3, [pid 3152] <... futex resumed>) = 1 [pid 3147] <... futex resumed>) = 0 [pid 375] lstat("./85/binderfs", [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3153] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3152] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3147] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] close(3 [pid 3153] <... futex resumed>) = 1 [pid 3152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3148] <... futex resumed>) = 0 [pid 3147] <... futex resumed>) = 0 [pid 375] unlink("./85/binderfs" [pid 374] <... close resumed>) = 0 [pid 3153] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3152] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3147] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... unlink resumed>) = 0 [ 68.783329][ T3153] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 68.799835][ T3153] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 68.815575][ T3165] ext4 filesystem being mounted at /root/syzkaller.k3ECep/88/bus supports timestamps until 2038 (0x7fffffff) [pid 374] rmdir("./85" [pid 3165] <... mount resumed>) = 0 [pid 3164] <... mount resumed>) = 0 [pid 3153] <... openat resumed>) = 8 [pid 3152] <... mount resumed>) = 0 [pid 3148] <... futex resumed>) = 0 [pid 375] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... rmdir resumed>) = 0 [pid 3165] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3164] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3153] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3165] <... openat resumed>) = 3 [pid 3164] <... openat resumed>) = 3 [pid 3153] <... futex resumed>) = 0 [pid 3148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3165] chdir("./bus" [pid 3164] chdir("./bus" [pid 3153] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3148] exit_group(0 [pid 3165] <... chdir resumed>) = 0 [pid 3164] <... chdir resumed>) = 0 [pid 3153] <... futex resumed>) = ? [pid 3148] <... exit_group resumed>) = ? [pid 3165] ioctl(4, LOOP_CLR_FD [pid 3164] ioctl(4, LOOP_CLR_FD [pid 3153] +++ exited with 0 +++ [pid 3148] +++ exited with 0 +++ [pid 374] mkdir("./86", 0777 [pid 3165] <... ioctl resumed>) = 0 [pid 3164] <... ioctl resumed>) = 0 [pid 3152] <... futex resumed>) = 1 [pid 3147] <... futex resumed>) = 0 [pid 3165] close(4) = 0 [pid 3164] close(4 [pid 3165] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3147] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3148, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3165] <... futex resumed>) = 1 [pid 3164] <... close resumed>) = 0 [pid 3161] <... futex resumed>) = 0 [pid 3165] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3161] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3164] <... futex resumed>) = 1 [pid 3161] <... futex resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 3165] chdir("./file0" [pid 3164] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3161] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3158] <... futex resumed>) = 0 [pid 3165] <... chdir resumed>) = 0 [pid 3152] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3147] <... futex resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3165] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3161] <... futex resumed>) = 0 [pid 3165] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3161] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3161] <... futex resumed>) = 0 [pid 3165] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3161] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3165] <... open resumed>) = 4 [pid 3158] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3152] <... open resumed>) = 6 [pid 3147] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... openat resumed>) = 3 [pid 3165] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3158] <... futex resumed>) = 1 [pid 3165] <... futex resumed>) = 1 [pid 3161] <... futex resumed>) = 0 [pid 3152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] ioctl(3, LOOP_CLR_FD [pid 3165] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3161] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3158] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3152] <... futex resumed>) = 1 [pid 3147] <... futex resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3161] <... futex resumed>) = 0 [pid 3165] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3161] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3165] <... openat resumed>) = 5 [pid 3165] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3161] <... futex resumed>) = 0 [pid 3165] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3161] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3161] <... futex resumed>) = 0 [pid 3165] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3161] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3165] <... write resumed>) = 196608 [pid 3165] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3161] <... futex resumed>) = 0 [pid 3165] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3161] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3161] <... futex resumed>) = 0 [pid 3152] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3147] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(3 [pid 3165] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3161] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3147] <... futex resumed>) = 0 [pid 3165] <... mount resumed>) = 0 [pid 3165] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3161] <... futex resumed>) = 0 [pid 3165] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3161] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3161] <... futex resumed>) = 0 [pid 3165] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3161] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3165] <... open resumed>) = 6 [pid 3165] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3161] <... futex resumed>) = 0 [pid 3165] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3161] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3161] <... futex resumed>) = 0 [pid 3165] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3161] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3147] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3172 [pid 372] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, [pid 3164] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3164] chdir("./file0" [pid 372] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./84/binderfs") = 0 [pid 3164] <... chdir resumed>) = 0 [pid 372] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3158] <... futex resumed>) = 0 [pid 3158] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3158] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3164] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3158] <... futex resumed>) = 0 [pid 3158] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3158] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3164] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3165] <... write resumed>) = 1048576 [pid 3164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3165] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3161] <... futex resumed>) = 0 [pid 3161] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3161] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3165] <... futex resumed>) = 1 [ 68.829042][ T3164] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/88/bus supports timestamps until 2038 (0x7fffffff) [pid 3165] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 3172 attached [pid 3164] <... futex resumed>) = 1 [pid 3158] <... futex resumed>) = 0 [pid 3152] <... write resumed>) = 1048576 [pid 3172] set_robust_list(0x55555713c5e0, 24 [pid 3164] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3158] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3172] <... set_robust_list resumed>) = 0 [pid 3164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3158] <... futex resumed>) = 0 [pid 3172] chdir("./86" [pid 3164] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3158] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3172] <... chdir resumed>) = 0 [pid 3164] <... write resumed>) = 196608 [pid 3152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3172] <... prctl resumed>) = 0 [pid 3164] <... futex resumed>) = 1 [pid 3158] <... futex resumed>) = 0 [pid 3152] <... futex resumed>) = 1 [pid 3147] <... futex resumed>) = 0 [pid 3172] setpgid(0, 0 [pid 3164] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3158] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3152] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3147] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3172] <... setpgid resumed>) = 0 [pid 3164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3158] <... futex resumed>) = 0 [pid 3152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3147] <... futex resumed>) = 0 [pid 3172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3164] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3158] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3152] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3147] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3172] <... openat resumed>) = 3 [pid 3165] <... openat resumed>) = 7 [pid 3164] <... mount resumed>) = 0 [pid 3165] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3161] <... futex resumed>) = 0 [pid 3165] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3161] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3165] <... openat resumed>) = 8 [pid 3161] <... futex resumed>) = 0 [pid 3165] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3161] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3165] <... futex resumed>) = 0 [pid 3161] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3165] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3161] exit_group(0 [pid 3165] <... futex resumed>) = ? [pid 3161] <... exit_group resumed>) = ? [pid 3172] write(3, "1000", 4) = 4 [pid 3172] close(3) = 0 [pid 3172] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3172] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3172] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3172] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3173], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3173 [pid 3172] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3172] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3164] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3173 attached [pid 3173] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3173] memfd_create("syzkaller", 0) = 3 [pid 3173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3158] <... futex resumed>) = 0 [pid 3158] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = 0 [pid 3164] <... futex resumed>) = 0 [pid 3158] <... futex resumed>) = 1 [pid 3173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3173] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3173] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 375] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./85/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, [pid 3164] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3158] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3152] <... openat resumed>) = 7 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./85/bus") = 0 [pid 3152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./85" [pid 3152] <... futex resumed>) = 1 [pid 3147] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 3147] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] mkdir("./86", 0777 [pid 3152] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3147] <... futex resumed>) = 0 [pid 3147] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... mkdir resumed>) = 0 [pid 3152] <... openat resumed>) = 8 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3147] <... futex resumed>) = 0 [pid 3147] exit_group(0) = ? [pid 3152] <... futex resumed>) = ? [pid 3165] +++ exited with 0 +++ [pid 3164] <... open resumed>) = 6 [pid 3161] +++ exited with 0 +++ [pid 3152] +++ exited with 0 +++ [pid 3147] +++ exited with 0 +++ [pid 375] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 3164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3147, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3161, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3164] <... futex resumed>) = 1 [pid 3158] <... futex resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 372] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3164] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3158] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3158] <... futex resumed>) = 0 [pid 377] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] close(3 [pid 373] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] lstat("./84/bus", [ 68.872673][ T3165] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 68.886930][ T3165] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 68.893516][ T3152] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 68.912232][ T3152] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 3164] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3173] <... openat resumed>) = 4 [pid 3158] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... close resumed>) = 0 [pid 373] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3173] ioctl(4, LOOP_SET_FD, 3 [pid 377] <... openat resumed>) = 3 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... openat resumed>) = 3 [pid 3173] <... ioctl resumed>) = 0 [pid 377] fstat(3, [pid 373] fstat(3, [pid 372] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3173] close(3 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3175 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3173] <... close resumed>) = 0 [pid 377] getdents64(3, [pid 373] getdents64(3, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3173] mkdir("./bus", 0777 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3173] <... mkdir resumed>) = 0 [pid 377] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3173] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... openat resumed>) = 4 [pid 377] lstat("./86/binderfs", [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] lstat("./88/binderfs", [pid 372] fstat(4, [pid 377] unlink("./86/binderfs" [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... unlink resumed>) = 0 [pid 373] unlink("./88/binderfs" [pid 372] getdents64(4, ./strace-static-x86_64: Process 3175 attached [pid 377] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3175] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3175] chdir("./86" [pid 373] <... unlink resumed>) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3175] <... chdir resumed>) = 0 [pid 3164] <... write resumed>) = 1048576 [pid 373] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] getdents64(4, [pid 3175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3175] <... prctl resumed>) = 0 [pid 3164] <... futex resumed>) = 1 [pid 3158] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3175] setpgid(0, 0 [pid 3164] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3158] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(4 [pid 3175] <... setpgid resumed>) = 0 [pid 3158] <... futex resumed>) = 0 [pid 3175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3158] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... close resumed>) = 0 [pid 3175] <... openat resumed>) = 3 [pid 3175] write(3, "1000", 4) = 4 [pid 3175] close(3) = 0 [pid 3175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3175] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3175] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3175] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3178], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3178 [pid 3175] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3175] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3178 attached [pid 3178] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3178] memfd_create("syzkaller", 0) = 3 [pid 3178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 372] rmdir("./84/bus" [pid 377] <... umount2 resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 377] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./86/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./86/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./86") = 0 [pid 377] mkdir("./87", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3178] <... write resumed>) = 1048576 [pid 3178] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3178] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./84") = 0 [pid 372] mkdir("./85", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3164] <... openat resumed>) = 7 [pid 3164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3158] <... futex resumed>) = 0 [pid 3158] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3158] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3164] <... futex resumed>) = 1 [pid 3164] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3158] <... futex resumed>) = 0 [pid 3158] exit_group(0) = ? [pid 3164] <... futex resumed>) = ? [pid 3173] <... mount resumed>) = 0 [pid 3173] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3173] chdir("./bus") = 0 [pid 3173] ioctl(4, LOOP_CLR_FD [pid 3178] <... openat resumed>) = 4 [pid 377] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 3178] ioctl(4, LOOP_SET_FD, 3 [pid 377] ioctl(3, LOOP_CLR_FD [pid 372] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./88/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 3178] <... ioctl resumed>) = 0 [pid 373] getdents64(4, [pid 3178] close(3 [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3178] <... close resumed>) = 0 [pid 373] close(4 [pid 3178] mkdir("./bus", 0777 [pid 373] <... close resumed>) = 0 [pid 3178] <... mkdir resumed>) = 0 [pid 373] rmdir("./88/bus" [pid 3178] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] <... rmdir resumed>) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./88") = 0 [pid 373] mkdir("./89", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 372] close(3 [pid 377] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3173] <... ioctl resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3164] +++ exited with 0 +++ [pid 3158] +++ exited with 0 +++ [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3180 ./strace-static-x86_64: Process 3181 attached ./strace-static-x86_64: Process 3180 attached [pid 3173] close(4 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3158, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 373] <... openat resumed>) = 3 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3181 [pid 3173] <... close resumed>) = 0 [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 3173] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... restart_syscall resumed>) = 0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 376] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3173] <... futex resumed>) = 1 [pid 3172] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3173] chdir("./file0" [pid 3172] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 3 [pid 373] close(3 [pid 3173] <... chdir resumed>) = 0 [pid 3172] <... futex resumed>) = 0 [pid 376] fstat(3, [pid 373] <... close resumed>) = 0 [pid 3180] set_robust_list(0x55555713c5e0, 24 [pid 3172] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./88/binderfs", [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3183 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./88/binderfs") = 0 [ 68.988305][ T3164] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 69.003057][ T3164] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 69.015765][ T3173] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/86/bus supports timestamps until 2038 (0x7fffffff) [pid 376] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3181] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3181] chdir("./85" [pid 3180] <... set_robust_list resumed>) = 0 [pid 3173] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3183 attached [pid 3181] <... chdir resumed>) = 0 [pid 3180] chdir("./87" [pid 3173] <... futex resumed>) = 1 [pid 3172] <... futex resumed>) = 0 [pid 3183] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3183] chdir("./89") = 0 [pid 3183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3183] setpgid(0, 0) = 0 [pid 3183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3183] write(3, "1000", 4) = 4 [pid 3183] close(3) = 0 [pid 3183] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3183] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3183] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3183] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3185], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3185 [pid 3183] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3183] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3185 attached [pid 3185] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3185] memfd_create("syzkaller", 0) = 3 [pid 3185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3172] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3173] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3180] <... chdir resumed>) = 0 [pid 3181] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3172] <... futex resumed>) = 0 [pid 3181] <... prctl resumed>) = 0 [pid 3180] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3172] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3181] setpgid(0, 0 [pid 3180] <... prctl resumed>) = 0 [pid 3180] setpgid(0, 0 [pid 3181] <... setpgid resumed>) = 0 [pid 3180] <... setpgid resumed>) = 0 [pid 3181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3173] <... open resumed>) = 4 [pid 3181] write(3, "1000", 4 [pid 3180] <... openat resumed>) = 3 [pid 3178] <... mount resumed>) = 0 [pid 3173] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3181] <... write resumed>) = 4 [pid 3180] write(3, "1000", 4 [pid 3178] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3173] <... futex resumed>) = 1 [pid 3172] <... futex resumed>) = 0 [pid 3181] close(3 [pid 3180] <... write resumed>) = 4 [pid 3173] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3172] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3181] <... close resumed>) = 0 [pid 3180] close(3 [pid 3178] <... openat resumed>) = 3 [pid 3173] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3172] <... futex resumed>) = 0 [pid 3181] symlink("/dev/binderfs", "./binderfs" [pid 3180] <... close resumed>) = 0 [pid 3178] chdir("./bus" [pid 3173] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3172] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3181] <... symlink resumed>) = 0 [pid 3180] symlink("/dev/binderfs", "./binderfs" [pid 3181] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3178] <... chdir resumed>) = 0 [pid 3173] <... openat resumed>) = 5 [pid 3181] <... futex resumed>) = 0 [pid 3180] <... symlink resumed>) = 0 [pid 3178] ioctl(4, LOOP_CLR_FD [pid 3173] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3180] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3173] <... futex resumed>) = 1 [pid 3172] <... futex resumed>) = 0 [pid 3181] <... mmap resumed>) = 0x7f64ff044000 [pid 3180] <... futex resumed>) = 0 [pid 3181] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3173] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3172] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3181] <... mprotect resumed>) = 0 [pid 3180] <... mmap resumed>) = 0x7f64ff044000 [pid 3173] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3172] <... futex resumed>) = 0 [pid 3181] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3180] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3173] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3172] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3180] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 3186 attached [pid 3186] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3186] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3173] <... write resumed>) = 196608 [pid 3181] <... clone resumed>, parent_tid=[3186], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3186 [pid 3180] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3173] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3181] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3173] <... futex resumed>) = 1 [pid 3172] <... futex resumed>) = 0 [pid 3181] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3180] <... clone resumed>, parent_tid=[3187], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3187 [pid 3173] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3172] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3180] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3173] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3172] <... futex resumed>) = 0 [pid 3180] <... futex resumed>) = 0 [pid 3173] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3172] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3180] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3173] <... mount resumed>) = 0 [pid 3173] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3172] <... futex resumed>) = 0 [pid 3173] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3172] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3173] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3172] <... futex resumed>) = 0 [pid 3173] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3172] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3186] <... futex resumed>) = 0 [pid 3186] memfd_create("syzkaller", 0) = 3 [pid 3186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 3187 attached [pid 3185] <... write resumed>) = 1048576 [pid 3185] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3187] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3185] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3187] memfd_create("syzkaller", 0) = 3 [pid 3187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3186] <... write resumed>) = 1048576 [pid 3186] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3186] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3187] <... write resumed>) = 1048576 [pid 3187] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3187] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 3187] ioctl(4, LOOP_SET_FD, 3 [pid 3178] <... ioctl resumed>) = 0 [pid 3173] <... open resumed>) = 6 [pid 3185] <... openat resumed>) = 4 [pid 3178] close(4 [pid 3173] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3185] ioctl(4, LOOP_SET_FD, 3 [pid 3178] <... close resumed>) = 0 [pid 3173] <... futex resumed>) = 1 [pid 3172] <... futex resumed>) = 0 [pid 3178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3173] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3172] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = 0 [pid 3187] <... ioctl resumed>) = 0 [pid 3178] <... futex resumed>) = 1 [pid 3175] <... futex resumed>) = 0 [pid 3172] <... futex resumed>) = 0 [pid 376] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3178] chdir("./file0" [pid 3175] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3178] <... chdir resumed>) = 0 [pid 3175] <... futex resumed>) = 0 [pid 376] lstat("./88/bus", [pid 3178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3175] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3178] <... futex resumed>) = 0 [pid 3175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3178] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3175] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3178] <... open resumed>) = 4 [pid 3175] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3172] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3185] <... ioctl resumed>) = 0 [pid 3185] close(3) = 0 [pid 3178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3175] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... openat resumed>) = 4 [pid 3185] mkdir("./bus", 0777 [pid 3178] <... futex resumed>) = 0 [pid 3175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] fstat(4, [pid 3185] <... mkdir resumed>) = 0 [pid 3178] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3175] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3185] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3178] <... openat resumed>) = 5 [pid 3175] <... futex resumed>) = 0 [pid 376] getdents64(4, [pid 3187] close(3 [pid 3178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3175] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3187] <... close resumed>) = 0 [pid 3178] <... futex resumed>) = 0 [pid 3175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3187] mkdir("./bus", 0777 [pid 3178] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3175] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 3187] <... mkdir resumed>) = 0 [pid 3178] <... write resumed>) = 196608 [pid 3175] <... futex resumed>) = 0 [pid 3187] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3186] <... openat resumed>) = 4 [pid 3175] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(4 [pid 3178] <... futex resumed>) = 1 [pid 3175] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 3178] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3175] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] rmdir("./88/bus" [pid 3178] <... mount resumed>) = 0 [pid 3175] <... futex resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 3178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3175] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(3, [pid 3178] <... futex resumed>) = 0 [pid 3175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3178] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3175] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 3178] <... open resumed>) = 6 [pid 3175] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 3186] ioctl(4, LOOP_SET_FD, 3 [pid 3178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3175] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] rmdir("./88" [pid 3178] <... futex resumed>) = 0 [pid 3175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... rmdir resumed>) = 0 [pid 3178] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3175] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] mkdir("./89", 0777 [pid 3175] <... futex resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 3175] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 69.075190][ T3178] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/86/bus supports timestamps until 2038 (0x7fffffff) [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3 [pid 3186] <... ioctl resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3186] close(3 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3191 [pid 3186] <... close resumed>) = 0 [pid 3186] mkdir("./bus", 0777) = 0 [pid 3186] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3178] <... write resumed>) = 1048576 [pid 3178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3175] <... futex resumed>) = 0 [pid 3175] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3175] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3178] <... futex resumed>) = 1 [pid 3178] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 3191 attached [pid 3173] <... write resumed>) = 1048576 [pid 3173] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3172] <... futex resumed>) = 0 [pid 3173] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 69.152326][ T3178] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 69.155704][ T3173] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 69.166824][ T3185] ext4 filesystem being mounted at /root/syzkaller.k3ECep/89/bus supports timestamps until 2038 (0x7fffffff) [ 69.181015][ T3173] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 3172] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3191] set_robust_list(0x55555713c5e0, 24 [pid 3187] <... mount resumed>) = 0 [pid 3185] <... mount resumed>) = 0 [pid 3175] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3172] <... futex resumed>) = 0 [pid 3187] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3175] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3187] <... openat resumed>) = 3 [pid 3175] <... futex resumed>) = 0 [pid 3187] chdir("./bus" [pid 3175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3187] <... chdir resumed>) = 0 [pid 3175] <... mmap resumed>) = 0x7f64f6d23000 [pid 3187] ioctl(4, LOOP_CLR_FD [pid 3175] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3187] <... ioctl resumed>) = 0 [pid 3175] <... mprotect resumed>) = 0 [pid 3187] close(4 [pid 3175] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3187] <... close resumed>) = 0 [pid 3187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3175] <... clone resumed>, parent_tid=[3198], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3198 [pid 3187] <... futex resumed>) = 1 [pid 3175] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3191] <... set_robust_list resumed>) = 0 [pid 3187] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3175] <... futex resumed>) = 0 [pid 3191] chdir("./89" [pid 3175] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3191] <... chdir resumed>) = 0 [pid 3191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3191] setpgid(0, 0) = 0 [pid 3191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3191] write(3, "1000", 4) = 4 [pid 3191] close(3) = 0 [pid 3191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3191] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3191] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3191] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3199], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3199 [pid 3191] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3191] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3185] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3185] chdir("./bus") = 0 [pid 3185] ioctl(4, LOOP_CLR_FD) = 0 [pid 3185] close(4) = 0 [pid 3185] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3183] <... futex resumed>) = 0 [pid 3183] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3183] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3185] <... futex resumed>) = 1 [pid 3185] chdir("./file0") = 0 [pid 3185] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3183] <... futex resumed>) = 0 [pid 3183] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3183] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3185] <... futex resumed>) = 1 [pid 3185] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3185] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3183] <... futex resumed>) = 0 [pid 3183] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3183] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3185] <... futex resumed>) = 1 [pid 3185] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3185] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3183] <... futex resumed>) = 0 [pid 3183] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3183] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3185] <... futex resumed>) = 1 [pid 3185] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 3185] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3183] <... futex resumed>) = 0 [pid 3183] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3183] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3185] <... futex resumed>) = 1 [pid 3185] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3185] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3183] <... futex resumed>) = 0 [pid 3183] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3183] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3185] <... futex resumed>) = 1 [pid 3185] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3185] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3183] <... futex resumed>) = 0 [pid 3183] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3183] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3185] <... futex resumed>) = 1 [pid 3185] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3172] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3180] <... futex resumed>) = 0 [pid 3173] <... openat resumed>) = 7 [pid 3180] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3173] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3180] <... futex resumed>) = 1 [pid 3187] <... futex resumed>) = 0 [pid 3187] chdir("./file0") = 0 [pid 3180] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3173] <... futex resumed>) = 1 [pid 3172] <... futex resumed>) = 0 [pid 3185] <... write resumed>) = 1048576 [pid 3185] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3183] <... futex resumed>) = 0 [pid 3183] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3183] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3185] <... futex resumed>) = 1 [pid 3185] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3172] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3173] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3187] <... futex resumed>) = 0 [pid 3180] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3172] <... futex resumed>) = 0 [pid 3173] <... openat resumed>) = 8 [pid 3172] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3180] <... futex resumed>) = 0 [pid 3187] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3180] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3173] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3199 attached ./strace-static-x86_64: Process 3198 attached [pid 3186] <... mount resumed>) = 0 [pid 3173] <... futex resumed>) = 1 [pid 3172] <... futex resumed>) = 0 [pid 3199] set_robust_list(0x7f64ff0649e0, 24 [pid 3198] set_robust_list(0x7f64f6d439e0, 24 [pid 3186] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3173] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 69.193076][ T3187] ext4 filesystem being mounted at /root/syzkaller.43WzWH/87/bus supports timestamps until 2038 (0x7fffffff) [ 69.200899][ T3178] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 69.225527][ T3186] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/85/bus supports timestamps until 2038 (0x7fffffff) [ 69.238109][ T3185] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3172] exit_group(0 [pid 3199] <... set_robust_list resumed>) = 0 [pid 3198] <... set_robust_list resumed>) = 0 [pid 3186] <... openat resumed>) = 3 [pid 3173] <... futex resumed>) = ? [pid 3172] <... exit_group resumed>) = ? [pid 3199] memfd_create("syzkaller", 0 [pid 3198] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3187] <... open resumed>) = 4 [pid 3186] chdir("./bus" [pid 3173] +++ exited with 0 +++ [pid 3172] +++ exited with 0 +++ [pid 3199] <... memfd_create resumed>) = 3 [pid 3187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3186] <... chdir resumed>) = 0 [pid 3199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3187] <... futex resumed>) = 1 [pid 3186] ioctl(4, LOOP_CLR_FD [pid 3180] <... futex resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3172, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3199] <... mmap resumed>) = 0x7f64f6c44000 [pid 3187] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3186] <... ioctl resumed>) = 0 [pid 3180] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 3199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3187] <... openat resumed>) = 5 [pid 3186] close(4 [pid 3180] <... futex resumed>) = 0 [pid 374] <... restart_syscall resumed>) = 0 [pid 3187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3186] <... close resumed>) = 0 [pid 3185] <... openat resumed>) = 7 [pid 3180] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3187] <... futex resumed>) = 0 [pid 3186] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3198] <... openat resumed>) = 8 [pid 3187] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3186] <... futex resumed>) = 1 [pid 3185] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3181] <... futex resumed>) = 0 [pid 3180] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3178] <... openat resumed>) = 7 [pid 374] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3198] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3187] <... write resumed>) = 196608 [pid 3186] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3181] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3180] <... futex resumed>) = 0 [pid 3183] <... futex resumed>) = 0 [pid 3175] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3185] <... futex resumed>) = 1 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3198] <... futex resumed>) = 0 [pid 3187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3183] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3181] <... futex resumed>) = 0 [pid 3180] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3175] exit_group(0 [pid 374] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3187] <... futex resumed>) = 0 [pid 3186] chdir("./file0" [pid 3185] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3183] <... futex resumed>) = 0 [pid 3181] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3178] <... futex resumed>) = ? [pid 3175] <... exit_group resumed>) = ? [pid 374] <... openat resumed>) = 3 [pid 3198] +++ exited with 0 +++ [pid 3187] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3186] <... chdir resumed>) = 0 [pid 3185] <... openat resumed>) = 8 [pid 3183] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3180] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] fstat(3, [pid 3187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3186] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3180] <... futex resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3187] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3186] <... futex resumed>) = 1 [pid 3185] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3181] <... futex resumed>) = 0 [pid 3180] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3178] +++ exited with 0 +++ [pid 3175] +++ exited with 0 +++ [pid 374] getdents64(3, [pid 3199] <... write resumed>) = 1048576 [pid 3187] <... mount resumed>) = 0 [pid 3186] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3185] <... futex resumed>) = 1 [pid 3183] <... futex resumed>) = 0 [pid 3181] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3175, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3185] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3183] exit_group(0 [pid 3181] <... futex resumed>) = 0 [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 374] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3199] munmap(0x7f64f6c44000, 1048576 [pid 3187] <... futex resumed>) = 1 [pid 3186] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3185] <... futex resumed>) = ? [pid 3183] <... exit_group resumed>) = ? [pid 3181] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3180] <... futex resumed>) = 0 [pid 375] <... restart_syscall resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3199] <... munmap resumed>) = 0 [pid 3187] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3186] <... open resumed>) = 4 [pid 3185] +++ exited with 0 +++ [pid 3183] +++ exited with 0 +++ [pid 3180] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] lstat("./86/binderfs", [pid 3187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3186] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3180] <... futex resumed>) = 0 [pid 3180] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3183, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3187] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3186] <... futex resumed>) = 1 [pid 3181] <... futex resumed>) = 0 [pid 375] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] unlink("./86/binderfs" [pid 373] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3187] <... open resumed>) = 6 [pid 3186] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3181] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3199] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] <... unlink resumed>) = 0 [pid 3181] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3199] <... openat resumed>) = 4 [pid 3186] <... openat resumed>) = 5 [pid 3181] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3186] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 3 [pid 3181] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3187] <... futex resumed>) = 1 [pid 3186] <... futex resumed>) = 0 [pid 3181] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3180] <... futex resumed>) = 0 [pid 375] fstat(3, [pid 3199] ioctl(4, LOOP_SET_FD, 3 [pid 3187] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3186] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3181] <... futex resumed>) = 0 [pid 3180] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... openat resumed>) = 3 [pid 3199] <... ioctl resumed>) = 0 [pid 3181] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3180] <... futex resumed>) = 0 [pid 375] getdents64(3, [pid 373] fstat(3, [pid 3199] close(3) = 0 [pid 3199] mkdir("./bus", 0777) = 0 [pid 3199] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3180] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] getdents64(3, [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./86/binderfs", [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] unlink("./86/binderfs" [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... unlink resumed>) = 0 [pid 373] lstat("./89/binderfs", [pid 375] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./89/binderfs") = 0 [pid 3187] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 373] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3186] <... write resumed>) = 196608 [pid 3186] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3186] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3181] <... futex resumed>) = 0 [pid 3181] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3181] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3186] <... futex resumed>) = 0 [pid 3186] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3186] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3181] <... futex resumed>) = 0 [pid 3186] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3181] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3181] <... futex resumed>) = 0 [pid 3186] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [ 69.252615][ T3185] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 3181] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3187] <... write resumed>) = 1048576 [pid 3187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3180] <... futex resumed>) = 0 [pid 3180] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3180] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3187] <... futex resumed>) = 1 [pid 3187] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3199] <... mount resumed>) = 0 [pid 3199] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3199] chdir("./bus") = 0 [pid 3199] ioctl(4, LOOP_CLR_FD [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./86/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./86/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./86") = 0 [pid 374] mkdir("./87", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3187] <... openat resumed>) = 7 [pid 3187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3180] <... futex resumed>) = 0 [pid 3180] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3180] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3187] <... futex resumed>) = 1 [pid 3187] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3180] <... futex resumed>) = 0 [pid 3180] exit_group(0) = ? [pid 3187] <... futex resumed>) = ? [pid 3181] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3181] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3181] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3181] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3181] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3203], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3203 [pid 3181] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3181] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3203 attached [pid 3203] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3203] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 3203] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3181] <... futex resumed>) = 0 [pid 3181] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3181] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3203] <... futex resumed>) = 1 [pid 3203] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 [pid 3203] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3181] <... futex resumed>) = 0 [pid 3181] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3181] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3203] <... futex resumed>) = 1 [pid 3203] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3203] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3181] <... futex resumed>) = 0 [pid 3203] <... futex resumed>) = 1 [pid 3203] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3186] <... open resumed>) = 6 [pid 3186] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3186] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3181] exit_group(0) = ? [pid 3203] <... futex resumed>) = ? [pid 3203] +++ exited with 0 +++ [pid 3187] +++ exited with 0 +++ [pid 3186] <... futex resumed>) = ? [pid 3180] +++ exited with 0 +++ [pid 373] <... umount2 resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 3186] +++ exited with 0 +++ [pid 3181] +++ exited with 0 +++ [pid 375] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3181, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 372] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./85/binderfs") = 0 [pid 372] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3180, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, [pid 375] lstat("./86/bus", [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] lstat("./89/bus", [pid 374] ioctl(3, LOOP_CLR_FD [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] lstat("./87/binderfs", [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] <... openat resumed>) = 4 [pid 377] unlink("./87/binderfs" [pid 373] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] fstat(4, [pid 377] <... unlink resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... openat resumed>) = 4 [pid 377] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] getdents64(4, [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, [pid 373] getdents64(4, [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4 [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] <... close resumed>) = 0 [pid 373] close(4 [pid 375] rmdir("./86/bus" [pid 373] <... close resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 373] rmdir("./89/bus" [pid 375] getdents64(3, [pid 373] <... rmdir resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3 [pid 373] getdents64(3, [pid 3199] <... ioctl resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] <... close resumed>) = 0 [pid 373] close(3 [pid 375] rmdir("./86" [pid 3199] close(4 [pid 373] <... close resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 373] rmdir("./89" [pid 375] mkdir("./87", 0777 [pid 373] <... rmdir resumed>) = 0 [pid 373] mkdir("./90", 0777 [pid 375] <... mkdir resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 373] <... mkdir resumed>) = 0 [ 69.298165][ T3199] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/89/bus supports timestamps until 2038 (0x7fffffff) [ 69.307389][ T3187] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 69.323973][ T3187] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 372] <... umount2 resumed>) = 0 [pid 3199] <... close resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3199] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] <... openat resumed>) = 3 [pid 372] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] close(3 [pid 3199] <... futex resumed>) = 1 [pid 3191] <... futex resumed>) = 0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 3199] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3191] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3191] <... futex resumed>) = 0 [pid 372] lstat("./85/bus", [pid 3199] chdir("./file0" [pid 3191] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3199] <... chdir resumed>) = 0 [pid 372] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3199] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3199] <... futex resumed>) = 1 [pid 3191] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3199] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3191] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 4 [pid 3191] <... futex resumed>) = 0 [pid 3191] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, [pid 3199] <... open resumed>) = 4 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3199] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(4, [pid 3199] <... futex resumed>) = 1 [pid 3191] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3191] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(4 [pid 3199] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3191] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3199] <... openat resumed>) = 5 [pid 3191] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] rmdir("./85/bus" [pid 3199] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3191] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3199] <... futex resumed>) = 0 [pid 3191] <... futex resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 3199] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3191] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./85") = 0 [pid 372] mkdir("./86", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3199] <... write resumed>) = 196608 [pid 3199] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3191] <... futex resumed>) = 0 [pid 3191] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3199] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3191] <... futex resumed>) = 0 [pid 3199] <... mount resumed>) = 0 [pid 3191] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3199] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3199] <... futex resumed>) = 0 [pid 3191] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3199] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3191] <... futex resumed>) = 0 [pid 3191] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... close resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... openat resumed>) = 3 [pid 377] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] close(3 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] close(3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 377] lstat("./87/bus", [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3204 [pid 373] <... close resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... close resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] close(3 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 3204 attached [pid 377] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] <... openat resumed>) = 4 [pid 3204] set_robust_list(0x55555713c5e0, 24) = 0 [pid 377] fstat(4, [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3205 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3206 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3207 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./87/bus" [pid 3204] chdir("./87" [pid 377] <... rmdir resumed>) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./87" [pid 3204] <... chdir resumed>) = 0 [pid 3191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 377] <... rmdir resumed>) = 0 [pid 3191] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] mkdir("./88", 0777 [pid 3191] <... futex resumed>) = 0 [pid 3191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3191] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3191] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3208], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3208 [pid 3199] <... open resumed>) = 6 [pid 3191] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... mkdir resumed>) = 0 [pid 3191] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3191] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 3 [pid 3199] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 3204] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 377] close(3 [pid 3204] <... prctl resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 3204] setpgid(0, 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3204] <... setpgid resumed>) = 0 [pid 3204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3204] write(3, "1000", 4 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3209 [pid 3204] <... write resumed>) = 4 [pid 3204] close(3) = 0 [pid 3204] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3199] <... futex resumed>) = 0 [pid 3204] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3204] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 ./strace-static-x86_64: Process 3205 attached [pid 3204] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 3209 attached ./strace-static-x86_64: Process 3208 attached ./strace-static-x86_64: Process 3207 attached ./strace-static-x86_64: Process 3206 attached [pid 3199] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3205] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3206] set_robust_list(0x55555713c5e0, 24 [pid 3204] <... mprotect resumed>) = 0 [pid 3205] chdir("./87" [pid 3206] <... set_robust_list resumed>) = 0 [pid 3204] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3206] chdir("./90" [pid 3205] <... chdir resumed>) = 0 [pid 3206] <... chdir resumed>) = 0 [pid 3204] <... clone resumed>, parent_tid=[3210], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3210 [pid 3205] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 3210 attached [pid 3207] set_robust_list(0x55555713c5e0, 24 [pid 3206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3204] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3207] <... set_robust_list resumed>) = 0 [pid 3206] <... prctl resumed>) = 0 [pid 3204] <... futex resumed>) = 0 [pid 3207] chdir("./86" [pid 3206] setpgid(0, 0 [pid 3204] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3207] <... chdir resumed>) = 0 [pid 3206] <... setpgid resumed>) = 0 [pid 3207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3207] <... prctl resumed>) = 0 [pid 3206] <... openat resumed>) = 3 [pid 3207] setpgid(0, 0 [pid 3206] write(3, "1000", 4 [pid 3207] <... setpgid resumed>) = 0 [pid 3206] <... write resumed>) = 4 [pid 3207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3206] close(3) = 0 [pid 3206] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3205] <... prctl resumed>) = 0 [pid 3206] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3205] setpgid(0, 0) = 0 [pid 3206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3206] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3207] <... openat resumed>) = 3 [pid 3206] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3207] write(3, "1000", 4 [pid 3205] <... openat resumed>) = 3 [pid 3206] <... clone resumed>, parent_tid=[3211], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3211 [pid 3206] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3206] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3211 attached [pid 3211] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3211] memfd_create("syzkaller", 0 [pid 3205] write(3, "1000", 4 [pid 3208] set_robust_list(0x7f64f6d439e0, 24 [pid 3207] <... write resumed>) = 4 [pid 3205] <... write resumed>) = 4 [pid 3207] close(3 [pid 3211] <... memfd_create resumed>) = 3 [pid 3211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3205] close(3 [pid 3207] <... close resumed>) = 0 [pid 3205] <... close resumed>) = 0 [pid 3205] symlink("/dev/binderfs", "./binderfs" [pid 3208] <... set_robust_list resumed>) = 0 [pid 3207] symlink("/dev/binderfs", "./binderfs" [pid 3205] <... symlink resumed>) = 0 [pid 3207] <... symlink resumed>) = 0 [pid 3205] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3208] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3205] <... futex resumed>) = 0 [pid 3207] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3207] <... futex resumed>) = 0 [pid 3205] <... mmap resumed>) = 0x7f64ff044000 [pid 3207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3205] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3207] <... mmap resumed>) = 0x7f64ff044000 [pid 3205] <... mprotect resumed>) = 0 [pid 3207] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3205] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3207] <... mprotect resumed>) = 0 [pid 3205] <... clone resumed>, parent_tid=[3212], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3212 [pid 3207] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3205] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3205] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3207] <... clone resumed>, parent_tid=[3213], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3213 [pid 3207] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3207] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3209] set_robust_list(0x55555713c5e0, 24) = 0 ./strace-static-x86_64: Process 3212 attached [pid 3212] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3209] chdir("./88" [pid 3212] memfd_create("syzkaller", 0 [pid 3209] <... chdir resumed>) = 0 [pid 3212] <... memfd_create resumed>) = 3 [pid 3209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3209] <... prctl resumed>) = 0 [pid 3209] setpgid(0, 0) = 0 [pid 3209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3209] write(3, "1000", 4) = 4 [pid 3209] close(3) = 0 [pid 3209] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3209] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3209] <... mmap resumed>) = 0x7f64ff044000 [pid 3209] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3209] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3214], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3214 [pid 3209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3210] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3210] memfd_create("syzkaller", 0) = 3 [pid 3210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 3214 attached ./strace-static-x86_64: Process 3213 attached ) = 0x7f64f6c44000 [pid 3213] set_robust_list(0x7f64ff0649e0, 24 [pid 3211] <... write resumed>) = 1048576 [pid 3211] munmap(0x7f64f6c44000, 1048576 [pid 3213] <... set_robust_list resumed>) = 0 [pid 3213] memfd_create("syzkaller", 0 [pid 3211] <... munmap resumed>) = 0 [pid 3211] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 3211] ioctl(4, LOOP_SET_FD, 3 [pid 3213] <... memfd_create resumed>) = 3 [pid 3214] set_robust_list(0x7f64ff0649e0, 24 [pid 3213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3214] <... set_robust_list resumed>) = 0 [pid 3212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3213] <... mmap resumed>) = 0x7f64f6c44000 [pid 3214] memfd_create("syzkaller", 0 [pid 3211] <... ioctl resumed>) = 0 [pid 3211] close(3) = 0 [pid 3211] mkdir("./bus", 0777) = 0 [pid 3211] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3191] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3191] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3199] <... futex resumed>) = 0 [pid 3191] <... futex resumed>) = 1 [pid 3199] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3191] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3208] <... write resumed>) = 1048576 [pid 3208] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3208] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3213] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3213] ioctl(4, LOOP_SET_FD, 3 [pid 3210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3214] <... memfd_create resumed>) = 3 [pid 3214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3210] <... write resumed>) = 1048576 [pid 3210] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3210] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3213] <... ioctl resumed>) = 0 [pid 3213] close(3) = 0 [pid 3213] mkdir("./bus", 0777) = 0 [pid 3213] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3212] <... write resumed>) = 1048576 [pid 3210] <... openat resumed>) = 4 [pid 3199] <... openat resumed>) = 7 [pid 3199] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3191] <... futex resumed>) = 0 [pid 3199] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3191] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3191] <... futex resumed>) = 0 [pid 3199] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3191] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3199] <... openat resumed>) = 8 [pid 3199] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3191] <... futex resumed>) = 0 [pid 3199] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3191] exit_group(0 [pid 3208] <... futex resumed>) = ? [pid 3199] <... futex resumed>) = ? [pid 3191] <... exit_group resumed>) = ? [pid 3208] +++ exited with 0 +++ [pid 3210] ioctl(4, LOOP_SET_FD, 3 [pid 3212] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3212] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3214] <... write resumed>) = 1048576 [pid 3212] <... openat resumed>) = 4 [pid 3210] <... ioctl resumed>) = 0 [pid 3199] +++ exited with 0 +++ [pid 3191] +++ exited with 0 +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3191, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 376] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./89/binderfs") = 0 [pid 376] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3214] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3214] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 3214] ioctl(4, LOOP_SET_FD, 3 [pid 3210] close(3) = 0 [pid 3210] mkdir("./bus", 0777) = 0 [pid 3210] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3212] ioctl(4, LOOP_SET_FD, 3 [pid 3214] <... ioctl resumed>) = 0 [pid 3214] close(3) = 0 [pid 3214] mkdir("./bus", 0777) = 0 [pid 3214] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3212] <... ioctl resumed>) = 0 [pid 3212] close(3) = 0 [pid 3212] mkdir("./bus", 0777) = 0 [pid 3212] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3213] <... mount resumed>) = 0 [ 69.509265][ T3199] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 69.527919][ T3199] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 69.541877][ T3213] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/86/bus supports timestamps until 2038 (0x7fffffff) [pid 3213] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3210] <... mount resumed>) = 0 [pid 3213] <... openat resumed>) = 3 [pid 3213] chdir("./bus") = 0 [pid 3213] ioctl(4, LOOP_CLR_FD) = 0 [pid 3213] close(4) = 0 [pid 3213] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3207] <... futex resumed>) = 0 [pid 3213] chdir("./file0" [pid 3207] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3213] <... chdir resumed>) = 0 [pid 3207] <... futex resumed>) = 0 [pid 3213] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3207] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3213] <... futex resumed>) = 0 [pid 3207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3213] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3207] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3213] <... open resumed>) = 4 [pid 3207] <... futex resumed>) = 0 [pid 3213] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3207] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3213] <... futex resumed>) = 0 [pid 3207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3213] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3207] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3213] <... openat resumed>) = 5 [pid 3207] <... futex resumed>) = 0 [pid 3213] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3207] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3213] <... futex resumed>) = 0 [pid 3207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3213] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3207] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3213] <... write resumed>) = 196608 [pid 3207] <... futex resumed>) = 0 [pid 3207] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3213] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3207] <... futex resumed>) = 0 [pid 3207] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3207] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3213] <... futex resumed>) = 1 [pid 3213] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3213] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3207] <... futex resumed>) = 0 [pid 3207] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3207] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3213] <... futex resumed>) = 1 [pid 3213] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3213] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3207] <... futex resumed>) = 0 [pid 3207] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3207] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3213] <... futex resumed>) = 1 [pid 3213] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3210] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3210] chdir("./bus") = 0 [pid 3210] ioctl(4, LOOP_CLR_FD) = 0 [pid 3210] close(4 [pid 3211] <... mount resumed>) = 0 [pid 3211] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3211] chdir("./bus") = 0 [ 69.561117][ T3210] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/87/bus supports timestamps until 2038 (0x7fffffff) [ 69.576024][ T3211] ext4 filesystem being mounted at /root/syzkaller.k3ECep/90/bus supports timestamps until 2038 (0x7fffffff) [ 69.599295][ T3212] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/87/bus supports timestamps until 2038 (0x7fffffff) [pid 3211] ioctl(4, LOOP_CLR_FD [pid 3213] <... write resumed>) = 1048576 [pid 3212] <... mount resumed>) = 0 [pid 3213] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3207] <... futex resumed>) = 0 [pid 3213] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3207] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3214] <... mount resumed>) = 0 [pid 3212] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3207] <... futex resumed>) = 0 [pid 3214] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3212] <... openat resumed>) = 3 [pid 3212] chdir("./bus" [pid 3214] chdir("./bus" [pid 3212] <... chdir resumed>) = 0 [pid 3214] <... chdir resumed>) = 0 [pid 3212] ioctl(4, LOOP_CLR_FD [pid 3214] ioctl(4, LOOP_CLR_FD [pid 3207] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3211] <... ioctl resumed>) = 0 [pid 3210] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 3211] close(4 [pid 3210] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3211] <... close resumed>) = 0 [pid 3210] <... futex resumed>) = 1 [pid 3204] <... futex resumed>) = 0 [pid 3211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3210] chdir("./file0" [pid 3204] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3211] <... futex resumed>) = 1 [pid 3210] <... chdir resumed>) = 0 [pid 3206] <... futex resumed>) = 0 [pid 3204] <... futex resumed>) = 0 [pid 3211] chdir("./file0" [pid 3210] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3206] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3204] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3211] <... chdir resumed>) = 0 [pid 3210] <... futex resumed>) = 0 [pid 3206] <... futex resumed>) = 0 [pid 3204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3210] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3206] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3204] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3211] <... futex resumed>) = 0 [pid 3210] <... open resumed>) = 4 [pid 3206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3204] <... futex resumed>) = 0 [pid 3211] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3210] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3206] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3204] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3210] <... futex resumed>) = 0 [pid 3206] <... futex resumed>) = 0 [pid 3204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] lstat("./89/bus", [pid 3211] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3210] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3206] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3204] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3211] <... open resumed>) = 4 [pid 3210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3204] <... futex resumed>) = 0 [pid 376] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3210] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3204] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3211] <... futex resumed>) = 1 [pid 3210] <... openat resumed>) = 5 [pid 3206] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3211] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3210] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3206] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3210] <... futex resumed>) = 1 [pid 3206] <... futex resumed>) = 0 [pid 3204] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 3211] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3210] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3206] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3204] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(4, [pid 3211] <... openat resumed>) = 5 [pid 3210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3204] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3210] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3204] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(4, [pid 3214] <... ioctl resumed>) = 0 [pid 3213] <... openat resumed>) = 7 [pid 3212] <... ioctl resumed>) = 0 [pid 3211] <... futex resumed>) = 1 [pid 3210] <... write resumed>) = 196608 [pid 3206] <... futex resumed>) = 0 [pid 3212] close(4 [pid 3214] close(4 [pid 3213] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3212] <... close resumed>) = 0 [pid 3211] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3210] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3206] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3211] <... write resumed>) = 196608 [pid 3210] <... futex resumed>) = 1 [pid 3206] <... futex resumed>) = 0 [pid 3204] <... futex resumed>) = 0 [pid 376] getdents64(4, [pid 3211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3210] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3206] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3204] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3211] <... futex resumed>) = 0 [pid 3210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3204] <... futex resumed>) = 0 [pid 376] close(4 [pid 3211] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3210] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3206] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3204] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... close resumed>) = 0 [pid 3211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3210] <... mount resumed>) = 0 [pid 3206] <... futex resumed>) = 0 [pid 376] rmdir("./89/bus" [pid 3212] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3211] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3210] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3206] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... rmdir resumed>) = 0 [pid 3212] <... futex resumed>) = 1 [pid 3211] <... mount resumed>) = 0 [pid 3210] <... futex resumed>) = 1 [pid 3205] <... futex resumed>) = 0 [pid 3204] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 3212] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3210] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3205] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3204] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3211] <... futex resumed>) = 1 [pid 3210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3206] <... futex resumed>) = 0 [pid 3205] <... futex resumed>) = 0 [pid 3204] <... futex resumed>) = 0 [pid 376] close(3 [pid 3212] chdir("./file0" [pid 3211] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3210] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3206] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3205] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3204] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... close resumed>) = 0 [pid 3212] <... chdir resumed>) = 0 [pid 3211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3210] <... open resumed>) = 6 [pid 3206] <... futex resumed>) = 0 [pid 376] rmdir("./89" [pid 3212] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3211] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3210] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3206] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... rmdir resumed>) = 0 [pid 3212] <... futex resumed>) = 1 [pid 3211] <... open resumed>) = 6 [pid 3210] <... futex resumed>) = 1 [pid 3205] <... futex resumed>) = 0 [pid 3204] <... futex resumed>) = 0 [pid 376] mkdir("./90", 0777 [pid 3214] <... close resumed>) = 0 [pid 3213] <... futex resumed>) = 1 [pid 3212] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3210] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3207] <... futex resumed>) = 0 [pid 3205] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3204] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... mkdir resumed>) = 0 [pid 3214] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3213] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3211] <... futex resumed>) = 1 [pid 3210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3207] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3206] <... futex resumed>) = 0 [pid 3205] <... futex resumed>) = 0 [pid 3204] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3214] <... futex resumed>) = 1 [pid 3213] <... openat resumed>) = 8 [pid 3212] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3211] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3210] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3209] <... futex resumed>) = 0 [pid 3207] <... futex resumed>) = 0 [pid 3206] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3205] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3204] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... openat resumed>) = 3 [pid 3214] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3213] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3207] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3213] <... futex resumed>) = 0 [pid 3209] <... futex resumed>) = 0 [pid 3207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3214] chdir("./file0" [pid 3213] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3207] exit_group(0 [pid 3214] <... chdir resumed>) = 0 [pid 3213] <... futex resumed>) = ? [pid 3211] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3207] <... exit_group resumed>) = ? [pid 3206] <... futex resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 3214] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3213] +++ exited with 0 +++ [pid 3207] +++ exited with 0 +++ [pid 3206] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3214] <... futex resumed>) = 1 [pid 3209] <... futex resumed>) = 0 [pid 376] close(3 [pid 3214] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3212] <... open resumed>) = 4 [pid 3209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... close resumed>) = 0 [pid 3214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3212] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3209] <... futex resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3214] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3212] <... futex resumed>) = 1 [pid 3209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3205] <... futex resumed>) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3207, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3205] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3230 [pid 372] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3214] <... open resumed>) = 4 [pid 3212] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3205] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3214] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3205] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3214] <... futex resumed>) = 1 [pid 3212] <... openat resumed>) = 5 [pid 3209] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3230 attached [pid 372] <... openat resumed>) = 3 [pid 3209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3214] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3212] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3209] <... futex resumed>) = 0 [pid 372] fstat(3, [pid 3214] <... openat resumed>) = 5 [pid 3212] <... futex resumed>) = 1 [pid 3209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3205] <... futex resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3214] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3212] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3205] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3214] <... futex resumed>) = 0 [pid 3205] <... futex resumed>) = 0 [pid 372] getdents64(3, [pid 3214] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3205] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3209] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3230] set_robust_list(0x55555713c5e0, 24 [pid 3209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3230] <... set_robust_list resumed>) = 0 [pid 3230] chdir("./90") = 0 [pid 3230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 372] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./86/binderfs") = 0 [pid 372] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3212] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3214] <... write resumed>) = 196608 [pid 3212] <... write resumed>) = 196608 [pid 3214] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3212] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3209] <... futex resumed>) = 0 [pid 3214] <... futex resumed>) = 1 [pid 3212] <... futex resumed>) = 1 [pid 3209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3205] <... futex resumed>) = 0 [pid 3214] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3212] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3209] <... futex resumed>) = 0 [pid 3205] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3205] <... futex resumed>) = 0 [pid 3205] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3230] <... prctl resumed>) = 0 [pid 3214] <... mount resumed>) = 0 [pid 3212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3214] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 69.600447][ T3214] ext4 filesystem being mounted at /root/syzkaller.43WzWH/88/bus supports timestamps until 2038 (0x7fffffff) [ 69.612419][ T3213] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 69.639770][ T3213] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 3230] setpgid(0, 0 [pid 3214] <... futex resumed>) = 1 [pid 3212] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3209] <... futex resumed>) = 0 [pid 3214] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3212] <... mount resumed>) = 0 [pid 3209] <... futex resumed>) = 0 [pid 3214] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3212] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3205] <... futex resumed>) = 0 [pid 3212] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3205] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3230] <... setpgid resumed>) = 0 [pid 3212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3205] <... futex resumed>) = 0 [pid 3212] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3205] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3230] write(3, "1000", 4) = 4 [pid 3230] close(3) = 0 [pid 3230] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3230] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3230] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3230] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3231], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3231 [pid 3230] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3230] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3231 attached [pid 3231] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3231] memfd_create("syzkaller", 0) = 3 [pid 3231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3210] <... write resumed>) = 1048576 [pid 3210] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3204] <... futex resumed>) = 0 [pid 3204] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3210] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3204] <... futex resumed>) = 0 [pid 3204] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3211] <... write resumed>) = 1048576 [pid 3211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3206] <... futex resumed>) = 0 [pid 3206] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3211] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3206] <... futex resumed>) = 0 [pid 3231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3231] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3231] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3206] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3210] <... openat resumed>) = 7 [pid 3209] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3205] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3209] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3205] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3209] <... futex resumed>) = 0 [pid 3205] <... futex resumed>) = 0 [pid 3209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3209] <... mmap resumed>) = 0x7f64f6d23000 [pid 3205] <... mmap resumed>) = 0x7f64f6d23000 [pid 3209] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3205] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3209] <... mprotect resumed>) = 0 [pid 3205] <... mprotect resumed>) = 0 [pid 3209] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3205] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3209] <... clone resumed>, parent_tid=[3232], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3232 [pid 3205] <... clone resumed>, parent_tid=[3233], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3233 [pid 3209] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3205] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3209] <... futex resumed>) = 0 [pid 3205] <... futex resumed>) = 0 [pid 3209] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3205] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3210] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3204] <... futex resumed>) = 0 [pid 3204] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3204] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3210] <... futex resumed>) = 1 [pid 3210] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3210] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3204] <... futex resumed>) = 0 [pid 3204] exit_group(0) = ? [pid 3210] <... futex resumed>) = ? ./strace-static-x86_64: Process 3233 attached [pid 3233] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3233] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 3233] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3205] <... futex resumed>) = 0 [pid 3205] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3205] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3233] <... futex resumed>) = 1 [pid 3233] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 ./strace-static-x86_64: Process 3232 attached [pid 3232] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3232] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 3232] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3209] <... futex resumed>) = 0 [pid 3209] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3209] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3232] <... futex resumed>) = 1 [pid 3232] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3233] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3205] <... futex resumed>) = 0 [pid 3205] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3205] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3233] <... futex resumed>) = 1 [pid 3233] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3232] <... openat resumed>) = 7 [pid 3233] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3205] <... futex resumed>) = 0 [pid 3233] <... futex resumed>) = 1 [pid 3233] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3232] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3209] <... futex resumed>) = 0 [pid 3209] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3209] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3232] <... futex resumed>) = 1 [pid 3232] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3232] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3209] <... futex resumed>) = 0 [pid 3232] <... futex resumed>) = 1 [pid 3232] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3211] <... openat resumed>) = 7 [pid 3214] <... open resumed>) = 6 [pid 3212] <... open resumed>) = 6 [pid 3214] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3212] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3214] <... futex resumed>) = 0 [pid 3212] <... futex resumed>) = 0 [pid 3214] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3212] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3209] exit_group(0 [pid 3232] <... futex resumed>) = ? [pid 3214] <... futex resumed>) = ? [pid 3209] <... exit_group resumed>) = ? [pid 3232] +++ exited with 0 +++ [pid 3214] +++ exited with 0 +++ [pid 3209] +++ exited with 0 +++ [pid 3205] exit_group(0 [pid 3233] <... futex resumed>) = ? [pid 3212] <... futex resumed>) = ? [pid 3205] <... exit_group resumed>) = ? [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3209, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3233] +++ exited with 0 +++ [pid 3231] <... openat resumed>) = 4 [pid 3212] +++ exited with 0 +++ [pid 3211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3205] +++ exited with 0 +++ [pid 372] <... umount2 resumed>) = 0 [pid 3231] ioctl(4, LOOP_SET_FD, 3 [pid 372] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./86/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3205, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 377] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3211] <... futex resumed>) = 1 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3211] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3231] <... ioctl resumed>) = 0 [pid 3206] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3231] close(3 [pid 3206] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3231] <... close resumed>) = 0 [pid 3206] <... futex resumed>) = 1 [pid 3231] mkdir("./bus", 0777 [pid 3206] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3231] <... mkdir resumed>) = 0 [pid 3231] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 372] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./86/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./86") = 0 [pid 372] mkdir("./87", 0777 [pid 3210] +++ exited with 0 +++ [pid 3204] +++ exited with 0 +++ [pid 377] <... openat resumed>) = 3 [pid 377] fstat(3, [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3204, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, [pid 375] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... mkdir resumed>) = 0 [pid 377] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] fstat(3, [pid 377] lstat("./88/binderfs", [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... openat resumed>) = 3 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] getdents64(3, [pid 377] unlink("./88/binderfs" [pid 374] fstat(3, [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 377] <... unlink resumed>) = 0 [pid 375] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] getdents64(3, [pid 377] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] lstat("./87/binderfs", [pid 374] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... openat resumed>) = 3 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] unlink("./87/binderfs" [pid 374] lstat("./87/binderfs", [pid 375] <... unlink resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] ioctl(3, LOOP_CLR_FD [pid 375] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] unlink("./87/binderfs" [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 374] <... unlink resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 374] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3235 [pid 3211] <... futex resumed>) = 0 [pid 3211] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 3235 attached ) = 8 [pid 3235] set_robust_list(0x55555713c5e0, 24 [pid 3211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3206] <... futex resumed>) = 0 [pid 3211] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3206] exit_group(0 [pid 3211] <... futex resumed>) = 231 [pid 3206] <... exit_group resumed>) = ? [pid 3235] <... set_robust_list resumed>) = 0 [pid 3235] chdir("./87") = 0 [pid 3235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3235] setpgid(0, 0) = 0 [pid 3235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3235] write(3, "1000", 4) = 4 [pid 3235] close(3) = 0 [pid 3235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3235] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3235] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3235] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3236 attached , parent_tid=[3236], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3236 [pid 3235] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3236] set_robust_list(0x7f64ff0649e0, 24 [pid 3235] <... futex resumed>) = 0 [ 69.707966][ T3210] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 69.712603][ T3211] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 69.721986][ T3210] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 69.736968][ T3211] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 3235] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3236] <... set_robust_list resumed>) = 0 [pid 3236] memfd_create("syzkaller", 0) = 3 [pid 3236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3231] <... mount resumed>) = 0 [pid 3231] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3231] chdir("./bus") = 0 [pid 3231] ioctl(4, LOOP_CLR_FD [pid 3236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3236] munmap(0x7f64f6c44000, 1048576) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 3236] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 377] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./88/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./88/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./88") = 0 [pid 377] mkdir("./89", 0777) = 0 [ 69.786237][ T3231] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/90/bus supports timestamps until 2038 (0x7fffffff) [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3231] <... ioctl resumed>) = 0 [pid 3211] +++ exited with 0 +++ [pid 3206] +++ exited with 0 +++ [pid 377] <... openat resumed>) = 3 [pid 375] <... umount2 resumed>) = 0 [pid 3231] close(4 [pid 375] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3206, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3231] <... close resumed>) = 0 [pid 3236] <... openat resumed>) = 4 [pid 3236] ioctl(4, LOOP_SET_FD, 3 [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3231] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./87/bus", [pid 374] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3230] <... futex resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3231] <... futex resumed>) = 1 [pid 3230] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3231] chdir("./file0" [pid 3230] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./87/bus", [pid 3230] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... openat resumed>) = 4 [pid 373] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3231] <... chdir resumed>) = 0 [pid 375] fstat(4, [pid 374] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... openat resumed>) = 3 [pid 3236] <... ioctl resumed>) = 0 [pid 3231] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3236] close(3 [pid 377] close(3) = 0 [pid 3236] <... close resumed>) = 0 [pid 3236] mkdir("./bus", 0777) = 0 [pid 3231] <... futex resumed>) = 1 [pid 3230] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 374] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] fstat(3, [pid 3236] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3230] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3231] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 374] <... openat resumed>) = 4 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3230] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3230] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(4, [pid 374] fstat(4, [pid 373] getdents64(3, [pid 3231] <... open resumed>) = 4 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3231] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(4 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3231] <... futex resumed>) = 1 [pid 3230] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 374] getdents64(4, [pid 3231] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3230] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./87/bus" [pid 373] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3230] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3230] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... rmdir resumed>) = 0 [pid 3231] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 375] getdents64(3, [pid 374] getdents64(4, [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3231] <... openat resumed>) = 5 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] lstat("./90/binderfs", [pid 3231] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(4 [pid 3231] <... futex resumed>) = 1 [pid 3230] <... futex resumed>) = 0 [pid 375] close(3 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] <... close resumed>) = 0 [pid 3231] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3230] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 374] rmdir("./87/bus" [pid 373] unlink("./90/binderfs"./strace-static-x86_64: Process 3240 attached [pid 3231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3230] <... futex resumed>) = 0 [pid 375] rmdir("./87" [pid 374] <... rmdir resumed>) = 0 [pid 3231] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3230] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3240 [pid 373] <... unlink resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 3240] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3240] chdir("./89") = 0 [pid 3240] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3240] setpgid(0, 0) = 0 [pid 3240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3231] <... write resumed>) = 196608 [pid 375] mkdir("./88", 0777 [pid 374] getdents64(3, [pid 373] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3240] <... openat resumed>) = 3 [pid 3231] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... mkdir resumed>) = 0 [pid 3240] write(3, "1000", 4) = 4 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3240] close(3 [pid 374] close(3 [pid 375] <... openat resumed>) = 3 [pid 3240] <... close resumed>) = 0 [pid 3230] <... futex resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 374] <... close resumed>) = 0 [pid 3230] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3240] symlink("/dev/binderfs", "./binderfs" [pid 3231] <... futex resumed>) = 1 [pid 3230] <... futex resumed>) = 0 [pid 374] rmdir("./87" [pid 3240] <... symlink resumed>) = 0 [pid 3240] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3240] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3240] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3242], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3242 [pid 3240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 3231] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3230] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3240] <... futex resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 3231] <... mount resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 3240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3242 attached [pid 3242] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3242] memfd_create("syzkaller", 0) = 3 [pid 3242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3231] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] mkdir("./88", 0777 [pid 3231] <... futex resumed>) = 1 [pid 3230] <... futex resumed>) = 0 [pid 3231] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3230] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3244 [pid 374] <... mkdir resumed>) = 0 [pid 3231] <... open resumed>) = 6 [pid 3230] <... futex resumed>) = 0 [pid 3231] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3230] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3231] <... futex resumed>) = 0 [pid 3230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3231] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3230] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3244 attached [pid 3231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3230] <... futex resumed>) = 0 [pid 3231] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3230] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3244] set_robust_list(0x55555713c5e0, 24 [pid 3242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3244] <... set_robust_list resumed>) = 0 [pid 3236] <... mount resumed>) = 0 [pid 3244] chdir("./88") = 0 [pid 3244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3244] setpgid(0, 0) = 0 [pid 3244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3242] <... write resumed>) = 1048576 [pid 3244] write(3, "1000", 4) = 4 [pid 3242] munmap(0x7f64f6c44000, 1048576 [pid 3236] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3231] <... write resumed>) = 1048576 [pid 3242] <... munmap resumed>) = 0 [pid 3242] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3231] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3230] <... futex resumed>) = 0 [pid 3230] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3230] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3231] <... futex resumed>) = 1 [pid 3231] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3244] close(3) = 0 [pid 3244] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3236] <... openat resumed>) = 3 [pid 3244] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3244] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3244] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3245], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3245 [pid 3244] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3244] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3236] chdir("./bus") = 0 [pid 3236] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 3245 attached [pid 3245] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3245] memfd_create("syzkaller", 0) = 3 [pid 3245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 373] <... umount2 resumed>) = 0 [pid 3242] <... openat resumed>) = 4 [pid 374] <... openat resumed>) = 3 [pid 3236] <... ioctl resumed>) = 0 [pid 3236] close(4) = 0 [pid 3236] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3235] <... futex resumed>) = 0 [pid 3236] chdir("./file0" [pid 3235] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3242] ioctl(4, LOOP_SET_FD, 3 [pid 3236] <... chdir resumed>) = 0 [pid 3235] <... futex resumed>) = 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 3236] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3235] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3236] <... futex resumed>) = 0 [pid 3235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3236] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3235] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3236] <... open resumed>) = 4 [pid 3235] <... futex resumed>) = 0 [pid 3236] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3235] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3236] <... futex resumed>) = 0 [pid 3235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3236] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3235] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3236] <... openat resumed>) = 5 [pid 3235] <... futex resumed>) = 0 [pid 3236] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3235] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3236] <... futex resumed>) = 0 [pid 3235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3236] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3235] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3236] <... write resumed>) = 196608 [pid 3235] <... futex resumed>) = 0 [pid 3235] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3236] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3235] <... futex resumed>) = 0 [pid 3235] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3235] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3236] <... futex resumed>) = 1 [pid 3236] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3236] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3235] <... futex resumed>) = 0 [pid 3235] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3235] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3236] <... futex resumed>) = 1 [pid 3236] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3245] <... write resumed>) = 1048576 [pid 3245] munmap(0x7f64f6c44000, 1048576 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3231] <... openat resumed>) = 7 [pid 3242] <... ioctl resumed>) = 0 [pid 373] lstat("./90/bus", [pid 3245] <... munmap resumed>) = 0 [pid 3242] close(3 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3242] <... close resumed>) = 0 [pid 374] close(3 [pid 373] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3242] mkdir("./bus", 0777 [pid 374] <... close resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3242] <... mkdir resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3242] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] <... openat resumed>) = 4 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3247 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./90/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./90" [pid 3236] <... open resumed>) = 6 [pid 373] <... rmdir resumed>) = 0 [pid 3236] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] mkdir("./91", 0777 [pid 3236] <... futex resumed>) = 1 [pid 3235] <... futex resumed>) = 0 [pid 3231] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... mkdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3235] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3248 [pid 3245] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 3245] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 3247 attached [pid 3247] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3247] chdir("./88") = 0 [pid 3247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3247] setpgid(0, 0) = 0 [pid 3247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3235] <... futex resumed>) = 0 [pid 3236] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3235] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3247] <... openat resumed>) = 3 [pid 3247] write(3, "1000", 4) = 4 [pid 3247] close(3) = 0 [pid 3247] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3247] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3247] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3247] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3251], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3251 [pid 3247] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3247] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3251 attached [pid 3251] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3251] memfd_create("syzkaller", 0) = 3 [pid 3251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3231] <... futex resumed>) = 1 [pid 3230] <... futex resumed>) = 0 [pid 3230] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3230] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3231] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3231] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3230] <... futex resumed>) = 0 [pid 3231] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3230] exit_group(0) = ? [pid 3231] <... futex resumed>) = ? [pid 3251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3251] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3251] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 3248 attached [pid 3248] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3248] chdir("./91") = 0 [pid 3248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3248] setpgid(0, 0) = 0 [pid 3248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3248] write(3, "1000", 4) = 4 [pid 3248] close(3) = 0 [pid 3248] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3248] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3248] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3248] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3252], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3252 [pid 3248] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3248] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3252 attached [pid 3252] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3252] memfd_create("syzkaller", 0) = 3 [pid 3252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [ 69.894928][ T3236] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/87/bus supports timestamps until 2038 (0x7fffffff) [ 69.912572][ T3231] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 69.934284][ T3231] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 3236] <... write resumed>) = 1048576 [pid 3252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3236] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3235] <... futex resumed>) = 0 [pid 3236] <... futex resumed>) = 1 [pid 3235] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3236] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3235] <... futex resumed>) = 0 [pid 3235] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3245] <... ioctl resumed>) = 0 [pid 3245] close(3) = 0 [pid 3245] mkdir("./bus", 0777) = 0 [pid 3245] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3252] <... write resumed>) = 1048576 [pid 3252] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3252] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 3252] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3252] close(3) = 0 [pid 3252] mkdir("./bus", 0777) = 0 [pid 3252] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3251] <... openat resumed>) = 4 [pid 3231] +++ exited with 0 +++ [pid 3230] +++ exited with 0 +++ [pid 3242] <... mount resumed>) = 0 [pid 3242] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3242] chdir("./bus") = 0 [pid 3242] ioctl(4, LOOP_CLR_FD) = 0 [pid 3242] close(4) = 0 [pid 3242] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3242] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3251] ioctl(4, LOOP_SET_FD, 3 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3230, si_uid=0, si_status=0, si_utime=1, si_stime=3} --- [pid 3240] <... futex resumed>) = 0 [pid 3240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3242] <... futex resumed>) = 0 [pid 3242] chdir("./file0") = 0 [pid 3242] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3240] <... futex resumed>) = 0 [pid 3240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3242] <... futex resumed>) = 1 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3242] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 376] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, [pid 3242] <... open resumed>) = 4 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, [pid 3242] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3240] <... futex resumed>) = 0 [pid 3240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3240] <... futex resumed>) = 0 [pid 3240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3242] <... futex resumed>) = 1 [pid 3242] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3242] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3240] <... futex resumed>) = 0 [pid 3240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3242] <... futex resumed>) = 1 [pid 3242] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3235] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 376] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3251] <... ioctl resumed>) = 0 [pid 3235] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3251] close(3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3251] <... close resumed>) = 0 [pid 3235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3235] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3235] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3251] mkdir("./bus", 0777) = 0 [pid 3235] <... clone resumed>, parent_tid=[3257], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3257 [pid 376] lstat("./90/binderfs", [pid 3235] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3235] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3251] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 376] unlink("./90/binderfs") = 0 [pid 376] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3242] <... write resumed>) = 196608 [pid 3242] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3240] <... futex resumed>) = 0 [pid 3240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3242] <... futex resumed>) = 1 [pid 3242] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3242] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3240] <... futex resumed>) = 0 [pid 3240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3242] <... futex resumed>) = 1 [pid 3242] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3242] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3240] <... futex resumed>) = 0 [pid 3240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3242] <... futex resumed>) = 1 [pid 3242] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3236] <... openat resumed>) = 7 [pid 3236] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3236] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3257 attached [ 69.989461][ T3236] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 69.991081][ T3242] ext4 filesystem being mounted at /root/syzkaller.43WzWH/89/bus supports timestamps until 2038 (0x7fffffff) [ 70.010211][ T3236] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 3257] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3257] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3242] <... write resumed>) = 1048576 [pid 3242] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3240] <... futex resumed>) = 0 [pid 3240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3242] <... futex resumed>) = 1 [pid 3242] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3257] <... openat resumed>) = 8 [pid 3252] <... mount resumed>) = 0 [pid 3245] <... mount resumed>) = 0 [pid 3257] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3235] <... futex resumed>) = 0 [pid 3257] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3235] exit_group(0 [pid 3257] <... futex resumed>) = ? [pid 3236] <... futex resumed>) = ? [pid 3235] <... exit_group resumed>) = ? [pid 3257] +++ exited with 0 +++ [pid 3236] +++ exited with 0 +++ [pid 3245] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3245] chdir("./bus") = 0 [pid 3245] ioctl(4, LOOP_CLR_FD [pid 3252] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3252] chdir("./bus") = 0 [ 70.047517][ T3245] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/88/bus supports timestamps until 2038 (0x7fffffff) [ 70.061871][ T3252] ext4 filesystem being mounted at /root/syzkaller.k3ECep/91/bus supports timestamps until 2038 (0x7fffffff) [ 70.065581][ T3242] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3252] ioctl(4, LOOP_CLR_FD [pid 3251] <... mount resumed>) = 0 [pid 3251] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3251] chdir("./bus") = 0 [pid 3251] ioctl(4, LOOP_CLR_FD [pid 3245] <... ioctl resumed>) = 0 [pid 3242] <... openat resumed>) = 7 [pid 3235] +++ exited with 0 +++ [pid 376] <... umount2 resumed>) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3235, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 372] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, [pid 3252] <... ioctl resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./87/binderfs") = 0 [pid 372] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3242] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3240] <... futex resumed>) = 0 [pid 3240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3242] <... futex resumed>) = 1 [pid 3242] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3242] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3240] <... futex resumed>) = 0 [pid 3240] exit_group(0) = ? [pid 3242] <... futex resumed>) = ? [pid 3242] +++ exited with 0 +++ [pid 3240] +++ exited with 0 +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3240, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 3252] close(4 [pid 3245] close(4 [pid 377] <... restart_syscall resumed>) = 0 [pid 376] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3252] <... close resumed>) = 0 [pid 3245] <... close resumed>) = 0 [pid 3252] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3252] <... futex resumed>) = 1 [pid 3248] <... futex resumed>) = 0 [pid 3245] <... futex resumed>) = 1 [pid 3244] <... futex resumed>) = 0 [pid 3252] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3248] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3245] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3244] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] lstat("./90/bus", [pid 3252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3248] <... futex resumed>) = 0 [pid 3245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3244] <... futex resumed>) = 0 [pid 3252] chdir("./file0" [pid 3245] chdir("./file0" [pid 3244] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3252] <... chdir resumed>) = 0 [pid 3245] <... chdir resumed>) = 0 [pid 3252] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3252] <... futex resumed>) = 0 [pid 3245] <... futex resumed>) = 1 [pid 3244] <... futex resumed>) = 0 [pid 3252] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3245] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3244] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3244] <... futex resumed>) = 0 [pid 3245] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3244] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3245] <... open resumed>) = 4 [pid 3245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 4 [pid 3245] <... futex resumed>) = 1 [pid 3244] <... futex resumed>) = 0 [pid 3245] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3244] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(4, [pid 3245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3244] <... futex resumed>) = 0 [pid 3245] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3244] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3245] <... openat resumed>) = 5 [pid 3245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 3245] <... futex resumed>) = 1 [pid 3244] <... futex resumed>) = 0 [pid 3245] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3244] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3248] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3244] <... futex resumed>) = 0 [pid 3248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3245] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3244] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(4, [pid 3248] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3245] <... write resumed>) = 196608 [pid 377] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3245] <... futex resumed>) = 1 [pid 3244] <... futex resumed>) = 0 [pid 376] close(4 [pid 3252] <... futex resumed>) = 0 [pid 3248] <... futex resumed>) = 1 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3245] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3244] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3252] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3248] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3245] <... mount resumed>) = 0 [pid 3244] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... close resumed>) = 0 [pid 3245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3244] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 3 [pid 376] rmdir("./90/bus" [pid 3252] <... open resumed>) = 4 [pid 3245] <... futex resumed>) = 0 [pid 3244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] fstat(3, [pid 376] <... rmdir resumed>) = 0 [pid 3252] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3245] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3244] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, [pid 3252] <... futex resumed>) = 1 [pid 3248] <... futex resumed>) = 0 [pid 3244] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3252] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3248] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3244] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] close(3 [pid 3252] <... openat resumed>) = 5 [pid 3248] <... futex resumed>) = 0 [pid 377] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... close resumed>) = 0 [pid 3252] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3248] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] rmdir("./90" [pid 3252] <... futex resumed>) = 0 [pid 3248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] lstat("./89/binderfs", [pid 3252] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3248] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 3252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3248] <... futex resumed>) = 0 [pid 377] unlink("./89/binderfs" [pid 376] mkdir("./91", 0777 [pid 3252] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3248] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... unlink resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 377] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3252] <... write resumed>) = 196608 [pid 3252] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3248] <... futex resumed>) = 0 [pid 3252] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3248] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3248] <... futex resumed>) = 0 [pid 3252] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3248] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3252] <... mount resumed>) = 0 [pid 3252] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3248] <... futex resumed>) = 0 [pid 3252] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3248] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3248] <... futex resumed>) = 0 [pid 3252] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3248] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3251] <... ioctl resumed>) = 0 [pid 3245] <... open resumed>) = 6 [pid 3251] close(4 [pid 377] <... umount2 resumed>) = 0 [pid 3245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3252] <... open resumed>) = 6 [pid 3251] <... close resumed>) = 0 [pid 3245] <... futex resumed>) = 1 [pid 3244] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 377] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3252] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 70.080123][ T3251] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/88/bus supports timestamps until 2038 (0x7fffffff) [ 70.087693][ T3242] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 3251] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3245] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3244] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] ioctl(3, LOOP_CLR_FD [pid 3252] <... futex resumed>) = 1 [pid 3251] <... futex resumed>) = 1 [pid 3248] <... futex resumed>) = 0 [pid 3247] <... futex resumed>) = 0 [pid 3245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3244] <... futex resumed>) = 0 [pid 377] lstat("./89/bus", [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... umount2 resumed>) = 0 [pid 3252] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3251] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3248] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3247] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3245] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3244] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] close(3 [pid 3252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3248] <... futex resumed>) = 0 [pid 3247] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 372] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3252] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3248] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3263 attached [pid 3251] chdir("./file0" [pid 3247] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3245] <... write resumed>) = 1048576 [pid 377] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3251] <... chdir resumed>) = 0 [pid 3245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3263 [pid 372] lstat("./87/bus", [pid 3251] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3245] <... futex resumed>) = 1 [pid 3244] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3251] <... futex resumed>) = 1 [pid 3247] <... futex resumed>) = 0 [pid 3245] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3244] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 4 [pid 372] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3251] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3247] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3244] <... futex resumed>) = 0 [pid 377] fstat(4, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3247] <... futex resumed>) = 0 [pid 3244] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3251] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3247] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 372] <... openat resumed>) = 4 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3252] <... write resumed>) = 1048576 [pid 3252] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3248] <... futex resumed>) = 0 [pid 3251] <... open resumed>) = 4 [pid 3248] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 372] fstat(4, [pid 3251] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3248] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3251] <... futex resumed>) = 1 [pid 3248] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3247] <... futex resumed>) = 0 [pid 377] close(4 [pid 372] getdents64(4, [pid 3252] <... futex resumed>) = 1 [pid 3251] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3247] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 3252] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3247] <... futex resumed>) = 0 [pid 377] rmdir("./89/bus" [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3263] set_robust_list(0x55555713c5e0, 24 [pid 3251] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3247] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... rmdir resumed>) = 0 [pid 3263] <... set_robust_list resumed>) = 0 [pid 3251] <... openat resumed>) = 5 [pid 3245] <... openat resumed>) = 7 [pid 377] getdents64(3, [pid 372] getdents64(4, [pid 3263] chdir("./91" [pid 3251] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3263] <... chdir resumed>) = 0 [pid 3251] <... futex resumed>) = 1 [pid 3247] <... futex resumed>) = 0 [pid 377] close(3 [pid 372] close(4 [pid 3263] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3251] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3247] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3263] <... prctl resumed>) = 0 [pid 3251] <... write resumed>) = 196608 [pid 3247] <... futex resumed>) = 0 [pid 377] rmdir("./89" [pid 372] rmdir("./87/bus" [pid 3263] setpgid(0, 0 [pid 3247] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... rmdir resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 3263] <... setpgid resumed>) = 0 [pid 377] mkdir("./90", 0777 [pid 372] getdents64(3, [pid 3263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] <... mkdir resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3263] <... openat resumed>) = 3 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 372] close(3 [pid 3263] write(3, "1000", 4 [pid 372] <... close resumed>) = 0 [pid 3263] <... write resumed>) = 4 [pid 372] rmdir("./87" [pid 3263] close(3 [pid 372] <... rmdir resumed>) = 0 [pid 3263] <... close resumed>) = 0 [pid 372] mkdir("./88", 0777 [pid 3263] symlink("/dev/binderfs", "./binderfs" [pid 372] <... mkdir resumed>) = 0 [pid 3263] <... symlink resumed>) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3263] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3252] <... openat resumed>) = 7 [pid 3251] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3251] <... futex resumed>) = 1 [pid 3251] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3252] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3263] <... mmap resumed>) = 0x7f64ff044000 [pid 3248] <... futex resumed>) = 0 [pid 3247] <... futex resumed>) = 0 [pid 3252] <... futex resumed>) = 1 [pid 3245] <... futex resumed>) = 1 [pid 3244] <... futex resumed>) = 0 [pid 3263] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3248] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3248] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3247] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3263] <... mprotect resumed>) = 0 [pid 3252] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3245] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3244] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3251] <... futex resumed>) = 0 [pid 3247] <... futex resumed>) = 1 [pid 3244] <... futex resumed>) = 0 [pid 3263] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3251] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3247] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3244] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3251] <... mount resumed>) = 0 [pid 3263] <... clone resumed>, parent_tid=[3264], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3264 [pid 3263] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3251] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3263] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3251] <... futex resumed>) = 1 [pid 3247] <... futex resumed>) = 0 [pid 3251] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3247] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3264 attached [pid 3252] <... openat resumed>) = 8 [pid 3247] <... futex resumed>) = 0 [pid 3245] <... openat resumed>) = 8 [pid 3252] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3247] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3252] <... futex resumed>) = 1 [pid 3248] <... futex resumed>) = 0 [pid 3245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3252] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3248] exit_group(0 [pid 3245] <... futex resumed>) = 1 [pid 3244] <... futex resumed>) = 0 [pid 3252] <... futex resumed>) = ? [pid 3248] <... exit_group resumed>) = ? [pid 3245] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3244] exit_group(0 [pid 3264] set_robust_list(0x7f64ff0649e0, 24 [pid 3245] <... futex resumed>) = ? [pid 3244] <... exit_group resumed>) = ? [pid 3264] <... set_robust_list resumed>) = 0 [pid 3264] memfd_create("syzkaller", 0) = 3 [pid 3264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3264] munmap(0x7f64f6c44000, 1048576) = 0 [pid 377] <... openat resumed>) = 3 [pid 3251] <... open resumed>) = 6 [pid 3251] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3247] <... futex resumed>) = 0 [pid 3247] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3247] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3251] <... futex resumed>) = 1 [pid 3251] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 372] <... openat resumed>) = 3 [pid 3252] +++ exited with 0 +++ [pid 3248] +++ exited with 0 +++ [pid 3245] +++ exited with 0 +++ [pid 3244] +++ exited with 0 +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3248, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 372] ioctl(3, LOOP_CLR_FD [pid 377] ioctl(3, LOOP_CLR_FD [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 377] close(3 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3244, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 372] <... close resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 373] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3266 [pid 373] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3265 [pid 373] <... openat resumed>) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] getdents64(3, [pid 373] lstat("./91/binderfs", [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./91/binderfs" [pid 375] unlink("./88/binderfs") = 0 [pid 373] <... unlink resumed>) = 0 [pid 375] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3266 attached ./strace-static-x86_64: Process 3265 attached [pid 3264] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3266] set_robust_list(0x55555713c5e0, 24 [pid 3265] set_robust_list(0x55555713c5e0, 24 [pid 3266] <... set_robust_list resumed>) = 0 [pid 3265] <... set_robust_list resumed>) = 0 [pid 3266] chdir("./90" [pid 3265] chdir("./88" [pid 3266] <... chdir resumed>) = 0 [pid 3265] <... chdir resumed>) = 0 [pid 3266] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3265] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3266] <... prctl resumed>) = 0 [ 70.181236][ T3245] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 70.181491][ T3252] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 70.204983][ T3245] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 70.209780][ T3252] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 3266] setpgid(0, 0 [pid 3265] <... prctl resumed>) = 0 [pid 3266] <... setpgid resumed>) = 0 [pid 3265] setpgid(0, 0 [pid 3266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3265] <... setpgid resumed>) = 0 [pid 3266] <... openat resumed>) = 3 [pid 3266] write(3, "1000", 4 [pid 3265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3266] <... write resumed>) = 4 [pid 3266] close(3) = 0 [pid 3266] symlink("/dev/binderfs", "./binderfs" [pid 3265] <... openat resumed>) = 3 [pid 3266] <... symlink resumed>) = 0 [pid 3265] write(3, "1000", 4 [pid 3266] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3265] <... write resumed>) = 4 [pid 3266] <... futex resumed>) = 0 [pid 3265] close(3 [pid 3266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3265] <... close resumed>) = 0 [pid 3266] <... mmap resumed>) = 0x7f64ff044000 [pid 3265] symlink("/dev/binderfs", "./binderfs" [pid 3266] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3265] <... symlink resumed>) = 0 [pid 3266] <... mprotect resumed>) = 0 [pid 3265] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3266] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3266] <... clone resumed>, parent_tid=[3267], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3267 [pid 3265] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3265] <... mprotect resumed>) = 0 [pid 3266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3265] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3267 attached [pid 3267] set_robust_list(0x7f64ff0649e0, 24 [pid 3265] <... clone resumed>, parent_tid=[3268], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3268 [pid 3265] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3265] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3267] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 3268 attached [pid 3267] memfd_create("syzkaller", 0 [pid 3268] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3268] memfd_create("syzkaller", 0 [pid 3267] <... memfd_create resumed>) = 3 [pid 3267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3268] <... memfd_create resumed>) = 3 [pid 3251] <... write resumed>) = 1048576 [pid 3267] <... mmap resumed>) = 0x7f64f6c44000 [pid 3251] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3264] <... openat resumed>) = 4 [pid 375] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 375] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./88/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4 [pid 3264] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... close resumed>) = 0 [pid 3251] <... futex resumed>) = 1 [pid 3247] <... futex resumed>) = 0 [pid 375] rmdir("./88/bus" [pid 3251] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3247] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 373] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3247] <... futex resumed>) = 0 [pid 375] getdents64(3, [pid 3247] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./88") = 0 [pid 375] mkdir("./89", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./91/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, [pid 3267] <... write resumed>) = 1048576 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./91/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./91") = 0 [pid 373] mkdir("./92", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3268] <... write resumed>) = 1048576 [pid 3267] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3268] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3267] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3268] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3251] <... openat resumed>) = 7 [pid 3251] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3251] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3247] <... futex resumed>) = 0 [pid 3247] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3264] <... ioctl resumed>) = 0 [pid 3247] <... futex resumed>) = 1 [pid 375] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] ioctl(3, LOOP_CLR_FD [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] close(3 [pid 373] close(3 [pid 375] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3247] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3270 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3271 [pid 3268] <... openat resumed>) = 4 [pid 3268] ioctl(4, LOOP_SET_FD, 3 [pid 3251] <... futex resumed>) = 0 [pid 3251] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3264] close(3 [pid 3251] <... openat resumed>) = 8 [pid 3264] <... close resumed>) = 0 [pid 3264] mkdir("./bus", 0777) = 0 [pid 3264] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3251] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3251] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3271 attached [pid 3247] <... futex resumed>) = 0 [pid 3271] set_robust_list(0x55555713c5e0, 24 [pid 3247] exit_group(0 [pid 3271] <... set_robust_list resumed>) = 0 [pid 3247] <... exit_group resumed>) = ? [pid 3251] <... futex resumed>) = ? [pid 3271] chdir("./92") = 0 ./strace-static-x86_64: Process 3270 attached [pid 3271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3271] setpgid(0, 0 [pid 3270] set_robust_list(0x55555713c5e0, 24 [pid 3271] <... setpgid resumed>) = 0 [pid 3271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3270] <... set_robust_list resumed>) = 0 [pid 3270] chdir("./89") = 0 [pid 3271] <... openat resumed>) = 3 [pid 3270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3271] write(3, "1000", 4 [pid 3270] <... prctl resumed>) = 0 [pid 3268] <... ioctl resumed>) = 0 [pid 3268] close(3) = 0 [pid 3268] mkdir("./bus", 0777) = 0 [pid 3268] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3270] setpgid(0, 0 [pid 3267] <... openat resumed>) = 4 [pid 3251] +++ exited with 0 +++ [pid 3247] +++ exited with 0 +++ [pid 3267] ioctl(4, LOOP_SET_FD, 3 [pid 3270] <... setpgid resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3247, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3271] <... write resumed>) = 4 [pid 3270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3271] close(3 [pid 3270] <... openat resumed>) = 3 [pid 3271] <... close resumed>) = 0 [pid 3270] write(3, "1000", 4 [pid 374] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3271] symlink("/dev/binderfs", "./binderfs" [pid 3270] <... write resumed>) = 4 [pid 3271] <... symlink resumed>) = 0 [pid 3270] close(3 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3271] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3270] <... close resumed>) = 0 [pid 374] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3271] <... futex resumed>) = 0 [pid 3270] symlink("/dev/binderfs", "./binderfs" [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3270] <... symlink resumed>) = 0 [ 70.277645][ T3251] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 70.293483][ T3251] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 374] getdents64(3, [pid 3271] <... mmap resumed>) = 0x7f64ff044000 [pid 3270] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3271] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3270] <... futex resumed>) = 0 [pid 3271] <... mprotect resumed>) = 0 [pid 3270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3271] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3270] <... mmap resumed>) = 0x7f64ff044000 [pid 374] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3270] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3267] <... ioctl resumed>) = 0 [pid 3271] <... clone resumed>, parent_tid=[3276], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3276 [pid 3270] <... mprotect resumed>) = 0 [pid 3267] close(3 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3271] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3270] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3267] <... close resumed>) = 0 [pid 374] lstat("./88/binderfs", [pid 3271] <... futex resumed>) = 0 [pid 3267] mkdir("./bus", 0777 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 3277 attached ./strace-static-x86_64: Process 3276 attached [pid 3271] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3270] <... clone resumed>, parent_tid=[3277], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3277 [pid 3267] <... mkdir resumed>) = 0 [pid 374] unlink("./88/binderfs" [pid 3277] set_robust_list(0x7f64ff0649e0, 24 [pid 3276] set_robust_list(0x7f64ff0649e0, 24 [pid 3267] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 374] <... unlink resumed>) = 0 [pid 3277] <... set_robust_list resumed>) = 0 [pid 3270] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3270] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3268] <... mount resumed>) = 0 [pid 3268] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 374] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3268] chdir("./bus") = 0 [pid 3268] ioctl(4, LOOP_CLR_FD) = 0 [pid 3268] close(4) = 0 [pid 3268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3265] <... futex resumed>) = 0 [pid 3265] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3265] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3268] <... futex resumed>) = 1 [pid 3268] chdir("./file0") = 0 [pid 3268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3265] <... futex resumed>) = 0 [pid 3265] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3265] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3268] <... futex resumed>) = 1 [pid 3268] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3265] <... futex resumed>) = 0 [pid 3265] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3265] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3268] <... futex resumed>) = 1 [pid 3268] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3265] <... futex resumed>) = 0 [pid 3265] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3265] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3268] <... futex resumed>) = 1 [pid 3268] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 3268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3265] <... futex resumed>) = 0 [pid 3265] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3265] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3268] <... futex resumed>) = 1 [pid 3268] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3265] <... futex resumed>) = 0 [pid 3265] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3265] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3268] <... futex resumed>) = 1 [pid 3268] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3276] <... set_robust_list resumed>) = 0 [pid 3276] memfd_create("syzkaller", 0 [pid 3277] memfd_create("syzkaller", 0) = 3 [pid 3277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3277] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3277] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3277] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3276] <... memfd_create resumed>) = 3 [pid 3276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [ 70.328848][ T3268] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/88/bus supports timestamps until 2038 (0x7fffffff) [ 70.361620][ T3264] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/91/bus supports timestamps until 2038 (0x7fffffff) [pid 3276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3276] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3276] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3264] <... mount resumed>) = 0 [pid 3264] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3264] chdir("./bus") = 0 [pid 3264] ioctl(4, LOOP_CLR_FD [pid 3267] <... mount resumed>) = 0 [pid 3267] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3267] chdir("./bus") = 0 [pid 3267] ioctl(4, LOOP_CLR_FD) = 0 [pid 3267] close(4) = 0 [pid 3267] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3266] <... futex resumed>) = 0 [pid 3266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = 0 [pid 3268] <... open resumed>) = 6 [pid 3267] <... futex resumed>) = 1 [pid 3267] chdir("./file0") = 0 [pid 3267] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3266] <... futex resumed>) = 0 [pid 3266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3267] <... futex resumed>) = 1 [pid 3267] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3267] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3266] <... futex resumed>) = 0 [pid 3266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3267] <... futex resumed>) = 1 [pid 3267] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3268] <... futex resumed>) = 1 [pid 3265] <... futex resumed>) = 0 [pid 3277] <... openat resumed>) = 4 [pid 3267] <... openat resumed>) = 5 [pid 3267] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3266] <... futex resumed>) = 0 [pid 3268] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3265] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3277] ioctl(4, LOOP_SET_FD, 3 [pid 3266] <... futex resumed>) = 0 [pid 374] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3267] <... futex resumed>) = 1 [pid 3267] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 3267] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3266] <... futex resumed>) = 0 [pid 3266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3277] <... ioctl resumed>) = 0 [pid 3276] <... openat resumed>) = 4 [pid 3266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3265] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3277] close(3 [pid 3265] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] lstat("./88/bus", [pid 3277] <... close resumed>) = 0 [pid 3276] ioctl(4, LOOP_SET_FD, 3 [pid 3264] <... ioctl resumed>) = 0 [pid 3267] <... futex resumed>) = 1 [pid 3267] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3267] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3266] <... futex resumed>) = 0 [pid 3266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3267] <... futex resumed>) = 1 [pid 3267] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3277] mkdir("./bus", 0777 [pid 3264] close(4 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3277] <... mkdir resumed>) = 0 [pid 3268] <... write resumed>) = 1048576 [pid 374] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3277] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3268] <... futex resumed>) = 1 [pid 3265] <... futex resumed>) = 0 [pid 3268] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3265] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3265] <... futex resumed>) = 0 [pid 374] <... openat resumed>) = 4 [pid 3265] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./88/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./88") = 0 [pid 374] mkdir("./89", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3276] <... ioctl resumed>) = 0 [pid 3276] close(3) = 0 [pid 3276] mkdir("./bus", 0777) = 0 [ 70.375166][ T3267] ext4 filesystem being mounted at /root/syzkaller.43WzWH/90/bus supports timestamps until 2038 (0x7fffffff) [ 70.413698][ T3268] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3276] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3267] <... open resumed>) = 6 [pid 374] <... openat resumed>) = 3 [pid 3267] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] ioctl(3, LOOP_CLR_FD [pid 3267] <... futex resumed>) = 1 [pid 3266] <... futex resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3267] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(3 [pid 3268] <... openat resumed>) = 7 [pid 3268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3268] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3264] <... close resumed>) = 0 [pid 3264] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3263] <... futex resumed>) = 0 [pid 3263] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3263] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3264] <... futex resumed>) = 1 [pid 3264] chdir("./file0") = 0 [pid 3264] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3263] <... futex resumed>) = 0 [pid 3263] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3263] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3266] <... futex resumed>) = 0 [pid 3265] <... futex resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 3266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3265] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3265] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3285 [pid 3264] <... futex resumed>) = 1 [pid 3264] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3264] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3263] <... futex resumed>) = 0 [pid 3264] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3263] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3263] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3264] <... openat resumed>) = 5 [pid 3264] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3263] <... futex resumed>) = 0 [pid 3263] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3264] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3263] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3268] <... futex resumed>) = 0 [pid 3268] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3265] <... futex resumed>) = 0 [pid 3265] exit_group(0) = ? [pid 3268] +++ exited with 0 +++ [pid 3265] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3265, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 372] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3264] <... write resumed>) = 196608 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./88/binderfs") = 0 [pid 372] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3264] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3263] <... futex resumed>) = 0 [pid 3264] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3263] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3263] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3285 attached [pid 3264] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3267] <... write resumed>) = 1048576 [pid 3285] set_robust_list(0x55555713c5e0, 24 [pid 3267] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 70.428948][ T3268] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 3264] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3264] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3263] <... futex resumed>) = 0 [pid 3263] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3263] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3264] <... futex resumed>) = 1 [pid 3264] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3285] <... set_robust_list resumed>) = 0 [pid 3285] chdir("./89") = 0 [pid 3285] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3285] setpgid(0, 0) = 0 [pid 3285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3285] write(3, "1000", 4) = 4 [pid 3285] close(3) = 0 [pid 3285] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3266] <... futex resumed>) = 0 [pid 3266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3267] <... futex resumed>) = 1 [pid 3267] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3285] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3285] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3285] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3285] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3276] <... mount resumed>) = 0 [pid 3276] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3276] chdir("./bus") = 0 [pid 3276] ioctl(4, LOOP_CLR_FD [pid 3285] <... clone resumed>, parent_tid=[3288], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3288 [pid 3285] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3285] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3288 attached [pid 3288] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3288] memfd_create("syzkaller", 0) = 3 [pid 3288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3288] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3288] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3267] <... openat resumed>) = 7 [pid 3267] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3267] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3266] <... futex resumed>) = 0 [pid 3266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3267] <... futex resumed>) = 0 [pid 3267] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3267] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3266] <... futex resumed>) = 0 [pid 3266] exit_group(0) = ? [pid 3267] <... futex resumed>) = ? [pid 3277] <... mount resumed>) = 0 [pid 3277] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3277] chdir("./bus") = 0 [pid 3277] ioctl(4, LOOP_CLR_FD) = 0 [pid 3277] close(4) = 0 [pid 3277] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3270] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 3288] <... openat resumed>) = 4 [pid 3277] <... futex resumed>) = 1 [pid 3276] <... ioctl resumed>) = 0 [pid 3270] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3264] <... open resumed>) = 6 [pid 3263] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3288] ioctl(4, LOOP_SET_FD, 3 [pid 3276] close(4 [pid 3264] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3263] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3264] <... futex resumed>) = 0 [pid 3263] <... futex resumed>) = 0 [pid 3270] <... futex resumed>) = 0 [pid 3264] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3263] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3277] chdir("./file0" [pid 3270] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3288] <... ioctl resumed>) = 0 [pid 3276] <... close resumed>) = 0 [pid 3267] +++ exited with 0 +++ [pid 3266] +++ exited with 0 +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3266, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3288] close(3 [pid 3276] <... futex resumed>) = 1 [pid 3271] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./90/binderfs" [pid 3288] <... close resumed>) = 0 [pid 3276] chdir("./file0" [pid 3271] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... unlink resumed>) = 0 [pid 377] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3288] mkdir("./bus", 0777 [pid 3276] <... chdir resumed>) = 0 [pid 3271] <... futex resumed>) = 0 [pid 372] lstat("./88/bus", [pid 3288] <... mkdir resumed>) = 0 [pid 3276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3271] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3288] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3276] <... futex resumed>) = 0 [pid 3271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3277] <... chdir resumed>) = 0 [pid 3276] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3271] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3271] <... futex resumed>) = 0 [pid 3264] <... write resumed>) = 1048576 [pid 3276] <... open resumed>) = 4 [pid 3271] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3277] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3264] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3277] <... futex resumed>) = 1 [pid 3276] <... futex resumed>) = 0 [pid 3271] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3270] <... futex resumed>) = 0 [pid 3264] <... futex resumed>) = 1 [pid 3263] <... futex resumed>) = 0 [pid 372] <... openat resumed>) = 4 [pid 3276] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3271] <... futex resumed>) = 0 [ 70.471707][ T3276] ext4 filesystem being mounted at /root/syzkaller.k3ECep/92/bus supports timestamps until 2038 (0x7fffffff) [ 70.483586][ T3267] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 70.497788][ T3267] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 70.502143][ T3277] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/89/bus supports timestamps until 2038 (0x7fffffff) [pid 3270] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3263] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] fstat(4, [pid 3277] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3276] <... openat resumed>) = 5 [pid 3271] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3270] <... futex resumed>) = 0 [pid 3264] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3263] <... futex resumed>) = 0 [pid 3276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3270] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3263] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3276] <... futex resumed>) = 0 [pid 3271] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3276] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3271] <... futex resumed>) = 0 [pid 372] getdents64(4, [pid 3271] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3277] <... open resumed>) = 4 [pid 3276] <... write resumed>) = 196608 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(4, [pid 3276] <... futex resumed>) = 1 [pid 3271] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3276] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3271] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(4 [pid 3276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3271] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3276] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3271] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] rmdir("./88/bus" [pid 3276] <... mount resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 3276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 3276] <... futex resumed>) = 1 [pid 3271] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3276] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3271] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 3276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3271] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3276] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3271] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] rmdir("./88") = 0 [pid 372] mkdir("./89", 0777 [pid 3277] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... mkdir resumed>) = 0 [pid 3277] <... futex resumed>) = 1 [pid 3270] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3277] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3270] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3277] <... openat resumed>) = 5 [pid 3270] <... futex resumed>) = 0 [pid 3277] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3270] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3277] <... futex resumed>) = 0 [pid 3270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3277] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3270] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3277] <... write resumed>) = 196608 [pid 3270] <... futex resumed>) = 0 [pid 3270] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3277] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3270] <... futex resumed>) = 0 [pid 3270] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3270] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3277] <... futex resumed>) = 1 [pid 3277] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3277] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3270] <... futex resumed>) = 0 [pid 3270] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3270] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3277] <... futex resumed>) = 1 [pid 3277] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3276] <... open resumed>) = 6 [pid 3264] <... openat resumed>) = 7 [pid 372] <... openat resumed>) = 3 [pid 3277] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3264] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] ioctl(3, LOOP_CLR_FD [pid 3277] <... futex resumed>) = 1 [pid 3276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3270] <... futex resumed>) = 0 [pid 3264] <... futex resumed>) = 1 [pid 3263] <... futex resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3277] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3276] <... futex resumed>) = 1 [pid 3271] <... futex resumed>) = 0 [pid 3270] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = 0 [pid 3276] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3271] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3271] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3276] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3271] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] lstat("./90/bus", [pid 3277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3270] <... futex resumed>) = 0 [pid 3264] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3263] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 3277] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3270] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3264] <... openat resumed>) = 8 [pid 3263] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3264] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3263] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3264] <... futex resumed>) = 0 [pid 3263] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 3293 attached [pid 3288] <... mount resumed>) = 0 [pid 3276] <... write resumed>) = 1048576 [pid 3264] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3263] exit_group(0 [pid 377] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3293 [pid 3276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3276] <... futex resumed>) = 1 [pid 3271] <... futex resumed>) = 0 [pid 3264] <... futex resumed>) = ? [pid 3263] <... exit_group resumed>) = ? [pid 377] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3276] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3271] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 4 [pid 3276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3271] <... futex resumed>) = 0 [pid 377] fstat(4, [ 70.552846][ T3264] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 70.567117][ T3264] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 70.585321][ T3288] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/89/bus supports timestamps until 2038 (0x7fffffff) [pid 3276] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3271] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3293] set_robust_list(0x55555713c5e0, 24 [pid 3288] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3277] <... write resumed>) = 1048576 [pid 3264] +++ exited with 0 +++ [pid 3263] +++ exited with 0 +++ [pid 3293] <... set_robust_list resumed>) = 0 [pid 3288] <... openat resumed>) = 3 [pid 3277] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3293] chdir("./89" [pid 3288] chdir("./bus" [pid 3277] <... futex resumed>) = 1 [pid 3270] <... futex resumed>) = 0 [pid 3293] <... chdir resumed>) = 0 [pid 3288] <... chdir resumed>) = 0 [pid 3277] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3270] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3288] ioctl(4, LOOP_CLR_FD [pid 3277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3270] <... futex resumed>) = 0 [pid 3293] <... prctl resumed>) = 0 [pid 3288] <... ioctl resumed>) = 0 [pid 3277] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3270] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3293] setpgid(0, 0 [pid 3288] close(4 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3263, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4 [pid 376] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] rmdir("./90/bus" [pid 376] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... rmdir resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 377] getdents64(3, [pid 376] fstat(3, [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] close(3 [pid 376] getdents64(3, [pid 377] <... close resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] rmdir("./90" [pid 376] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... rmdir resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] mkdir("./91", 0777 [pid 376] lstat("./91/binderfs", [pid 377] <... mkdir resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 376] unlink("./91/binderfs" [pid 377] <... openat resumed>) = 3 [pid 376] <... unlink resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3294 ./strace-static-x86_64: Process 3294 attached [pid 3294] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3294] chdir("./91") = 0 [pid 3294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3294] setpgid(0, 0) = 0 [pid 3294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3294] write(3, "1000", 4) = 4 [pid 3294] close(3) = 0 [pid 3293] <... setpgid resumed>) = 0 [pid 3288] <... close resumed>) = 0 [pid 3294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3294] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3294] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3294] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3295], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3295 [pid 3294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3295 attached [pid 3293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3288] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3277] <... openat resumed>) = 7 [pid 3293] <... openat resumed>) = 3 [pid 3288] <... futex resumed>) = 1 [pid 3285] <... futex resumed>) = 0 [pid 3293] write(3, "1000", 4 [pid 3288] chdir("./file0" [pid 3285] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3293] <... write resumed>) = 4 [pid 3288] <... chdir resumed>) = 0 [pid 3285] <... futex resumed>) = 0 [pid 3293] close(3 [pid 3288] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3285] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3293] <... close resumed>) = 0 [pid 3288] <... futex resumed>) = 0 [pid 3285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3293] symlink("/dev/binderfs", "./binderfs" [pid 3288] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3285] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3293] <... symlink resumed>) = 0 [pid 3285] <... futex resumed>) = 0 [pid 3293] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3285] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3293] <... futex resumed>) = 0 [pid 3293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3293] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3293] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3296], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3296 [pid 3293] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3293] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3277] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3295] set_robust_list(0x7f64ff0649e0, 24 [pid 3270] <... futex resumed>) = 0 [pid 3270] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 70.605714][ T3276] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 70.615952][ T3277] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 70.634333][ T3277] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 3270] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3296 attached [pid 3296] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3296] memfd_create("syzkaller", 0) = 3 [pid 3296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3288] <... open resumed>) = 4 [pid 3295] <... set_robust_list resumed>) = 0 [pid 3288] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3277] <... futex resumed>) = 1 [pid 3295] memfd_create("syzkaller", 0 [pid 3288] <... futex resumed>) = 1 [pid 3285] <... futex resumed>) = 0 [pid 3277] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3276] <... openat resumed>) = 7 [pid 3295] <... memfd_create resumed>) = 3 [pid 3288] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3285] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3285] <... futex resumed>) = 0 [pid 3277] <... openat resumed>) = 8 [pid 3295] <... mmap resumed>) = 0x7f64f6c44000 [pid 3288] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3285] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3277] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3288] <... openat resumed>) = 5 [pid 3277] <... futex resumed>) = 1 [pid 3270] <... futex resumed>) = 0 [pid 3288] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3277] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3270] exit_group(0 [pid 3288] <... futex resumed>) = 1 [pid 3285] <... futex resumed>) = 0 [pid 3288] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3285] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3277] <... futex resumed>) = ? [pid 3270] <... exit_group resumed>) = ? [pid 3288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3285] <... futex resumed>) = 0 [pid 3277] +++ exited with 0 +++ [pid 3285] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3288] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 3296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3271] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3288] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3271] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3288] <... futex resumed>) = 1 [pid 3285] <... futex resumed>) = 0 [pid 3271] <... futex resumed>) = 0 [pid 3295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3288] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3285] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3276] <... futex resumed>) = 0 [pid 3271] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3285] <... futex resumed>) = 0 [pid 3288] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3285] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3288] <... mount resumed>) = 0 [pid 3288] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3285] <... futex resumed>) = 0 [pid 3288] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3285] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3285] <... futex resumed>) = 0 [pid 3288] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3285] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3295] <... write resumed>) = 1048576 [pid 3276] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3295] munmap(0x7f64f6c44000, 1048576 [pid 3296] <... write resumed>) = 1048576 [pid 3296] munmap(0x7f64f6c44000, 1048576 [pid 3276] <... openat resumed>) = 8 [pid 3295] <... munmap resumed>) = 0 [pid 3296] <... munmap resumed>) = 0 [pid 3296] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3276] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3295] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3271] <... futex resumed>) = 0 [pid 3271] exit_group(0) = ? [pid 3276] <... futex resumed>) = ? [pid 3270] +++ exited with 0 +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3270, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 3288] <... open resumed>) = 6 [pid 3288] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3288] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3296] <... openat resumed>) = 4 [pid 3296] ioctl(4, LOOP_SET_FD, 3 [ 70.641587][ T3276] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 3285] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 3285] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3288] <... futex resumed>) = 0 [pid 3285] <... futex resumed>) = 1 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3288] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3285] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./91/bus", [pid 3296] <... ioctl resumed>) = 0 [pid 3295] <... openat resumed>) = 4 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... restart_syscall resumed>) = 0 [pid 376] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./91/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./91") = 0 [pid 376] mkdir("./92", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 375] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... openat resumed>) = 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 375] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... openat resumed>) = 3 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3298 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./89/binderfs") = 0 [pid 375] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3276] +++ exited with 0 +++ [pid 3271] +++ exited with 0 +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3271, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, [pid 3295] ioctl(4, LOOP_SET_FD, 3 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 3298 attached [pid 3296] close(3 [pid 373] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3288] <... write resumed>) = 1048576 [pid 3288] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3288] <... futex resumed>) = 1 [pid 3285] <... futex resumed>) = 0 [pid 373] lstat("./92/binderfs", [pid 3288] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3285] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3298] set_robust_list(0x55555713c5e0, 24 [pid 3296] <... close resumed>) = 0 [pid 3285] <... futex resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3298] <... set_robust_list resumed>) = 0 [pid 3296] mkdir("./bus", 0777 [pid 373] unlink("./92/binderfs" [pid 3298] chdir("./92" [pid 3296] <... mkdir resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 3298] <... chdir resumed>) = 0 [pid 3296] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3298] setpgid(0, 0) = 0 [pid 3298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3298] write(3, "1000", 4) = 4 [pid 3298] close(3) = 0 [pid 3298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3298] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3298] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3298] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3299], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3299 [pid 3298] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3298] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3299 attached [pid 3299] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3299] memfd_create("syzkaller", 0) = 3 [pid 3299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3285] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3299] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3299] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3295] <... ioctl resumed>) = 0 [pid 3288] <... openat resumed>) = 7 [pid 375] <... umount2 resumed>) = 0 [pid 3299] <... openat resumed>) = 4 [pid 3288] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3299] ioctl(4, LOOP_SET_FD, 3 [pid 3295] close(3 [pid 3288] <... futex resumed>) = 1 [pid 3285] <... futex resumed>) = 0 [pid 375] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3295] <... close resumed>) = 0 [pid 3288] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3285] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3295] mkdir("./bus", 0777) = 0 [pid 3295] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3285] <... futex resumed>) = 0 [pid 3285] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] lstat("./89/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./89/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./89") = 0 [pid 375] mkdir("./90", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3288] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3288] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3285] <... futex resumed>) = 0 [pid 3288] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3285] exit_group(0 [pid 3288] <... futex resumed>) = ? [pid 3285] <... exit_group resumed>) = ? [pid 3288] +++ exited with 0 +++ [pid 3296] <... mount resumed>) = 0 [pid 3296] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3296] chdir("./bus") = 0 [pid 3296] ioctl(4, LOOP_CLR_FD [pid 3299] <... ioctl resumed>) = 0 [pid 3299] close(3 [pid 3296] <... ioctl resumed>) = 0 [pid 3285] +++ exited with 0 +++ [pid 375] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 3299] <... close resumed>) = 0 [pid 3299] mkdir("./bus", 0777) = 0 [pid 3299] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./92/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./92/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./92") = 0 [pid 373] mkdir("./93", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] ioctl(3, LOOP_CLR_FD [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3285, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3304 [pid 3296] close(4) = 0 [pid 3296] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 70.722130][ T3288] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 70.736246][ T3288] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 70.759115][ T3296] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/89/bus supports timestamps until 2038 (0x7fffffff) [pid 3296] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3293] <... futex resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3293] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 375] close(3 [pid 3293] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 374] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3306 [pid 374] <... openat resumed>) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./89/binderfs") = 0 [pid 374] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3304 attached [pid 3304] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3304] chdir("./93") = 0 [pid 3304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3304] setpgid(0, 0) = 0 [pid 3304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3304] write(3, "1000", 4) = 4 [pid 3304] close(3) = 0 [pid 3304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3304] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3304] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3304] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3308], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3308 [pid 3304] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3304] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3296] <... futex resumed>) = 0 [pid 3296] chdir("./file0") = 0 [pid 3296] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3293] <... futex resumed>) = 0 [pid 3293] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3296] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3293] <... futex resumed>) = 0 [pid 3293] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3296] <... open resumed>) = 4 [pid 3296] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3293] <... futex resumed>) = 0 [pid 3296] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3293] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3293] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3296] <... openat resumed>) = 5 [pid 3296] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3293] <... futex resumed>) = 0 [pid 3296] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3293] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3293] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3296] <... write resumed>) = 196608 [pid 3296] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3293] <... futex resumed>) = 0 [pid 3293] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3293] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3296] <... futex resumed>) = 1 [pid 3296] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3296] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3293] <... futex resumed>) = 0 [pid 3293] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3293] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3296] <... futex resumed>) = 1 [pid 3296] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3296] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3293] <... futex resumed>) = 0 [pid 3293] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3293] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3296] <... futex resumed>) = 1 [pid 3296] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651./strace-static-x86_64: Process 3306 attached [pid 3306] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3306] chdir("./90") = 0 [pid 3306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3306] setpgid(0, 0) = 0 [pid 3306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3306] write(3, "1000", 4) = 4 [pid 3306] close(3) = 0 [pid 3306] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3306] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3306] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3306] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3311], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3311 [pid 3306] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3306] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3308 attached [pid 3308] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3308] memfd_create("syzkaller", 0) = 3 [pid 3308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 3311 attached [pid 3311] set_robust_list(0x7f64ff0649e0, 24 [pid 3299] <... mount resumed>) = 0 [pid 3295] <... mount resumed>) = 0 [pid 3311] <... set_robust_list resumed>) = 0 [pid 3299] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3295] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3311] memfd_create("syzkaller", 0 [pid 3299] <... openat resumed>) = 3 [pid 3295] <... openat resumed>) = 3 [pid 3311] <... memfd_create resumed>) = 3 [pid 3299] chdir("./bus" [pid 3295] chdir("./bus" [pid 3311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3299] <... chdir resumed>) = 0 [pid 3311] <... mmap resumed>) = 0x7f64f6c44000 [pid 3299] ioctl(4, LOOP_CLR_FD [pid 3295] <... chdir resumed>) = 0 [pid 3295] ioctl(4, LOOP_CLR_FD [pid 3296] <... write resumed>) = 1048576 [pid 3296] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3293] <... futex resumed>) = 0 [pid 3296] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3293] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3293] <... futex resumed>) = 0 [pid 3293] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3308] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3308] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3311] <... write resumed>) = 1048576 [pid 3311] munmap(0x7f64f6c44000, 1048576) = 0 [ 70.824780][ T3295] ext4 filesystem being mounted at /root/syzkaller.43WzWH/91/bus supports timestamps until 2038 (0x7fffffff) [ 70.837191][ T3299] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/92/bus supports timestamps until 2038 (0x7fffffff) [pid 3311] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 3308] <... openat resumed>) = 4 [pid 3299] <... ioctl resumed>) = 0 [pid 3295] <... ioctl resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./89/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./89/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./89") = 0 [pid 374] mkdir("./90", 0777 [pid 3311] ioctl(4, LOOP_SET_FD, 3 [pid 3308] ioctl(4, LOOP_SET_FD, 3 [pid 3299] close(4 [pid 3295] close(4 [pid 3299] <... close resumed>) = 0 [pid 3296] <... openat resumed>) = 7 [pid 374] <... mkdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3296] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3296] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3293] <... futex resumed>) = 0 [pid 3293] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3299] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3293] <... futex resumed>) = 1 [pid 3299] <... futex resumed>) = 1 [pid 3298] <... futex resumed>) = 0 [pid 3293] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3296] <... futex resumed>) = 0 [pid 3299] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3298] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3296] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3298] <... futex resumed>) = 0 [pid 3299] chdir("./file0" [pid 3298] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3296] <... openat resumed>) = 8 [pid 3299] <... chdir resumed>) = 0 [pid 3299] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3296] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3299] <... futex resumed>) = 1 [pid 3298] <... futex resumed>) = 0 [pid 3299] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3298] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3298] <... futex resumed>) = 0 [pid 3299] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3298] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3296] <... futex resumed>) = 1 [pid 3296] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3293] <... futex resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 3299] <... open resumed>) = 4 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3293] exit_group(0 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3313 [pid 3308] <... ioctl resumed>) = 0 [pid 3308] close(3) = 0 [pid 3308] mkdir("./bus", 0777) = 0 [pid 3308] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3293] <... exit_group resumed>) = ? [pid 3296] <... futex resumed>) = ? [pid 3299] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3313 attached ) = 1 [pid 3298] <... futex resumed>) = 0 [pid 3299] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3298] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3298] <... futex resumed>) = 0 [pid 3299] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3298] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3313] set_robust_list(0x55555713c5e0, 24 [pid 3299] <... openat resumed>) = 5 [pid 3296] +++ exited with 0 +++ [pid 3295] <... close resumed>) = 0 [pid 3293] +++ exited with 0 +++ [pid 3299] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3293, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3299] <... futex resumed>) = 1 [pid 3298] <... futex resumed>) = 0 [pid 3299] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3298] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3298] <... futex resumed>) = 0 [pid 372] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3299] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3298] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3311] <... ioctl resumed>) = 0 [pid 3299] <... write resumed>) = 196608 [pid 3295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3311] close(3 [pid 3299] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3295] <... futex resumed>) = 1 [pid 3294] <... futex resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 3313] <... set_robust_list resumed>) = 0 [pid 3311] <... close resumed>) = 0 [pid 3299] <... futex resumed>) = 1 [pid 3298] <... futex resumed>) = 0 [pid 3295] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] fstat(3, [pid 3313] chdir("./90" [pid 3311] mkdir("./bus", 0777 [pid 3299] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3298] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3294] <... futex resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3313] <... chdir resumed>) = 0 [pid 3311] <... mkdir resumed>) = 0 [pid 3299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3298] <... futex resumed>) = 0 [pid 372] getdents64(3, [pid 3313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3299] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3298] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3313] <... prctl resumed>) = 0 [pid 3299] <... mount resumed>) = 0 [pid 372] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3313] setpgid(0, 0 [pid 3299] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3313] <... setpgid resumed>) = 0 [pid 3311] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3299] <... futex resumed>) = 1 [pid 3298] <... futex resumed>) = 0 [pid 3295] chdir("./file0" [pid 3294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] lstat("./89/binderfs", [pid 3313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3299] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3298] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3295] <... chdir resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3313] <... openat resumed>) = 3 [pid 3299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3298] <... futex resumed>) = 0 [pid 372] unlink("./89/binderfs" [pid 3313] write(3, "1000", 4 [pid 3299] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3298] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... unlink resumed>) = 0 [pid 3313] <... write resumed>) = 4 [pid 3299] <... open resumed>) = 6 [pid 372] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3313] close(3 [pid 3299] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3313] <... close resumed>) = 0 [pid 3299] <... futex resumed>) = 1 [pid 3298] <... futex resumed>) = 0 [pid 3313] symlink("/dev/binderfs", "./binderfs" [pid 3299] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3298] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3313] <... symlink resumed>) = 0 [pid 3299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3298] <... futex resumed>) = 0 [pid 3313] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3299] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3298] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3313] <... futex resumed>) = 0 [pid 3313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3313] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3313] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3317], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3317 [pid 3313] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3313] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3317 attached [pid 3317] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3317] memfd_create("syzkaller", 0 [pid 3295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3294] <... futex resumed>) = 0 [pid 3317] <... memfd_create resumed>) = 3 [pid 3308] <... mount resumed>) = 0 [pid 3295] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3294] <... futex resumed>) = 0 [pid 3295] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3295] <... open resumed>) = 4 [pid 3295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3294] <... futex resumed>) = 0 [pid 3295] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3294] <... futex resumed>) = 0 [pid 3295] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3308] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3295] <... openat resumed>) = 5 [pid 3317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3308] <... openat resumed>) = 3 [pid 3295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3317] <... mmap resumed>) = 0x7f64f6c44000 [pid 3308] chdir("./bus" [pid 3295] <... futex resumed>) = 1 [pid 3294] <... futex resumed>) = 0 [pid 3308] <... chdir resumed>) = 0 [pid 3295] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3308] ioctl(4, LOOP_CLR_FD [pid 3295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3294] <... futex resumed>) = 0 [pid 3308] <... ioctl resumed>) = 0 [ 70.861351][ T3296] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 70.875798][ T3296] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 70.908395][ T3308] ext4 filesystem being mounted at /root/syzkaller.k3ECep/93/bus supports timestamps until 2038 (0x7fffffff) [pid 3295] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3308] close(4 [pid 3295] <... write resumed>) = 196608 [pid 3295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3294] <... futex resumed>) = 0 [pid 3295] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3294] <... futex resumed>) = 0 [pid 3295] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3295] <... mount resumed>) = 0 [pid 3295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3294] <... futex resumed>) = 0 [pid 3295] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3294] <... futex resumed>) = 0 [pid 3295] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3317] <... write resumed>) = 1048576 [pid 3317] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3317] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3299] <... write resumed>) = 1048576 [pid 3299] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3299] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3298] <... futex resumed>) = 0 [pid 3298] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3298] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3299] <... futex resumed>) = 0 [pid 3299] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3311] <... mount resumed>) = 0 [pid 3311] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3311] chdir("./bus") = 0 [pid 3311] ioctl(4, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./89/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 3317] <... openat resumed>) = 4 [pid 3311] <... ioctl resumed>) = 0 [pid 3308] <... close resumed>) = 0 [pid 3295] <... open resumed>) = 6 [pid 3317] ioctl(4, LOOP_SET_FD, 3 [pid 3311] close(4 [pid 3308] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] fstat(4, [pid 3308] <... futex resumed>) = 1 [pid 3304] <... futex resumed>) = 0 [pid 3299] <... openat resumed>) = 7 [pid 3295] <... futex resumed>) = 1 [pid 3294] <... futex resumed>) = 0 [pid 3317] <... ioctl resumed>) = 0 [pid 3311] <... close resumed>) = 0 [pid 3308] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3317] close(3 [pid 3311] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3304] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3295] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3308] chdir("./file0") = 0 [pid 3308] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3308] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3299] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3298] <... futex resumed>) = 0 [pid 3298] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3298] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3299] <... futex resumed>) = 1 [pid 3299] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3299] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3298] <... futex resumed>) = 0 [pid 3298] exit_group(0) = ? [pid 3299] <... futex resumed>) = ? [pid 3299] +++ exited with 0 +++ [pid 3298] +++ exited with 0 +++ [pid 3304] <... futex resumed>) = 1 [pid 3294] <... futex resumed>) = 0 [pid 3317] <... close resumed>) = 0 [pid 3311] <... futex resumed>) = 1 [pid 3306] <... futex resumed>) = 0 [pid 3308] <... futex resumed>) = 0 [pid 3304] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3298, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3317] mkdir("./bus", 0777 [pid 3311] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3308] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3306] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3306] <... futex resumed>) = 0 [pid 3304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 3317] <... mkdir resumed>) = 0 [pid 372] getdents64(4, [pid 3306] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3304] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3311] chdir("./file0" [pid 3317] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3304] <... futex resumed>) = 0 [pid 372] close(4 [pid 3311] <... chdir resumed>) = 0 [pid 3308] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3304] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... close resumed>) = 0 [pid 372] rmdir("./89/bus" [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... rmdir resumed>) = 0 [pid 3311] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./89" [pid 3311] <... futex resumed>) = 1 [pid 3306] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... rmdir resumed>) = 0 [pid 3308] <... open resumed>) = 4 [pid 3306] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] mkdir("./90", 0777 [pid 3311] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3308] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3306] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 372] <... mkdir resumed>) = 0 [pid 3306] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 376] fstat(3, [pid 372] <... openat resumed>) = 3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3311] <... open resumed>) = 4 [pid 372] close(3 [pid 3311] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3308] <... futex resumed>) = 1 [pid 3304] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 372] <... close resumed>) = 0 [pid 3311] <... futex resumed>) = 1 [pid 3308] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3306] <... futex resumed>) = 0 [pid 3304] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3295] <... write resumed>) = 1048576 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3311] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3306] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3304] <... futex resumed>) = 0 [pid 376] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3323 [pid 3295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3304] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3306] <... futex resumed>) = 0 [pid 3311] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3308] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3306] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3295] <... futex resumed>) = 1 [pid 3295] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3308] <... openat resumed>) = 5 [pid 3294] <... futex resumed>) = 0 [ 70.931444][ T3311] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/90/bus supports timestamps until 2038 (0x7fffffff) [ 70.944918][ T3299] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 70.959719][ T3299] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem ./strace-static-x86_64: Process 3323 attached [pid 3311] <... openat resumed>) = 5 [pid 3308] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] lstat("./92/binderfs", [pid 3323] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3323] chdir("./90") = 0 [pid 3323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3323] setpgid(0, 0) = 0 [pid 3323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3323] write(3, "1000", 4) = 4 [pid 3323] close(3) = 0 [pid 3323] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3323] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3323] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3323] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3324], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3324 [pid 3323] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3323] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3324 attached [pid 3324] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3324] memfd_create("syzkaller", 0) = 3 [pid 3324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3311] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3308] <... futex resumed>) = 1 [pid 3304] <... futex resumed>) = 0 [pid 3295] <... futex resumed>) = 0 [pid 3294] <... futex resumed>) = 1 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3311] <... futex resumed>) = 1 [pid 3308] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3306] <... futex resumed>) = 0 [pid 3304] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3295] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] unlink("./92/binderfs" [pid 3324] <... write resumed>) = 1048576 [pid 3311] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3306] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3304] <... futex resumed>) = 0 [pid 3317] <... mount resumed>) = 0 [pid 3317] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3317] chdir("./bus") = 0 [pid 3317] ioctl(4, LOOP_CLR_FD) = 0 [pid 3317] close(4) = 0 [pid 3317] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3317] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] <... unlink resumed>) = 0 [pid 376] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3324] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3324] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3324] ioctl(4, LOOP_SET_FD, 3 [pid 3311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3311] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 3311] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3311] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3308] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3313] <... futex resumed>) = 0 [pid 3308] <... write resumed>) = 196608 [pid 3306] <... futex resumed>) = 1 [pid 3304] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3308] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3313] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3311] <... futex resumed>) = 0 [pid 3308] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3306] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3313] <... futex resumed>) = 1 [pid 3311] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3304] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3313] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3306] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3304] <... futex resumed>) = 0 [pid 3311] <... futex resumed>) = 0 [pid 3306] <... futex resumed>) = 1 [pid 3304] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3324] <... ioctl resumed>) = 0 [pid 3311] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3306] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3324] close(3 [pid 3311] <... mount resumed>) = 0 [pid 3311] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3324] <... close resumed>) = 0 [pid 3311] <... futex resumed>) = 1 [pid 3308] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3306] <... futex resumed>) = 0 [pid 3311] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3306] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3306] <... futex resumed>) = 0 [pid 3311] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3306] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3324] mkdir("./bus", 0777 [pid 3311] <... open resumed>) = 6 [pid 3308] <... mount resumed>) = 0 [pid 3311] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3306] <... futex resumed>) = 0 [pid 3311] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3306] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3306] <... futex resumed>) = 0 [pid 3324] <... mkdir resumed>) = 0 [pid 3311] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3306] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3308] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3324] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3308] <... futex resumed>) = 1 [pid 3304] <... futex resumed>) = 0 [pid 3304] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3304] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3317] <... futex resumed>) = 0 [pid 3308] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3295] <... openat resumed>) = 7 [pid 3317] chdir("./file0" [pid 3295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3294] <... futex resumed>) = 0 [pid 3294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3295] <... futex resumed>) = 1 [pid 3295] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3294] <... futex resumed>) = 0 [pid 3294] exit_group(0) = ? [pid 3295] <... futex resumed>) = ? [pid 3317] <... chdir resumed>) = 0 [pid 3317] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3313] <... futex resumed>) = 0 [pid 3317] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3313] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3313] <... futex resumed>) = 0 [pid 3313] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3317] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3317] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3317] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3313] <... futex resumed>) = 0 [pid 3313] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3313] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3317] <... futex resumed>) = 0 [ 70.999232][ T3317] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/90/bus supports timestamps until 2038 (0x7fffffff) [ 71.012559][ T3295] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 71.032175][ T3295] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 3317] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3317] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3313] <... futex resumed>) = 0 [pid 3313] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3313] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3317] <... futex resumed>) = 1 [pid 3317] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 3317] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3313] <... futex resumed>) = 0 [pid 3313] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3313] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3317] <... futex resumed>) = 1 [pid 3317] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3317] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3313] <... futex resumed>) = 0 [pid 3313] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3313] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3317] <... futex resumed>) = 1 [pid 3317] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3311] <... write resumed>) = 1048576 [pid 3311] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3311] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3306] <... futex resumed>) = 0 [pid 3306] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3306] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3311] <... futex resumed>) = 0 [pid 3311] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3324] <... mount resumed>) = 0 [pid 3308] <... open resumed>) = 6 [pid 376] <... umount2 resumed>) = 0 [pid 3308] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3304] <... futex resumed>) = 0 [pid 3308] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3304] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3304] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./92/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./92/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3295] +++ exited with 0 +++ [pid 3294] +++ exited with 0 +++ [pid 376] close(3) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3294, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 376] rmdir("./92") = 0 [pid 376] mkdir("./93", 0777 [pid 377] <... restart_syscall resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 377] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... openat resumed>) = 3 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] ioctl(3, LOOP_CLR_FD [pid 377] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] <... openat resumed>) = 3 [pid 377] fstat(3, [pid 376] close(3 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3324] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 377] getdents64(3, [pid 376] <... close resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3324] <... openat resumed>) = 3 [pid 377] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3328 [pid 3324] chdir("./bus" [pid 3317] <... open resumed>) = 6 [pid 377] lstat("./91/binderfs", [pid 3317] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3317] <... futex resumed>) = 1 [pid 3313] <... futex resumed>) = 0 [pid 377] unlink("./91/binderfs" [pid 3324] <... chdir resumed>) = 0 [pid 3317] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3313] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... unlink resumed>) = 0 [pid 3324] ioctl(4, LOOP_CLR_FD [pid 3313] <... futex resumed>) = 0 [pid 3308] <... write resumed>) = 1048576 [pid 377] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3313] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3328 attached [pid 3328] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3328] chdir("./93") = 0 [pid 3328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3328] setpgid(0, 0) = 0 [pid 3328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3328] write(3, "1000", 4) = 4 [pid 3328] close(3) = 0 [pid 3328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3328] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3328] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3328] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3329], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3329 [pid 3328] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3328] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3329 attached [pid 3329] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3329] memfd_create("syzkaller", 0) = 3 [pid 3329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3324] <... ioctl resumed>) = 0 [pid 3308] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3324] close(4 [pid 3308] <... futex resumed>) = 1 [pid 3304] <... futex resumed>) = 0 [pid 3324] <... close resumed>) = 0 [pid 3308] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3324] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3323] <... futex resumed>) = 0 [pid 3311] <... openat resumed>) = 7 [pid 3304] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3324] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3323] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3311] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3308] <... futex resumed>) = 0 [pid 3304] <... futex resumed>) = 1 [pid 3329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3323] <... futex resumed>) = 0 [pid 3311] <... futex resumed>) = 1 [pid 3308] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3306] <... futex resumed>) = 0 [ 71.053798][ T3324] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/90/bus supports timestamps until 2038 (0x7fffffff) [ 71.064898][ T3311] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 71.094710][ T3311] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 3304] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3324] chdir("./file0" [pid 3323] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3329] <... write resumed>) = 1048576 [pid 3329] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3329] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 3329] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3329] close(3) = 0 [pid 3329] mkdir("./bus", 0777) = 0 [pid 3329] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3306] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3324] <... chdir resumed>) = 0 [pid 3306] <... futex resumed>) = 0 [pid 3306] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3324] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3317] <... write resumed>) = 1048576 [pid 3324] <... futex resumed>) = 1 [pid 3323] <... futex resumed>) = 0 [pid 3311] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3324] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3323] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3317] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3311] <... openat resumed>) = 8 [pid 3324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3323] <... futex resumed>) = 0 [pid 3317] <... futex resumed>) = 1 [pid 3313] <... futex resumed>) = 0 [pid 3313] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3313] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3324] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3323] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3317] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3311] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3311] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3324] <... open resumed>) = 4 [pid 3324] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3324] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3308] <... openat resumed>) = 7 [pid 3308] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3304] <... futex resumed>) = 0 [pid 3304] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3304] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3308] <... futex resumed>) = 1 [pid 3308] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3308] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3304] <... futex resumed>) = 0 [pid 3304] exit_group(0) = ? [pid 3308] <... futex resumed>) = ? [pid 3306] <... futex resumed>) = 0 [pid 3306] exit_group(0 [pid 3311] <... futex resumed>) = ? [pid 3306] <... exit_group resumed>) = ? [pid 3311] +++ exited with 0 +++ [pid 3323] <... futex resumed>) = 0 [pid 3323] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3324] <... futex resumed>) = 0 [pid 3323] <... futex resumed>) = 1 [pid 3324] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3323] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3324] <... openat resumed>) = 5 [pid 3324] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3323] <... futex resumed>) = 0 [pid 3324] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3323] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3324] <... write resumed>) = 196608 [pid 3323] <... futex resumed>) = 0 [pid 3323] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3324] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3323] <... futex resumed>) = 0 [pid 3323] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3323] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3324] <... futex resumed>) = 1 [pid 3324] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3324] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3323] <... futex resumed>) = 0 [pid 3324] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3323] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3323] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3324] <... open resumed>) = 6 [pid 3317] <... openat resumed>) = 7 [pid 3306] +++ exited with 0 +++ [pid 377] <... umount2 resumed>) = 0 [pid 3324] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3324] <... futex resumed>) = 1 [pid 3323] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3324] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3323] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./91/bus", [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3306, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 3324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3323] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 71.112316][ T3308] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 71.129345][ T3308] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 71.139336][ T3317] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 71.153524][ T3317] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 3324] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3323] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3317] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3308] +++ exited with 0 +++ [pid 3304] +++ exited with 0 +++ [pid 375] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3304, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 375] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 375] <... openat resumed>) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./90/binderfs") = 0 [pid 373] <... restart_syscall resumed>) = 0 [pid 375] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3317] <... futex resumed>) = 1 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3317] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./93/binderfs" [pid 3313] <... futex resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 3313] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3317] <... futex resumed>) = 0 [pid 3313] <... futex resumed>) = 1 [pid 377] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3317] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3317] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3317] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3329] <... mount resumed>) = 0 [pid 3313] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 4 [pid 3329] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] fstat(4, [pid 3329] <... openat resumed>) = 3 [pid 3313] exit_group(0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3329] chdir("./bus" [pid 3313] <... exit_group resumed>) = ? [pid 377] getdents64(4, [pid 3329] <... chdir resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3329] ioctl(4, LOOP_CLR_FD [pid 377] getdents64(4, [pid 3329] <... ioctl resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3329] close(4 [pid 377] close(4 [pid 3329] <... close resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 3329] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] rmdir("./91/bus" [pid 3329] <... futex resumed>) = 1 [pid 3328] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 3329] chdir("./file0" [pid 3328] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(3, [pid 3329] <... chdir resumed>) = 0 [pid 3328] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3329] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3328] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] close(3 [pid 3329] <... futex resumed>) = 0 [pid 3328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... close resumed>) = 0 [pid 3329] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3328] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] rmdir("./91" [pid 3329] <... open resumed>) = 4 [pid 3328] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 3329] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3328] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] mkdir("./92", 0777 [pid 3329] <... futex resumed>) = 0 [pid 3328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... mkdir resumed>) = 0 [pid 3329] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3328] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3329] <... openat resumed>) = 5 [pid 3328] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 3329] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3328] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] ioctl(3, LOOP_CLR_FD [pid 3329] <... futex resumed>) = 0 [pid 3328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3329] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3328] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 3329] <... write resumed>) = 196608 [pid 3328] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 3328] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3333 [pid 3329] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3328] <... futex resumed>) = 0 [pid 3328] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3328] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3329] <... futex resumed>) = 1 [pid 3329] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3329] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3328] <... futex resumed>) = 0 [pid 3328] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3328] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3329] <... futex resumed>) = 1 [pid 3329] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3329] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3328] <... futex resumed>) = 0 [pid 3328] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3328] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3329] <... futex resumed>) = 1 [pid 3329] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3317] <... futex resumed>) = ? [pid 3324] <... write resumed>) = 1048576 [pid 3324] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3323] <... futex resumed>) = 0 [pid 3324] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3323] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 71.175320][ T3329] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/93/bus supports timestamps until 2038 (0x7fffffff) [pid 3323] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3329] <... write resumed>) = 1048576 [pid 3329] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3328] <... futex resumed>) = 0 [pid 3328] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3328] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3329] <... futex resumed>) = 1 [pid 3329] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 3333 attached [pid 3333] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3333] chdir("./92") = 0 [pid 3333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3333] setpgid(0, 0) = 0 [pid 3333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3333] write(3, "1000", 4) = 4 [pid 3333] close(3) = 0 [pid 3333] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3333] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3333] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3333] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3334], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3334 [pid 3333] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3333] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3317] +++ exited with 0 +++ [pid 3313] +++ exited with 0 +++ [pid 373] <... umount2 resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3313, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3329] <... openat resumed>) = 7 [pid 374] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3334 attached [pid 3329] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./93/bus", [pid 374] lstat("./90/binderfs", [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] unlink("./90/binderfs") = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./93/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./93") = 0 [pid 373] mkdir("./94", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3 [pid 3334] set_robust_list(0x7f64ff0649e0, 24 [pid 3329] <... futex resumed>) = 1 [pid 3328] <... futex resumed>) = 0 [pid 3324] <... openat resumed>) = 7 [pid 373] <... close resumed>) = 0 [pid 3334] <... set_robust_list resumed>) = 0 [pid 3329] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3328] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3334] memfd_create("syzkaller", 0 [pid 3329] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3328] <... futex resumed>) = 0 [pid 3324] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3334] <... memfd_create resumed>) = 3 [pid 3329] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3328] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3329] <... openat resumed>) = 8 [pid 3324] <... futex resumed>) = 1 [pid 3323] <... futex resumed>) = 0 [pid 3334] <... mmap resumed>) = 0x7f64f6c44000 [pid 3329] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3323] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3335 attached [pid 3334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3329] <... futex resumed>) = 1 [pid 3328] <... futex resumed>) = 0 [pid 3324] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3323] <... futex resumed>) = 0 [pid 3329] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3328] exit_group(0 [pid 3324] <... openat resumed>) = 8 [pid 3323] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3329] <... futex resumed>) = ? [pid 3328] <... exit_group resumed>) = ? [pid 3324] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3335 [pid 3329] +++ exited with 0 +++ [pid 3324] <... futex resumed>) = 1 [pid 3323] <... futex resumed>) = 0 [pid 3324] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3323] exit_group(0 [pid 3324] <... futex resumed>) = ? [pid 3323] <... exit_group resumed>) = ? [pid 3335] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3335] chdir("./94") = 0 [pid 3335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3335] setpgid(0, 0) = 0 [pid 3334] <... write resumed>) = 1048576 [pid 3334] munmap(0x7f64f6c44000, 1048576 [pid 3335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3334] <... munmap resumed>) = 0 [pid 3335] <... openat resumed>) = 3 [pid 3334] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3335] write(3, "1000", 4) = 4 [pid 3335] close(3) = 0 [pid 3335] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3335] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3335] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3335] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3336 attached , parent_tid=[3336], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3336 [pid 3335] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3335] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3336] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3336] memfd_create("syzkaller", 0) = 3 [pid 3336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3336] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3336] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 375] <... umount2 resumed>) = 0 [pid 375] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./90/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./90/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./90") = 0 [pid 375] mkdir("./91", 0777) = 0 [ 71.215502][ T3324] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 71.222753][ T3329] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 71.243872][ T3329] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 71.252916][ T3324] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3328] +++ exited with 0 +++ [pid 3324] +++ exited with 0 +++ [pid 3323] +++ exited with 0 +++ [pid 3334] <... openat resumed>) = 4 [pid 3334] ioctl(4, LOOP_SET_FD, 3 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3328, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 376] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3336] <... openat resumed>) = 4 [pid 3334] <... ioctl resumed>) = 0 [pid 376] getdents64(3, [pid 375] <... openat resumed>) = 3 [pid 374] <... umount2 resumed>) = 0 [pid 3336] ioctl(4, LOOP_SET_FD, 3 [pid 3334] close(3 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] ioctl(3, LOOP_CLR_FD [pid 374] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3334] <... close resumed>) = 0 [pid 376] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3323, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3334] mkdir("./bus", 0777 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./90/bus", [pid 3334] <... mkdir resumed>) = 0 [pid 376] lstat("./93/binderfs", [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3334] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] unlink("./93/binderfs" [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... unlink resumed>) = 0 [pid 374] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... openat resumed>) = 4 [pid 372] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] close(4) = 0 [pid 372] <... openat resumed>) = 3 [pid 374] rmdir("./90/bus" [pid 372] fstat(3, [pid 374] <... rmdir resumed>) = 0 [pid 374] getdents64(3, [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3 [pid 372] getdents64(3, [pid 374] <... close resumed>) = 0 [pid 374] rmdir("./90" [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] <... rmdir resumed>) = 0 [pid 374] mkdir("./91", 0777 [pid 372] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... mkdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./90/binderfs" [pid 3336] <... ioctl resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... unlink resumed>) = 0 [pid 3336] close(3 [pid 375] close(3 [pid 3336] <... close resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 3336] mkdir("./bus", 0777 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3336] <... mkdir resumed>) = 0 [pid 3336] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3339 [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... openat resumed>) = 3 [pid 376] lstat("./93/bus", [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... close resumed>) = 0 [pid 376] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3340 [pid 376] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 3339 attached [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 3340 attached [pid 376] getdents64(4, [pid 3340] set_robust_list(0x55555713c5e0, 24 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3340] <... set_robust_list resumed>) = 0 [pid 376] getdents64(4, [pid 3340] chdir("./91" [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3340] <... chdir resumed>) = 0 [pid 376] close(4 [pid 3340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 376] <... close resumed>) = 0 [pid 3340] <... prctl resumed>) = 0 [pid 376] rmdir("./93/bus" [pid 3340] setpgid(0, 0 [pid 376] <... rmdir resumed>) = 0 [pid 3340] <... setpgid resumed>) = 0 [pid 376] getdents64(3, [pid 3340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3340] <... openat resumed>) = 3 [pid 376] close(3 [pid 3340] write(3, "1000", 4 [pid 376] <... close resumed>) = 0 [pid 3340] <... write resumed>) = 4 [pid 376] rmdir("./93" [pid 3340] close(3 [pid 376] <... rmdir resumed>) = 0 [pid 3340] <... close resumed>) = 0 [pid 376] mkdir("./94", 0777 [pid 3340] symlink("/dev/binderfs", "./binderfs" [pid 376] <... mkdir resumed>) = 0 [pid 3340] <... symlink resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3340] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3340] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3340] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3339] set_robust_list(0x55555713c5e0, 24 [pid 3340] <... clone resumed>, parent_tid=[3343], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3343 [pid 3340] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3339] <... set_robust_list resumed>) = 0 [pid 3340] <... futex resumed>) = 0 [pid 3340] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3339] chdir("./91") = 0 [pid 3339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3339] setpgid(0, 0) = 0 [pid 3339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3339] write(3, "1000", 4) = 4 [pid 3339] close(3) = 0 [pid 3339] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3339] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3339] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3339] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3344], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3344 [pid 3339] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3339] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3343 attached [pid 3343] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3343] memfd_create("syzkaller", 0) = 3 [pid 3343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 3344 attached [pid 3344] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3344] memfd_create("syzkaller", 0) = 3 [pid 3344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3336] <... mount resumed>) = 0 [pid 3336] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3336] chdir("./bus") = 0 [pid 3336] ioctl(4, LOOP_CLR_FD [pid 3343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 376] <... openat resumed>) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3347 [pid 3344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 3347 attached [pid 3347] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3347] chdir("./94") = 0 [pid 3347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3347] setpgid(0, 0) = 0 [pid 3347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3347] write(3, "1000", 4) = 4 [pid 3347] close(3) = 0 [pid 3347] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3347] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3347] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3347] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3348], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3348 [pid 3347] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3347] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3344] <... write resumed>) = 1048576 [pid 3343] <... write resumed>) = 1048576 [pid 3343] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3344] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3343] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3344] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 3348 attached [pid 3348] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3348] memfd_create("syzkaller", 0) = 3 [pid 3348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3334] <... mount resumed>) = 0 [pid 3334] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3334] chdir("./bus") = 0 [pid 3334] ioctl(4, LOOP_CLR_FD [pid 3348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3348] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3348] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3336] <... ioctl resumed>) = 0 [pid 3348] <... openat resumed>) = 4 [pid 3344] <... openat resumed>) = 4 [pid 3343] <... openat resumed>) = 4 [pid 3336] close(4 [pid 3344] ioctl(4, LOOP_SET_FD, 3 [pid 3343] ioctl(4, LOOP_SET_FD, 3 [pid 3336] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 3348] ioctl(4, LOOP_SET_FD, 3 [pid 3336] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3334] <... ioctl resumed>) = 0 [pid 3344] <... ioctl resumed>) = 0 [pid 3334] close(4 [pid 372] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./90/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3336] <... futex resumed>) = 1 [pid 3335] <... futex resumed>) = 0 [pid 372] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3336] chdir("./file0" [pid 3335] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3344] close(3 [pid 372] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3344] <... close resumed>) = 0 [pid 3336] <... chdir resumed>) = 0 [pid 3335] <... futex resumed>) = 0 [pid 372] <... openat resumed>) = 4 [pid 3344] mkdir("./bus", 0777 [pid 3336] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3335] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] fstat(4, [pid 3336] <... futex resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, [pid 3344] <... mkdir resumed>) = 0 [pid 3336] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3348] <... ioctl resumed>) = 0 [pid 3344] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3335] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(4, [pid 3348] close(3 [pid 3336] <... futex resumed>) = 0 [pid 3335] <... futex resumed>) = 1 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3348] <... close resumed>) = 0 [pid 3336] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3335] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] close(4 [pid 3343] <... ioctl resumed>) = 0 [pid 3348] mkdir("./bus", 0777) = 0 [pid 3348] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3343] close(3 [pid 3336] <... open resumed>) = 4 [pid 3334] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3334] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3333] <... futex resumed>) = 0 [ 71.361054][ T3336] ext4 filesystem being mounted at /root/syzkaller.k3ECep/94/bus supports timestamps until 2038 (0x7fffffff) [ 71.391037][ T3334] ext4 filesystem being mounted at /root/syzkaller.43WzWH/92/bus supports timestamps until 2038 (0x7fffffff) [pid 3343] <... close resumed>) = 0 [pid 3336] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3334] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3333] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] rmdir("./90/bus" [pid 3343] mkdir("./bus", 0777 [pid 3334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3333] <... futex resumed>) = 0 [pid 3334] chdir("./file0" [pid 3333] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3334] <... chdir resumed>) = 0 [pid 3334] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3333] <... futex resumed>) = 0 [pid 3334] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3333] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3343] <... mkdir resumed>) = 0 [pid 3336] <... futex resumed>) = 1 [pid 3335] <... futex resumed>) = 0 [pid 3334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3333] <... futex resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 3343] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3336] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3335] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3334] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3333] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] getdents64(3, [pid 3336] <... openat resumed>) = 5 [pid 3335] <... futex resumed>) = 0 [pid 3334] <... open resumed>) = 4 [pid 3336] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3335] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3334] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3336] <... futex resumed>) = 0 [pid 3335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3334] <... futex resumed>) = 1 [pid 3333] <... futex resumed>) = 0 [pid 372] close(3 [pid 3344] <... mount resumed>) = 0 [pid 3336] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3335] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3334] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3333] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 3336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3335] <... futex resumed>) = 0 [pid 3334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3333] <... futex resumed>) = 0 [pid 372] rmdir("./90" [pid 3336] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3335] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3334] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3333] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... rmdir resumed>) = 0 [pid 3336] <... write resumed>) = 196608 [pid 3334] <... openat resumed>) = 5 [pid 372] mkdir("./91", 0777 [pid 3334] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... mkdir resumed>) = 0 [pid 3334] <... futex resumed>) = 1 [pid 3333] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3334] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3333] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 3 [pid 3334] <... write resumed>) = 196608 [pid 3333] <... futex resumed>) = 0 [pid 372] ioctl(3, LOOP_CLR_FD [pid 3333] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3356 [pid 3336] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3335] <... futex resumed>) = 0 [pid 3335] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3335] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3336] <... futex resumed>) = 1 [pid 3336] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3334] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3336] <... mount resumed>) = 0 [pid 3334] <... futex resumed>) = 1 [pid 3333] <... futex resumed>) = 0 [pid 3336] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3334] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3333] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3336] <... futex resumed>) = 1 [pid 3335] <... futex resumed>) = 0 [pid 3334] <... mount resumed>) = 0 [pid 3333] <... futex resumed>) = 0 [pid 3336] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3335] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3334] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3333] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3336] <... open resumed>) = 6 [pid 3335] <... futex resumed>) = 0 [pid 3334] <... futex resumed>) = 0 [pid 3333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3336] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3335] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3334] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3333] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3336] <... futex resumed>) = 0 [pid 3335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3334] <... open resumed>) = 6 [pid 3333] <... futex resumed>) = 0 [pid 3336] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3335] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3334] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3333] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3335] <... futex resumed>) = 0 [pid 3334] <... futex resumed>) = 0 [pid 3333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3335] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3334] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3333] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3333] <... futex resumed>) = 0 [pid 3334] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3333] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3344] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3344] chdir("./bus") = 0 [pid 3344] ioctl(4, LOOP_CLR_FD) = 0 [pid 3344] close(4./strace-static-x86_64: Process 3356 attached [pid 3348] <... mount resumed>) = 0 [pid 3344] <... close resumed>) = 0 [pid 3343] <... mount resumed>) = 0 [pid 3356] set_robust_list(0x55555713c5e0, 24 [pid 3348] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3343] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3356] <... set_robust_list resumed>) = 0 [pid 3348] <... openat resumed>) = 3 [pid 3344] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3343] <... openat resumed>) = 3 [pid 3356] chdir("./91" [pid 3348] chdir("./bus" [pid 3344] <... futex resumed>) = 1 [pid 3343] chdir("./bus" [pid 3339] <... futex resumed>) = 0 [pid 3356] <... chdir resumed>) = 0 [pid 3348] <... chdir resumed>) = 0 [pid 3344] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3343] <... chdir resumed>) = 0 [pid 3339] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3348] ioctl(4, LOOP_CLR_FD [pid 3344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3343] ioctl(4, LOOP_CLR_FD [pid 3339] <... futex resumed>) = 0 [pid 3356] <... prctl resumed>) = 0 [pid 3348] <... ioctl resumed>) = 0 [pid 3344] chdir("./file0" [pid 3343] <... ioctl resumed>) = 0 [pid 3339] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3356] setpgid(0, 0 [pid 3348] close(4 [pid 3344] <... chdir resumed>) = 0 [pid 3343] close(4 [pid 3356] <... setpgid resumed>) = 0 [pid 3348] <... close resumed>) = 0 [pid 3344] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3343] <... close resumed>) = 0 [pid 3356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3348] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3344] <... futex resumed>) = 1 [pid 3343] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3339] <... futex resumed>) = 0 [pid 3356] <... openat resumed>) = 3 [pid 3348] <... futex resumed>) = 1 [pid 3347] <... futex resumed>) = 0 [pid 3344] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3343] <... futex resumed>) = 1 [pid 3340] <... futex resumed>) = 0 [pid 3339] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3356] write(3, "1000", 4 [pid 3348] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3347] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3343] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3340] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3339] <... futex resumed>) = 0 [pid 3356] <... write resumed>) = 4 [pid 3348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3347] <... futex resumed>) = 0 [pid 3344] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3340] <... futex resumed>) = 0 [pid 3339] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3356] close(3 [pid 3348] chdir("./file0" [pid 3347] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3344] <... open resumed>) = 4 [pid 3343] chdir("./file0" [pid 3340] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3356] <... close resumed>) = 0 [pid 3348] <... chdir resumed>) = 0 [pid 3344] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3343] <... chdir resumed>) = 0 [pid 3356] symlink("/dev/binderfs", "./binderfs" [pid 3348] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3344] <... futex resumed>) = 1 [pid 3343] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3339] <... futex resumed>) = 0 [pid 3356] <... symlink resumed>) = 0 [pid 3348] <... futex resumed>) = 1 [pid 3347] <... futex resumed>) = 0 [pid 3344] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3343] <... futex resumed>) = 1 [pid 3340] <... futex resumed>) = 0 [pid 3339] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3356] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3348] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3347] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3343] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3340] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3339] <... futex resumed>) = 0 [pid 3356] <... futex resumed>) = 0 [pid 3348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3347] <... futex resumed>) = 0 [pid 3344] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3340] <... futex resumed>) = 0 [pid 3339] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3348] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3347] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3344] <... openat resumed>) = 5 [pid 3343] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3340] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3356] <... mmap resumed>) = 0x7f64ff044000 [pid 3348] <... open resumed>) = 4 [pid 3344] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3343] <... open resumed>) = 4 [pid 3356] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3348] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3344] <... futex resumed>) = 1 [pid 3343] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3339] <... futex resumed>) = 0 [pid 3356] <... mprotect resumed>) = 0 [pid 3348] <... futex resumed>) = 1 [pid 3347] <... futex resumed>) = 0 [pid 3344] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3343] <... futex resumed>) = 1 [pid 3340] <... futex resumed>) = 0 [pid 3339] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3356] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3348] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3347] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3343] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3340] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3339] <... futex resumed>) = 0 [pid 3348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3347] <... futex resumed>) = 0 [pid 3344] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3340] <... futex resumed>) = 0 [pid 3339] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3356] <... clone resumed>, parent_tid=[3359], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3359 [pid 3348] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3347] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3344] <... write resumed>) = 196608 [pid 3343] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3340] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3356] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3348] <... openat resumed>) = 5 [pid 3344] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3343] <... openat resumed>) = 5 [pid 3356] <... futex resumed>) = 0 [pid 3348] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3344] <... futex resumed>) = 1 [pid 3343] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3339] <... futex resumed>) = 0 [pid 3356] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3348] <... futex resumed>) = 1 [pid 3347] <... futex resumed>) = 0 [pid 3344] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3343] <... futex resumed>) = 1 [pid 3340] <... futex resumed>) = 0 [pid 3339] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3348] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3347] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3343] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3340] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3339] <... futex resumed>) = 0 [pid 3348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3347] <... futex resumed>) = 0 [pid 3344] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3340] <... futex resumed>) = 0 [pid 3339] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3348] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3347] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3344] <... mount resumed>) = 0 [pid 3343] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3340] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3348] <... write resumed>) = 196608 [pid 3344] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3343] <... write resumed>) = 196608 [pid 3336] <... write resumed>) = 1048576 [pid 3348] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3344] <... futex resumed>) = 1 [pid 3343] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3339] <... futex resumed>) = 0 [pid 3348] <... futex resumed>) = 1 [pid 3347] <... futex resumed>) = 0 [pid 3344] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3343] <... futex resumed>) = 1 [pid 3340] <... futex resumed>) = 0 [pid 3339] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3348] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3347] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3343] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3340] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3339] <... futex resumed>) = 0 [pid 3336] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3347] <... futex resumed>) = 0 [pid 3344] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3340] <... futex resumed>) = 0 [pid 3339] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3348] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3347] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3344] <... open resumed>) = 6 [pid 3343] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3340] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3348] <... mount resumed>) = 0 [pid 3344] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3343] <... mount resumed>) = 0 [pid 3348] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3344] <... futex resumed>) = 1 [pid 3343] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3339] <... futex resumed>) = 0 [pid 3348] <... futex resumed>) = 1 [pid 3347] <... futex resumed>) = 0 [pid 3344] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3343] <... futex resumed>) = 1 [pid 3340] <... futex resumed>) = 0 [pid 3339] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3348] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3347] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3343] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3340] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3339] <... futex resumed>) = 0 [pid 3348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3347] <... futex resumed>) = 0 [pid 3344] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3340] <... futex resumed>) = 0 [pid 3339] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3336] <... futex resumed>) = 1 [pid 3335] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3359 attached [pid 3348] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3347] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3343] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3340] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3336] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3335] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3334] <... write resumed>) = 1048576 [pid 3359] set_robust_list(0x7f64ff0649e0, 24 [pid 3348] <... open resumed>) = 6 [pid 3343] <... open resumed>) = 6 [pid 3336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 71.453973][ T3344] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/91/bus supports timestamps until 2038 (0x7fffffff) [ 71.454315][ T3348] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/94/bus supports timestamps until 2038 (0x7fffffff) [ 71.483357][ T3343] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/91/bus supports timestamps until 2038 (0x7fffffff) [pid 3335] <... futex resumed>) = 0 [pid 3334] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3359] <... set_robust_list resumed>) = 0 [pid 3348] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3343] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3336] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3335] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3334] <... futex resumed>) = 1 [pid 3333] <... futex resumed>) = 0 [pid 3348] <... futex resumed>) = 1 [pid 3347] <... futex resumed>) = 0 [pid 3344] <... write resumed>) = 1048576 [pid 3343] <... futex resumed>) = 1 [pid 3340] <... futex resumed>) = 0 [pid 3348] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3347] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3344] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3343] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3340] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3347] <... futex resumed>) = 0 [pid 3344] <... futex resumed>) = 1 [pid 3343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3340] <... futex resumed>) = 0 [pid 3339] <... futex resumed>) = 0 [pid 3348] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3347] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3344] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3343] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3340] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3339] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3359] memfd_create("syzkaller", 0 [pid 3344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3339] <... futex resumed>) = 0 [pid 3334] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3333] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3359] <... memfd_create resumed>) = 3 [pid 3348] <... write resumed>) = 1048576 [pid 3344] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3339] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3336] <... openat resumed>) = 7 [pid 3359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3348] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3333] <... futex resumed>) = 0 [pid 3359] <... mmap resumed>) = 0x7f64f6c44000 [pid 3348] <... futex resumed>) = 1 [pid 3347] <... futex resumed>) = 0 [pid 3336] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3333] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 71.535997][ T3336] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 71.550535][ T3336] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 71.562805][ T3334] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3348] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3347] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3336] <... futex resumed>) = 1 [pid 3335] <... futex resumed>) = 0 [pid 3359] <... write resumed>) = 1048576 [pid 3348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3347] <... futex resumed>) = 0 [pid 3336] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3335] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3348] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3347] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3335] <... futex resumed>) = 0 [pid 3343] <... write resumed>) = 1048576 [pid 3336] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3335] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3343] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3336] <... openat resumed>) = 8 [pid 3343] <... futex resumed>) = 1 [pid 3340] <... futex resumed>) = 0 [pid 3336] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3359] munmap(0x7f64f6c44000, 1048576 [pid 3343] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3340] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3336] <... futex resumed>) = 1 [pid 3335] <... futex resumed>) = 0 [pid 3359] <... munmap resumed>) = 0 [pid 3343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3340] <... futex resumed>) = 0 [pid 3336] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3335] exit_group(0 [pid 3359] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3343] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3340] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3336] <... futex resumed>) = ? [pid 3335] <... exit_group resumed>) = ? [pid 3359] <... openat resumed>) = 4 [pid 3344] <... openat resumed>) = 7 [pid 3336] +++ exited with 0 +++ [pid 3335] +++ exited with 0 +++ [pid 3333] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3359] ioctl(4, LOOP_SET_FD, 3 [pid 3333] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 71.567185][ T3344] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 71.590592][ T3348] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 71.592303][ T3344] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 71.612558][ T3343] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3333] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3333] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3360], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3360 [pid 3333] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3333] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3360 attached [pid 3360] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3360] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3348] <... openat resumed>) = 7 [pid 3344] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3339] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3335, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3344] <... futex resumed>) = 0 [pid 3339] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3344] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3339] <... futex resumed>) = 0 [pid 3344] <... openat resumed>) = 8 [pid 3339] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3344] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3339] <... futex resumed>) = 0 [pid 3344] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3339] exit_group(0 [pid 3344] <... futex resumed>) = ? [pid 3339] <... exit_group resumed>) = ? [pid 373] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./94/binderfs") = 0 [pid 373] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3348] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3347] <... futex resumed>) = 0 [pid 3347] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3347] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3348] <... futex resumed>) = 1 [pid 3348] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3348] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3347] <... futex resumed>) = 0 [pid 3347] exit_group(0) = ? [pid 3348] <... futex resumed>) = ? [pid 3359] <... ioctl resumed>) = 0 [pid 3344] +++ exited with 0 +++ [pid 3339] +++ exited with 0 +++ [pid 3359] close(3 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3339, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 3359] <... close resumed>) = 0 [pid 3359] mkdir("./bus", 0777) = 0 [pid 375] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3359] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3334] <... openat resumed>) = 7 [pid 3360] <... openat resumed>) = 8 [pid 3343] <... openat resumed>) = 7 [pid 375] <... openat resumed>) = 3 [pid 3334] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fstat(3, [pid 3334] <... futex resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3360] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3334] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] getdents64(3, [pid 3360] <... futex resumed>) = 1 [pid 3333] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./91/binderfs") = 0 [pid 375] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3348] +++ exited with 0 +++ [pid 3347] +++ exited with 0 +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3347, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./94/binderfs") = 0 [pid 376] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3333] exit_group(0 [pid 3360] exit_group(0 [pid 3334] <... futex resumed>) = ? [pid 3333] <... exit_group resumed>) = ? [pid 3343] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3343] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3360] +++ exited with 0 +++ [pid 3340] <... futex resumed>) = 0 [pid 3334] +++ exited with 0 +++ [pid 3333] +++ exited with 0 +++ [pid 3340] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3333, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3340] <... futex resumed>) = 1 [pid 377] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./92/binderfs") = 0 [pid 377] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3340] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3343] <... futex resumed>) = 0 [pid 3343] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3343] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3343] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3340] <... futex resumed>) = 0 [pid 3340] exit_group(0) = ? [pid 3343] <... futex resumed>) = ? [pid 3359] <... mount resumed>) = 0 [pid 3359] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3359] chdir("./bus") = 0 [pid 3359] ioctl(4, LOOP_CLR_FD [pid 375] <... umount2 resumed>) = 0 [pid 375] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./91/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./91/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./91") = 0 [pid 375] mkdir("./92", 0777) = 0 [ 71.615376][ T3348] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 71.637879][ T3334] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 71.639392][ T3343] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 71.673565][ T3359] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/91/bus supports timestamps until 2038 (0x7fffffff) [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3359] <... ioctl resumed>) = 0 [pid 3343] +++ exited with 0 +++ [pid 3340] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3340, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 375] <... openat resumed>) = 3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 3359] close(4 [pid 374] <... restart_syscall resumed>) = 0 [pid 374] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./91/binderfs") = 0 [pid 374] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3359] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... umount2 resumed>) = 0 [pid 3359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] close(3 [pid 3359] <... futex resumed>) = 1 [pid 3356] <... futex resumed>) = 0 [pid 373] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3359] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3356] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3356] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3359] chdir("./file0" [pid 3356] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3359] <... chdir resumed>) = 0 [pid 3359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3356] <... futex resumed>) = 0 [pid 3359] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3356] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./94/bus", [pid 3359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3356] <... futex resumed>) = 0 [pid 3359] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3356] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] lstat("./92/bus", [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3359] <... open resumed>) = 4 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3359] <... futex resumed>) = 1 [pid 3356] <... futex resumed>) = 0 [pid 377] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3359] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3356] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3356] <... futex resumed>) = 0 [pid 373] <... openat resumed>) = 4 [pid 377] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3359] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3356] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] fstat(4, [pid 377] <... openat resumed>) = 4 [pid 3359] <... openat resumed>) = 5 [pid 377] fstat(4, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3359] <... futex resumed>) = 1 [pid 3356] <... futex resumed>) = 0 [pid 377] getdents64(4, [pid 373] getdents64(4, [pid 3359] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3356] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3356] <... futex resumed>) = 0 [pid 3359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, [pid 3356] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3359] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 377] getdents64(4, [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./92/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./92") = 0 [pid 377] mkdir("./93", 0777) = 0 [pid 3359] <... write resumed>) = 196608 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 373] close(4 [pid 3359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... close resumed>) = 0 [pid 3359] <... futex resumed>) = 1 [pid 3356] <... futex resumed>) = 0 [pid 373] rmdir("./94/bus" [pid 3359] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3356] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 3356] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3 [pid 3359] <... mount resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 3359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./94" [pid 3359] <... futex resumed>) = 1 [pid 3356] <... futex resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 3356] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] mkdir("./95", 0777 [pid 3359] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3356] <... futex resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 3356] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 377] <... openat resumed>) = 3 [pid 376] <... umount2 resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3364 [pid 377] <... close resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3365 ./strace-static-x86_64: Process 3365 attached [pid 3365] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3365] chdir("./93") = 0 [pid 3365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3365] setpgid(0, 0) = 0 [pid 3365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3365] write(3, "1000", 4) = 4 [pid 3365] close(3) = 0 [pid 3365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3365] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3365] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3365] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3364 attached [pid 3356] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3356] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3356] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3356] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3366], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3366 [pid 3364] set_robust_list(0x55555713c5e0, 24 [pid 3356] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3364] <... set_robust_list resumed>) = 0 [pid 3356] <... futex resumed>) = 0 [pid 3364] chdir("./92" [pid 3356] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3365] <... clone resumed>, parent_tid=[3367], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3367 [pid 3365] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3365] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3364] <... chdir resumed>) = 0 [pid 3364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3364] setpgid(0, 0) = 0 [pid 3364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3364] write(3, "1000", 4) = 4 [pid 3364] close(3./strace-static-x86_64: Process 3367 attached ./strace-static-x86_64: Process 3366 attached ) = 0 [pid 3359] <... open resumed>) = 6 [pid 376] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... openat resumed>) = 3 [pid 3366] set_robust_list(0x7f64f6d439e0, 24 [pid 3359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] ioctl(3, LOOP_CLR_FD [pid 3366] <... set_robust_list resumed>) = 0 [pid 3359] <... futex resumed>) = 0 [pid 376] lstat("./94/bus", [pid 3366] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3359] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3367] set_robust_list(0x7f64ff0649e0, 24 [pid 3364] symlink("/dev/binderfs", "./binderfs" [pid 374] <... umount2 resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] close(3 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... close resumed>) = 0 [pid 374] lstat("./91/bus", [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3368 [pid 376] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... openat resumed>) = 4 [pid 376] <... openat resumed>) = 4 [pid 374] fstat(4, [pid 376] fstat(4, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3367] <... set_robust_list resumed>) = 0 [pid 3364] <... symlink resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, [pid 3367] memfd_create("syzkaller", 0 [pid 3364] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3367] <... memfd_create resumed>) = 3 [pid 3364] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, [pid 3367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] getdents64(4, [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3367] <... mmap resumed>) = 0x7f64f6c44000 [pid 3364] <... mmap resumed>) = 0x7f64ff044000 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4 [pid 3364] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 376] close(4 [pid 374] <... close resumed>) = 0 ./strace-static-x86_64: Process 3368 attached [pid 3367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3364] <... mprotect resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 374] rmdir("./91/bus" [pid 3368] set_robust_list(0x55555713c5e0, 24 [pid 3367] <... write resumed>) = 1048576 [pid 3364] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] rmdir("./94/bus" [pid 374] <... rmdir resumed>) = 0 [pid 3368] <... set_robust_list resumed>) = 0 [pid 3367] munmap(0x7f64f6c44000, 1048576 [pid 374] getdents64(3, [pid 3368] chdir("./95" [pid 3367] <... munmap resumed>) = 0 [pid 3364] <... clone resumed>, parent_tid=[3369], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3369 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3368] <... chdir resumed>) = 0 [pid 3367] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3364] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... rmdir resumed>) = 0 [pid 374] close(3 [pid 3368] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3367] <... openat resumed>) = 4 [pid 3364] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 374] <... close resumed>) = 0 [pid 3368] <... prctl resumed>) = 0 [pid 3367] ioctl(4, LOOP_SET_FD, 3 [pid 3364] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] rmdir("./91" [pid 3368] setpgid(0, 0 [pid 376] close(3 [pid 374] <... rmdir resumed>) = 0 [pid 3368] <... setpgid resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 374] mkdir("./92", 0777 [pid 3368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 376] rmdir("./94" [pid 374] <... mkdir resumed>) = 0 [pid 3368] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3368] write(3, "1000", 4) = 4 [pid 376] <... rmdir resumed>) = 0 [pid 3368] close(3 [pid 376] mkdir("./95", 0777 [pid 3368] <... close resumed>) = 0 [pid 3368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3368] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 3368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3368] <... mmap resumed>) = 0x7f64ff044000 [pid 3368] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3368] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3371], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3371 [pid 3368] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3368] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3371 attached [pid 3371] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3371] memfd_create("syzkaller", 0) = 3 [pid 3371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 3369 attached [pid 3369] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3369] memfd_create("syzkaller", 0 [pid 3371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3369] <... memfd_create resumed>) = 3 [pid 3369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3371] <... write resumed>) = 1048576 [pid 3371] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3371] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3367] <... ioctl resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 3367] close(3 [pid 376] <... openat resumed>) = 3 [pid 374] close(3 [pid 3367] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 3367] mkdir("./bus", 0777 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3367] <... mkdir resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 3367] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3372 [pid 3371] <... openat resumed>) = 4 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3372 attached ./strace-static-x86_64: Process 3373 attached [pid 3372] set_robust_list(0x55555713c5e0, 24 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3373 [pid 3372] <... set_robust_list resumed>) = 0 [pid 3373] set_robust_list(0x55555713c5e0, 24 [pid 3372] chdir("./92") = 0 [pid 3373] <... set_robust_list resumed>) = 0 [pid 3372] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3373] chdir("./95" [pid 3372] <... prctl resumed>) = 0 [pid 3372] setpgid(0, 0 [pid 3373] <... chdir resumed>) = 0 [pid 3372] <... setpgid resumed>) = 0 [pid 3373] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3373] <... prctl resumed>) = 0 [pid 3369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3373] setpgid(0, 0 [pid 3372] <... openat resumed>) = 3 [pid 3373] <... setpgid resumed>) = 0 [pid 3372] write(3, "1000", 4 [pid 3373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3372] <... write resumed>) = 4 [pid 3373] <... openat resumed>) = 3 [pid 3372] close(3 [pid 3373] write(3, "1000", 4 [pid 3372] <... close resumed>) = 0 [pid 3373] <... write resumed>) = 4 [pid 3372] symlink("/dev/binderfs", "./binderfs" [pid 3373] close(3 [pid 3372] <... symlink resumed>) = 0 [pid 3371] ioctl(4, LOOP_SET_FD, 3 [pid 3369] <... write resumed>) = 1048576 [pid 3373] <... close resumed>) = 0 [pid 3372] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3369] munmap(0x7f64f6c44000, 1048576 [pid 3373] symlink("/dev/binderfs", "./binderfs" [pid 3372] <... futex resumed>) = 0 [pid 3373] <... symlink resumed>) = 0 [pid 3372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3369] <... munmap resumed>) = 0 [pid 3356] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3356] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3356] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3359] <... futex resumed>) = 0 [pid 3356] <... futex resumed>) = 1 [pid 3359] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3356] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3373] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3372] <... mmap resumed>) = 0x7f64ff044000 [pid 3369] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3373] <... futex resumed>) = 0 [pid 3372] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3371] <... ioctl resumed>) = 0 [pid 3369] <... openat resumed>) = 4 [pid 3366] <... write resumed>) = 1048576 [pid 3373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3372] <... mprotect resumed>) = 0 [pid 3371] close(3 [pid 3369] ioctl(4, LOOP_SET_FD, 3 [pid 3366] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3373] <... mmap resumed>) = 0x7f64ff044000 [pid 3372] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3371] <... close resumed>) = 0 [pid 3366] <... futex resumed>) = 0 [pid 3373] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3371] mkdir("./bus", 0777 [pid 3366] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3373] <... mprotect resumed>) = 0 [pid 3372] <... clone resumed>, parent_tid=[3378], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3378 [pid 3371] <... mkdir resumed>) = 0 [pid 3373] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3372] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3371] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3372] <... futex resumed>) = 0 [pid 3373] <... clone resumed>, parent_tid=[3379], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3379 [pid 3372] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3373] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3373] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3379 attached ./strace-static-x86_64: Process 3378 attached [pid 3369] <... ioctl resumed>) = 0 [pid 3367] <... mount resumed>) = 0 [pid 3369] close(3) = 0 [pid 3369] mkdir("./bus", 0777) = 0 [pid 3369] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3367] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3367] chdir("./bus") = 0 [pid 3367] ioctl(4, LOOP_CLR_FD [pid 3379] set_robust_list(0x7f64ff0649e0, 24 [pid 3378] set_robust_list(0x7f64ff0649e0, 24 [pid 3367] <... ioctl resumed>) = 0 [pid 3359] <... openat resumed>) = 7 [pid 3379] <... set_robust_list resumed>) = 0 [pid 3378] <... set_robust_list resumed>) = 0 [pid 3379] memfd_create("syzkaller", 0 [pid 3378] memfd_create("syzkaller", 0 [pid 3367] close(4 [pid 3359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3379] <... memfd_create resumed>) = 3 [pid 3378] <... memfd_create resumed>) = 3 [pid 3379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3367] <... close resumed>) = 0 [pid 3359] <... futex resumed>) = 1 [pid 3356] <... futex resumed>) = 0 [pid 3379] <... mmap resumed>) = 0x7f64f6c44000 [pid 3378] <... mmap resumed>) = 0x7f64f6c44000 [ 71.947361][ T3359] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 71.953363][ T3367] ext4 filesystem being mounted at /root/syzkaller.43WzWH/93/bus supports timestamps until 2038 (0x7fffffff) [ 71.962253][ T3359] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 3356] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3359] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3356] <... futex resumed>) = 0 [pid 3379] <... write resumed>) = 1048576 [pid 3378] <... write resumed>) = 1048576 [pid 3356] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3378] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3378] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3379] munmap(0x7f64f6c44000, 1048576 [pid 3378] <... openat resumed>) = 4 [pid 3379] <... munmap resumed>) = 0 [pid 3378] ioctl(4, LOOP_SET_FD, 3 [pid 3379] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3369] <... mount resumed>) = 0 [pid 3369] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3369] chdir("./bus") = 0 [pid 3369] ioctl(4, LOOP_CLR_FD [pid 3367] <... futex resumed>) = 1 [pid 3367] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3359] <... openat resumed>) = 8 [pid 3359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3356] <... futex resumed>) = 0 [pid 3359] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3356] exit_group(0 [pid 3359] <... futex resumed>) = ? [pid 3356] <... exit_group resumed>) = ? [pid 3359] +++ exited with 0 +++ [pid 3379] <... openat resumed>) = 4 [pid 3378] <... ioctl resumed>) = 0 [pid 3379] ioctl(4, LOOP_SET_FD, 3 [pid 3369] <... ioctl resumed>) = 0 [pid 3378] close(3 [pid 3369] close(4 [pid 3378] <... close resumed>) = 0 [pid 3378] mkdir("./bus", 0777) = 0 [pid 3378] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3365] <... futex resumed>) = 0 [pid 3365] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3367] <... futex resumed>) = 0 [pid 3365] <... futex resumed>) = 1 [pid 3367] chdir("./file0" [pid 3365] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3367] <... chdir resumed>) = 0 [pid 3367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3365] <... futex resumed>) = 0 [pid 3367] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3365] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3365] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3366] <... futex resumed>) = ? [pid 3379] <... ioctl resumed>) = 0 [pid 3369] <... close resumed>) = 0 [pid 3366] +++ exited with 0 +++ [pid 3356] +++ exited with 0 +++ [pid 3379] close(3 [pid 3369] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3356, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3379] <... close resumed>) = 0 [pid 3369] <... futex resumed>) = 1 [pid 3379] mkdir("./bus", 0777 [pid 3369] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3379] <... mkdir resumed>) = 0 [pid 372] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3379] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3371] <... mount resumed>) = 0 [pid 3367] <... open resumed>) = 4 [pid 3364] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3364] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3371] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3369] <... futex resumed>) = 0 [pid 3364] <... futex resumed>) = 1 [pid 3369] chdir("./file0" [pid 3364] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3369] <... chdir resumed>) = 0 [pid 3367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 3 [pid 3369] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3367] <... futex resumed>) = 1 [pid 3365] <... futex resumed>) = 0 [pid 3364] <... futex resumed>) = 0 [pid 372] fstat(3, [pid 3367] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3365] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3367] <... openat resumed>) = 5 [pid 3365] <... futex resumed>) = 0 [pid 372] getdents64(3, [pid 3367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3365] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3367] <... futex resumed>) = 0 [pid 3365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3367] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3365] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3364] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3369] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 372] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3371] <... openat resumed>) = 3 [pid 3369] <... open resumed>) = 4 [pid 3367] <... write resumed>) = 196608 [pid 3365] <... futex resumed>) = 0 [pid 3364] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3369] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3365] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3364] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] lstat("./91/binderfs", [pid 3371] chdir("./bus" [pid 3369] <... futex resumed>) = 0 [pid 3367] <... futex resumed>) = 0 [pid 3365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3369] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3365] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3364] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3367] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3365] <... futex resumed>) = 0 [pid 3364] <... futex resumed>) = 0 [pid 3369] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3365] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3364] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] unlink("./91/binderfs" [pid 3369] <... openat resumed>) = 5 [pid 3367] <... mount resumed>) = 0 [pid 3369] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3364] <... futex resumed>) = 0 [pid 3369] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3364] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3364] <... futex resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 3369] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3364] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3369] <... write resumed>) = 196608 [pid 3367] <... futex resumed>) = 1 [pid 3365] <... futex resumed>) = 0 [pid 372] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3367] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3365] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3369] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3364] <... futex resumed>) = 0 [pid 3369] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3364] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3369] <... mount resumed>) = 0 [pid 3365] <... futex resumed>) = 0 [pid 3364] <... futex resumed>) = 0 [pid 3369] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3364] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3369] <... futex resumed>) = 0 [pid 3364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3365] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3369] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3367] <... open resumed>) = 6 [pid 3364] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3369] <... open resumed>) = 6 [pid 3364] <... futex resumed>) = 0 [pid 3369] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3364] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3369] <... futex resumed>) = 0 [pid 3364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3369] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3364] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3371] <... chdir resumed>) = 0 [pid 3367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3364] <... futex resumed>) = 0 [pid 3367] <... futex resumed>) = 1 [pid 3365] <... futex resumed>) = 0 [pid 3364] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3367] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3365] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3365] <... futex resumed>) = 0 [pid 3367] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3365] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3371] ioctl(4, LOOP_CLR_FD [pid 3367] <... write resumed>) = 1048576 [pid 3367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3365] <... futex resumed>) = 0 [pid 3365] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3365] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3367] <... futex resumed>) = 1 [ 71.993182][ T3369] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/92/bus supports timestamps until 2038 (0x7fffffff) [ 72.006619][ T3371] ext4 filesystem being mounted at /root/syzkaller.k3ECep/95/bus supports timestamps until 2038 (0x7fffffff) [pid 3367] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3379] <... mount resumed>) = 0 [pid 3369] <... write resumed>) = 1048576 [pid 3369] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3379] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3369] <... futex resumed>) = 1 [pid 3364] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./91/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./91/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./91") = 0 [pid 372] mkdir("./92", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3390 ./strace-static-x86_64: Process 3390 attached [pid 3390] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3390] chdir("./92") = 0 [pid 3390] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3390] setpgid(0, 0) = 0 [pid 3390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3390] write(3, "1000", 4) = 4 [pid 3390] close(3) = 0 [pid 3390] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3390] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3390] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3390] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3390] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3391], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3391 [pid 3390] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3390] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3391 attached [pid 3391] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3391] memfd_create("syzkaller", 0) = 3 [pid 3391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3371] <... ioctl resumed>) = 0 [pid 3364] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3371] close(4 [ 72.055173][ T3367] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 72.060402][ T3379] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/95/bus supports timestamps until 2038 (0x7fffffff) [ 72.082675][ T3378] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/92/bus supports timestamps until 2038 (0x7fffffff) [pid 3369] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3364] <... futex resumed>) = 0 [pid 3371] <... close resumed>) = 0 [pid 3391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3391] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3391] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3391] ioctl(4, LOOP_SET_FD, 3 [pid 3378] <... mount resumed>) = 0 [pid 3378] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3378] chdir("./bus") = 0 [pid 3378] ioctl(4, LOOP_CLR_FD [pid 3379] <... openat resumed>) = 3 [pid 3371] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3364] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3379] chdir("./bus" [pid 3371] <... futex resumed>) = 1 [pid 3368] <... futex resumed>) = 0 [pid 3365] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3379] <... chdir resumed>) = 0 [pid 3371] chdir("./file0" [pid 3368] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3365] <... futex resumed>) = 0 [pid 3379] ioctl(4, LOOP_CLR_FD [pid 3371] <... chdir resumed>) = 0 [pid 3368] <... futex resumed>) = 0 [pid 3365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3371] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3368] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3365] <... mmap resumed>) = 0x7f64f6d23000 [pid 3371] <... futex resumed>) = 0 [pid 3368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3365] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3371] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3368] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3365] <... mprotect resumed>) = 0 [pid 3368] <... futex resumed>) = 0 [pid 3365] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3368] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3365] <... clone resumed>, parent_tid=[3393], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3393 [pid 3365] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3365] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3393 attached [pid 3393] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3393] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3391] <... ioctl resumed>) = 0 [pid 3391] close(3) = 0 [pid 3391] mkdir("./bus", 0777) = 0 [pid 3379] <... ioctl resumed>) = 0 [pid 3378] <... ioctl resumed>) = 0 [pid 3371] <... open resumed>) = 4 [pid 3391] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3379] close(4) = 0 [pid 3378] close(4 [pid 3371] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3379] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3378] <... close resumed>) = 0 [pid 3371] <... futex resumed>) = 1 [pid 3368] <... futex resumed>) = 0 [pid 3379] <... futex resumed>) = 1 [pid 3378] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3371] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3368] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3379] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3378] <... futex resumed>) = 1 [pid 3371] <... openat resumed>) = 5 [pid 3368] <... futex resumed>) = 0 [pid 3378] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3371] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3368] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3371] <... futex resumed>) = 0 [pid 3368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3371] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3368] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3393] <... openat resumed>) = 8 [pid 3373] <... futex resumed>) = 0 [pid 3372] <... futex resumed>) = 0 [pid 3368] <... futex resumed>) = 0 [pid 3367] <... openat resumed>) = 7 [pid 3373] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3372] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3393] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3368] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3372] <... futex resumed>) = 1 [pid 3393] <... futex resumed>) = 1 [pid 3379] <... futex resumed>) = 0 [pid 3378] <... futex resumed>) = 0 [pid 3373] <... futex resumed>) = 1 [pid 3372] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3367] <... futex resumed>) = 0 [pid 3365] <... futex resumed>) = 0 [pid 3393] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3379] chdir("./file0" [pid 3378] chdir("./file0" [pid 3373] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3371] <... write resumed>) = 196608 [pid 3367] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3365] exit_group(0 [pid 3393] <... futex resumed>) = ? [pid 3371] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3367] <... futex resumed>) = ? [pid 3365] <... exit_group resumed>) = ? [pid 3393] +++ exited with 0 +++ [pid 3379] <... chdir resumed>) = 0 [pid 3378] <... chdir resumed>) = 0 [pid 3371] <... futex resumed>) = 1 [pid 3368] <... futex resumed>) = 0 [pid 3367] +++ exited with 0 +++ [pid 3365] +++ exited with 0 +++ [pid 3371] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3368] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3365, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- [pid 3371] <... mount resumed>) = 0 [pid 3368] <... futex resumed>) = 0 [pid 3371] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3368] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3371] <... futex resumed>) = 0 [pid 3368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3371] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3368] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3371] <... open resumed>) = 6 [pid 3368] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3371] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3368] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 3 [pid 3371] <... futex resumed>) = 0 [pid 3368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] fstat(3, [pid 3371] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3368] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3379] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3378] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3368] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 3379] <... futex resumed>) = 1 [pid 3378] <... futex resumed>) = 1 [pid 3373] <... futex resumed>) = 0 [pid 3372] <... futex resumed>) = 0 [pid 3368] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3379] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3373] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3378] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3372] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3373] <... futex resumed>) = 0 [pid 3372] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./93/binderfs", [pid 3378] <... open resumed>) = 4 [pid 3379] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3373] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3372] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./93/binderfs") = 0 [pid 377] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3379] <... open resumed>) = 4 [pid 3378] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3379] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3378] <... futex resumed>) = 1 [pid 3372] <... futex resumed>) = 0 [pid 3379] <... futex resumed>) = 1 [pid 3378] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3373] <... futex resumed>) = 0 [pid 3372] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3379] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3373] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3372] <... futex resumed>) = 0 [pid 3379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3378] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3373] <... futex resumed>) = 0 [pid 3372] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3379] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3378] <... openat resumed>) = 5 [pid 3373] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3379] <... openat resumed>) = 5 [pid 3378] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3379] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3378] <... futex resumed>) = 1 [pid 3372] <... futex resumed>) = 0 [pid 3379] <... futex resumed>) = 1 [pid 3378] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3373] <... futex resumed>) = 0 [pid 3372] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3379] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3373] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3372] <... futex resumed>) = 0 [pid 3379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3378] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3373] <... futex resumed>) = 0 [pid 3372] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3379] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3373] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3369] <... openat resumed>) = 7 [pid 3369] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3364] <... futex resumed>) = 0 [pid 3364] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3364] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3369] <... futex resumed>) = 1 [pid 3369] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3369] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3364] <... futex resumed>) = 0 [pid 3364] exit_group(0) = ? [pid 3369] <... futex resumed>) = ? [pid 3369] +++ exited with 0 +++ [pid 3364] +++ exited with 0 +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3364, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 3379] <... write resumed>) = 196608 [pid 375] <... restart_syscall resumed>) = 0 [pid 3379] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3378] <... write resumed>) = 196608 [pid 375] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3373] <... futex resumed>) = 0 [pid 3379] <... futex resumed>) = 1 [pid 3378] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3373] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] <... openat resumed>) = 3 [pid 3373] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 72.098625][ T3369] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 72.102784][ T3367] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 72.121769][ T3369] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 375] getdents64(3, [pid 3379] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3378] <... futex resumed>) = 1 [pid 3372] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3378] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3372] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3378] <... mount resumed>) = 0 [pid 375] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3379] <... mount resumed>) = 0 [pid 3378] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3372] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3378] <... futex resumed>) = 0 [pid 3372] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3378] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3372] <... futex resumed>) = 0 [pid 3379] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3378] <... open resumed>) = 6 [pid 3372] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] lstat("./92/binderfs", [pid 3378] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3378] <... futex resumed>) = 1 [pid 3379] <... futex resumed>) = 1 [pid 3373] <... futex resumed>) = 0 [pid 3372] <... futex resumed>) = 0 [pid 3373] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] unlink("./92/binderfs" [pid 3372] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3379] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3378] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3373] <... futex resumed>) = 0 [pid 3372] <... futex resumed>) = 0 [pid 3371] <... write resumed>) = 1048576 [pid 3373] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3372] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... unlink resumed>) = 0 [pid 375] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3379] <... open resumed>) = 6 [pid 3379] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3373] <... futex resumed>) = 0 [pid 3373] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3379] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3373] <... futex resumed>) = 0 [pid 3373] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3371] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3368] <... futex resumed>) = 0 [pid 3368] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3368] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3391] <... mount resumed>) = 0 [pid 3371] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3391] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3391] chdir("./bus") = 0 [pid 3391] ioctl(4, LOOP_CLR_FD [pid 3378] <... write resumed>) = 1048576 [pid 3378] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3378] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3372] <... futex resumed>) = 0 [pid 3372] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3379] <... write resumed>) = 1048576 [pid 3372] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = 0 [pid 3379] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3379] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3378] <... futex resumed>) = 0 [ 72.172873][ T3391] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/92/bus supports timestamps until 2038 (0x7fffffff) [ 72.188769][ T3371] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 72.205559][ T3371] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 3378] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3373] <... futex resumed>) = 0 [pid 3371] <... openat resumed>) = 7 [pid 375] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3373] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3379] <... futex resumed>) = 0 [pid 3373] <... futex resumed>) = 1 [pid 375] lstat("./92/bus", [pid 3379] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3373] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./92/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./92") = 0 [pid 375] mkdir("./93", 0777 [pid 3368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 375] <... mkdir resumed>) = 0 [pid 3368] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3368] <... futex resumed>) = 0 [pid 3368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3368] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3368] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3396], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3396 [pid 3368] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3368] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3371] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3371] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3396 attached [pid 3396] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3396] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3396] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3368] <... futex resumed>) = 0 [pid 3368] exit_group(0) = ? [pid 3371] <... futex resumed>) = ? [pid 3371] +++ exited with 0 +++ [pid 3396] <... futex resumed>) = ? [pid 3378] <... openat resumed>) = 7 [pid 3378] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3378] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3372] <... futex resumed>) = 0 [pid 3372] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3372] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3378] <... futex resumed>) = 0 [pid 3378] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3378] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3372] <... futex resumed>) = 0 [pid 3372] exit_group(0) = ? [pid 3378] <... futex resumed>) = ? [pid 3379] <... openat resumed>) = 7 [pid 3379] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3379] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3378] +++ exited with 0 +++ [pid 3372] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3372, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 3373] <... futex resumed>) = 0 [pid 3373] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3396] +++ exited with 0 +++ [pid 3391] <... ioctl resumed>) = 0 [pid 3373] <... futex resumed>) = 1 [pid 3368] +++ exited with 0 +++ [pid 375] <... openat resumed>) = 3 [pid 374] <... restart_syscall resumed>) = 0 [pid 3373] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3368, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 374] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... openat resumed>) = 3 [pid 373] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] fstat(3, [pid 373] <... openat resumed>) = 3 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] fstat(3, [pid 374] getdents64(3, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] getdents64(3, [pid 374] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3391] close(4 [pid 375] ioctl(3, LOOP_CLR_FD [pid 374] lstat("./92/binderfs", [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] lstat("./95/binderfs", [pid 374] unlink("./92/binderfs" [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] <... unlink resumed>) = 0 [pid 374] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] unlink("./95/binderfs") = 0 [pid 373] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = 0 [pid 3379] <... futex resumed>) = 0 [pid 3379] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3379] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3373] <... futex resumed>) = 0 [pid 3373] exit_group(0) = ? [pid 3379] <... futex resumed>) = ? [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3391] <... close resumed>) = 0 [pid 377] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] close(3 [pid 3391] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3390] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 3391] chdir("./file0" [pid 3390] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3390] <... futex resumed>) = 0 [pid 3391] <... chdir resumed>) = 0 [pid 3390] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3391] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3390] <... futex resumed>) = 0 [pid 3391] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3390] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3397 [pid 3390] <... futex resumed>) = 0 [pid 3390] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3391] <... open resumed>) = 4 [pid 3391] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3390] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3397 attached [pid 3391] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./93/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./93/bus" [pid 3391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3390] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... rmdir resumed>) = 0 [pid 3391] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3390] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 3391] <... openat resumed>) = 5 [pid 3390] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3391] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3390] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] close(3 [pid 3391] <... futex resumed>) = 0 [pid 3390] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 3391] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3390] <... futex resumed>) = 0 [pid 377] rmdir("./93") = 0 [pid 377] mkdir("./94", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 3397] set_robust_list(0x55555713c5e0, 24 [pid 3391] <... write resumed>) = 196608 [pid 3390] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] close(3 [pid 3397] <... set_robust_list resumed>) = 0 [pid 3391] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 3397] chdir("./93" [pid 3391] <... futex resumed>) = 1 [pid 3390] <... futex resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3397] <... chdir resumed>) = 0 [pid 3391] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3390] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3397] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3391] <... mount resumed>) = 0 [pid 3390] <... futex resumed>) = 0 [pid 3397] <... prctl resumed>) = 0 [pid 3391] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3390] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3398 [pid 3397] setpgid(0, 0 [pid 3391] <... futex resumed>) = 0 [pid 3390] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 3398 attached [pid 3397] <... setpgid resumed>) = 0 [pid 3391] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3390] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3390] <... futex resumed>) = 0 [pid 3397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3391] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3390] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3398] set_robust_list(0x55555713c5e0, 24 [pid 3397] <... openat resumed>) = 3 [pid 3398] <... set_robust_list resumed>) = 0 [pid 3397] write(3, "1000", 4) = 4 [pid 3398] chdir("./94" [pid 3397] close(3 [pid 3398] <... chdir resumed>) = 0 [pid 3397] <... close resumed>) = 0 [pid 3398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3397] symlink("/dev/binderfs", "./binderfs" [pid 3398] setpgid(0, 0) = 0 [pid 3398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3397] <... symlink resumed>) = 0 [pid 3398] <... openat resumed>) = 3 [pid 3397] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3398] write(3, "1000", 4 [pid 3397] <... futex resumed>) = 0 [pid 3398] <... write resumed>) = 4 [pid 3397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3398] close(3 [pid 3397] <... mmap resumed>) = 0x7f64ff044000 [pid 3398] <... close resumed>) = 0 [pid 3398] symlink("/dev/binderfs", "./binderfs" [pid 3397] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3398] <... symlink resumed>) = 0 [pid 3397] <... mprotect resumed>) = 0 [pid 3398] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3397] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3399], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3399 [pid 3398] <... futex resumed>) = 0 [pid 3397] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3397] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3399 attached [pid 3399] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3399] memfd_create("syzkaller", 0) = 3 [pid 3399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3398] <... mmap resumed>) = 0x7f64ff044000 [pid 3398] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3398] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3400], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3400 [pid 3398] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3398] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [ 72.209880][ T3378] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 72.216250][ T3379] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 72.228560][ T3378] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 72.250888][ T3379] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 3399] munmap(0x7f64f6c44000, 1048576./strace-static-x86_64: Process 3400 attached ) = 0 [pid 3400] set_robust_list(0x7f64ff0649e0, 24 [pid 3399] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3400] <... set_robust_list resumed>) = 0 [pid 3400] memfd_create("syzkaller", 0 [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3400] <... memfd_create resumed>) = 3 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 374] lstat("./92/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3400] <... mmap resumed>) = 0x7f64f6c44000 [pid 374] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./92/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./92") = 0 [pid 374] mkdir("./93", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3400] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3400] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3390] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3390] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3390] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3390] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3390] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3390] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3401 attached , parent_tid=[3401], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3401 [pid 3390] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3401] set_robust_list(0x7f64f6d439e0, 24 [pid 3390] <... futex resumed>) = 0 [pid 3390] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3401] <... set_robust_list resumed>) = 0 [pid 3401] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 3401] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3390] <... futex resumed>) = 0 [pid 3401] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3390] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3401] <... openat resumed>) = 7 [pid 3399] <... openat resumed>) = 4 [pid 3391] <... open resumed>) = 6 [pid 3390] <... futex resumed>) = 0 [pid 3379] +++ exited with 0 +++ [pid 3373] +++ exited with 0 +++ [pid 3390] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3401] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3390] <... futex resumed>) = 0 [pid 3390] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3390] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3401] <... futex resumed>) = 1 [pid 3401] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3401] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3390] <... futex resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 3399] ioctl(4, LOOP_SET_FD, 3 [pid 3391] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] ioctl(3, LOOP_CLR_FD [pid 3401] <... futex resumed>) = 1 [pid 3391] <... futex resumed>) = 0 [pid 3401] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3399] <... ioctl resumed>) = 0 [pid 3391] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3373, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3400] <... openat resumed>) = 4 [pid 3399] close(3) = 0 [pid 3399] mkdir("./bus", 0777) = 0 [pid 3390] exit_group(0 [pid 3401] <... futex resumed>) = ? [pid 3399] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3390] <... exit_group resumed>) = ? [pid 3401] +++ exited with 0 +++ [pid 373] <... umount2 resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3403 [pid 3391] <... futex resumed>) = ? [pid 3391] +++ exited with 0 +++ [pid 3390] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3390, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 372] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./92/binderfs") = 0 [pid 372] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3400] ioctl(4, LOOP_SET_FD, 3 [pid 373] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./95/bus", [pid 376] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... openat resumed>) = 3 [pid 373] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3400] <... ioctl resumed>) = 0 [pid 376] fstat(3, [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3400] close(3 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3400] <... close resumed>) = 0 [pid 376] getdents64(3, [pid 373] <... openat resumed>) = 4 [pid 3400] mkdir("./bus", 0777 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] fstat(4, [pid 3400] <... mkdir resumed>) = 0 [pid 376] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3400] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] getdents64(4, [pid 376] lstat("./95/binderfs", [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] getdents64(4, [pid 376] unlink("./95/binderfs" [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] <... unlink resumed>) = 0 [pid 373] close(4./strace-static-x86_64: Process 3403 attached [pid 376] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 3403] set_robust_list(0x55555713c5e0, 24) = 0 [pid 373] rmdir("./95/bus" [pid 3403] chdir("./93") = 0 [pid 373] <... rmdir resumed>) = 0 [pid 373] getdents64(3, [pid 3403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3403] <... prctl resumed>) = 0 [pid 3403] setpgid(0, 0) = 0 [pid 3403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 373] close(3) = 0 [pid 3403] <... openat resumed>) = 3 [pid 373] rmdir("./95" [pid 3403] write(3, "1000", 4) = 4 [pid 3403] close(3) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 3403] symlink("/dev/binderfs", "./binderfs" [pid 373] mkdir("./96", 0777 [pid 3403] <... symlink resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 3403] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3403] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3403] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3407 attached , parent_tid=[3407], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3407 [pid 3403] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3403] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3407] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3407] memfd_create("syzkaller", 0) = 3 [pid 3407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3399] <... mount resumed>) = 0 [pid 3399] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3399] chdir("./bus") = 0 [pid 3399] ioctl(4, LOOP_CLR_FD [pid 3407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3407] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3407] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3399] <... ioctl resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 3399] close(4) = 0 [pid 3399] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3399] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3397] <... futex resumed>) = 0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./95/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./95/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3 [pid 372] <... umount2 resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./95") = 0 [pid 376] mkdir("./96", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = 0 [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3408 [pid 3407] <... openat resumed>) = 4 [pid 3407] ioctl(4, LOOP_SET_FD, 3 [pid 3397] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3397] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3399] <... futex resumed>) = 0 [pid 3399] chdir("./file0") = 0 [pid 3399] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3397] <... futex resumed>) = 0 [pid 3399] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3397] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3397] <... futex resumed>) = 0 [pid 3399] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3397] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3399] <... open resumed>) = 4 [pid 3399] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3408 attached [pid 3399] <... futex resumed>) = 1 [pid 3397] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3407] <... ioctl resumed>) = 0 [pid 3407] close(3) = 0 [pid 3407] mkdir("./bus", 0777) = 0 [pid 3407] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3399] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3397] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] lstat("./92/bus", [pid 3397] <... futex resumed>) = 0 [pid 3399] <... openat resumed>) = 5 [pid 3397] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3399] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3399] <... futex resumed>) = 0 [pid 3397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3399] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3397] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3397] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3399] <... write resumed>) = 196608 [pid 3397] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... openat resumed>) = 4 [pid 372] fstat(4, [pid 3399] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3399] <... futex resumed>) = 1 [pid 3397] <... futex resumed>) = 0 [pid 372] getdents64(4, [pid 3397] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3399] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3397] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] getdents64(4, [pid 3399] <... mount resumed>) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3399] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(4 [pid 3399] <... futex resumed>) = 1 [pid 3397] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [ 72.363845][ T3399] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/93/bus supports timestamps until 2038 (0x7fffffff) [pid 3397] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3399] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3397] <... futex resumed>) = 0 [pid 372] rmdir("./92/bus" [pid 3397] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3408] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3408] chdir("./96") = 0 [pid 3408] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3408] setpgid(0, 0) = 0 [pid 3408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3408] write(3, "1000", 4) = 4 [pid 3408] close(3) = 0 [pid 3408] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3408] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3408] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3408] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3412], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3412 [pid 3408] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3408] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3412 attached [pid 3412] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3412] memfd_create("syzkaller", 0) = 3 [pid 3412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 372] <... rmdir resumed>) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./92") = 0 [pid 372] mkdir("./93", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3400] <... mount resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 3399] <... open resumed>) = 6 [pid 3412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 372] ioctl(3, LOOP_CLR_FD [pid 3399] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3399] <... futex resumed>) = 1 [pid 3397] <... futex resumed>) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] close(3 [pid 3399] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3397] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 3397] <... futex resumed>) = 0 [pid 3412] <... write resumed>) = 1048576 [pid 3412] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3412] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 3412] ioctl(4, LOOP_SET_FD, 3 [pid 3400] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3400] chdir("./bus") = 0 [pid 3400] ioctl(4, LOOP_CLR_FD [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3415 ./strace-static-x86_64: Process 3413 attached [pid 3413] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3397] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3413 ./strace-static-x86_64: Process 3415 attached [pid 3415] set_robust_list(0x55555713c5e0, 24 [pid 3399] <... write resumed>) = 1048576 [pid 3415] <... set_robust_list resumed>) = 0 [pid 3399] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3397] <... futex resumed>) = 0 [pid 3415] chdir("./93" [ 72.416515][ T3400] ext4 filesystem being mounted at /root/syzkaller.43WzWH/94/bus supports timestamps until 2038 (0x7fffffff) [ 72.450666][ T3407] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/93/bus supports timestamps until 2038 (0x7fffffff) [pid 3397] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3415] <... chdir resumed>) = 0 [pid 3413] chdir("./96" [pid 3412] <... ioctl resumed>) = 0 [pid 3399] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3397] <... futex resumed>) = 0 [pid 3415] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3413] <... chdir resumed>) = 0 [pid 3412] close(3 [pid 3407] <... mount resumed>) = 0 [pid 3400] <... ioctl resumed>) = 0 [pid 3397] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3415] <... prctl resumed>) = 0 [pid 3400] close(4 [pid 3415] setpgid(0, 0 [pid 3400] <... close resumed>) = 0 [pid 3415] <... setpgid resumed>) = 0 [pid 3400] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3400] <... futex resumed>) = 1 [pid 3398] <... futex resumed>) = 0 [pid 3415] <... openat resumed>) = 3 [pid 3400] chdir("./file0" [pid 3398] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3415] write(3, "1000", 4 [pid 3400] <... chdir resumed>) = 0 [pid 3398] <... futex resumed>) = 0 [pid 3415] <... write resumed>) = 4 [pid 3400] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3398] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 3398] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3413] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3412] <... close resumed>) = 0 [pid 3407] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3415] close(3 [pid 3400] <... futex resumed>) = 0 [pid 3415] <... close resumed>) = 0 [pid 3400] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3398] <... futex resumed>) = 0 [pid 3415] symlink("/dev/binderfs", "./binderfs" [pid 3400] <... open resumed>) = 4 [pid 3398] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3415] <... symlink resumed>) = 0 [pid 3400] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3415] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3400] <... futex resumed>) = 0 [pid 3398] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3415] <... futex resumed>) = 0 [pid 3400] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3398] <... futex resumed>) = 0 [pid 3415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3400] <... openat resumed>) = 5 [pid 3398] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3415] <... mmap resumed>) = 0x7f64ff044000 [pid 3400] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3415] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3400] <... futex resumed>) = 0 [pid 3398] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3415] <... mprotect resumed>) = 0 [pid 3400] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3398] <... futex resumed>) = 0 [pid 3415] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3400] <... write resumed>) = 196608 [pid 3398] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3400] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3415] <... clone resumed>, parent_tid=[3418], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3418 [pid 3400] <... futex resumed>) = 1 [pid 3398] <... futex resumed>) = 0 [pid 3398] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3398] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3418 attached [pid 3415] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3400] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3413] <... prctl resumed>) = 0 [pid 3412] mkdir("./bus", 0777 [pid 3407] <... openat resumed>) = 3 [pid 3415] <... futex resumed>) = 0 [pid 3412] <... mkdir resumed>) = 0 [pid 3412] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3413] setpgid(0, 0 [pid 3407] chdir("./bus" [pid 3413] <... setpgid resumed>) = 0 [pid 3407] <... chdir resumed>) = 0 [pid 3413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3418] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3407] ioctl(4, LOOP_CLR_FD [pid 3418] memfd_create("syzkaller", 0 [pid 3407] <... ioctl resumed>) = 0 [pid 3407] close(4 [pid 3418] <... memfd_create resumed>) = 3 [pid 3415] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3413] <... openat resumed>) = 3 [pid 3407] <... close resumed>) = 0 [pid 3400] <... mount resumed>) = 0 [pid 3399] <... openat resumed>) = 7 [pid 3400] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3399] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3400] <... futex resumed>) = 1 [pid 3418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3413] write(3, "1000", 4 [pid 3407] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3399] <... futex resumed>) = 1 [pid 3398] <... futex resumed>) = 0 [pid 3397] <... futex resumed>) = 0 [pid 3400] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3398] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3397] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3398] <... futex resumed>) = 0 [pid 3397] <... futex resumed>) = 0 [pid 3400] <... open resumed>) = 6 [pid 3398] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3397] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3413] <... write resumed>) = 4 [pid 3413] close(3) = 0 [pid 3413] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3418] <... mmap resumed>) = 0x7f64f6c44000 [pid 3400] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3407] <... futex resumed>) = 1 [pid 3403] <... futex resumed>) = 0 [pid 3400] <... futex resumed>) = 1 [pid 3398] <... futex resumed>) = 0 [pid 3403] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3398] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3400] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3403] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3398] <... futex resumed>) = 0 [pid 3398] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3413] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3407] chdir("./file0" [pid 3399] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3413] <... futex resumed>) = 0 [pid 3407] <... chdir resumed>) = 0 [pid 3399] <... openat resumed>) = 8 [pid 3413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3407] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3413] <... mmap resumed>) = 0x7f64ff044000 [pid 3407] <... futex resumed>) = 1 [pid 3403] <... futex resumed>) = 0 [pid 3399] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3403] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3413] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3407] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3399] <... futex resumed>) = 1 [pid 3397] <... futex resumed>) = 0 [pid 3403] <... futex resumed>) = 0 [pid 3397] exit_group(0 [pid 3403] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3397] <... exit_group resumed>) = ? [pid 3418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3413] <... mprotect resumed>) = 0 [pid 3407] <... open resumed>) = 4 [pid 3399] +++ exited with 0 +++ [pid 3397] +++ exited with 0 +++ [pid 3413] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3407] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3397, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 3407] <... futex resumed>) = 1 [pid 3403] <... futex resumed>) = 0 [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 3403] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3413] <... clone resumed>, parent_tid=[3420], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3420 [pid 3407] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3403] <... futex resumed>) = 0 [pid 3413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3407] <... openat resumed>) = 5 [pid 3403] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3413] <... futex resumed>) = 0 [pid 3407] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3407] <... futex resumed>) = 1 [pid 3403] <... futex resumed>) = 0 [pid 3407] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3403] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... restart_syscall resumed>) = 0 [pid 3403] <... futex resumed>) = 0 [pid 3403] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... openat resumed>) = 3 [pid 3407] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 375] fstat(3, [pid 3407] <... write resumed>) = 196608 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, [pid 3407] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 72.455699][ T3399] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 72.476895][ T3399] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 3407] <... futex resumed>) = 1 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3403] <... futex resumed>) = 0 [pid 375] lstat("./93/binderfs", [pid 3403] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3403] <... futex resumed>) = 0 [pid 375] unlink("./93/binderfs" [pid 3407] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3403] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3407] <... mount resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 3407] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3407] <... futex resumed>) = 1 [pid 3407] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3403] <... futex resumed>) = 0 [pid 3407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3403] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3407] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3403] <... futex resumed>) = 0 [pid 3403] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3420 attached [pid 3420] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3420] memfd_create("syzkaller", 0) = 3 [pid 3420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3418] <... write resumed>) = 1048576 [pid 3407] <... open resumed>) = 6 [pid 3407] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3403] <... futex resumed>) = 0 [pid 3403] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3407] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3403] <... futex resumed>) = 0 [pid 3403] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3420] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3420] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3412] <... mount resumed>) = 0 [pid 3412] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3420] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3412] chdir("./bus") = 0 [pid 3412] ioctl(4, LOOP_CLR_FD [pid 3418] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3418] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3400] <... write resumed>) = 1048576 [pid 3400] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3398] <... futex resumed>) = 0 [pid 3398] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3400] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3398] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3407] <... write resumed>) = 1048576 [pid 3407] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3407] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3403] <... futex resumed>) = 0 [pid 3403] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3403] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3407] <... futex resumed>) = 0 [ 72.508907][ T3412] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/96/bus supports timestamps until 2038 (0x7fffffff) [ 72.540072][ T3400] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3407] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3400] <... openat resumed>) = 7 [pid 3400] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3398] <... futex resumed>) = 0 [pid 3398] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3398] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3400] <... futex resumed>) = 1 [pid 3400] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3400] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3398] <... futex resumed>) = 0 [pid 3398] exit_group(0) = ? [pid 3400] <... futex resumed>) = ? [pid 3420] <... openat resumed>) = 4 [pid 3418] <... openat resumed>) = 4 [pid 3412] <... ioctl resumed>) = 0 [pid 3407] <... openat resumed>) = 7 [pid 375] <... umount2 resumed>) = 0 [pid 3407] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3403] <... futex resumed>) = 0 [pid 3403] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3403] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3407] <... futex resumed>) = 1 [pid 3418] ioctl(4, LOOP_SET_FD, 3 [pid 3412] close(4 [pid 3420] ioctl(4, LOOP_SET_FD, 3 [pid 3407] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3407] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3403] <... futex resumed>) = 0 [pid 3403] exit_group(0) = ? [pid 3407] <... futex resumed>) = ? [pid 375] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3418] <... ioctl resumed>) = 0 [pid 3412] <... close resumed>) = 0 [pid 3400] +++ exited with 0 +++ [pid 3418] close(3 [pid 3412] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3398] +++ exited with 0 +++ [pid 3420] <... ioctl resumed>) = 0 [pid 3420] close(3 [pid 3418] <... close resumed>) = 0 [pid 3412] <... futex resumed>) = 1 [pid 3408] <... futex resumed>) = 0 [pid 3408] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3412] chdir("./file0" [pid 3408] <... futex resumed>) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3398, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 3420] <... close resumed>) = 0 [pid 3418] mkdir("./bus", 0777 [pid 3408] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3412] <... chdir resumed>) = 0 [pid 3420] mkdir("./bus", 0777 [pid 377] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3418] <... mkdir resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3420] <... mkdir resumed>) = 0 [pid 3412] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3420] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3418] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 377] <... openat resumed>) = 3 [pid 3412] <... futex resumed>) = 1 [pid 3408] <... futex resumed>) = 0 [pid 3412] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3408] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(3, [pid 3408] <... futex resumed>) = 0 [pid 3408] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, [pid 3412] <... open resumed>) = 4 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3412] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 377] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3408] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3408] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3412] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3408] <... futex resumed>) = 0 [pid 377] lstat("./94/binderfs", [pid 3412] <... openat resumed>) = 5 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./93/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, [pid 3408] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3412] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] unlink("./94/binderfs" [pid 375] close(4) = 0 [pid 375] rmdir("./93/bus" [pid 377] <... unlink resumed>) = 0 [pid 3412] <... futex resumed>) = 1 [pid 3408] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./93") = 0 [pid 375] mkdir("./94", 0777 [pid 3408] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... mkdir resumed>) = 0 [pid 3412] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3408] <... futex resumed>) = 0 [pid 377] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3408] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3424 [pid 3407] +++ exited with 0 +++ [pid 3403] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3403, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./93/binderfs") = 0 [pid 374] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3424 attached [pid 3424] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3424] chdir("./94") = 0 [pid 3424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3424] setpgid(0, 0) = 0 [pid 3424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3424] write(3, "1000", 4) = 4 [pid 3412] <... write resumed>) = 196608 [pid 3424] close(3 [pid 3412] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3424] <... close resumed>) = 0 [pid 3412] <... futex resumed>) = 1 [pid 3408] <... futex resumed>) = 0 [pid 3424] symlink("/dev/binderfs", "./binderfs" [pid 3408] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3408] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3424] <... symlink resumed>) = 0 [pid 3424] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3424] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3424] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3426], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3426 [pid 3424] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3424] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3426 attached [pid 3426] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3426] memfd_create("syzkaller", 0) = 3 [pid 3426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3412] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3412] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3408] <... futex resumed>) = 0 [pid 3408] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3412] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3408] <... futex resumed>) = 0 [pid 3408] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3412] <... open resumed>) = 6 [pid 3412] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3408] <... futex resumed>) = 0 [pid 3408] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3412] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3408] <... futex resumed>) = 0 [pid 3408] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 72.543621][ T3407] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 72.554865][ T3400] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 72.568142][ T3407] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 3426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3426] munmap(0x7f64f6c44000, 1048576 [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./94/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./94/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./94") = 0 [pid 377] mkdir("./95", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = 0 [pid 377] close(3 [pid 3412] <... write resumed>) = 1048576 [pid 377] <... close resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3426] <... munmap resumed>) = 0 [pid 3412] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3408] <... futex resumed>) = 0 [pid 3426] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3430 [pid 3408] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3408] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3412] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 3430 attached [pid 3430] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3430] chdir("./95") = 0 [pid 3430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3430] setpgid(0, 0) = 0 [pid 3430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3430] write(3, "1000", 4) = 4 [pid 3430] close(3) = 0 [pid 3430] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3430] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3430] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3430] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3431], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3431 [pid 3430] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3430] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3418] <... mount resumed>) = 0 [pid 3418] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3418] chdir("./bus") = 0 [pid 3418] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 3431 attached [pid 3431] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3431] memfd_create("syzkaller", 0) = 3 [pid 3431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3426] <... openat resumed>) = 4 [pid 3426] ioctl(4, LOOP_SET_FD, 3 [pid 374] <... umount2 resumed>) = 0 [ 72.626257][ T3418] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/93/bus supports timestamps until 2038 (0x7fffffff) [ 72.645285][ T3412] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 72.662069][ T3412] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 3431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3420] <... mount resumed>) = 0 [pid 3418] <... ioctl resumed>) = 0 [pid 3412] <... openat resumed>) = 7 [pid 374] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3418] close(4 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3431] <... write resumed>) = 1048576 [pid 3420] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 374] lstat("./93/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3420] <... openat resumed>) = 3 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3420] chdir("./bus" [pid 374] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3420] <... chdir resumed>) = 0 [pid 3420] ioctl(4, LOOP_CLR_FD [pid 3431] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3431] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3412] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3412] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] <... openat resumed>) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 3408] <... futex resumed>) = 0 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 3426] <... ioctl resumed>) = 0 [pid 3408] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(4) = 0 [pid 374] rmdir("./93/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./93") = 0 [pid 374] mkdir("./94", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3431] <... openat resumed>) = 4 [pid 3408] <... futex resumed>) = 1 [pid 3431] ioctl(4, LOOP_SET_FD, 3 [pid 3420] <... ioctl resumed>) = 0 [pid 3418] <... close resumed>) = 0 [pid 3408] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3426] close(3 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3433 [pid 3412] <... futex resumed>) = 0 [pid 3412] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3412] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3412] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3420] close(4 [pid 3418] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3426] <... close resumed>) = 0 [pid 3426] mkdir("./bus", 0777 [pid 3418] <... futex resumed>) = 1 [pid 3415] <... futex resumed>) = 0 [pid 3408] exit_group(0 [pid 3418] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3426] <... mkdir resumed>) = 0 [pid 3415] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3408] <... exit_group resumed>) = ? [pid 3412] <... futex resumed>) = ? ./strace-static-x86_64: Process 3433 attached [pid 3426] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3418] <... futex resumed>) = 0 [pid 3415] <... futex resumed>) = 1 [pid 3431] <... ioctl resumed>) = 0 [pid 3420] <... close resumed>) = 0 [pid 3418] chdir("./file0" [pid 3415] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3412] +++ exited with 0 +++ [pid 3408] +++ exited with 0 +++ [pid 3431] close(3 [pid 3420] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3418] <... chdir resumed>) = 0 [pid 3431] <... close resumed>) = 0 [pid 3420] <... futex resumed>) = 1 [pid 3418] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3413] <... futex resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3408, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 3418] <... futex resumed>) = 1 [pid 3415] <... futex resumed>) = 0 [pid 3418] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3415] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3431] mkdir("./bus", 0777 [pid 3420] chdir("./file0" [pid 3418] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3415] <... futex resumed>) = 0 [pid 3413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3431] <... mkdir resumed>) = 0 [pid 3420] <... chdir resumed>) = 0 [pid 3418] <... open resumed>) = 4 [pid 3415] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3413] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3431] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3420] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3418] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3420] <... futex resumed>) = 0 [pid 3418] <... futex resumed>) = 1 [pid 3415] <... futex resumed>) = 0 [pid 3413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... openat resumed>) = 3 [pid 3420] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3418] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3415] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(3, [pid 3420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3415] <... futex resumed>) = 0 [pid 3413] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3420] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3418] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3415] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(3, [pid 3420] <... open resumed>) = 4 [pid 3418] <... openat resumed>) = 5 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3420] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3418] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3420] <... futex resumed>) = 1 [pid 3418] <... futex resumed>) = 1 [pid 3415] <... futex resumed>) = 0 [pid 3413] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3420] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3418] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3415] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] lstat("./96/binderfs", [pid 3420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3415] <... futex resumed>) = 0 [pid 3413] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3420] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3418] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3415] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] unlink("./96/binderfs" [pid 3420] <... openat resumed>) = 5 [pid 3418] <... write resumed>) = 196608 [pid 376] <... unlink resumed>) = 0 [pid 3420] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3418] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3433] set_robust_list(0x55555713c5e0, 24 [pid 3420] <... futex resumed>) = 1 [pid 3418] <... futex resumed>) = 1 [pid 3415] <... futex resumed>) = 0 [pid 3413] <... futex resumed>) = 0 [pid 3433] <... set_robust_list resumed>) = 0 [pid 3420] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3418] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3415] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3415] <... futex resumed>) = 0 [pid 3413] <... futex resumed>) = 0 [pid 3433] chdir("./94" [ 72.662556][ T3420] ext4 filesystem being mounted at /root/syzkaller.k3ECep/96/bus supports timestamps until 2038 (0x7fffffff) [pid 3420] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3418] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3415] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3433] <... chdir resumed>) = 0 [pid 3420] <... write resumed>) = 196608 [pid 3418] <... mount resumed>) = 0 [pid 3420] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3418] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3420] <... futex resumed>) = 1 [pid 3418] <... futex resumed>) = 1 [pid 3415] <... futex resumed>) = 0 [pid 3413] <... futex resumed>) = 0 [pid 3420] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3418] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3415] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3415] <... futex resumed>) = 0 [pid 3413] <... futex resumed>) = 0 [pid 3420] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3418] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3415] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3420] <... mount resumed>) = 0 [pid 3420] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3413] <... futex resumed>) = 0 [pid 3420] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3413] <... futex resumed>) = 0 [pid 3420] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3433] setpgid(0, 0) = 0 [pid 3433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3433] write(3, "1000", 4) = 4 [pid 3433] close(3) = 0 [pid 3433] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3433] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3433] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3433] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3439], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3439 [pid 3433] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3433] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3439 attached [pid 3426] <... mount resumed>) = 0 [pid 3439] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3439] memfd_create("syzkaller", 0) = 3 [pid 3426] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3426] <... openat resumed>) = 3 [pid 3439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3426] chdir("./bus") = 0 [pid 3426] ioctl(4, LOOP_CLR_FD [pid 3439] <... write resumed>) = 1048576 [pid 3439] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3439] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3431] <... mount resumed>) = 0 [pid 3431] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3431] chdir("./bus") = 0 [pid 3431] ioctl(4, LOOP_CLR_FD [pid 376] <... umount2 resumed>) = 0 [pid 3439] <... openat resumed>) = 4 [pid 3426] <... ioctl resumed>) = 0 [pid 3420] <... open resumed>) = 6 [pid 3418] <... open resumed>) = 6 [pid 3439] ioctl(4, LOOP_SET_FD, 3 [pid 3426] close(4 [pid 3420] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3418] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3439] <... ioctl resumed>) = 0 [pid 3426] <... close resumed>) = 0 [pid 3439] close(3 [pid 3426] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3439] <... close resumed>) = 0 [pid 3426] <... futex resumed>) = 1 [pid 3424] <... futex resumed>) = 0 [pid 3420] <... futex resumed>) = 1 [pid 3418] <... futex resumed>) = 1 [pid 3415] <... futex resumed>) = 0 [pid 3413] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3439] mkdir("./bus", 0777 [pid 3426] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3424] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3420] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3418] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3415] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] lstat("./96/bus", [pid 3439] <... mkdir resumed>) = 0 [pid 3431] <... ioctl resumed>) = 0 [pid 3426] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3424] <... futex resumed>) = 0 [pid 3420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3415] <... futex resumed>) = 0 [pid 3413] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3439] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3426] chdir("./file0" [pid 3424] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3420] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [ 72.724426][ T3426] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/94/bus supports timestamps until 2038 (0x7fffffff) [ 72.732571][ T3431] ext4 filesystem being mounted at /root/syzkaller.43WzWH/95/bus supports timestamps until 2038 (0x7fffffff) [pid 3418] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3415] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3431] close(4 [pid 3426] <... chdir resumed>) = 0 [pid 3420] <... write resumed>) = 1048576 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3426] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3420] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3418] <... write resumed>) = 1048576 [pid 376] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3426] <... futex resumed>) = 1 [pid 3424] <... futex resumed>) = 0 [pid 3418] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 4 [pid 3426] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3424] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3418] <... futex resumed>) = 1 [pid 3415] <... futex resumed>) = 0 [pid 376] fstat(4, [pid 3426] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3424] <... futex resumed>) = 0 [pid 3418] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3415] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3431] <... close resumed>) = 0 [pid 3426] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3424] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3420] <... futex resumed>) = 1 [pid 3415] <... futex resumed>) = 0 [pid 3431] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3426] <... open resumed>) = 4 [pid 3420] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3431] <... futex resumed>) = 1 [pid 3430] <... futex resumed>) = 0 [pid 3426] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3431] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3430] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3426] <... futex resumed>) = 1 [pid 3424] <... futex resumed>) = 0 [pid 3431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3430] <... futex resumed>) = 0 [pid 3426] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3424] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3431] chdir("./file0" [pid 3430] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3426] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3424] <... futex resumed>) = 0 [pid 3431] <... chdir resumed>) = 0 [pid 3426] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3424] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3431] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3426] <... openat resumed>) = 5 [pid 3431] <... futex resumed>) = 1 [pid 3430] <... futex resumed>) = 0 [pid 3426] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3431] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3430] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3426] <... futex resumed>) = 1 [pid 3424] <... futex resumed>) = 0 [pid 3431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3430] <... futex resumed>) = 0 [pid 3426] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3424] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3431] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3430] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3426] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3424] <... futex resumed>) = 0 [pid 3415] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3413] <... futex resumed>) = 0 [pid 376] getdents64(4, [pid 3426] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3424] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3426] <... write resumed>) = 196608 [pid 3426] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3424] <... futex resumed>) = 0 [pid 3426] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3424] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3426] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3424] <... futex resumed>) = 0 [pid 3426] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3424] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3426] <... mount resumed>) = 0 [pid 3426] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3424] <... futex resumed>) = 0 [pid 3413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3431] <... open resumed>) = 4 [pid 3426] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3420] <... futex resumed>) = 0 [pid 3418] <... openat resumed>) = 7 [pid 3413] <... futex resumed>) = 1 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3431] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3424] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3420] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3418] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(4, [pid 3439] <... mount resumed>) = 0 [pid 3431] <... futex resumed>) = 1 [pid 3430] <... futex resumed>) = 0 [pid 3426] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3424] <... futex resumed>) = 0 [pid 3439] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3430] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3426] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3424] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3439] <... openat resumed>) = 3 [pid 3430] <... futex resumed>) = 0 [pid 3426] <... open resumed>) = 6 [pid 3439] chdir("./bus" [pid 3430] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3426] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3439] <... chdir resumed>) = 0 [pid 3426] <... futex resumed>) = 1 [pid 3424] <... futex resumed>) = 0 [pid 3439] ioctl(4, LOOP_CLR_FD [pid 3426] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3424] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3439] <... ioctl resumed>) = 0 [pid 3426] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3424] <... futex resumed>) = 0 [pid 3439] close(4 [ 72.801323][ T3418] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 72.815462][ T3418] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 72.825835][ T3439] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/94/bus supports timestamps until 2038 (0x7fffffff) [ 72.826396][ T3420] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3426] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3424] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3439] <... close resumed>) = 0 [pid 3431] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3420] <... openat resumed>) = 7 [pid 3418] <... futex resumed>) = 1 [pid 3415] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3431] <... openat resumed>) = 5 [pid 3420] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3418] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3415] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(4 [pid 3431] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3420] <... futex resumed>) = 1 [pid 3418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3415] <... futex resumed>) = 0 [pid 3413] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 3431] <... futex resumed>) = 1 [pid 3430] <... futex resumed>) = 0 [pid 3420] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3418] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3415] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] rmdir("./96/bus" [pid 3431] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3430] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3418] <... openat resumed>) = 8 [pid 3413] <... futex resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 3431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3430] <... futex resumed>) = 0 [pid 3420] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3418] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(3, [pid 3431] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3430] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3420] <... openat resumed>) = 8 [pid 3418] <... futex resumed>) = 1 [pid 3415] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3439] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3431] <... write resumed>) = 196608 [pid 3420] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3418] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3415] exit_group(0 [pid 376] close(3 [pid 3439] <... futex resumed>) = 1 [pid 3433] <... futex resumed>) = 0 [pid 3431] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3420] <... futex resumed>) = 1 [pid 3418] <... futex resumed>) = ? [pid 3415] <... exit_group resumed>) = ? [pid 3413] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 3439] chdir("./file0" [pid 3433] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3431] <... futex resumed>) = 1 [pid 3430] <... futex resumed>) = 0 [pid 3420] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3418] +++ exited with 0 +++ [pid 3415] +++ exited with 0 +++ [pid 3413] exit_group(0 [pid 376] rmdir("./96" [pid 3439] <... chdir resumed>) = 0 [pid 3433] <... futex resumed>) = 0 [pid 3431] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3430] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3420] <... futex resumed>) = ? [pid 3413] <... exit_group resumed>) = ? [pid 376] <... rmdir resumed>) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3415, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3439] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3433] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3430] <... futex resumed>) = 0 [pid 3420] +++ exited with 0 +++ [pid 3413] +++ exited with 0 +++ [pid 376] mkdir("./97", 0777 [pid 3439] <... futex resumed>) = 0 [pid 3433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3431] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3430] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... mkdir resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3413, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3439] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3433] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3431] <... mount resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 372] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3433] <... futex resumed>) = 0 [pid 3431] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3439] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3433] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3431] <... futex resumed>) = 1 [pid 3430] <... futex resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 372] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3431] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3430] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... openat resumed>) = 3 [pid 3431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3430] <... futex resumed>) = 0 [pid 376] close(3 [pid 372] fstat(3, [pid 3439] <... open resumed>) = 4 [pid 3431] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3430] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... close resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3439] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3431] <... open resumed>) = 6 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] getdents64(3, [pid 3431] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3431] <... futex resumed>) = 1 [pid 3430] <... futex resumed>) = 0 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3443 [pid 372] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3439] <... futex resumed>) = 1 [pid 3433] <... futex resumed>) = 0 [pid 3431] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3430] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3433] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3430] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./93/binderfs", [pid 3433] <... futex resumed>) = 0 [pid 3431] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3430] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3439] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3433] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... openat resumed>) = 3 [pid 372] unlink("./93/binderfs" [pid 3439] <... openat resumed>) = 5 [pid 373] fstat(3, [pid 372] <... unlink resumed>) = 0 [pid 3439] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3439] <... futex resumed>) = 1 [pid 3433] <... futex resumed>) = 0 [pid 373] getdents64(3, [pid 3439] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3433] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3433] <... futex resumed>) = 0 [pid 373] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3433] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./96/binderfs" [pid 3439] <... write resumed>) = 196608 [pid 373] <... unlink resumed>) = 0 [pid 373] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3439] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3433] <... futex resumed>) = 0 [pid 3439] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3433] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3439] <... mount resumed>) = 0 [pid 3433] <... futex resumed>) = 0 [pid 3439] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3433] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3439] <... futex resumed>) = 0 [pid 3433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3439] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3433] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3439] <... open resumed>) = 6 [pid 3433] <... futex resumed>) = 0 [pid 3439] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3433] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3439] <... futex resumed>) = 0 [pid 3433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3439] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3433] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3433] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3431] <... write resumed>) = 1048576 [pid 3431] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3430] <... futex resumed>) = 0 [pid 3431] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 72.851861][ T3420] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 3430] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3443 attached ) = 0 [pid 3443] set_robust_list(0x55555713c5e0, 24 [pid 3430] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3426] <... write resumed>) = 1048576 [pid 3424] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3443] <... set_robust_list resumed>) = 0 [pid 3426] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3424] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3426] <... futex resumed>) = 0 [pid 3424] <... futex resumed>) = 0 [pid 3426] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3424] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3443] chdir("./97" [pid 3431] <... openat resumed>) = 7 [pid 3443] <... chdir resumed>) = 0 [pid 3431] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3431] <... futex resumed>) = 1 [pid 3443] <... prctl resumed>) = 0 [pid 3431] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3443] setpgid(0, 0) = 0 [pid 3443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3443] write(3, "1000", 4) = 4 [pid 3443] close(3) = 0 [pid 3443] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3443] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3443] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3443] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3444], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3444 [pid 3443] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3443] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3439] <... write resumed>) = 1048576 [pid 3439] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3439] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3430] <... futex resumed>) = 0 [pid 3430] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3431] <... futex resumed>) = 0 [pid 3430] <... futex resumed>) = 1 [pid 3431] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3430] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3444 attached [pid 3433] <... futex resumed>) = 0 [pid 3431] <... openat resumed>) = 8 [pid 3444] set_robust_list(0x7f64ff0649e0, 24 [pid 3433] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3431] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3444] <... set_robust_list resumed>) = 0 [pid 3439] <... futex resumed>) = 0 [pid 3433] <... futex resumed>) = 1 [pid 3431] <... futex resumed>) = 1 [pid 3430] <... futex resumed>) = 0 [pid 3444] memfd_create("syzkaller", 0 [ 72.899976][ T3431] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 72.914976][ T3431] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 72.920435][ T3426] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 72.940542][ T3426] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 3439] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3433] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3431] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3430] exit_group(0 [pid 3444] <... memfd_create resumed>) = 3 [pid 3426] <... openat resumed>) = 7 [pid 3426] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3424] <... futex resumed>) = 0 [pid 3426] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3424] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3426] <... openat resumed>) = 8 [pid 3424] <... futex resumed>) = 0 [pid 3426] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3424] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3426] <... futex resumed>) = 0 [pid 3424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3426] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3424] exit_group(0 [pid 3426] <... futex resumed>) = ? [pid 3424] <... exit_group resumed>) = ? [pid 3431] <... futex resumed>) = ? [pid 3430] <... exit_group resumed>) = ? [pid 3431] +++ exited with 0 +++ [pid 3444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3444] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3444] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./93/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./93/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./93") = 0 [pid 372] mkdir("./94", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3445 [pid 3430] +++ exited with 0 +++ [pid 3426] +++ exited with 0 +++ [pid 3424] +++ exited with 0 +++ [pid 3439] <... openat resumed>) = 7 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3424, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3439] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3439] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3445 attached [pid 3445] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3445] chdir("./94") = 0 [pid 3445] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3445] setpgid(0, 0) = 0 [pid 3433] <... futex resumed>) = 0 [pid 3445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3433] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3430, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 3433] <... futex resumed>) = 1 [pid 377] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3439] <... futex resumed>) = 0 [pid 3433] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3439] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3445] <... openat resumed>) = 3 [pid 3439] <... openat resumed>) = 8 [pid 3445] write(3, "1000", 4 [pid 375] <... openat resumed>) = 3 [pid 3439] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 3 [pid 375] fstat(3, [pid 3445] <... write resumed>) = 4 [pid 377] fstat(3, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3439] <... futex resumed>) = 1 [pid 3433] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, [pid 3433] exit_group(0 [pid 377] getdents64(3, [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3433] <... exit_group resumed>) = ? [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3445] close(3 [pid 377] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3445] <... close resumed>) = 0 [pid 3445] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3445] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3445] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./95/binderfs", [pid 375] lstat("./94/binderfs", [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./95/binderfs" [pid 375] unlink("./94/binderfs" [pid 377] <... unlink resumed>) = 0 [pid 3445] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3446], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3446 [pid 3445] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3445] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 377] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 3446 attached [pid 3446] set_robust_list(0x7f64ff0649e0, 24 [pid 375] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3446] <... set_robust_list resumed>) = 0 [pid 3446] memfd_create("syzkaller", 0) = 3 [pid 3446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3446] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3446] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3446] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3444] <... openat resumed>) = 4 [pid 3439] +++ exited with 0 +++ [pid 3433] +++ exited with 0 +++ [pid 377] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 3444] ioctl(4, LOOP_SET_FD, 3 [pid 377] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3433, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] lstat("./95/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] lstat("./96/bus", [pid 377] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... openat resumed>) = 3 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] fstat(3, [pid 373] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... openat resumed>) = 4 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] fstat(4, [pid 374] getdents64(3, [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] getdents64(4, [pid 374] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... openat resumed>) = 4 [pid 377] getdents64(4, [pid 374] lstat("./94/binderfs", [pid 373] fstat(4, [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] close(4 [pid 374] unlink("./94/binderfs" [pid 373] getdents64(4, [pid 377] <... close resumed>) = 0 [pid 374] <... unlink resumed>) = 0 [pid 377] rmdir("./95/bus" [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] <... rmdir resumed>) = 0 [pid 374] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] getdents64(3, [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./96/bus" [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3 [pid 373] <... rmdir resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 373] getdents64(3, [pid 377] rmdir("./95" [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 373] close(3 [pid 377] mkdir("./96", 0777 [pid 373] <... close resumed>) = 0 [pid 373] rmdir("./96" [pid 377] <... mkdir resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 373] mkdir("./97", 0777) = 0 [ 72.942529][ T3439] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 72.969773][ T3439] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3446] <... openat resumed>) = 4 [pid 3444] <... ioctl resumed>) = 0 [pid 3444] close(3) = 0 [pid 3444] mkdir("./bus", 0777) = 0 [pid 3444] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3446] ioctl(4, LOOP_SET_FD, 3 [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3448 ./strace-static-x86_64: Process 3448 attached [pid 3448] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3448] chdir("./97") = 0 [pid 3448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3448] setpgid(0, 0) = 0 [pid 3448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3448] write(3, "1000", 4) = 4 [pid 3448] close(3) = 0 [pid 3448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3448] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3448] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3448] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3449], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3449 [pid 3448] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = 0 [pid 3448] <... futex resumed>) = 0 [pid 3448] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3449 attached [pid 3449] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3449] memfd_create("syzkaller", 0) = 3 [pid 3449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 375] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./94/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, [pid 3446] <... ioctl resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3446] close(3 [pid 375] getdents64(4, [pid 3446] <... close resumed>) = 0 [pid 3446] mkdir("./bus", 0777 [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3446] <... mkdir resumed>) = 0 [pid 375] getdents64(4, [pid 3446] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./94/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./94") = 0 [pid 375] mkdir("./95", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3449] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3449] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3444] <... mount resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 377] ioctl(3, LOOP_CLR_FD [pid 3444] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3444] chdir("./bus") = 0 [pid 3444] ioctl(4, LOOP_CLR_FD [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... openat resumed>) = 3 [pid 374] <... umount2 resumed>) = 0 [pid 3444] <... ioctl resumed>) = 0 [pid 377] close(3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 374] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3444] close(4 [pid 377] <... close resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3449] <... openat resumed>) = 4 [pid 3444] <... close resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] close(3 [pid 374] lstat("./94/bus", [pid 3449] ioctl(4, LOOP_SET_FD, 3 [pid 3444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3444] <... futex resumed>) = 1 [pid 3443] <... futex resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3453 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3444] chdir("./file0" [pid 3443] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3443] <... futex resumed>) = 0 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3454 [pid 374] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3443] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... openat resumed>) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, [pid 3444] <... chdir resumed>) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(4, [pid 3444] <... futex resumed>) = 1 [pid 3443] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3444] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3443] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(4 [pid 3443] <... futex resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 3443] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] rmdir("./94/bus" [pid 3444] <... open resumed>) = 4 [pid 374] <... rmdir resumed>) = 0 [pid 3444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(3, [pid 3444] <... futex resumed>) = 1 [pid 3443] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3444] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 73.082551][ T3444] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/97/bus supports timestamps until 2038 (0x7fffffff) [pid 3443] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(3 [pid 3444] <... openat resumed>) = 5 [pid 3443] <... futex resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 3444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3443] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] rmdir("./94" [pid 3444] <... futex resumed>) = 0 [pid 3443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 3453 attached [pid 3444] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3443] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] mkdir("./95", 0777./strace-static-x86_64: Process 3454 attached [pid 3449] <... ioctl resumed>) = 0 [pid 3454] set_robust_list(0x55555713c5e0, 24 [pid 3453] set_robust_list(0x55555713c5e0, 24 [pid 3449] close(3 [pid 3446] <... mount resumed>) = 0 [pid 3443] <... futex resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 3454] <... set_robust_list resumed>) = 0 [pid 3449] <... close resumed>) = 0 [pid 3443] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3454] chdir("./95" [pid 3449] mkdir("./bus", 0777 [pid 374] <... openat resumed>) = 3 [pid 3444] <... write resumed>) = 196608 [pid 3454] <... chdir resumed>) = 0 [pid 3453] <... set_robust_list resumed>) = 0 [pid 3446] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] ioctl(3, LOOP_CLR_FD [pid 3449] <... mkdir resumed>) = 0 [pid 3454] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3453] chdir("./96" [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3449] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3454] <... prctl resumed>) = 0 [pid 3453] <... chdir resumed>) = 0 [pid 374] close(3 [pid 3454] setpgid(0, 0 [pid 3453] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 374] <... close resumed>) = 0 [pid 3454] <... setpgid resumed>) = 0 [pid 3453] <... prctl resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3453] setpgid(0, 0 [pid 3454] <... openat resumed>) = 3 [pid 3453] <... setpgid resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3458 [pid 3454] write(3, "1000", 4 [pid 3453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3454] <... write resumed>) = 4 [pid 3453] <... openat resumed>) = 3 [pid 3454] close(3 [pid 3453] write(3, "1000", 4 [pid 3454] <... close resumed>) = 0 [pid 3453] <... write resumed>) = 4 [pid 3454] symlink("/dev/binderfs", "./binderfs" [pid 3453] close(3 [pid 3454] <... symlink resumed>) = 0 [pid 3453] <... close resumed>) = 0 [pid 3444] <... futex resumed>) = 1 [pid 3443] <... futex resumed>) = 0 [pid 3454] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3453] symlink("/dev/binderfs", "./binderfs" [pid 3444] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3443] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3454] <... futex resumed>) = 0 [pid 3453] <... symlink resumed>) = 0 [pid 3444] <... mount resumed>) = 0 [pid 3443] <... futex resumed>) = 0 [pid 3454] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3453] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3443] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3454] <... mmap resumed>) = 0x7f64ff044000 [pid 3453] <... futex resumed>) = 0 [pid 3444] <... futex resumed>) = 0 [pid 3443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3454] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3444] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3443] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3454] <... mprotect resumed>) = 0 [pid 3453] <... mmap resumed>) = 0x7f64ff044000 [pid 3444] <... open resumed>) = 6 [pid 3443] <... futex resumed>) = 0 [pid 3454] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3453] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3443] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3453] <... mprotect resumed>) = 0 [pid 3444] <... futex resumed>) = 0 [pid 3443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3454] <... clone resumed>, parent_tid=[3459], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3459 [pid 3453] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3444] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3443] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3454] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3443] <... futex resumed>) = 0 [pid 3454] <... futex resumed>) = 0 [pid 3453] <... clone resumed>, parent_tid=[3460], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3460 [pid 3443] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3454] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3446] <... openat resumed>) = 3 [pid 3446] chdir("./bus") = 0 [pid 3446] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 3460 attached ./strace-static-x86_64: Process 3459 attached ./strace-static-x86_64: Process 3458 attached ) = 0 [pid 3446] close(4) = 0 [pid 3460] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3460] memfd_create("syzkaller", 0) = 3 [pid 3460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3446] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3458] set_robust_list(0x55555713c5e0, 24 [pid 3446] <... futex resumed>) = 1 [pid 3445] <... futex resumed>) = 0 [pid 3445] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3460] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3459] set_robust_list(0x7f64ff0649e0, 24 [pid 3458] <... set_robust_list resumed>) = 0 [pid 3446] chdir("./file0" [pid 3459] <... set_robust_list resumed>) = 0 [pid 3458] chdir("./95" [pid 3446] <... chdir resumed>) = 0 [pid 3459] memfd_create("syzkaller", 0 [pid 3458] <... chdir resumed>) = 0 [pid 3446] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3459] <... memfd_create resumed>) = 3 [pid 3458] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3446] <... futex resumed>) = 0 [pid 3459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3458] <... prctl resumed>) = 0 [pid 3446] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3459] <... mmap resumed>) = 0x7f64f6c44000 [pid 3458] setpgid(0, 0) = 0 [pid 3445] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3458] <... openat resumed>) = 3 [pid 3445] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3458] write(3, "1000", 4 [pid 3446] <... futex resumed>) = 0 [pid 3445] <... futex resumed>) = 1 [pid 3458] <... write resumed>) = 4 [pid 3446] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3445] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3458] close(3 [pid 3449] <... mount resumed>) = 0 [pid 3446] <... open resumed>) = 4 [pid 3444] <... write resumed>) = 1048576 [pid 3446] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3445] <... futex resumed>) = 0 [pid 3446] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3445] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3445] <... futex resumed>) = 0 [pid 3446] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3445] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3446] <... openat resumed>) = 5 [pid 3446] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3445] <... futex resumed>) = 0 [pid 3446] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3445] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3445] <... futex resumed>) = 0 [pid 3446] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3445] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3459] <... write resumed>) = 1048576 [pid 3458] <... close resumed>) = 0 [pid 3449] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3446] <... write resumed>) = 196608 [pid 3444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3459] munmap(0x7f64f6c44000, 1048576 [pid 3458] symlink("/dev/binderfs", "./binderfs" [pid 3449] <... openat resumed>) = 3 [pid 3446] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3444] <... futex resumed>) = 1 [pid 3443] <... futex resumed>) = 0 [pid 3459] <... munmap resumed>) = 0 [pid 3446] <... futex resumed>) = 1 [pid 3445] <... futex resumed>) = 0 [pid 3443] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3460] <... write resumed>) = 1048576 [pid 3459] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3458] <... symlink resumed>) = 0 [pid 3449] chdir("./bus" [pid 3446] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 73.151187][ T3446] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/94/bus supports timestamps until 2038 (0x7fffffff) [ 73.187956][ T3449] ext4 filesystem being mounted at /root/syzkaller.k3ECep/97/bus supports timestamps until 2038 (0x7fffffff) [pid 3444] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3460] munmap(0x7f64f6c44000, 1048576 [pid 3459] <... openat resumed>) = 4 [pid 3458] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3449] <... chdir resumed>) = 0 [pid 3446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3445] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3443] <... futex resumed>) = 0 [pid 3446] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3445] <... futex resumed>) = 0 [pid 3443] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3446] <... mount resumed>) = 0 [pid 3445] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3446] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3446] <... futex resumed>) = 0 [pid 3445] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3446] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3445] <... futex resumed>) = 0 [pid 3460] <... munmap resumed>) = 0 [pid 3446] <... open resumed>) = 6 [pid 3445] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3460] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3446] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3460] <... openat resumed>) = 4 [pid 3446] <... futex resumed>) = 0 [pid 3445] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3460] ioctl(4, LOOP_SET_FD, 3 [pid 3446] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3445] <... futex resumed>) = 0 [pid 3445] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3459] ioctl(4, LOOP_SET_FD, 3 [pid 3458] <... futex resumed>) = 0 [pid 3449] ioctl(4, LOOP_CLR_FD [pid 3458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3458] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3458] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3464], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3464 [pid 3458] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3458] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3460] <... ioctl resumed>) = 0 [pid 3460] close(3./strace-static-x86_64: Process 3464 attached [pid 3444] <... openat resumed>) = 7 [pid 3464] set_robust_list(0x7f64ff0649e0, 24 [pid 3444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3464] <... set_robust_list resumed>) = 0 [pid 3444] <... futex resumed>) = 1 [pid 3464] memfd_create("syzkaller", 0 [pid 3444] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3464] <... memfd_create resumed>) = 3 [pid 3464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3460] <... close resumed>) = 0 [pid 3459] <... ioctl resumed>) = 0 [pid 3449] <... ioctl resumed>) = 0 [pid 3446] <... write resumed>) = 1048576 [pid 3443] <... futex resumed>) = 0 [pid 3460] mkdir("./bus", 0777 [pid 3459] close(3 [pid 3449] close(4 [pid 3446] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3443] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3460] <... mkdir resumed>) = 0 [pid 3459] <... close resumed>) = 0 [pid 3449] <... close resumed>) = 0 [pid 3443] <... futex resumed>) = 1 [pid 3444] <... futex resumed>) = 0 [pid 3460] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3459] mkdir("./bus", 0777 [pid 3449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3446] <... futex resumed>) = 1 [pid 3445] <... futex resumed>) = 0 [pid 3444] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 73.210817][ T3444] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 73.225632][ T3444] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 3443] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3459] <... mkdir resumed>) = 0 [pid 3449] <... futex resumed>) = 1 [pid 3448] <... futex resumed>) = 0 [pid 3446] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3445] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3444] <... openat resumed>) = 8 [pid 3459] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3449] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3448] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3445] <... futex resumed>) = 0 [pid 3444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3448] <... futex resumed>) = 0 [pid 3445] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3448] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3444] <... futex resumed>) = 1 [pid 3443] <... futex resumed>) = 0 [pid 3449] chdir("./file0" [pid 3443] exit_group(0 [pid 3444] ????( [pid 3443] <... exit_group resumed>) = ? [pid 3449] <... chdir resumed>) = 0 [pid 3444] <... ???? resumed>) = ? [pid 3449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3464] <... write resumed>) = 1048576 [pid 3449] <... futex resumed>) = 1 [pid 3448] <... futex resumed>) = 0 [pid 3444] +++ exited with 0 +++ [pid 3443] +++ exited with 0 +++ [pid 3449] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3448] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3443, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3448] <... futex resumed>) = 0 [pid 3449] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3448] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3464] munmap(0x7f64f6c44000, 1048576) = 0 [pid 376] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3464] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3464] <... openat resumed>) = 4 [pid 3464] ioctl(4, LOOP_SET_FD, 3 [pid 3449] <... open resumed>) = 4 [pid 376] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3449] <... futex resumed>) = 1 [pid 3448] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 3449] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3448] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3464] <... ioctl resumed>) = 0 [pid 3449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3448] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3449] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3448] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3464] close(3 [pid 3449] <... openat resumed>) = 5 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] lstat("./97/binderfs", [pid 3449] <... futex resumed>) = 1 [pid 3448] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3464] <... close resumed>) = 0 [pid 3449] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3448] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] unlink("./97/binderfs" [pid 3464] mkdir("./bus", 0777) = 0 [pid 3464] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3448] <... futex resumed>) = 0 [pid 376] <... unlink resumed>) = 0 [pid 3448] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3459] <... mount resumed>) = 0 [pid 3459] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3459] chdir("./bus" [pid 3449] <... write resumed>) = 196608 [pid 3449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3448] <... futex resumed>) = 0 [pid 3448] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3448] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3449] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3448] <... futex resumed>) = 0 [pid 3448] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3448] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3449] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3448] <... futex resumed>) = 0 [pid 3448] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3449] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3448] <... futex resumed>) = 0 [pid 3448] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3459] <... chdir resumed>) = 0 [pid 3459] ioctl(4, LOOP_CLR_FD) = 0 [pid 3459] close(4) = 0 [pid 3459] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3454] <... futex resumed>) = 0 [pid 3454] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3454] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3459] <... futex resumed>) = 1 [ 73.255355][ T3446] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 73.255642][ T3459] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/95/bus supports timestamps until 2038 (0x7fffffff) [ 73.284673][ T3446] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 3459] chdir("./file0") = 0 [pid 3446] <... openat resumed>) = 7 [pid 3445] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3445] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3445] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3445] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3473], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3473 [pid 3445] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3445] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3460] <... mount resumed>) = 0 [pid 3460] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3460] chdir("./bus") = 0 [pid 3460] ioctl(4, LOOP_CLR_FD) = 0 [pid 3460] close(4 [pid 3459] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3460] <... close resumed>) = 0 [pid 3460] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3453] <... futex resumed>) = 0 [pid 3453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3460] <... futex resumed>) = 1 [pid 3460] chdir("./file0"./strace-static-x86_64: Process 3473 attached ) = 0 [pid 3459] <... futex resumed>) = 1 [pid 3454] <... futex resumed>) = 0 [pid 3446] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3459] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3454] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3446] <... futex resumed>) = 0 [pid 3459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3454] <... futex resumed>) = 0 [pid 3446] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3459] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3454] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3459] <... open resumed>) = 4 [pid 3459] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3454] <... futex resumed>) = 0 [pid 3459] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3454] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3459] <... openat resumed>) = 5 [pid 3454] <... futex resumed>) = 0 [pid 3459] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3454] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3459] <... futex resumed>) = 0 [pid 3454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3459] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3454] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3473] set_robust_list(0x7f64f6d439e0, 24 [pid 3464] <... mount resumed>) = 0 [pid 3460] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3454] <... futex resumed>) = 0 [pid 3449] <... write resumed>) = 1048576 [pid 3454] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3459] <... write resumed>) = 196608 [pid 3449] <... futex resumed>) = 1 [pid 3448] <... futex resumed>) = 0 [pid 3473] <... set_robust_list resumed>) = 0 [pid 3464] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3460] <... futex resumed>) = 1 [pid 3459] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3449] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3453] <... futex resumed>) = 0 [pid 3448] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3454] <... futex resumed>) = 0 [pid 3454] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3454] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3448] <... futex resumed>) = 0 [pid 3459] <... futex resumed>) = 1 [pid 3459] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3459] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3454] <... futex resumed>) = 0 [pid 3454] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3459] <... futex resumed>) = 1 [pid 3454] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3459] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3460] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3460] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3460] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3473] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3464] <... openat resumed>) = 3 [pid 3473] <... openat resumed>) = 8 [pid 3464] chdir("./bus") = 0 [pid 3464] ioctl(4, LOOP_CLR_FD [pid 3473] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3473] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3453] <... futex resumed>) = 1 [pid 3453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 3453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3460] <... futex resumed>) = 0 [pid 3460] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3460] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3453] <... futex resumed>) = 0 [pid 3453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3460] <... futex resumed>) = 1 [pid 3453] <... futex resumed>) = 0 [pid 3460] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3460] <... write resumed>) = 196608 [pid 3460] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3453] <... futex resumed>) = 0 [pid 3453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3460] <... futex resumed>) = 1 [pid 3460] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3460] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3453] <... futex resumed>) = 0 [pid 3453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3460] <... futex resumed>) = 1 [pid 3460] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3448] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3445] <... futex resumed>) = 0 [pid 3445] exit_group(0) = ? [pid 3473] <... futex resumed>) = ? [pid 3446] <... futex resumed>) = ? [pid 3446] +++ exited with 0 +++ [pid 3449] <... openat resumed>) = 7 [pid 3449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3448] <... futex resumed>) = 0 [pid 3448] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3448] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3449] <... futex resumed>) = 1 [pid 3449] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3448] <... futex resumed>) = 0 [pid 3449] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3448] exit_group(0 [pid 3449] <... futex resumed>) = ? [pid 3448] <... exit_group resumed>) = ? [pid 3449] +++ exited with 0 +++ [pid 3448] +++ exited with 0 +++ [pid 3459] <... open resumed>) = 6 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3448, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 3459] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 3459] <... futex resumed>) = 1 [pid 3454] <... futex resumed>) = 0 [pid 373] <... restart_syscall resumed>) = 0 [pid 3459] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3454] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3454] <... futex resumed>) = 0 [pid 3459] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3454] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./97/binderfs") = 0 [pid 373] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3464] <... ioctl resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 3460] <... open resumed>) = 6 [pid 3460] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3453] <... futex resumed>) = 0 [pid 3453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3460] <... futex resumed>) = 1 [pid 3460] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3464] close(4 [pid 376] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./97/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./97/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3459] <... write resumed>) = 1048576 [pid 376] getdents64(4, [pid 3459] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3459] <... futex resumed>) = 1 [pid 3454] <... futex resumed>) = 0 [pid 376] getdents64(4, [pid 3459] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3454] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3454] <... futex resumed>) = 0 [pid 376] close(4 [pid 3454] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./97/bus") = 0 [ 73.297517][ T3460] ext4 filesystem being mounted at /root/syzkaller.43WzWH/96/bus supports timestamps until 2038 (0x7fffffff) [ 73.316369][ T3464] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/95/bus supports timestamps until 2038 (0x7fffffff) [ 73.330931][ T3449] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 73.345242][ T3449] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./97") = 0 [pid 376] mkdir("./98", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3460] <... write resumed>) = 1048576 [pid 3460] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3453] <... futex resumed>) = 0 [pid 3453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3460] <... futex resumed>) = 1 [pid 3460] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3459] <... openat resumed>) = 7 [pid 3459] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3454] <... futex resumed>) = 0 [pid 3454] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3454] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3459] <... futex resumed>) = 1 [pid 3459] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3459] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3454] <... futex resumed>) = 0 [pid 3454] exit_group(0) = ? [pid 3459] <... futex resumed>) = ? [pid 3473] +++ exited with 0 +++ [pid 3464] <... close resumed>) = 0 [pid 3445] +++ exited with 0 +++ [pid 376] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 3464] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3445, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3464] <... futex resumed>) = 1 [pid 3464] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./94/binderfs") = 0 [pid 3458] <... futex resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3460] <... openat resumed>) = 7 [pid 3459] +++ exited with 0 +++ [pid 3458] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3454] +++ exited with 0 +++ [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3464] <... futex resumed>) = 0 [pid 3460] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3458] <... futex resumed>) = 1 [pid 376] close(3 [pid 3464] chdir("./file0" [pid 3458] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... close resumed>) = 0 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3454, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 373] lstat("./97/bus", [pid 3464] <... chdir resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3464] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3464] <... futex resumed>) = 1 [pid 3458] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3464] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3458] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3474 [pid 375] <... openat resumed>) = 3 [pid 3464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3458] <... futex resumed>) = 0 [pid 375] fstat(3, [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3464] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3458] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] openat(AT_FDCWD, "./97/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] getdents64(3, [pid 3464] <... open resumed>) = 4 [pid 373] <... openat resumed>) = 4 [pid 3460] <... futex resumed>) = 1 [pid 3453] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./95/binderfs") = 0 [pid 375] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3474 attached [pid 3464] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3460] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3453] <... futex resumed>) = 0 [pid 373] fstat(4, [pid 3464] <... futex resumed>) = 1 [pid 3460] <... openat resumed>) = 8 [pid 3458] <... futex resumed>) = 0 [pid 3453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3464] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3460] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3458] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] getdents64(4, [pid 3464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3460] <... futex resumed>) = 0 [pid 3458] <... futex resumed>) = 0 [pid 3453] exit_group(0 [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3474] set_robust_list(0x55555713c5e0, 24 [pid 3464] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3458] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3453] <... exit_group resumed>) = ? [pid 373] getdents64(4, [pid 3474] <... set_robust_list resumed>) = 0 [pid 3464] <... openat resumed>) = 5 [pid 3460] +++ exited with 0 +++ [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3474] chdir("./98" [pid 3464] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(4 [pid 3474] <... chdir resumed>) = 0 [pid 3464] <... futex resumed>) = 1 [pid 3458] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 3474] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3464] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3458] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./97/bus" [pid 3474] <... prctl resumed>) = 0 [pid 3464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3458] <... futex resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 3474] setpgid(0, 0 [pid 3464] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3458] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(3, [pid 3474] <... setpgid resumed>) = 0 [pid 3474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3464] <... write resumed>) = 196608 [pid 3464] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3464] <... futex resumed>) = 1 [pid 3458] <... futex resumed>) = 0 [pid 373] close(3 [pid 3464] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3458] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... close resumed>) = 0 [pid 3458] <... futex resumed>) = 0 [pid 3464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3458] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] rmdir("./97" [pid 3464] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3474] <... openat resumed>) = 3 [pid 3474] write(3, "1000", 4) = 4 [pid 373] <... rmdir resumed>) = 0 [pid 3474] close(3 [pid 3464] <... mount resumed>) = 0 [pid 373] mkdir("./98", 0777 [pid 3474] <... close resumed>) = 0 [pid 3464] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3474] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3464] <... futex resumed>) = 1 [pid 3458] <... futex resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 3474] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3464] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3458] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3458] <... futex resumed>) = 0 [pid 3474] <... futex resumed>) = 0 [pid 3458] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3474] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3474] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3474] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3475 attached , parent_tid=[3475], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3475 [pid 3475] set_robust_list(0x7f64ff0649e0, 24 [pid 3474] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3475] <... set_robust_list resumed>) = 0 [pid 3474] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3475] memfd_create("syzkaller", 0) = 3 [pid 3475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [ 73.376806][ T3459] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 73.391097][ T3459] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 73.394442][ T3460] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 73.417863][ T3460] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 3475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3475] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3475] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 3453] +++ exited with 0 +++ [pid 372] <... umount2 resumed>) = 0 [pid 3475] ioctl(4, LOOP_SET_FD, 3 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3453, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 372] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./94/bus", [pid 377] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] fstat(3, [pid 372] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... openat resumed>) = 4 [pid 377] getdents64(3, [pid 372] fstat(4, [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] getdents64(4, [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] lstat("./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] getdents64(4, [pid 377] unlink("./96/binderfs" [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] <... unlink resumed>) = 0 [pid 372] close(4 [pid 377] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... close resumed>) = 0 [pid 372] rmdir("./94/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./94") = 0 [pid 372] mkdir("./95", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3458] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3458] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3458] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3458] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3476 attached , parent_tid=[3476], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3476 [pid 3476] set_robust_list(0x7f64f6d439e0, 24 [pid 3458] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3476] <... set_robust_list resumed>) = 0 [pid 3458] <... futex resumed>) = 0 [pid 3458] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3476] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 3476] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3458] <... futex resumed>) = 0 [pid 3458] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3476] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3458] <... futex resumed>) = 0 [pid 3458] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3476] <... openat resumed>) = 7 [pid 3476] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3458] <... futex resumed>) = 0 [pid 3476] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3458] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3458] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3476] <... openat resumed>) = 8 [pid 3476] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3458] <... futex resumed>) = 0 [pid 3476] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3464] <... open resumed>) = 6 [pid 373] <... openat resumed>) = 3 [pid 3464] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3458] exit_group(0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 3464] <... futex resumed>) = ? [pid 3458] <... exit_group resumed>) = ? [pid 3464] +++ exited with 0 +++ [pid 3476] <... futex resumed>) = ? [pid 3476] +++ exited with 0 +++ [pid 3475] <... ioctl resumed>) = 0 [pid 3458] +++ exited with 0 +++ [pid 372] <... openat resumed>) = 3 [pid 3475] close(3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 3475] <... close resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3475] mkdir("./bus", 0777 [pid 375] <... umount2 resumed>) = 0 [pid 372] close(3 [pid 3475] <... mkdir resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3475] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3478 [pid 375] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3458, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 373] close(3 [pid 375] lstat("./95/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3478 attached [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... openat resumed>) = 4 [pid 374] <... openat resumed>) = 3 [pid 375] fstat(4, [pid 374] fstat(3, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, [pid 3478] set_robust_list(0x55555713c5e0, 24 [pid 374] getdents64(3, [pid 3478] <... set_robust_list resumed>) = 0 [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] close(4 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... close resumed>) = 0 [pid 374] lstat("./95/binderfs", [pid 3478] chdir("./95" [pid 375] rmdir("./95/bus" [pid 3478] <... chdir resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3478] setpgid(0, 0 [pid 375] <... rmdir resumed>) = 0 [pid 374] unlink("./95/binderfs" [pid 375] getdents64(3, [pid 3478] <... setpgid resumed>) = 0 [pid 3478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] <... unlink resumed>) = 0 [pid 375] close(3) = 0 [pid 374] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] rmdir("./95" [pid 3478] <... openat resumed>) = 3 [pid 3478] write(3, "1000", 4 [pid 375] <... rmdir resumed>) = 0 [pid 3478] <... write resumed>) = 4 [pid 3478] close(3) = 0 [pid 3478] symlink("/dev/binderfs", "./binderfs") = 0 [pid 375] mkdir("./96", 0777 [pid 3478] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3478] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3478] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3479], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3479 [pid 3478] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 3478] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 3479 attached [pid 3479] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3479] memfd_create("syzkaller", 0) = 3 [pid 3479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3479] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3479] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3475] <... mount resumed>) = 0 [pid 3475] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3475] chdir("./bus") = 0 [pid 3475] ioctl(4, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 373] <... close resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3482 ./strace-static-x86_64: Process 3482 attached [pid 377] lstat("./96/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3482] set_robust_list(0x55555713c5e0, 24 [pid 377] <... openat resumed>) = 4 [pid 3482] <... set_robust_list resumed>) = 0 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 3482] chdir("./98" [pid 377] getdents64(4, [pid 3482] <... chdir resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3482] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3482] setpgid(0, 0) = 0 [pid 377] close(4 [pid 3482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] <... close resumed>) = 0 [pid 377] rmdir("./96/bus" [pid 3482] <... openat resumed>) = 3 [pid 377] <... rmdir resumed>) = 0 [pid 377] getdents64(3, [pid 3482] write(3, "1000", 4) = 4 [pid 3482] close(3) = 0 [pid 3482] symlink("/dev/binderfs", "./binderfs" [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./96" [pid 3482] <... symlink resumed>) = 0 [pid 3482] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... rmdir resumed>) = 0 [pid 3482] <... futex resumed>) = 0 [pid 377] mkdir("./97", 0777 [pid 3482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3482] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3482] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] <... mkdir resumed>) = 0 [pid 3482] <... clone resumed>, parent_tid=[3483], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3483 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3482] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3482] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3483 attached [pid 3483] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3483] memfd_create("syzkaller", 0) = 3 [pid 3483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3483] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3483] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3479] <... openat resumed>) = 4 [pid 3475] <... ioctl resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... umount2 resumed>) = 0 [pid 3479] ioctl(4, LOOP_SET_FD, 3 [pid 375] close(3 [pid 3475] close(4 [pid 377] ioctl(3, LOOP_CLR_FD [pid 374] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 73.545403][ T3475] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/98/bus supports timestamps until 2038 (0x7fffffff) [pid 374] lstat("./95/bus", [pid 3479] <... ioctl resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3479] close(3 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3479] <... close resumed>) = 0 [pid 3479] mkdir("./bus", 0777 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3485 [pid 3479] <... mkdir resumed>) = 0 [pid 3479] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3475] <... close resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] close(3 [pid 3475] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3483] <... openat resumed>) = 4 [pid 3475] <... futex resumed>) = 1 [pid 3474] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 374] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3483] ioctl(4, LOOP_SET_FD, 3 [pid 3475] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3474] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... openat resumed>) = 4 [pid 3475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3474] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3485 attached [pid 3474] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3475] chdir("./file0" [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3486 [pid 374] fstat(4, [pid 3485] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3475] <... chdir resumed>) = 0 [pid 3475] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3475] <... futex resumed>) = 1 [pid 3474] <... futex resumed>) = 0 [pid 374] getdents64(4, [pid 3475] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3474] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3474] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3475] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3485] chdir("./96") = 0 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 3485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3485] setpgid(0, 0) = 0 [pid 374] close(4 [pid 3475] <... open resumed>) = 4 [pid 3475] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... close resumed>) = 0 [pid 3475] <... futex resumed>) = 1 [pid 3474] <... futex resumed>) = 0 [pid 374] rmdir("./95/bus" [pid 3475] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3474] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3474] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] <... rmdir resumed>) = 0 [pid 3475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] getdents64(3, [pid 3475] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3475] <... openat resumed>) = 5 [pid 374] close(3 [pid 3475] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3474] <... futex resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 3475] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3474] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] rmdir("./95" [pid 3475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3474] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3486 attached [pid 3485] <... openat resumed>) = 3 [pid 3475] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3474] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... rmdir resumed>) = 0 [pid 3485] write(3, "1000", 4) = 4 [pid 3485] close(3) = 0 [pid 3485] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3485] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3485] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3485] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3489], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3489 [pid 3485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3489 attached [pid 3483] <... ioctl resumed>) = 0 [pid 3475] <... write resumed>) = 196608 [pid 374] mkdir("./96", 0777 [pid 3486] set_robust_list(0x55555713c5e0, 24 [pid 3483] close(3 [pid 3475] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3486] <... set_robust_list resumed>) = 0 [pid 3483] <... close resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 3474] <... futex resumed>) = 0 [pid 3475] <... futex resumed>) = 1 [pid 3483] mkdir("./bus", 0777 [pid 3474] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3474] <... futex resumed>) = 0 [pid 3486] chdir("./97" [pid 3483] <... mkdir resumed>) = 0 [pid 3474] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... openat resumed>) = 3 [pid 3483] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3475] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 374] ioctl(3, LOOP_CLR_FD [pid 3486] <... chdir resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3486] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 374] close(3 [pid 3486] setpgid(0, 0 [pid 3475] <... mount resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 3475] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3474] <... futex resumed>) = 0 [pid 3486] <... setpgid resumed>) = 0 [pid 3474] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3475] <... futex resumed>) = 1 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3491 [pid 3475] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3474] <... futex resumed>) = 0 [pid 3474] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3489] set_robust_list(0x7f64ff0649e0, 24 [pid 3475] <... open resumed>) = 6 ./strace-static-x86_64: Process 3491 attached [pid 3486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3486] write(3, "1000", 4) = 4 [pid 3486] close(3) = 0 [pid 3486] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3486] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3486] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3486] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3492], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3492 [pid 3486] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3486] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3492 attached [pid 3492] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3492] memfd_create("syzkaller", 0) = 3 [pid 3492] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3475] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3492] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3475] <... futex resumed>) = 1 [pid 3474] <... futex resumed>) = 0 [pid 3474] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3475] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3474] <... futex resumed>) = 0 [pid 3492] <... write resumed>) = 1048576 [pid 3492] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3492] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 3492] ioctl(4, LOOP_SET_FD, 3 [pid 3479] <... mount resumed>) = 0 [pid 3479] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3479] chdir("./bus") = 0 [pid 3479] ioctl(4, LOOP_CLR_FD [pid 3489] <... set_robust_list resumed>) = 0 [pid 3489] memfd_create("syzkaller", 0) = 3 [pid 3489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3474] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3491] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3491] chdir("./96") = 0 [pid 3491] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3491] setpgid(0, 0) = 0 [pid 3491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3492] <... ioctl resumed>) = 0 [pid 3492] close(3 [pid 3491] write(3, "1000", 4 [pid 3479] <... ioctl resumed>) = 0 [pid 3479] close(4 [pid 3492] <... close resumed>) = 0 [pid 3491] <... write resumed>) = 4 [pid 3489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3479] <... close resumed>) = 0 [pid 3492] mkdir("./bus", 0777 [pid 3491] close(3 [pid 3492] <... mkdir resumed>) = 0 [pid 3491] <... close resumed>) = 0 [pid 3492] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3491] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3491] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3491] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3491] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3496], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3496 [pid 3491] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3491] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3479] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3478] <... futex resumed>) = 0 [pid 3478] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3478] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3479] <... futex resumed>) = 1 [pid 3479] chdir("./file0") = 0 [pid 3479] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3478] <... futex resumed>) = 0 [pid 3478] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3478] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3479] <... futex resumed>) = 1 [pid 3479] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3479] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3478] <... futex resumed>) = 0 [pid 3478] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3478] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3479] <... futex resumed>) = 1 [pid 3479] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3479] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3478] <... futex resumed>) = 0 [pid 3479] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3478] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3478] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3479] <... write resumed>) = 196608 [pid 3479] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3478] <... futex resumed>) = 0 [pid 3478] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3478] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3479] <... futex resumed>) = 1 [pid 3479] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3479] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3478] <... futex resumed>) = 0 [pid 3478] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3478] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3479] <... futex resumed>) = 1 [pid 3479] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3479] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3478] <... futex resumed>) = 0 [pid 3478] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3478] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3479] <... futex resumed>) = 1 [pid 3479] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3489] <... write resumed>) = 1048576 [pid 3489] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3489] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 3489] ioctl(4, LOOP_SET_FD, 3 [pid 3475] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 3496 attached [pid 3483] <... mount resumed>) = 0 [pid 3475] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3474] <... futex resumed>) = 0 [ 73.623116][ T3479] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/95/bus supports timestamps until 2038 (0x7fffffff) [ 73.660948][ T3483] ext4 filesystem being mounted at /root/syzkaller.k3ECep/98/bus supports timestamps until 2038 (0x7fffffff) [pid 3496] set_robust_list(0x7f64ff0649e0, 24 [pid 3483] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3475] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3474] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3489] <... ioctl resumed>) = 0 [pid 3489] close(3) = 0 [pid 3489] mkdir("./bus", 0777) = 0 [pid 3489] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3496] <... set_robust_list resumed>) = 0 [pid 3496] memfd_create("syzkaller", 0) = 3 [pid 3496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3474] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3496] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3483] <... openat resumed>) = 3 [pid 3496] <... write resumed>) = 1048576 [pid 3496] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3496] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 3496] ioctl(4, LOOP_SET_FD, 3 [pid 3483] chdir("./bus") = 0 [pid 3479] <... write resumed>) = 1048576 [pid 3483] ioctl(4, LOOP_CLR_FD [pid 3479] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3475] <... openat resumed>) = 7 [pid 3479] <... futex resumed>) = 1 [pid 3479] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3475] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3474] <... futex resumed>) = 0 [pid 3474] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3474] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3475] <... futex resumed>) = 1 [pid 3475] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3475] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3474] <... futex resumed>) = 0 [pid 3474] exit_group(0) = ? [pid 3475] <... futex resumed>) = ? [pid 3496] <... ioctl resumed>) = 0 [pid 3492] <... mount resumed>) = 0 [pid 3483] <... ioctl resumed>) = 0 [pid 3478] <... futex resumed>) = 0 [pid 3496] close(3 [pid 3483] close(4 [pid 3478] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3496] <... close resumed>) = 0 [pid 3483] <... close resumed>) = 0 [pid 3479] <... futex resumed>) = 0 [pid 3478] <... futex resumed>) = 1 [pid 3496] mkdir("./bus", 0777 [ 73.675635][ T3475] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 73.697282][ T3475] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 73.707290][ T3492] ext4 filesystem being mounted at /root/syzkaller.43WzWH/97/bus supports timestamps until 2038 (0x7fffffff) [pid 3483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3479] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3478] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3496] <... mkdir resumed>) = 0 [pid 3492] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3483] <... futex resumed>) = 1 [pid 3482] <... futex resumed>) = 0 [pid 3475] +++ exited with 0 +++ [pid 3474] +++ exited with 0 +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3474, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 376] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./98/binderfs") = 0 [pid 376] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3492] <... openat resumed>) = 3 [pid 3492] chdir("./bus") = 0 [pid 3492] ioctl(4, LOOP_CLR_FD) = 0 [pid 3492] close(4) = 0 [pid 3496] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3483] chdir("./file0" [pid 3482] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3492] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3486] <... futex resumed>) = 0 [pid 3482] <... futex resumed>) = 0 [pid 3486] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3492] chdir("./file0" [pid 3483] <... chdir resumed>) = 0 [pid 3482] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3486] <... futex resumed>) = 0 [pid 3483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3486] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3483] <... futex resumed>) = 0 [pid 3482] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3482] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3482] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3483] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3492] <... chdir resumed>) = 0 [pid 3492] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3492] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3486] <... futex resumed>) = 0 [pid 3486] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3483] <... open resumed>) = 4 [pid 3486] <... futex resumed>) = 1 [pid 3483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3486] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3483] <... futex resumed>) = 1 [pid 3482] <... futex resumed>) = 0 [pid 3483] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3482] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3483] <... openat resumed>) = 5 [pid 3483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3482] <... futex resumed>) = 0 [pid 3482] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3492] <... futex resumed>) = 0 [pid 3483] <... futex resumed>) = 0 [pid 3482] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3492] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3492] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3492] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3486] <... futex resumed>) = 0 [pid 3483] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3482] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3479] <... openat resumed>) = 7 [pid 3486] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3483] <... write resumed>) = 196608 [pid 3482] <... futex resumed>) = 0 [pid 3486] <... futex resumed>) = 1 [pid 3482] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3486] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3482] <... futex resumed>) = 0 [pid 3482] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3482] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3483] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3482] <... futex resumed>) = 0 [pid 3483] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3482] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3483] <... open resumed>) = 6 [pid 3482] <... futex resumed>) = 0 [pid 3483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3482] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3483] <... futex resumed>) = 0 [pid 3482] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3483] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3482] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3482] <... futex resumed>) = 0 [pid 3483] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3482] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3479] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3478] <... futex resumed>) = 0 [pid 3478] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3478] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3492] <... futex resumed>) = 0 [pid 3489] <... mount resumed>) = 0 [pid 3492] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3489] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3483] <... write resumed>) = 1048576 [pid 3479] <... futex resumed>) = 1 [pid 3492] <... openat resumed>) = 5 [pid 3489] <... openat resumed>) = 3 [pid 3492] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3489] chdir("./bus" [pid 3492] <... futex resumed>) = 1 [pid 3489] <... chdir resumed>) = 0 [pid 3486] <... futex resumed>) = 0 [pid 3492] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3489] ioctl(4, LOOP_CLR_FD [pid 3486] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3486] <... futex resumed>) = 0 [pid 3492] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3486] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3492] <... write resumed>) = 196608 [pid 3492] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3486] <... futex resumed>) = 0 [pid 3492] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3486] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3492] <... mount resumed>) = 0 [pid 3486] <... futex resumed>) = 0 [pid 3483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3492] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3486] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3483] <... futex resumed>) = 1 [pid 3482] <... futex resumed>) = 0 [ 73.722756][ T3479] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 73.745821][ T3479] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 73.749331][ T3489] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/96/bus supports timestamps until 2038 (0x7fffffff) [pid 3492] <... futex resumed>) = 0 [pid 3486] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3483] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3482] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3492] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3486] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3482] <... futex resumed>) = 0 [pid 3492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3486] <... futex resumed>) = 0 [pid 3482] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3496] <... mount resumed>) = 0 [pid 3492] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3486] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3479] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3496] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3496] chdir("./bus") = 0 [pid 3496] ioctl(4, LOOP_CLR_FD [pid 3479] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3478] <... futex resumed>) = 0 [pid 3478] exit_group(0) = ? [pid 3479] <... futex resumed>) = ? [pid 3496] <... ioctl resumed>) = 0 [pid 3492] <... open resumed>) = 6 [pid 3489] <... ioctl resumed>) = 0 [pid 3479] +++ exited with 0 +++ [pid 3478] +++ exited with 0 +++ [pid 376] <... umount2 resumed>) = 0 [pid 3496] close(4 [pid 3492] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3489] close(4 [pid 376] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3496] <... close resumed>) = 0 [pid 3492] <... futex resumed>) = 1 [pid 3489] <... close resumed>) = 0 [pid 3486] <... futex resumed>) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3478, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 3496] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3492] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3489] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3486] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3496] <... futex resumed>) = 1 [pid 3492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3491] <... futex resumed>) = 0 [pid 3489] <... futex resumed>) = 1 [pid 3486] <... futex resumed>) = 0 [pid 3485] <... futex resumed>) = 0 [pid 376] lstat("./98/bus", [pid 3496] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3492] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3491] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3489] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3486] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3491] <... futex resumed>) = 0 [pid 3489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3485] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./95/binderfs" [pid 3496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3491] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3489] chdir("./file0" [pid 3485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... unlink resumed>) = 0 [pid 3496] chdir("./file0" [pid 3489] <... chdir resumed>) = 0 [pid 376] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3496] <... chdir resumed>) = 0 [pid 3489] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3496] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3489] <... futex resumed>) = 1 [pid 3485] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "./98/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3496] <... futex resumed>) = 1 [pid 3491] <... futex resumed>) = 0 [pid 3489] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 4 [pid 3496] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3491] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3485] <... futex resumed>) = 0 [pid 3491] <... futex resumed>) = 0 [pid 3496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3489] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] fstat(4, [pid 3491] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3489] <... open resumed>) = 4 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3483] <... openat resumed>) = 7 [pid 3483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3483] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3496] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3489] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3482] <... futex resumed>) = 0 [pid 376] getdents64(4, [pid 3489] <... futex resumed>) = 1 [pid 3485] <... futex resumed>) = 0 [pid 3482] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3496] <... open resumed>) = 4 [pid 3489] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3482] <... futex resumed>) = 1 [pid 376] getdents64(4, [pid 3496] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3485] <... futex resumed>) = 0 [pid 3482] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3496] <... futex resumed>) = 1 [pid 3491] <... futex resumed>) = 0 [pid 3489] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3483] <... futex resumed>) = 0 [pid 376] close(4 [pid 3496] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3491] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3489] <... openat resumed>) = 5 [pid 376] <... close resumed>) = 0 [pid 3496] <... openat resumed>) = 5 [pid 3491] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3489] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3483] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3496] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3489] <... futex resumed>) = 1 [pid 3485] <... futex resumed>) = 0 [pid 3483] <... openat resumed>) = 8 [pid 376] rmdir("./98/bus" [pid 3496] <... futex resumed>) = 0 [pid 3491] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3489] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3496] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3491] <... futex resumed>) = 0 [pid 3489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3485] <... futex resumed>) = 0 [pid 3483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... rmdir resumed>) = 0 [pid 3491] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3489] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(3, [pid 3483] <... futex resumed>) = 1 [pid 3482] <... futex resumed>) = 0 [pid 3482] exit_group(0 [pid 3489] <... write resumed>) = 196608 [pid 3482] <... exit_group resumed>) = ? [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3489] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 3489] <... futex resumed>) = 1 [pid 3485] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 3489] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] rmdir("./98" [pid 3489] <... mount resumed>) = 0 [pid 3485] <... futex resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 3489] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] mkdir("./99", 0777 [pid 3489] <... futex resumed>) = 0 [pid 3485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... mkdir resumed>) = 0 [pid 3489] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3485] <... futex resumed>) = 0 [pid 3489] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3496] <... write resumed>) = 196608 [pid 3496] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3492] <... write resumed>) = 1048576 [pid 3496] <... futex resumed>) = 1 [pid 3491] <... futex resumed>) = 0 [pid 3496] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3492] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3491] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3496] <... mount resumed>) = 0 [pid 3491] <... futex resumed>) = 0 [pid 3496] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3491] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3496] <... futex resumed>) = 0 [pid 3491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3491] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3496] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3491] <... futex resumed>) = 0 [pid 3491] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3492] <... futex resumed>) = 1 [pid 3486] <... futex resumed>) = 0 [pid 3492] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3486] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 73.772017][ T3496] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/96/bus supports timestamps until 2038 (0x7fffffff) [ 73.778624][ T3483] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 73.798096][ T3483] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 3486] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3489] <... open resumed>) = 6 [pid 376] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 3496] <... open resumed>) = 6 [pid 3489] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3483] +++ exited with 0 +++ [pid 3482] +++ exited with 0 +++ [pid 376] ioctl(3, LOOP_CLR_FD [pid 3496] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3489] <... futex resumed>) = 1 [pid 3485] <... futex resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3496] <... futex resumed>) = 1 [pid 3491] <... futex resumed>) = 0 [pid 3489] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 3496] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3491] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3485] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3491] <... futex resumed>) = 0 [pid 3489] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] lstat("./95/bus", [pid 3496] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3491] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3482, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./98/binderfs", [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3505 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] unlink("./98/binderfs") = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3492] <... openat resumed>) = 7 [pid 3492] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3486] <... futex resumed>) = 0 [pid 3492] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3486] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 4 [pid 3492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3492] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3492] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3492] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3505 attached [pid 3505] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3492] <... futex resumed>) = 0 [pid 3486] <... futex resumed>) = 1 [pid 372] fstat(4, [pid 3492] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3486] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3486] exit_group(0 [pid 3492] <... futex resumed>) = ? [pid 3486] <... exit_group resumed>) = ? [pid 372] getdents64(4, [pid 3505] chdir("./99" [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 3505] <... chdir resumed>) = 0 [pid 3505] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 372] close(4) = 0 [pid 372] rmdir("./95/bus" [pid 3505] <... prctl resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./95") = 0 [pid 372] mkdir("./96", 0777 [pid 3505] setpgid(0, 0 [pid 372] <... mkdir resumed>) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3505] <... setpgid resumed>) = 0 [pid 3505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3505] write(3, "1000", 4) = 4 [pid 3505] close(3) = 0 [pid 3505] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3505] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3505] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3505] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3506], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3506 [pid 3505] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3505] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3496] <... write resumed>) = 1048576 [pid 3496] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3491] <... futex resumed>) = 0 [pid 3491] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3491] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 73.840394][ T3492] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 73.854690][ T3492] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 3496] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 3506 attached [pid 3489] <... write resumed>) = 1048576 [pid 3489] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3485] <... futex resumed>) = 0 [pid 3489] <... futex resumed>) = 1 [pid 3485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3489] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3485] <... futex resumed>) = 0 [pid 3485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3506] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3506] memfd_create("syzkaller", 0) = 3 [pid 3506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3496] <... openat resumed>) = 7 [pid 3496] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3496] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3506] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3506] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3492] +++ exited with 0 +++ [pid 3491] <... futex resumed>) = 0 [pid 3486] +++ exited with 0 +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3486, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./97/binderfs") = 0 [pid 377] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3506] <... openat resumed>) = 4 [pid 3506] ioctl(4, LOOP_SET_FD, 3 [pid 3491] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./98/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./98/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 3496] <... futex resumed>) = 0 [pid 3491] <... futex resumed>) = 1 [pid 3496] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 373] rmdir("./98/bus" [pid 3496] <... openat resumed>) = 8 [ 73.899043][ T3496] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 73.901688][ T3489] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 73.913381][ T3496] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 3496] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... rmdir resumed>) = 0 [pid 3496] <... futex resumed>) = 0 [pid 3496] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./98") = 0 [pid 373] mkdir("./99", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 372] <... openat resumed>) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3508 [pid 3506] <... ioctl resumed>) = 0 [pid 3506] close(3) = 0 [pid 3506] mkdir("./bus", 0777) = 0 [pid 3506] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue"./strace-static-x86_64: Process 3508 attached [pid 3508] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3508] chdir("./96") = 0 [pid 3508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3508] setpgid(0, 0) = 0 [pid 3508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3508] write(3, "1000", 4) = 4 [pid 3491] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3508] close(3 [pid 3491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3491] exit_group(0 [pid 3496] <... futex resumed>) = ? [pid 3491] <... exit_group resumed>) = ? [pid 3508] <... close resumed>) = 0 [pid 3496] +++ exited with 0 +++ [pid 3489] <... openat resumed>) = 7 [pid 3508] symlink("/dev/binderfs", "./binderfs" [pid 3489] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3485] <... futex resumed>) = 0 [pid 3508] <... symlink resumed>) = 0 [pid 3485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3489] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3508] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3489] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3508] <... futex resumed>) = 0 [pid 3485] <... futex resumed>) = 0 [pid 3489] <... futex resumed>) = 1 [pid 3485] exit_group(0) = ? [pid 3508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3508] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3508] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3509], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3509 [pid 3508] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 3509 attached [pid 3509] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3508] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3509] memfd_create("syzkaller", 0) = 3 [pid 3509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3509] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3509] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 373] <... openat resumed>) = 3 [pid 3509] <... openat resumed>) = 4 [pid 3491] +++ exited with 0 +++ [pid 373] ioctl(3, LOOP_CLR_FD [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3491, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, [pid 3509] ioctl(4, LOOP_SET_FD, 3 [pid 377] <... umount2 resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] close(3 [pid 377] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] getdents64(3, [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3489] +++ exited with 0 +++ [pid 3485] +++ exited with 0 +++ [pid 377] lstat("./97/bus", [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3485, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./97/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 374] lstat("./96/binderfs", [pid 377] <... openat resumed>) = 4 [pid 377] fstat(4, [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, [pid 374] unlink("./96/binderfs" [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] <... unlink resumed>) = 0 [pid 375] <... restart_syscall resumed>) = 0 [pid 377] close(4 [pid 374] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... close resumed>) = 0 [pid 377] rmdir("./97/bus") = 0 [pid 377] getdents64(3, [pid 375] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] close(3 [pid 375] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... close resumed>) = 0 [pid 377] rmdir("./97" [pid 375] <... openat resumed>) = 3 [pid 377] <... rmdir resumed>) = 0 [pid 377] mkdir("./98", 0777 [pid 375] fstat(3, [pid 377] <... mkdir resumed>) = 0 [ 73.948008][ T3489] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 3509] <... ioctl resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... close resumed>) = 0 [pid 3509] close(3 [pid 375] getdents64(3, [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3509] <... close resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3509] mkdir("./bus", 0777 [pid 375] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3513 ./strace-static-x86_64: Process 3513 attached [pid 3509] <... mkdir resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3509] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] lstat("./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./96/binderfs" [pid 3506] <... mount resumed>) = 0 [pid 3506] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 375] <... unlink resumed>) = 0 [pid 375] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3506] <... openat resumed>) = 3 [pid 3506] chdir("./bus") = 0 [pid 3506] ioctl(4, LOOP_CLR_FD [pid 3513] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3513] chdir("./99") = 0 [pid 3513] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3513] setpgid(0, 0) = 0 [pid 3513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3513] write(3, "1000", 4) = 4 [pid 3513] close(3) = 0 [pid 3513] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3513] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3513] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3513] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3513] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3514], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3514 [pid 3513] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3513] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3514 attached [pid 3514] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3514] memfd_create("syzkaller", 0) = 3 [pid 3514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3514] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3514] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3506] <... ioctl resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 374] <... umount2 resumed>) = 0 [pid 3506] close(4 [pid 377] ioctl(3, LOOP_CLR_FD [pid 374] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./96/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./96/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./96") = 0 [pid 374] mkdir("./97", 0777) = 0 [ 74.004167][ T3506] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/99/bus supports timestamps until 2038 (0x7fffffff) [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3509] <... mount resumed>) = 0 [pid 3509] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3509] chdir("./bus") = 0 [pid 3509] ioctl(4, LOOP_CLR_FD [pid 375] <... umount2 resumed>) = 0 [pid 3514] <... openat resumed>) = 4 [pid 3514] ioctl(4, LOOP_SET_FD, 3 [pid 3506] <... close resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... openat resumed>) = 3 [pid 3506] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 374] ioctl(3, LOOP_CLR_FD [pid 3506] <... futex resumed>) = 1 [pid 3505] <... futex resumed>) = 0 [pid 3506] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3505] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3505] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./96/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3514] <... ioctl resumed>) = 0 [pid 3505] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3514] close(3 [pid 3506] chdir("./file0" [pid 375] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4 [pid 3506] <... chdir resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 3514] <... close resumed>) = 0 [pid 375] rmdir("./96/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./96") = 0 [pid 375] mkdir("./97", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3514] mkdir("./bus", 0777 [pid 3506] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3518 [pid 3509] <... ioctl resumed>) = 0 [pid 3509] close(4) = 0 [pid 3509] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3508] <... futex resumed>) = 0 [pid 3508] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3508] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3509] <... futex resumed>) = 1 [pid 3509] chdir("./file0" [pid 3514] <... mkdir resumed>) = 0 [pid 3509] <... chdir resumed>) = 0 [pid 374] close(3 [pid 3509] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3508] <... futex resumed>) = 0 [pid 3508] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3508] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... close resumed>) = 0 [pid 3514] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3506] <... futex resumed>) = 1 [pid 3505] <... futex resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3519 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3509] <... futex resumed>) = 1 [pid 3509] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3505] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3519 attached ./strace-static-x86_64: Process 3518 attached [pid 3509] <... open resumed>) = 4 [pid 3506] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3505] <... futex resumed>) = 0 [pid 3505] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3520 ./strace-static-x86_64: Process 3520 attached [pid 3520] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3506] <... open resumed>) = 4 [pid 3520] chdir("./97") = 0 [pid 3520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3520] setpgid(0, 0) = 0 [pid 3520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3520] write(3, "1000", 4) = 4 [pid 3506] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3520] close(3 [pid 3506] <... futex resumed>) = 1 [pid 3505] <... futex resumed>) = 0 [pid 3506] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3505] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3506] <... openat resumed>) = 5 [pid 3505] <... futex resumed>) = 0 [pid 3520] <... close resumed>) = 0 [pid 3520] symlink("/dev/binderfs", "./binderfs" [pid 3505] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3520] <... symlink resumed>) = 0 [pid 3506] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3520] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3520] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3520] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3521], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3521 [pid 3520] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3520] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3521 attached [pid 3521] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3521] memfd_create("syzkaller", 0) = 3 [pid 3521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3506] <... futex resumed>) = 1 [pid 3505] <... futex resumed>) = 0 [pid 3506] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3505] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3505] <... futex resumed>) = 0 [pid 3506] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3505] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3521] <... mmap resumed>) = 0x7f64f6c44000 [pid 3506] <... write resumed>) = 196608 [ 74.065529][ T3509] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/96/bus supports timestamps until 2038 (0x7fffffff) [pid 3521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3506] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3509] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3505] <... futex resumed>) = 0 [pid 3506] <... futex resumed>) = 1 [pid 3508] <... futex resumed>) = 0 [pid 3508] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3505] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3508] <... futex resumed>) = 0 [pid 3505] <... futex resumed>) = 0 [pid 3509] <... futex resumed>) = 1 [pid 3506] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3508] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3505] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3506] <... mount resumed>) = 0 [pid 3506] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3509] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3505] <... futex resumed>) = 0 [pid 3505] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3506] <... futex resumed>) = 1 [pid 3505] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3506] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3506] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3505] <... futex resumed>) = 0 [pid 3505] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3505] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3506] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3509] <... openat resumed>) = 5 [pid 3521] <... write resumed>) = 1048576 [pid 3521] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3521] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 3521] ioctl(4, LOOP_SET_FD, 3 [pid 3519] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3519] chdir("./98") = 0 [pid 3519] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3519] setpgid(0, 0) = 0 [pid 3519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3519] write(3, "1000", 4) = 4 [pid 3519] close(3) = 0 [pid 3519] symlink("/dev/binderfs", "./binderfs" [pid 3509] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... symlink resumed>) = 0 [pid 3519] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3519] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3519] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3508] <... futex resumed>) = 0 [pid 3508] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3508] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3519] <... clone resumed>, parent_tid=[3525], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3525 [pid 3509] <... futex resumed>) = 1 [pid 3519] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3519] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3525 attached [pid 3525] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3509] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3518] set_robust_list(0x55555713c5e0, 24 [pid 3525] memfd_create("syzkaller", 0) = 3 [pid 3525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3518] <... set_robust_list resumed>) = 0 [pid 3518] chdir("./97") = 0 [pid 3518] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3518] setpgid(0, 0) = 0 [pid 3518] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3509] <... write resumed>) = 196608 [pid 3518] <... openat resumed>) = 3 [pid 3509] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3518] write(3, "1000", 4 [pid 3508] <... futex resumed>) = 0 [pid 3508] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3508] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3518] <... write resumed>) = 4 [pid 3509] <... futex resumed>) = 1 [pid 3525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3518] close(3 [pid 3509] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3518] <... close resumed>) = 0 [pid 3509] <... mount resumed>) = 0 [pid 3518] symlink("/dev/binderfs", "./binderfs" [pid 3509] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3525] <... write resumed>) = 1048576 [pid 3525] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3525] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3521] <... ioctl resumed>) = 0 [pid 3521] close(3) = 0 [pid 3521] mkdir("./bus", 0777) = 0 [pid 3521] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3525] <... openat resumed>) = 4 [pid 3525] ioctl(4, LOOP_SET_FD, 3 [pid 3518] <... symlink resumed>) = 0 [pid 3508] <... futex resumed>) = 0 [pid 3509] <... futex resumed>) = 1 [pid 3508] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3508] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3518] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3509] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3518] <... futex resumed>) = 0 [pid 3514] <... mount resumed>) = 0 [pid 3509] <... open resumed>) = 6 [pid 3525] <... ioctl resumed>) = 0 [pid 3525] close(3) = 0 [pid 3525] mkdir("./bus", 0777 [pid 3518] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3509] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3508] <... futex resumed>) = 0 [pid 3518] <... mmap resumed>) = 0x7f64ff044000 [pid 3509] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3525] <... mkdir resumed>) = 0 [pid 3525] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3508] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3518] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3508] <... futex resumed>) = 0 [pid 3509] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3508] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3518] <... mprotect resumed>) = 0 [pid 3518] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3528], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3528 [pid 3518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3514] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3514] chdir("./bus") = 0 [pid 3514] ioctl(4, LOOP_CLR_FD) = 0 [pid 3514] close(4) = 0 [pid 3505] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3505] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3514] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3505] <... futex resumed>) = 0 [pid 3514] <... futex resumed>) = 1 [pid 3513] <... futex resumed>) = 0 [pid 3505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3513] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3505] <... mmap resumed>) = 0x7f64f6d23000 [pid 3513] <... futex resumed>) = 0 [pid 3505] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3513] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3514] chdir("./file0" [pid 3505] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3531], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3531 [pid 3505] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3505] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3509] <... write resumed>) = 1048576 [ 74.149620][ T3514] ext4 filesystem being mounted at /root/syzkaller.k3ECep/99/bus supports timestamps until 2038 (0x7fffffff) [pid 3514] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 3531 attached ./strace-static-x86_64: Process 3528 attached [pid 3509] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3509] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3528] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3528] memfd_create("syzkaller", 0) = 3 [pid 3528] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3528] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3531] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3531] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3528] <... write resumed>) = 1048576 [pid 3525] <... mount resumed>) = 0 [pid 3521] <... mount resumed>) = 0 [pid 3514] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3508] <... futex resumed>) = 0 [pid 3506] <... write resumed>) = 1048576 [pid 3525] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3514] <... futex resumed>) = 1 [pid 3513] <... futex resumed>) = 0 [pid 3508] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3506] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3528] munmap(0x7f64f6c44000, 1048576 [pid 3521] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3508] <... futex resumed>) = 1 [pid 3506] <... futex resumed>) = 0 [pid 3525] <... openat resumed>) = 3 [pid 3514] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3513] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3508] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3506] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3528] <... munmap resumed>) = 0 [pid 3525] chdir("./bus" [pid 3521] <... openat resumed>) = 3 [pid 3514] <... open resumed>) = 4 [pid 3513] <... futex resumed>) = 0 [pid 3509] <... futex resumed>) = 0 [pid 3528] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3521] chdir("./bus" [pid 3514] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3509] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3531] <... openat resumed>) = 7 [pid 3528] <... openat resumed>) = 4 [pid 3525] <... chdir resumed>) = 0 [pid 3521] <... chdir resumed>) = 0 [pid 3514] <... futex resumed>) = 0 [pid 3513] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3505] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3528] ioctl(4, LOOP_SET_FD, 3 [pid 3525] ioctl(4, LOOP_CLR_FD [pid 3521] ioctl(4, LOOP_CLR_FD [pid 3514] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3513] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3505] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3525] <... ioctl resumed>) = 0 [pid 3514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3513] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3506] <... futex resumed>) = 0 [pid 3505] <... futex resumed>) = 1 [pid 3525] close(4 [ 74.190677][ T3521] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/97/bus supports timestamps until 2038 (0x7fffffff) [ 74.190913][ T3525] ext4 filesystem being mounted at /root/syzkaller.43WzWH/98/bus supports timestamps until 2038 (0x7fffffff) [ 74.208726][ T3531] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 74.228887][ T3531] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 3514] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3513] <... futex resumed>) = 0 [pid 3506] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3505] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3514] <... openat resumed>) = 5 [pid 3513] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3506] <... openat resumed>) = 8 [pid 3514] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3513] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3506] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3514] <... futex resumed>) = 0 [pid 3513] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3506] <... futex resumed>) = 1 [pid 3505] <... futex resumed>) = 0 [pid 3514] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3513] <... futex resumed>) = 0 [pid 3506] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3514] <... write resumed>) = 196608 [pid 3513] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3514] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3513] <... futex resumed>) = 0 [pid 3514] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3513] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3514] <... mount resumed>) = 0 [pid 3513] <... futex resumed>) = 0 [pid 3514] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3513] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3514] <... futex resumed>) = 0 [pid 3513] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3514] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3513] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3513] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3531] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3531] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3528] <... ioctl resumed>) = 0 [pid 3521] <... ioctl resumed>) = 0 [pid 3525] <... close resumed>) = 0 [pid 3521] close(4 [pid 3514] <... open resumed>) = 6 [pid 3528] close(3 [pid 3525] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3521] <... close resumed>) = 0 [pid 3514] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3505] exit_group(0 [pid 3531] <... futex resumed>) = ? [pid 3528] <... close resumed>) = 0 [pid 3525] <... futex resumed>) = 1 [pid 3521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3514] <... futex resumed>) = 1 [pid 3513] <... futex resumed>) = 0 [pid 3506] <... futex resumed>) = ? [pid 3505] <... exit_group resumed>) = ? [pid 3531] +++ exited with 0 +++ [pid 3528] mkdir("./bus", 0777 [pid 3525] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3521] <... futex resumed>) = 1 [pid 3520] <... futex resumed>) = 0 [pid 3519] <... futex resumed>) = 0 [pid 3514] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3513] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3506] +++ exited with 0 +++ [pid 3505] +++ exited with 0 +++ [pid 3521] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3528] <... mkdir resumed>) = 0 [pid 3520] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3528] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3525] <... futex resumed>) = 0 [pid 3520] <... futex resumed>) = 0 [pid 3519] <... futex resumed>) = 1 [pid 3525] chdir("./file0" [pid 3520] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3519] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3525] <... chdir resumed>) = 0 [pid 3521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3513] <... futex resumed>) = 0 [pid 3521] chdir("./file0" [pid 3513] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3505, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 3525] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3521] <... chdir resumed>) = 0 [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 3525] <... futex resumed>) = 1 [pid 3521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... futex resumed>) = 0 [pid 3521] <... futex resumed>) = 1 [pid 3525] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3521] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3520] <... futex resumed>) = 0 [pid 3519] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... restart_syscall resumed>) = 0 [pid 3525] <... open resumed>) = 4 [pid 3520] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... futex resumed>) = 0 [pid 3514] <... write resumed>) = 1048576 [pid 3521] <... futex resumed>) = 0 [pid 3520] <... futex resumed>) = 1 [pid 3519] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3521] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3520] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3514] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3525] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3521] <... open resumed>) = 4 [pid 3513] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3514] <... futex resumed>) = 1 [pid 3525] <... futex resumed>) = 1 [pid 3521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... futex resumed>) = 0 [pid 3513] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3514] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3525] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3521] <... futex resumed>) = 1 [pid 3520] <... futex resumed>) = 0 [pid 3519] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3513] <... futex resumed>) = 0 [pid 3525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3521] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3520] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 3525] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3520] <... futex resumed>) = 0 [pid 3519] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3525] <... openat resumed>) = 5 [pid 3521] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3520] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3525] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3521] <... openat resumed>) = 5 [pid 3525] <... futex resumed>) = 1 [pid 3521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... futex resumed>) = 0 [pid 3525] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3521] <... futex resumed>) = 1 [pid 3520] <... futex resumed>) = 0 [pid 3519] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3521] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3520] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... futex resumed>) = 0 [pid 3525] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3520] <... futex resumed>) = 0 [pid 3519] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3525] <... write resumed>) = 196608 [pid 3521] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3520] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3525] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3521] <... write resumed>) = 196608 [ 74.230645][ T3509] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3513] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] fstat(3, [pid 3525] <... futex resumed>) = 1 [pid 3521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3525] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3521] <... futex resumed>) = 1 [pid 3520] <... futex resumed>) = 0 [pid 3519] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 3525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3521] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3520] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... futex resumed>) = 0 [pid 3508] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3525] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3520] <... futex resumed>) = 0 [pid 3519] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3508] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3525] <... mount resumed>) = 0 [pid 3521] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3520] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3508] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3525] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3521] <... mount resumed>) = 0 [pid 3508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] lstat("./99/binderfs", [pid 3525] <... futex resumed>) = 1 [pid 3521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... futex resumed>) = 0 [pid 3508] <... mmap resumed>) = 0x7f64f6d23000 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3525] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3521] <... futex resumed>) = 1 [pid 3520] <... futex resumed>) = 0 [pid 3519] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3508] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 376] unlink("./99/binderfs" [pid 3525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3521] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3520] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... futex resumed>) = 0 [pid 3508] <... mprotect resumed>) = 0 [pid 376] <... unlink resumed>) = 0 [pid 3525] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3520] <... futex resumed>) = 0 [pid 3519] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3508] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3525] <... open resumed>) = 6 [pid 3521] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3520] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3525] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3521] <... open resumed>) = 6 [pid 3508] <... clone resumed>, parent_tid=[3535], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3535 [pid 3525] <... futex resumed>) = 1 [pid 3521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... futex resumed>) = 0 [pid 3508] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3525] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3521] <... futex resumed>) = 1 [pid 3520] <... futex resumed>) = 0 [pid 3519] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3508] <... futex resumed>) = 0 [pid 3525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3521] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3520] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... futex resumed>) = 0 [pid 3508] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3525] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3520] <... futex resumed>) = 0 [pid 3519] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3521] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3520] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3535 attached [pid 3514] <... openat resumed>) = 7 [pid 3509] <... openat resumed>) = 7 [pid 3535] set_robust_list(0x7f64f6d439e0, 24 [pid 3514] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3509] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3535] <... set_robust_list resumed>) = 0 [pid 3514] <... futex resumed>) = 1 [pid 3513] <... futex resumed>) = 0 [pid 3509] <... futex resumed>) = 0 [pid 3535] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3514] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3513] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3509] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3535] <... openat resumed>) = 8 [pid 3514] <... openat resumed>) = 8 [pid 3513] <... futex resumed>) = 0 [pid 3535] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3514] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3513] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3514] <... futex resumed>) = 0 [pid 3513] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3535] <... futex resumed>) = 1 [pid 3525] <... write resumed>) = 1048576 [pid 3514] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3513] exit_group(0 [pid 3508] <... futex resumed>) = 0 [pid 3535] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3525] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3508] exit_group(0 [pid 3535] <... futex resumed>) = ? [pid 3525] <... futex resumed>) = 1 [pid 3509] <... futex resumed>) = ? [pid 3508] <... exit_group resumed>) = ? [pid 3535] +++ exited with 0 +++ [pid 3525] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3519] <... futex resumed>) = 0 [pid 3513] <... exit_group resumed>) = ? [pid 3509] +++ exited with 0 +++ [pid 3514] <... futex resumed>) = ? [ 74.278520][ T3514] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 74.303983][ T3514] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 74.326629][ T3509] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 3514] +++ exited with 0 +++ [pid 3519] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3525] <... futex resumed>) = 0 [pid 3519] <... futex resumed>) = 1 [pid 3525] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3519] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3528] <... mount resumed>) = 0 [pid 3521] <... write resumed>) = 1048576 [pid 3528] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3528] <... openat resumed>) = 3 [pid 3521] <... futex resumed>) = 1 [pid 3520] <... futex resumed>) = 0 [pid 3528] chdir("./bus" [pid 3521] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3520] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3528] <... chdir resumed>) = 0 [pid 3521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3520] <... futex resumed>) = 0 [pid 3528] ioctl(4, LOOP_CLR_FD [pid 3521] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3520] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3525] <... openat resumed>) = 7 [pid 3525] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... futex resumed>) = 0 [pid 3519] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3519] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3525] <... futex resumed>) = 1 [ 74.344658][ T3528] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/97/bus supports timestamps until 2038 (0x7fffffff) [ 74.346907][ T3525] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 74.358673][ T3521] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 74.370666][ T3525] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 3525] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3525] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3519] <... futex resumed>) = 0 [pid 3519] exit_group(0) = ? [pid 3525] <... futex resumed>) = ? [pid 3528] <... ioctl resumed>) = 0 [pid 3525] +++ exited with 0 +++ [pid 3521] <... openat resumed>) = 7 [pid 3519] +++ exited with 0 +++ [pid 3513] +++ exited with 0 +++ [pid 3508] +++ exited with 0 +++ [pid 376] <... umount2 resumed>) = 0 [pid 3528] close(4 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3519, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3513, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3508, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 3528] <... close resumed>) = 0 [pid 3528] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3518] <... futex resumed>) = 0 [pid 377] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3528] chdir("./file0" [pid 3518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3528] <... chdir resumed>) = 0 [pid 3518] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3528] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 3528] <... futex resumed>) = 0 [pid 3518] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] fstat(3, [pid 376] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] fstat(3, [pid 372] fstat(3, [pid 3528] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3518] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 376] lstat("./99/bus", [pid 373] getdents64(3, [pid 372] getdents64(3, [pid 3518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./98/binderfs", [pid 376] openat(AT_FDCWD, "./99/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] lstat("./99/binderfs", [pid 372] lstat("./96/binderfs", [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] <... openat resumed>) = 4 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./98/binderfs" [pid 376] fstat(4, [pid 373] unlink("./99/binderfs" [pid 372] unlink("./96/binderfs" [pid 3521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... unlink resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... unlink resumed>) = 0 [pid 3521] <... futex resumed>) = 1 [pid 3521] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3528] <... open resumed>) = 4 [pid 3520] <... futex resumed>) = 0 [pid 3528] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3520] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] getdents64(4, [pid 373] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... unlink resumed>) = 0 [pid 3528] <... futex resumed>) = 1 [pid 3521] <... futex resumed>) = 0 [pid 3520] <... futex resumed>) = 1 [pid 3518] <... futex resumed>) = 0 [pid 3520] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3518] <... futex resumed>) = 0 [pid 3521] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3521] <... openat resumed>) = 8 [pid 3521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3520] <... futex resumed>) = 0 [pid 3521] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3520] exit_group(0 [pid 3528] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3521] <... futex resumed>) = ? [pid 3520] <... exit_group resumed>) = ? [pid 3521] +++ exited with 0 +++ [pid 3528] <... openat resumed>) = 5 [pid 3520] +++ exited with 0 +++ [pid 3528] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3518] <... futex resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3520, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3528] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3518] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3528] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3528] <... write resumed>) = 196608 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3528] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3528] <... futex resumed>) = 1 [pid 376] getdents64(4, [pid 374] lstat("./97/binderfs", [pid 3528] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./99/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./99") = 0 [pid 376] mkdir("./100", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3518] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] unlink("./97/binderfs" [pid 3528] <... futex resumed>) = 0 [pid 3518] <... futex resumed>) = 1 [pid 3528] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... unlink resumed>) = 0 [pid 3528] <... mount resumed>) = 0 [pid 374] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3528] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3528] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3518] <... futex resumed>) = 0 [pid 3518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3528] <... futex resumed>) = 0 [pid 3518] <... futex resumed>) = 1 [pid 3528] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [ 74.385156][ T3521] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 74.399292][ T23] audit: type=1400 audit(1674309922.720:88): avc: denied { unlink } for pid=143 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [pid 3518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./99/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./99/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./99/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./99") = 0 [pid 373] mkdir("./100", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3518] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3518] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3518] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3518] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3518] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3537], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3537 [pid 3518] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3518] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3537 attached [pid 3537] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3537] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 3537] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3518] <... futex resumed>) = 0 [pid 3518] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3518] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3537] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 [pid 3537] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3518] <... futex resumed>) = 0 [pid 3518] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3518] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3537] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3537] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3518] <... futex resumed>) = 0 [pid 3537] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3528] <... open resumed>) = 6 [pid 3528] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3528] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3518] exit_group(0 [pid 3528] <... futex resumed>) = ? [pid 3518] <... exit_group resumed>) = ? [pid 3537] <... futex resumed>) = ? [pid 3528] +++ exited with 0 +++ [pid 3537] +++ exited with 0 +++ [pid 3518] +++ exited with 0 +++ [pid 377] <... umount2 resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... umount2 resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 377] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] close(3 [pid 374] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] ioctl(3, LOOP_CLR_FD [pid 372] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... close resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./98/bus", [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] lstat("./97/bus", [pid 373] close(3 [pid 372] lstat("./96/bus", [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... close resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3538 [pid 374] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./98/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... openat resumed>) = 4 [pid 374] openat(AT_FDCWD, "./97/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3539 [pid 372] <... openat resumed>) = 4 [pid 377] fstat(4, [pid 372] fstat(4, [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... openat resumed>) = 4 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, [pid 374] fstat(4, [pid 372] getdents64(4, [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, [pid 372] getdents64(4, [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4 [pid 372] close(4 [pid 377] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 377] rmdir("./98/bus" [pid 372] rmdir("./96/bus" [pid 377] <... rmdir resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 377] getdents64(3, [pid 374] getdents64(4, [pid 372] getdents64(3, [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3 [pid 374] getdents64(4, [pid 372] close(3 [pid 377] <... close resumed>) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] <... close resumed>) = 0 [pid 377] rmdir("./98" [pid 374] close(4 [pid 372] rmdir("./96" [pid 377] <... rmdir resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 377] mkdir("./99", 0777 [pid 372] mkdir("./97", 0777 [pid 377] <... mkdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 374] rmdir("./97/bus" [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 377] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 377] ioctl(3, LOOP_CLR_FD [pid 374] <... rmdir resumed>) = 0 [pid 372] ioctl(3, LOOP_CLR_FD [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] getdents64(3, [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 372] close(3 [pid 377] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] close(3 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3540 [pid 374] <... close resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3541 [pid 374] rmdir("./97"./strace-static-x86_64: Process 3538 attached ) = 0 [pid 3538] set_robust_list(0x55555713c5e0, 24 [pid 374] mkdir("./98", 0777 [pid 3538] <... set_robust_list resumed>) = 0 [pid 3538] chdir("./100" [pid 374] <... mkdir resumed>) = 0 [pid 3538] <... chdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3538] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 374] <... openat resumed>) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3538] <... prctl resumed>) = 0 [pid 3538] setpgid(0, 0) = 0 [pid 3538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3542 [pid 3538] write(3, "1000", 4) = 4 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3518, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 3538] close(3) = 0 [pid 3538] symlink("/dev/binderfs", "./binderfs" [pid 375] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3538] <... symlink resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3538] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3538] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 3538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 375] fstat(3, [pid 3538] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3538] <... mprotect resumed>) = 0 [pid 3538] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] getdents64(3, [pid 3538] <... clone resumed>, parent_tid=[3543], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3543 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3538] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3538] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3538] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3541 attached [pid 375] lstat("./97/binderfs", [pid 3541] set_robust_list(0x55555713c5e0, 24) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./97/binderfs" [pid 3541] chdir("./97") = 0 [pid 3541] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 375] <... unlink resumed>) = 0 [pid 3541] <... prctl resumed>) = 0 [pid 375] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3541] setpgid(0, 0./strace-static-x86_64: Process 3542 attached ) = 0 [pid 3541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3541] write(3, "1000", 4) = 4 [pid 3541] close(3) = 0 [pid 3541] symlink("/dev/binderfs", "./binderfs" [pid 3542] set_robust_list(0x55555713c5e0, 24 [pid 3541] <... symlink resumed>) = 0 [pid 3541] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 3539 attached [pid 3542] <... set_robust_list resumed>) = 0 [pid 3541] <... mmap resumed>) = 0x7f64ff044000 [pid 3541] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3542] chdir("./98" [pid 3541] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3539] set_robust_list(0x55555713c5e0, 24 [pid 3542] <... chdir resumed>) = 0 [pid 3539] <... set_robust_list resumed>) = 0 [pid 3541] <... clone resumed>, parent_tid=[3544], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3544 [pid 3542] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3542] <... prctl resumed>) = 0 [pid 3539] chdir("./100" [pid 3541] <... futex resumed>) = 0 [pid 3542] setpgid(0, 0 [pid 3541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3539] <... chdir resumed>) = 0 [pid 3542] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 3543 attached [pid 3543] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3543] memfd_create("syzkaller", 0 [pid 3542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3539] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3543] <... memfd_create resumed>) = 3 [pid 3543] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3542] <... openat resumed>) = 3 [pid 3539] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 3540 attached [pid 3542] write(3, "1000", 4 [pid 3539] setpgid(0, 0 [pid 3542] <... write resumed>) = 4 [pid 3539] <... setpgid resumed>) = 0 [pid 3542] close(3) = 0 [pid 3540] set_robust_list(0x55555713c5e0, 24 [pid 3539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3542] symlink("/dev/binderfs", "./binderfs" [pid 3540] <... set_robust_list resumed>) = 0 [pid 3539] <... openat resumed>) = 3 [pid 3542] <... symlink resumed>) = 0 [pid 3540] chdir("./99" [pid 3539] write(3, "1000", 4 [pid 3542] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3540] <... chdir resumed>) = 0 [pid 3539] <... write resumed>) = 4 [pid 3542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3540] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3539] close(3 [pid 3542] <... mmap resumed>) = 0x7f64ff044000 [pid 3540] <... prctl resumed>) = 0 [pid 3539] <... close resumed>) = 0 [pid 3542] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3540] setpgid(0, 0 [pid 3539] symlink("/dev/binderfs", "./binderfs" [pid 3542] <... mprotect resumed>) = 0 [pid 3540] <... setpgid resumed>) = 0 [pid 3542] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3539] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 3544 attached [pid 3539] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3544] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3539] <... futex resumed>) = 0 [pid 3542] <... clone resumed>, parent_tid=[3545], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3545 ./strace-static-x86_64: Process 3545 attached [pid 3544] memfd_create("syzkaller", 0 [pid 3542] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3540] <... openat resumed>) = 3 [pid 3539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3544] <... memfd_create resumed>) = 3 [pid 3542] <... futex resumed>) = 0 [pid 3545] set_robust_list(0x7f64ff0649e0, 24 [pid 3540] write(3, "1000", 4 [pid 3539] <... mmap resumed>) = 0x7f64ff044000 [pid 3544] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3542] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3539] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3540] <... write resumed>) = 4 [pid 3544] <... mmap resumed>) = 0x7f64f6c44000 [pid 3539] <... mprotect resumed>) = 0 [pid 3540] close(3 [pid 3545] <... set_robust_list resumed>) = 0 [pid 3544] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3543] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3539] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3540] <... close resumed>) = 0 [pid 3540] symlink("/dev/binderfs", "./binderfs" [pid 3539] <... clone resumed>, parent_tid=[3546], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3546 ./strace-static-x86_64: Process 3546 attached [pid 3545] memfd_create("syzkaller", 0 [pid 3540] <... symlink resumed>) = 0 [pid 3539] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3540] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3546] set_robust_list(0x7f64ff0649e0, 24 [pid 3545] <... memfd_create resumed>) = 3 [pid 3539] <... futex resumed>) = 0 [pid 3540] <... futex resumed>) = 0 [pid 3539] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3546] <... set_robust_list resumed>) = 0 [pid 3545] <... mmap resumed>) = 0x7f64f6c44000 [pid 3540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3543] <... write resumed>) = 1048576 [pid 3543] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3543] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3540] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3546] memfd_create("syzkaller", 0 [pid 3540] <... mprotect resumed>) = 0 [pid 3540] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3547 attached [pid 3546] <... memfd_create resumed>) = 3 [pid 3547] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3547] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3540] <... clone resumed>, parent_tid=[3547], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3547 [pid 3546] <... mmap resumed>) = 0x7f64f6c44000 [pid 3540] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3540] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3547] <... futex resumed>) = 0 [pid 3547] memfd_create("syzkaller", 0) = 3 [pid 3547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 375] <... umount2 resumed>) = 0 [pid 3543] <... openat resumed>) = 4 [pid 3543] ioctl(4, LOOP_SET_FD, 3 [pid 375] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./97/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./97/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./97/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./97") = 0 [pid 375] mkdir("./98", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3547] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3543] <... ioctl resumed>) = 0 [pid 3543] close(3) = 0 [pid 3543] mkdir("./bus", 0777) = 0 [pid 3543] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3547] <... write resumed>) = 1048576 [pid 3547] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3547] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 3547] ioctl(4, LOOP_SET_FD, 3 [pid 3545] <... write resumed>) = 1048576 [pid 3544] <... write resumed>) = 1048576 [pid 3545] munmap(0x7f64f6c44000, 1048576 [pid 3544] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3544] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3545] <... munmap resumed>) = 0 [pid 3545] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 375] <... openat resumed>) = 3 [pid 3544] <... openat resumed>) = 4 [pid 3544] ioctl(4, LOOP_SET_FD, 3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 3547] <... ioctl resumed>) = 0 [pid 3547] close(3) = 0 [pid 3547] mkdir("./bus", 0777 [pid 3544] <... ioctl resumed>) = 0 [pid 3544] close(3 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 3545] <... openat resumed>) = 4 [pid 3544] <... close resumed>) = 0 [pid 3545] ioctl(4, LOOP_SET_FD, 3 [pid 3544] mkdir("./bus", 0777) = 0 [pid 3544] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3547] <... mkdir resumed>) = 0 [pid 3547] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3554 [pid 3546] <... write resumed>) = 1048576 [pid 3546] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3546] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3545] <... ioctl resumed>) = 0 [pid 3546] <... openat resumed>) = 4 [pid 3545] close(3) = 0 [pid 3545] mkdir("./bus", 0777) = 0 [pid 3545] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3546] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 3554 attached [pid 3554] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3554] chdir("./98") = 0 [pid 3554] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3554] setpgid(0, 0) = 0 [pid 3554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3554] write(3, "1000", 4) = 4 [pid 3554] close(3) = 0 [pid 3554] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3554] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3554] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3543] <... mount resumed>) = 0 [pid 3543] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3543] chdir("./bus") = 0 [pid 3543] ioctl(4, LOOP_CLR_FD [pid 3546] <... ioctl resumed>) = 0 [pid 3546] close(3) = 0 [pid 3546] mkdir("./bus", 0777) = 0 [pid 3546] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3554] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3547] <... mount resumed>) = 0 [pid 3543] <... ioctl resumed>) = 0 [pid 3543] close(4) = 0 [pid 3543] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3538] <... futex resumed>) = 0 [pid 3543] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3538] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3538] <... futex resumed>) = 0 [pid 3543] chdir("./file0" [pid 3538] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3543] <... chdir resumed>) = 0 [pid 3543] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3538] <... futex resumed>) = 0 [pid 3543] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3538] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3538] <... futex resumed>) = 0 [pid 3543] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3538] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3543] <... open resumed>) = 4 [pid 3543] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3538] <... futex resumed>) = 0 [pid 3543] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3538] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3538] <... futex resumed>) = 0 [pid 3543] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3538] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3543] <... openat resumed>) = 5 [pid 3543] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3538] <... futex resumed>) = 0 [pid 3543] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3538] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3538] <... futex resumed>) = 0 [pid 3543] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3538] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3543] <... write resumed>) = 196608 [pid 3543] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3538] <... futex resumed>) = 0 [pid 3543] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3538] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3547] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3538] <... futex resumed>) = 0 [pid 3543] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3538] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3543] <... mount resumed>) = 0 [pid 3543] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3538] <... futex resumed>) = 0 [pid 3543] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3538] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3538] <... futex resumed>) = 0 [pid 3543] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3538] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3543] <... open resumed>) = 6 [pid 3543] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3538] <... futex resumed>) = 0 [pid 3543] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3538] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3538] <... futex resumed>) = 0 [pid 3543] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3538] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3554] <... mprotect resumed>) = 0 [pid 3547] <... openat resumed>) = 3 [pid 3554] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 74.694802][ T3543] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/100/bus supports timestamps until 2038 (0x7fffffff) [ 74.708427][ T3547] ext4 filesystem being mounted at /root/syzkaller.43WzWH/99/bus supports timestamps until 2038 (0x7fffffff) [pid 3547] chdir("./bus") = 0 [pid 3554] <... clone resumed>, parent_tid=[3563], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3563 [pid 3547] ioctl(4, LOOP_CLR_FD [pid 3554] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3547] <... ioctl resumed>) = 0 [pid 3554] <... futex resumed>) = 0 [pid 3547] close(4 [pid 3554] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3547] <... close resumed>) = 0 [pid 3547] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3547] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3540] <... futex resumed>) = 0 [pid 3540] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3544] <... mount resumed>) = 0 [pid 3544] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3544] chdir("./bus") = 0 [pid 3544] ioctl(4, LOOP_CLR_FD) = 0 [pid 3544] close(4) = 0 [pid 3544] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3541] <... futex resumed>) = 0 [pid 3541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3544] <... futex resumed>) = 1 [pid 3544] chdir("./file0") = 0 [pid 3544] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3541] <... futex resumed>) = 0 [pid 3541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3544] <... futex resumed>) = 1 [pid 3544] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000./strace-static-x86_64: Process 3563 attached [pid 3563] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3563] memfd_create("syzkaller", 0) = 3 [pid 3563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3547] <... futex resumed>) = 0 [pid 3540] <... futex resumed>) = 1 [pid 3547] chdir("./file0" [pid 3540] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3544] <... open resumed>) = 4 [pid 3547] <... chdir resumed>) = 0 [pid 3544] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3547] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3544] <... futex resumed>) = 1 [pid 3541] <... futex resumed>) = 0 [pid 3547] <... futex resumed>) = 1 [pid 3544] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3547] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3540] <... futex resumed>) = 0 [pid 3544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3541] <... futex resumed>) = 0 [pid 3540] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3544] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3547] <... futex resumed>) = 0 [pid 3540] <... futex resumed>) = 1 [pid 3547] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3544] <... openat resumed>) = 5 [pid 3540] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3547] <... open resumed>) = 4 [pid 3544] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3547] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3544] <... futex resumed>) = 1 [pid 3541] <... futex resumed>) = 0 [pid 3547] <... futex resumed>) = 1 [pid 3544] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3540] <... futex resumed>) = 0 [pid 3547] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3541] <... futex resumed>) = 0 [pid 3540] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3544] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3540] <... futex resumed>) = 0 [pid 3547] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3544] <... write resumed>) = 196608 [pid 3540] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3547] <... openat resumed>) = 5 [pid 3544] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3547] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3541] <... futex resumed>) = 0 [pid 3544] <... futex resumed>) = 1 [pid 3547] <... futex resumed>) = 1 [pid 3541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3540] <... futex resumed>) = 0 [pid 3544] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3547] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3541] <... futex resumed>) = 0 [pid 3540] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3540] <... futex resumed>) = 0 [pid 3547] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3544] <... mount resumed>) = 0 [pid 3540] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3547] <... write resumed>) = 196608 [pid 3544] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3547] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3541] <... futex resumed>) = 0 [pid 3544] <... futex resumed>) = 1 [pid 3540] <... futex resumed>) = 0 [pid 3547] <... futex resumed>) = 1 [pid 3544] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3540] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3541] <... futex resumed>) = 0 [pid 3540] <... futex resumed>) = 0 [pid 3547] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3544] <... open resumed>) = 6 [pid 3541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3540] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3544] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3547] <... mount resumed>) = 0 [pid 3544] <... futex resumed>) = 1 [pid 3541] <... futex resumed>) = 0 [pid 3541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3547] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3544] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3541] <... futex resumed>) = 0 [pid 3541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3547] <... futex resumed>) = 1 [pid 3540] <... futex resumed>) = 0 [pid 3547] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3540] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3547] <... open resumed>) = 6 [pid 3540] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3547] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3563] <... write resumed>) = 1048576 [pid 3547] <... futex resumed>) = 1 [pid 3540] <... futex resumed>) = 0 [pid 3540] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3547] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3540] <... futex resumed>) = 0 [pid 3540] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3563] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3563] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 74.734978][ T3544] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/97/bus supports timestamps until 2038 (0x7fffffff) [ 74.747337][ T3545] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/98/bus supports timestamps until 2038 (0x7fffffff) [pid 3563] ioctl(4, LOOP_SET_FD, 3 [pid 3545] <... mount resumed>) = 0 [pid 3543] <... write resumed>) = 1048576 [pid 3543] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3538] <... futex resumed>) = 0 [pid 3543] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3538] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3538] <... futex resumed>) = 0 [pid 3543] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3538] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3563] <... ioctl resumed>) = 0 [pid 3547] <... write resumed>) = 1048576 [pid 3546] <... mount resumed>) = 0 [pid 3545] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3563] close(3 [pid 3546] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3547] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3545] <... openat resumed>) = 3 [pid 3563] <... close resumed>) = 0 [pid 3547] <... futex resumed>) = 1 [pid 3540] <... futex resumed>) = 0 [pid 3547] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3540] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3563] mkdir("./bus", 0777 [pid 3546] <... openat resumed>) = 3 [pid 3545] chdir("./bus" [pid 3540] <... futex resumed>) = 0 [pid 3563] <... mkdir resumed>) = 0 [ 74.777444][ T3546] ext4 filesystem being mounted at /root/syzkaller.k3ECep/100/bus supports timestamps until 2038 (0x7fffffff) [ 74.778456][ T3543] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 74.804778][ T3543] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 3546] chdir("./bus" [pid 3545] <... chdir resumed>) = 0 [pid 3563] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3546] <... chdir resumed>) = 0 [pid 3545] ioctl(4, LOOP_CLR_FD [pid 3546] ioctl(4, LOOP_CLR_FD [pid 3545] <... ioctl resumed>) = 0 [pid 3543] <... openat resumed>) = 7 [pid 3541] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3540] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3546] <... ioctl resumed>) = 0 [pid 3545] close(4 [pid 3543] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3541] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3546] close(4 [pid 3545] <... close resumed>) = 0 [pid 3546] <... close resumed>) = 0 [pid 3545] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3546] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3545] <... futex resumed>) = 1 [pid 3546] <... futex resumed>) = 1 [pid 3545] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3546] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3543] <... futex resumed>) = 1 [pid 3542] <... futex resumed>) = 0 [pid 3541] <... futex resumed>) = 0 [pid 3539] <... futex resumed>) = 0 [pid 3538] <... futex resumed>) = 0 [pid 3543] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3539] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3538] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3542] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3541] <... mmap resumed>) = 0x7f64f6d23000 [pid 3538] <... futex resumed>) = 0 [pid 3546] <... futex resumed>) = 0 [pid 3543] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3542] <... futex resumed>) = 1 [pid 3539] <... futex resumed>) = 1 [pid 3545] <... futex resumed>) = 0 [pid 3538] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3546] chdir("./file0" [pid 3545] chdir("./file0" [pid 3543] <... openat resumed>) = 8 [pid 3542] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3541] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3539] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3546] <... chdir resumed>) = 0 [pid 3545] <... chdir resumed>) = 0 [pid 3543] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3541] <... mprotect resumed>) = 0 [pid 3541] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3546] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3545] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3543] <... futex resumed>) = 1 [pid 3538] <... futex resumed>) = 0 [pid 3546] <... futex resumed>) = 1 [pid 3545] <... futex resumed>) = 1 [pid 3543] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3542] <... futex resumed>) = 0 [pid 3539] <... futex resumed>) = 0 [pid 3538] exit_group(0./strace-static-x86_64: Process 3567 attached [pid 3547] <... openat resumed>) = 7 [pid 3546] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3545] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3543] <... futex resumed>) = ? [pid 3542] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3541] <... clone resumed>, parent_tid=[3567], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3567 [pid 3539] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3538] <... exit_group resumed>) = ? [pid 3567] set_robust_list(0x7f64f6d439e0, 24 [pid 3547] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3543] +++ exited with 0 +++ [pid 3542] <... futex resumed>) = 0 [pid 3541] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3539] <... futex resumed>) = 0 [pid 3538] +++ exited with 0 +++ [pid 3545] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3567] <... set_robust_list resumed>) = 0 [pid 3547] <... futex resumed>) = 1 [pid 3546] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3545] <... open resumed>) = 4 [pid 3544] <... write resumed>) = 1048576 [pid 3542] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3541] <... futex resumed>) = 0 [pid 3540] <... futex resumed>) = 0 [pid 3539] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3567] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3545] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3541] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3540] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3538, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3563] <... mount resumed>) = 0 [pid 3547] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3546] <... open resumed>) = 4 [pid 3544] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3546] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3539] <... futex resumed>) = 0 [pid 3546] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3539] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3539] <... futex resumed>) = 0 [pid 3546] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3539] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3546] <... openat resumed>) = 5 [pid 3546] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3539] <... futex resumed>) = 0 [pid 3546] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3539] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3539] <... futex resumed>) = 0 [pid 3546] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3539] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3546] <... write resumed>) = 196608 [pid 3546] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3539] <... futex resumed>) = 0 [pid 3546] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3539] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3539] <... futex resumed>) = 0 [pid 3546] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3539] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3546] <... mount resumed>) = 0 [pid 3546] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3539] <... futex resumed>) = 0 [pid 3547] <... openat resumed>) = 8 [pid 3546] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3539] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3547] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3539] <... futex resumed>) = 0 [pid 3547] <... futex resumed>) = 0 [pid 3546] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3545] <... futex resumed>) = 0 [pid 3539] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3542] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3540] <... futex resumed>) = 0 [pid 3547] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3546] <... open resumed>) = 6 [pid 3546] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3539] <... futex resumed>) = 0 [ 74.805790][ T3547] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 74.832082][ T3547] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 74.851768][ T3563] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/98/bus supports timestamps until 2038 (0x7fffffff) [ 74.859516][ T3567] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3546] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3539] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3563] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3544] <... futex resumed>) = 0 [pid 3539] <... futex resumed>) = 0 [pid 3563] <... openat resumed>) = 3 [pid 3546] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3544] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3539] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3563] chdir("./bus" [pid 3545] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3542] <... futex resumed>) = 0 [pid 3540] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3563] <... chdir resumed>) = 0 [pid 3545] <... openat resumed>) = 5 [pid 3542] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3563] ioctl(4, LOOP_CLR_FD [pid 3545] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3540] exit_group(0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3567] <... openat resumed>) = 7 [pid 3563] <... ioctl resumed>) = 0 [pid 3547] <... futex resumed>) = ? [pid 3545] <... futex resumed>) = 0 [pid 3542] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3540] <... exit_group resumed>) = ? [pid 376] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3567] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3563] close(4 [pid 3547] +++ exited with 0 +++ [pid 3545] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3567] <... futex resumed>) = 1 [pid 3541] <... futex resumed>) = 0 [pid 3567] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3542] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./100/binderfs", [pid 3540] +++ exited with 0 +++ [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3540, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 376] unlink("./100/binderfs" [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 376] <... unlink resumed>) = 0 [pid 377] <... restart_syscall resumed>) = 0 [pid 376] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./99/binderfs") = 0 [pid 377] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3542] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3563] <... close resumed>) = 0 [pid 3563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3563] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3544] <... futex resumed>) = 0 [pid 3544] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3544] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3541] <... futex resumed>) = 0 [pid 3544] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3541] exit_group(0 [pid 3567] <... futex resumed>) = ? [pid 3544] <... futex resumed>) = ? [pid 3541] <... exit_group resumed>) = ? [pid 3567] +++ exited with 0 +++ [pid 3544] +++ exited with 0 +++ [pid 3541] +++ exited with 0 +++ [pid 3554] <... futex resumed>) = 0 [pid 3545] <... write resumed>) = 196608 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3541, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3545] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3545] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3554] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3542] <... futex resumed>) = 0 [pid 3546] <... write resumed>) = 1048576 [pid 3546] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3546] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3563] <... futex resumed>) = 0 [pid 3554] <... futex resumed>) = 1 [pid 3542] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3539] <... futex resumed>) = 0 [pid 3563] chdir("./file0" [pid 3554] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3545] <... futex resumed>) = 0 [pid 3542] <... futex resumed>) = 1 [pid 3539] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3542] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3539] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3545] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3563] <... chdir resumed>) = 0 [pid 3563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3546] <... futex resumed>) = 0 [pid 3545] <... mount resumed>) = 0 [pid 3563] <... futex resumed>) = 1 [pid 3554] <... futex resumed>) = 0 [pid 3546] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3545] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3563] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3554] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3545] <... futex resumed>) = 1 [pid 3542] <... futex resumed>) = 0 [pid 3554] <... futex resumed>) = 0 [pid 3545] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3542] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3554] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3542] <... futex resumed>) = 0 [pid 3563] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3542] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3545] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, [pid 3563] <... open resumed>) = 4 [pid 3563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3563] <... futex resumed>) = 1 [pid 3554] <... futex resumed>) = 0 [pid 372] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3563] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3554] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3554] <... futex resumed>) = 0 [pid 3554] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] lstat("./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./97/binderfs" [pid 3563] <... openat resumed>) = 5 [pid 372] <... unlink resumed>) = 0 [pid 3563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3563] <... futex resumed>) = 1 [pid 3554] <... futex resumed>) = 0 [pid 3563] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3554] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3554] <... futex resumed>) = 0 [pid 3563] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3554] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3563] <... write resumed>) = 196608 [pid 3563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3554] <... futex resumed>) = 0 [pid 3563] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3554] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3563] <... mount resumed>) = 0 [pid 3554] <... futex resumed>) = 0 [pid 3563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3554] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3563] <... futex resumed>) = 0 [pid 3554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3563] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3554] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 74.877443][ T3567] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 74.913421][ T3546] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3554] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3546] <... openat resumed>) = 7 [pid 3546] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3539] <... futex resumed>) = 0 [pid 3539] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3539] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3546] <... futex resumed>) = 1 [pid 3546] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./100/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3546] <... openat resumed>) = 8 [pid 376] <... openat resumed>) = 4 [pid 3546] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3539] <... futex resumed>) = 0 [pid 3539] exit_group(0) = ? [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, [pid 3546] <... futex resumed>) = ? [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./100/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./100") = 0 [pid 376] mkdir("./101", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3542] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3542] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3542] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3542] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3542] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3569 attached , parent_tid=[3569], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3569 [pid 3542] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3542] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3569] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3569] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 3569] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3542] <... futex resumed>) = 0 [pid 3569] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3542] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3569] <... openat resumed>) = 7 [pid 3542] <... futex resumed>) = 0 [pid 3542] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3569] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3542] <... futex resumed>) = 0 [pid 3542] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3542] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3569] <... futex resumed>) = 1 [pid 3569] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3569] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3542] <... futex resumed>) = 0 [pid 3569] <... futex resumed>) = 1 [pid 3569] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3563] <... open resumed>) = 6 [pid 3545] <... open resumed>) = 6 [pid 3554] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3554] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3545] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3542] exit_group(0 [pid 3569] <... futex resumed>) = ? [pid 3563] <... futex resumed>) = 0 [pid 3554] <... futex resumed>) = 0 [pid 3545] <... futex resumed>) = ? [pid 3542] <... exit_group resumed>) = ? [pid 3569] +++ exited with 0 +++ [pid 3563] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3554] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3545] +++ exited with 0 +++ [pid 3563] <... write resumed>) = 1048576 [pid 3563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3554] <... futex resumed>) = 0 [pid 3554] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3554] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 74.927447][ T3546] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 3563] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 [pid 3546] +++ exited with 0 +++ [pid 3539] +++ exited with 0 +++ [pid 3563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = 0 [pid 3563] <... futex resumed>) = 1 [pid 3554] <... futex resumed>) = 0 [pid 377] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3539, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3563] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3554] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3542] +++ exited with 0 +++ [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 3563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3554] <... futex resumed>) = 0 [pid 377] lstat("./99/bus", [pid 372] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3563] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3542, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 373] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3563] <... openat resumed>) = 8 [pid 3554] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./97/bus", [pid 3563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] close(3 [pid 373] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3563] <... futex resumed>) = 0 [pid 3554] exit_group(0 [pid 377] openat(AT_FDCWD, "./99/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... openat resumed>) = 3 [pid 372] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3554] <... exit_group resumed>) = ? [pid 377] <... openat resumed>) = 4 [pid 376] <... close resumed>) = 0 [pid 374] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] fstat(3, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] fstat(4, [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] openat(AT_FDCWD, "./97/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, [pid 372] <... openat resumed>) = 4 [pid 377] getdents64(4, [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] fstat(4, [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3570 [pid 374] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] getdents64(4, [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] fstat(3, [pid 373] lstat("./100/binderfs", [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] close(4 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] getdents64(4, [pid 377] <... close resumed>) = 0 [pid 374] getdents64(3, [pid 373] unlink("./100/binderfs" [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] rmdir("./99/bus" [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] <... unlink resumed>) = 0 [pid 372] close(4 [pid 377] <... rmdir resumed>) = 0 [pid 374] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... close resumed>) = 0 [pid 377] getdents64(3, [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] rmdir("./97/bus" [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] lstat("./98/binderfs", [pid 372] <... rmdir resumed>) = 0 [pid 377] close(3 [pid 372] getdents64(3, [pid 377] <... close resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] rmdir("./99" [pid 372] close(3 [pid 377] <... rmdir resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 377] mkdir("./100", 0777 [pid 372] rmdir("./97" [pid 377] <... mkdir resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 372] mkdir("./98", 0777 [pid 377] <... openat resumed>) = 3 [pid 372] <... mkdir resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... openat resumed>) = 3 [pid 377] close(3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 377] <... close resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] close(3) = 0 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3571 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./98/binderfs" [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3572 [pid 374] <... unlink resumed>) = 0 [pid 374] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3572 attached [pid 3572] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3572] chdir("./98") = 0 [pid 3572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3572] setpgid(0, 0) = 0 [pid 3572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3572] write(3, "1000", 4) = 4 [pid 3572] close(3) = 0 [pid 3572] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3572] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3572] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3572] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3573], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3573 [pid 3572] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3572] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3573 attached [pid 3573] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3573] memfd_create("syzkaller", 0) = 3 [pid 3573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 3571 attached ./strace-static-x86_64: Process 3570 attached [pid 3571] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3570] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3570] chdir("./101" [pid 3571] chdir("./100") = 0 [pid 3570] <... chdir resumed>) = 0 [pid 3570] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3571] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3570] <... prctl resumed>) = 0 [pid 3570] setpgid(0, 0 [pid 3571] setpgid(0, 0 [pid 3570] <... setpgid resumed>) = 0 [pid 3571] <... setpgid resumed>) = 0 [pid 3570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3570] <... openat resumed>) = 3 [pid 3570] write(3, "1000", 4) = 4 [pid 3570] close(3) = 0 [pid 3570] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3570] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3570] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3570] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3574], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3574 [pid 3570] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3570] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3571] <... openat resumed>) = 3 [pid 3571] write(3, "1000", 4) = 4 [pid 3573] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3571] close(3) = 0 [pid 3571] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3571] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3571] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3571] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3575], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3575 [pid 3571] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3571] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3574 attached [pid 3573] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 3575 attached [ 74.978904][ T3563] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 74.993362][ T3563] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 3574] set_robust_list(0x7f64ff0649e0, 24 [pid 3573] munmap(0x7f64f6c44000, 1048576 [pid 3574] <... set_robust_list resumed>) = 0 [pid 3575] set_robust_list(0x7f64ff0649e0, 24 [pid 3573] <... munmap resumed>) = 0 [pid 3575] <... set_robust_list resumed>) = 0 [pid 3574] memfd_create("syzkaller", 0 [pid 3573] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3574] <... memfd_create resumed>) = 3 [pid 3574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3575] memfd_create("syzkaller", 0) = 3 [pid 3575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3574] <... write resumed>) = 1048576 [pid 3574] munmap(0x7f64f6c44000, 1048576 [pid 3575] <... write resumed>) = 1048576 [pid 3574] <... munmap resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3575] munmap(0x7f64f6c44000, 1048576 [pid 3574] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./98/bus", [pid 3575] <... munmap resumed>) = 0 [pid 3575] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./98/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./98/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./98") = 0 [pid 374] mkdir("./99", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3573] <... openat resumed>) = 4 [pid 3573] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3573] close(3) = 0 [pid 3573] mkdir("./bus", 0777 [pid 3575] <... openat resumed>) = 4 [pid 3573] <... mkdir resumed>) = 0 [pid 3563] +++ exited with 0 +++ [pid 3554] +++ exited with 0 +++ [pid 374] <... openat resumed>) = 3 [pid 3573] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3577 [pid 3574] <... openat resumed>) = 4 [pid 3574] ioctl(4, LOOP_SET_FD, 3 [pid 373] <... umount2 resumed>) = 0 [pid 3575] ioctl(4, LOOP_SET_FD, 3 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3554, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 373] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 3577 attached [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./100/bus", [pid 375] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3577] set_robust_list(0x55555713c5e0, 24 [pid 375] <... openat resumed>) = 3 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3577] <... set_robust_list resumed>) = 0 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3577] chdir("./99" [pid 375] getdents64(3, [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3577] <... chdir resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3577] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 375] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... openat resumed>) = 4 [pid 3577] <... prctl resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./98/binderfs", [pid 373] fstat(4, [pid 3577] setpgid(0, 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3577] <... setpgid resumed>) = 0 [pid 375] unlink("./98/binderfs" [pid 373] getdents64(4, [pid 3577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 375] <... unlink resumed>) = 0 [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3574] <... ioctl resumed>) = 0 [pid 3574] close(3) = 0 [pid 3574] mkdir("./bus", 0777) = 0 [pid 3577] <... openat resumed>) = 3 [pid 375] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] getdents64(4, [pid 3577] write(3, "1000", 4 [pid 3574] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3577] <... write resumed>) = 4 [pid 3577] close(3 [pid 373] close(4 [pid 3577] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 3577] symlink("/dev/binderfs", "./binderfs" [pid 373] rmdir("./100/bus") = 0 [pid 3577] <... symlink resumed>) = 0 [pid 373] getdents64(3, [pid 3577] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3577] <... futex resumed>) = 0 [pid 373] close(3 [pid 3577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 373] <... close resumed>) = 0 [pid 3577] <... mmap resumed>) = 0x7f64ff044000 [pid 373] rmdir("./100" [pid 3577] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3575] <... ioctl resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 3577] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3575] close(3 [pid 373] mkdir("./101", 0777 [pid 3573] <... mount resumed>) = 0 [pid 3575] <... close resumed>) = 0 [pid 3573] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 373] <... mkdir resumed>) = 0 [pid 3577] <... clone resumed>, parent_tid=[3582], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3582 [pid 3575] mkdir("./bus", 0777 [pid 3573] <... openat resumed>) = 3 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3575] <... mkdir resumed>) = 0 [pid 3573] chdir("./bus" [pid 373] <... openat resumed>) = 3 [pid 3577] <... futex resumed>) = 0 [pid 3575] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3573] <... chdir resumed>) = 0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 3577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3573] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 3582 attached [pid 3582] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3582] memfd_create("syzkaller", 0) = 3 [pid 3582] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3582] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3582] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3582] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3574] <... mount resumed>) = 0 [pid 3574] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3574] chdir("./bus") = 0 [pid 3574] ioctl(4, LOOP_CLR_FD [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3585 [pid 375] <... umount2 resumed>) = 0 [pid 3573] <... ioctl resumed>) = 0 [pid 3573] close(4) = 0 [pid 3573] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3572] <... futex resumed>) = 0 [pid 3572] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3573] chdir("./file0" [pid 3572] <... futex resumed>) = 0 [pid 3572] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3573] <... chdir resumed>) = 0 [pid 3573] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3572] <... futex resumed>) = 0 [pid 3572] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3573] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3572] <... futex resumed>) = 0 [ 75.095717][ T3573] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/98/bus supports timestamps until 2038 (0x7fffffff) [ 75.125808][ T3574] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/101/bus supports timestamps until 2038 (0x7fffffff) [pid 3572] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3585 attached [pid 3582] <... openat resumed>) = 4 [pid 3574] <... ioctl resumed>) = 0 [pid 3573] <... open resumed>) = 4 [pid 375] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3575] <... mount resumed>) = 0 [pid 3575] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3573] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3575] chdir("./bus" [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3573] <... futex resumed>) = 1 [pid 3572] <... futex resumed>) = 0 [pid 3575] <... chdir resumed>) = 0 [pid 3575] ioctl(4, LOOP_CLR_FD) = 0 [pid 3575] close(4) = 0 [pid 3575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3571] <... futex resumed>) = 0 [pid 3571] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3571] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3575] <... futex resumed>) = 1 [pid 3575] chdir("./file0") = 0 [pid 3575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3571] <... futex resumed>) = 0 [pid 3571] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3571] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3575] <... futex resumed>) = 1 [pid 3575] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3571] <... futex resumed>) = 0 [pid 3571] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3571] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3575] <... futex resumed>) = 1 [pid 3575] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3571] <... futex resumed>) = 0 [pid 3571] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3571] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3575] <... futex resumed>) = 1 [pid 3575] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3572] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./98/bus", [pid 3573] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3572] <... futex resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3572] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3573] <... openat resumed>) = 5 [pid 3573] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3573] <... futex resumed>) = 1 [pid 3572] <... futex resumed>) = 0 [pid 3572] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "./98/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3573] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3572] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 3572] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3575] <... write resumed>) = 196608 [pid 3575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3571] <... futex resumed>) = 0 [pid 3571] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3571] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3575] <... futex resumed>) = 1 [pid 3575] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3571] <... futex resumed>) = 0 [pid 3571] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3571] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3575] <... futex resumed>) = 1 [pid 3575] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3571] <... futex resumed>) = 0 [pid 3571] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3571] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3575] <... futex resumed>) = 1 [pid 3575] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3573] <... write resumed>) = 196608 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3582] ioctl(4, LOOP_SET_FD, 3 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 3574] close(4 [pid 375] rmdir("./98/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./98") = 0 [pid 3573] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] mkdir("./99", 0777 [pid 3572] <... futex resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 3572] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3573] <... futex resumed>) = 1 [pid 3572] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3573] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3573] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3572] <... futex resumed>) = 0 [pid 3572] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3573] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3572] <... futex resumed>) = 0 [pid 3572] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3585] set_robust_list(0x55555713c5e0, 24 [pid 3582] <... ioctl resumed>) = 0 [pid 3582] close(3 [pid 3574] <... close resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 3582] <... close resumed>) = 0 [pid 3574] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3573] <... open resumed>) = 6 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3582] mkdir("./bus", 0777 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3589 [pid 3574] <... futex resumed>) = 1 [pid 3573] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3570] <... futex resumed>) = 0 [pid 3570] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3570] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3582] <... mkdir resumed>) = 0 [pid 3574] chdir("./file0" [pid 3582] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3573] <... futex resumed>) = 1 [pid 3572] <... futex resumed>) = 0 [pid 3574] <... chdir resumed>) = 0 [pid 3572] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3574] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3573] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3572] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3574] <... futex resumed>) = 1 [pid 3570] <... futex resumed>) = 0 [pid 3570] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3570] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3574] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3574] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3574] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3570] <... futex resumed>) = 0 [pid 3570] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3570] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3574] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3574] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3570] <... futex resumed>) = 0 [pid 3574] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3570] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3570] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3574] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 3574] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3570] <... futex resumed>) = 0 [pid 3570] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3570] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3574] <... futex resumed>) = 1 [pid 3574] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3574] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3570] <... futex resumed>) = 0 [pid 3570] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3570] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3574] <... futex resumed>) = 1 [pid 3574] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3574] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3570] <... futex resumed>) = 0 [pid 3570] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3570] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3574] <... futex resumed>) = 1 [ 75.156059][ T3575] ext4 filesystem being mounted at /root/syzkaller.43WzWH/100/bus supports timestamps until 2038 (0x7fffffff) [pid 3574] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3585] <... set_robust_list resumed>) = 0 [pid 3585] chdir("./101" [pid 3575] <... write resumed>) = 1048576 [pid 3585] <... chdir resumed>) = 0 [pid 3575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3585] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3575] <... futex resumed>) = 1 [pid 3571] <... futex resumed>) = 0 [pid 3571] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3571] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3585] <... prctl resumed>) = 0 [pid 3575] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 3589 attached [pid 3585] setpgid(0, 0 [pid 3574] <... write resumed>) = 1048576 [pid 3573] <... write resumed>) = 1048576 [pid 3589] set_robust_list(0x55555713c5e0, 24 [pid 3585] <... setpgid resumed>) = 0 [pid 3574] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3573] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3589] <... set_robust_list resumed>) = 0 [pid 3585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3574] <... futex resumed>) = 1 [pid 3573] <... futex resumed>) = 1 [pid 3572] <... futex resumed>) = 0 [pid 3589] chdir("./99" [pid 3585] <... openat resumed>) = 3 [pid 3574] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3573] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3572] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3589] <... chdir resumed>) = 0 [pid 3585] write(3, "1000", 4 [pid 3572] <... futex resumed>) = 0 [pid 3570] <... futex resumed>) = 0 [pid 3570] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3574] <... futex resumed>) = 0 [pid 3570] <... futex resumed>) = 1 [pid 3574] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3570] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3589] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3585] <... write resumed>) = 4 [pid 3572] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3589] <... prctl resumed>) = 0 [pid 3585] close(3 [pid 3589] setpgid(0, 0 [pid 3585] <... close resumed>) = 0 [pid 3589] <... setpgid resumed>) = 0 [pid 3585] symlink("/dev/binderfs", "./binderfs" [pid 3589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3585] <... symlink resumed>) = 0 [pid 3589] <... openat resumed>) = 3 [pid 3585] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3589] write(3, "1000", 4 [pid 3585] <... futex resumed>) = 0 [pid 3589] <... write resumed>) = 4 [pid 3585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3589] close(3 [pid 3585] <... mmap resumed>) = 0x7f64ff044000 [pid 3589] <... close resumed>) = 0 [pid 3585] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3589] symlink("/dev/binderfs", "./binderfs" [pid 3585] <... mprotect resumed>) = 0 [pid 3589] <... symlink resumed>) = 0 [pid 3585] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3589] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3585] <... clone resumed>, parent_tid=[3592], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3592 [pid 3589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3585] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3589] <... mmap resumed>) = 0x7f64ff044000 [pid 3585] <... futex resumed>) = 0 [pid 3589] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3585] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3589] <... mprotect resumed>) = 0 [pid 3589] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3593], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3593 [pid 3589] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3589] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3593 attached [pid 3593] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3593] memfd_create("syzkaller", 0 [pid 3571] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3571] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3571] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3571] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 3592 attached [pid 3571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3571] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3571] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3592] set_robust_list(0x7f64ff0649e0, 24 [pid 3573] <... openat resumed>) = 7 [pid 3571] <... clone resumed>, parent_tid=[3594], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3594 [pid 3571] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3571] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3593] <... memfd_create resumed>) = 3 [ 75.222380][ T3575] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 75.231890][ T3573] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 75.237787][ T3574] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 75.250713][ T3573] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 3593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3592] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 3594 attached [pid 3573] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3594] set_robust_list(0x7f64f6d439e0, 24 [pid 3592] memfd_create("syzkaller", 0 [pid 3582] <... mount resumed>) = 0 [pid 3573] <... futex resumed>) = 1 [pid 3572] <... futex resumed>) = 0 [pid 3594] <... set_robust_list resumed>) = 0 [pid 3592] <... memfd_create resumed>) = 3 [pid 3582] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3573] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3572] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3572] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3593] <... write resumed>) = 1048576 [pid 3593] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3593] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 3593] ioctl(4, LOOP_SET_FD, 3 [pid 3594] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3592] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3573] <... openat resumed>) = 8 [pid 3592] <... mmap resumed>) = 0x7f64f6c44000 [pid 3573] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3593] <... ioctl resumed>) = 0 [pid 3592] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3582] <... openat resumed>) = 3 [pid 3573] <... futex resumed>) = 1 [pid 3572] <... futex resumed>) = 0 [pid 3593] close(3 [pid 3573] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3572] exit_group(0 [pid 3593] <... close resumed>) = 0 [pid 3573] <... futex resumed>) = ? [pid 3572] <... exit_group resumed>) = ? [pid 3593] mkdir("./bus", 0777 [pid 3573] +++ exited with 0 +++ [pid 3572] +++ exited with 0 +++ [pid 3593] <... mkdir resumed>) = 0 [pid 3593] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3572, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3594] <... openat resumed>) = 8 [pid 3575] <... openat resumed>) = 7 [pid 3594] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3594] <... futex resumed>) = 1 [pid 3575] <... futex resumed>) = 0 [pid 3571] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3594] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3575] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3571] exit_group(0 [pid 372] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3594] <... futex resumed>) = ? [pid 3575] <... futex resumed>) = ? [pid 3571] <... exit_group resumed>) = ? [pid 372] <... openat resumed>) = 3 [pid 3594] +++ exited with 0 +++ [pid 3575] +++ exited with 0 +++ [pid 3571] +++ exited with 0 +++ [pid 372] fstat(3, [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3571, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./98/binderfs") = 0 [pid 372] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3582] chdir("./bus" [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, [pid 3582] <... chdir resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3582] ioctl(4, LOOP_CLR_FD [pid 3570] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 377] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3570] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3570] <... futex resumed>) = 0 [pid 377] lstat("./100/binderfs", [pid 3570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3570] <... mmap resumed>) = 0x7f64f6d23000 [pid 377] unlink("./100/binderfs" [pid 3570] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 377] <... unlink resumed>) = 0 [pid 3570] <... mprotect resumed>) = 0 [pid 377] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3592] <... write resumed>) = 1048576 [pid 3574] <... openat resumed>) = 7 [pid 3570] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3592] munmap(0x7f64f6c44000, 1048576./strace-static-x86_64: Process 3596 attached [pid 3596] set_robust_list(0x7f64f6d439e0, 24 [pid 3570] <... clone resumed>, parent_tid=[3596], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3596 [pid 3596] <... set_robust_list resumed>) = 0 [pid 3592] <... munmap resumed>) = 0 [pid 3570] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3596] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3574] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3570] <... futex resumed>) = 0 [pid 3596] <... openat resumed>) = 8 [pid 3574] <... futex resumed>) = 0 [pid 3570] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3596] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3574] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3596] <... futex resumed>) = 1 [pid 3570] <... futex resumed>) = 0 [pid 3596] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3570] exit_group(0 [pid 3596] <... futex resumed>) = ? [pid 3574] <... futex resumed>) = ? [pid 3570] <... exit_group resumed>) = ? [pid 3574] +++ exited with 0 +++ [ 75.274733][ T3582] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/99/bus supports timestamps until 2038 (0x7fffffff) [ 75.287051][ T3575] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 75.296699][ T3574] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 3592] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3593] <... mount resumed>) = 0 [pid 3593] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3593] chdir("./bus") = 0 [pid 3593] ioctl(4, LOOP_CLR_FD [pid 3582] <... ioctl resumed>) = 0 [pid 3582] close(4) = 0 [pid 3582] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3577] <... futex resumed>) = 0 [pid 3582] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3577] <... futex resumed>) = 0 [pid 3582] chdir("./file0" [pid 3577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3582] <... chdir resumed>) = 0 [pid 3582] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3577] <... futex resumed>) = 0 [pid 3596] +++ exited with 0 +++ [pid 3582] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3570] +++ exited with 0 +++ [pid 3582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3577] <... futex resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3570, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 3582] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3582] <... open resumed>) = 4 [pid 3582] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3577] <... futex resumed>) = 0 [pid 3582] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3577] <... futex resumed>) = 0 [pid 3592] <... openat resumed>) = 4 [pid 3582] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3592] ioctl(4, LOOP_SET_FD, 3 [pid 3582] <... openat resumed>) = 5 [pid 3582] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3582] <... futex resumed>) = 1 [pid 3577] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3582] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3577] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 3582] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] fstat(3, [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./98/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3582] <... write resumed>) = 196608 [pid 376] getdents64(3, [pid 372] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3582] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3582] <... futex resumed>) = 1 [pid 3577] <... futex resumed>) = 0 [pid 376] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3582] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3582] <... mount resumed>) = 0 [pid 3577] <... futex resumed>) = 0 [pid 376] lstat("./101/binderfs", [pid 3582] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] openat(AT_FDCWD, "./98/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3582] <... futex resumed>) = 0 [pid 3577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] unlink("./101/binderfs" [pid 3582] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... unlink resumed>) = 0 [pid 372] <... openat resumed>) = 4 [pid 3577] <... futex resumed>) = 0 [pid 376] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./98/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./98") = 0 [pid 372] mkdir("./99", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3593] <... ioctl resumed>) = 0 [pid 3593] close(4 [pid 3592] <... ioctl resumed>) = 0 [pid 3582] <... open resumed>) = 6 [ 75.328590][ T3593] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/99/bus supports timestamps until 2038 (0x7fffffff) [pid 376] <... umount2 resumed>) = 0 [pid 3582] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3577] <... futex resumed>) = 0 [pid 3582] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3577] <... futex resumed>) = 0 [pid 3592] close(3 [pid 3582] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3592] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3592] mkdir("./bus", 0777 [pid 376] lstat("./101/bus", [pid 3592] <... mkdir resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3592] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 376] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./101/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./101") = 0 [pid 376] mkdir("./102", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3582] <... write resumed>) = 1048576 [pid 3582] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3577] <... futex resumed>) = 0 [pid 3582] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3593] <... close resumed>) = 0 [pid 3582] <... openat resumed>) = 7 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 377] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] ioctl(3, LOOP_CLR_FD [pid 372] ioctl(3, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] lstat("./100/bus", [pid 376] close(3 [pid 372] close(3 [pid 3593] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3593] <... futex resumed>) = 1 [pid 3589] <... futex resumed>) = 0 [pid 377] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3593] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3589] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3589] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3601 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3602 [pid 3593] chdir("./file0" [pid 3589] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 4 [pid 3593] <... chdir resumed>) = 0 [pid 377] fstat(4, [pid 3593] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3593] <... futex resumed>) = 1 [pid 3589] <... futex resumed>) = 0 [pid 377] getdents64(4, [pid 3593] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3589] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3589] <... futex resumed>) = 0 [pid 377] getdents64(4, [pid 3593] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3589] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 3593] <... open resumed>) = 4 [pid 377] rmdir("./100/bus" [pid 3593] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... rmdir resumed>) = 0 [pid 3593] <... futex resumed>) = 1 [pid 3589] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 3593] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3589] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3589] <... futex resumed>) = 0 [pid 377] close(3 [pid 3593] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3589] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 3593] <... openat resumed>) = 5 [pid 377] rmdir("./100" [pid 3593] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... rmdir resumed>) = 0 [pid 3593] <... futex resumed>) = 1 [pid 3589] <... futex resumed>) = 0 [pid 377] mkdir("./101", 0777 [pid 3593] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3589] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... mkdir resumed>) = 0 [pid 3593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3589] <... futex resumed>) = 0 [pid 3582] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3593] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3589] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3603 ./strace-static-x86_64: Process 3601 attached [pid 3601] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3601] chdir("./102" [pid 3593] <... write resumed>) = 196608 [pid 3577] <... futex resumed>) = 0 [pid 3582] <... futex resumed>) = 1 [pid 3593] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3593] <... futex resumed>) = 1 [pid 3589] <... futex resumed>) = 0 [pid 3577] <... futex resumed>) = 0 [pid 3593] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3589] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3582] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3589] <... futex resumed>) = 0 [pid 3593] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3589] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3593] <... mount resumed>) = 0 [pid 3582] <... openat resumed>) = 8 [pid 3593] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3582] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3593] <... futex resumed>) = 1 [pid 3589] <... futex resumed>) = 0 [pid 3593] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3589] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3582] <... futex resumed>) = 1 [pid 3577] <... futex resumed>) = 0 [pid 3593] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3589] <... futex resumed>) = 0 [pid 3582] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3589] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3577] exit_group(0 [pid 3593] <... open resumed>) = 6 [pid 3582] <... futex resumed>) = ? [pid 3593] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3577] <... exit_group resumed>) = ? [pid 3593] <... futex resumed>) = 1 [pid 3589] <... futex resumed>) = 0 [pid 3593] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3589] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3589] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3601] <... chdir resumed>) = 0 [pid 3601] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3601] setpgid(0, 0) = 0 [pid 3601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3601] write(3, "1000", 4) = 4 [pid 3601] close(3) = 0 [pid 3601] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3601] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3601] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3601] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3605], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3605 [pid 3601] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3582] +++ exited with 0 +++ [pid 3577] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3577, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 3601] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3605 attached [pid 3605] set_robust_list(0x7f64ff0649e0, 24 [pid 374] <... restart_syscall resumed>) = 0 [pid 374] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./99/binderfs") = 0 [pid 374] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3605] <... set_robust_list resumed>) = 0 [pid 3605] memfd_create("syzkaller", 0) = 3 [ 75.403566][ T3582] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 75.417713][ T3582] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 3605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 3603 attached ./strace-static-x86_64: Process 3602 attached [pid 3603] set_robust_list(0x55555713c5e0, 24 [pid 3593] <... write resumed>) = 1048576 [pid 3603] <... set_robust_list resumed>) = 0 [pid 3602] set_robust_list(0x55555713c5e0, 24 [pid 3593] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3603] chdir("./101" [pid 3602] <... set_robust_list resumed>) = 0 [pid 3589] <... futex resumed>) = 0 [pid 3593] <... futex resumed>) = 1 [pid 3589] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3603] <... chdir resumed>) = 0 [pid 3589] <... futex resumed>) = 0 [pid 3589] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3603] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3603] setpgid(0, 0) = 0 [pid 3602] chdir("./99" [pid 3603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3602] <... chdir resumed>) = 0 [pid 3593] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3603] write(3, "1000", 4 [pid 3602] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3603] <... write resumed>) = 4 [pid 3602] <... prctl resumed>) = 0 [pid 3603] close(3 [pid 3602] setpgid(0, 0 [pid 3603] <... close resumed>) = 0 [pid 3602] <... setpgid resumed>) = 0 [pid 3603] symlink("/dev/binderfs", "./binderfs" [pid 3602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3603] <... symlink resumed>) = 0 [pid 3602] <... openat resumed>) = 3 [pid 3603] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3602] write(3, "1000", 4 [pid 3603] <... futex resumed>) = 0 [pid 3602] <... write resumed>) = 4 [pid 3603] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3602] close(3 [pid 3603] <... mmap resumed>) = 0x7f64ff044000 [pid 3602] <... close resumed>) = 0 [pid 3603] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3602] symlink("/dev/binderfs", "./binderfs" [pid 3603] <... mprotect resumed>) = 0 [pid 3602] <... symlink resumed>) = 0 [pid 3603] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3602] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3603] <... clone resumed>, parent_tid=[3606], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3606 [pid 3603] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3602] <... futex resumed>) = 0 [pid 3603] <... futex resumed>) = 0 [pid 3602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3603] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3602] <... mmap resumed>) = 0x7f64ff044000 [pid 3605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3592] <... mount resumed>) = 0 [pid 3592] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3592] chdir("./bus") = 0 [pid 3592] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 3606 attached [pid 3606] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3606] memfd_create("syzkaller", 0) = 3 [pid 3606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3605] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3605] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3606] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3602] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3602] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3607], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3607 [pid 3602] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3606] <... write resumed>) = 1048576 [pid 3606] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3606] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 3607 attached [pid 3607] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3607] memfd_create("syzkaller", 0) = 3 [pid 3607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3602] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3593] <... openat resumed>) = 7 [pid 3593] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3589] <... futex resumed>) = 0 [pid 3589] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3593] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3589] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3593] <... openat resumed>) = 8 [pid 3593] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3589] <... futex resumed>) = 0 [pid 3593] <... futex resumed>) = 1 [pid 3589] exit_group(0 [pid 3593] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3589] <... exit_group resumed>) = ? [pid 3593] <... futex resumed>) = ? [pid 3607] <... write resumed>) = 1048576 [pid 3607] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3607] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3605] <... openat resumed>) = 4 [pid 3592] <... ioctl resumed>) = 0 [pid 3605] ioctl(4, LOOP_SET_FD, 3 [pid 3592] close(4) = 0 [pid 3592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3592] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] <... umount2 resumed>) = 0 [pid 3585] <... futex resumed>) = 0 [pid 374] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3585] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3606] <... openat resumed>) = 4 [pid 3605] <... ioctl resumed>) = 0 [pid 3592] <... futex resumed>) = 0 [pid 3585] <... futex resumed>) = 1 [pid 374] lstat("./99/bus", [pid 3585] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./99/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./99/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./99") = 0 [pid 374] mkdir("./100", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3609 ./strace-static-x86_64: Process 3609 attached [pid 3607] <... openat resumed>) = 4 [pid 3606] ioctl(4, LOOP_SET_FD, 3 [pid 3605] close(3 [pid 3593] +++ exited with 0 +++ [pid 3592] chdir("./file0" [pid 3589] +++ exited with 0 +++ [pid 3607] ioctl(4, LOOP_SET_FD, 3 [pid 3605] <... close resumed>) = 0 [pid 3592] <... chdir resumed>) = 0 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3589, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3605] mkdir("./bus", 0777 [pid 3592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3605] <... mkdir resumed>) = 0 [pid 3592] <... futex resumed>) = 1 [pid 3585] <... futex resumed>) = 0 [pid 3605] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3592] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3585] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3585] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3592] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3585] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3592] <... open resumed>) = 4 [pid 375] <... openat resumed>) = 3 [pid 3592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fstat(3, [pid 3592] <... futex resumed>) = 1 [pid 3585] <... futex resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3592] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3585] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(3, [pid 3592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3585] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3592] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3585] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3609] set_robust_list(0x55555713c5e0, 24 [pid 3606] <... ioctl resumed>) = 0 [pid 3592] <... openat resumed>) = 5 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3609] <... set_robust_list resumed>) = 0 [pid 3607] <... ioctl resumed>) = 0 [pid 3609] chdir("./100") = 0 [pid 3609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3609] setpgid(0, 0) = 0 [pid 3609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1000", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3609] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [ 75.470745][ T3592] ext4 filesystem being mounted at /root/syzkaller.k3ECep/101/bus supports timestamps until 2038 (0x7fffffff) [ 75.492998][ T3593] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 75.508014][ T3593] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 3609] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3609] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3612], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3612 [pid 3609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3612 attached [pid 3607] close(3 [pid 3606] close(3 [pid 3592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./99/binderfs", [pid 3612] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3612] memfd_create("syzkaller", 0) = 3 [pid 3612] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3606] <... close resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3612] <... mmap resumed>) = 0x7f64f6c44000 [pid 3607] <... close resumed>) = 0 [pid 3606] mkdir("./bus", 0777 [pid 3592] <... futex resumed>) = 1 [pid 3585] <... futex resumed>) = 0 [pid 375] unlink("./99/binderfs" [pid 3607] mkdir("./bus", 0777 [pid 3606] <... mkdir resumed>) = 0 [pid 3592] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3585] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... unlink resumed>) = 0 [pid 3607] <... mkdir resumed>) = 0 [pid 3606] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3585] <... futex resumed>) = 0 [pid 375] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3607] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3592] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3585] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3592] <... write resumed>) = 196608 [pid 3612] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3612] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 3612] ioctl(4, LOOP_SET_FD, 3 [pid 3592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3592] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3612] <... ioctl resumed>) = 0 [pid 3612] close(3) = 0 [pid 3612] mkdir("./bus", 0777) = 0 [pid 3612] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3605] <... mount resumed>) = 0 [pid 3605] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3585] <... futex resumed>) = 0 [pid 3585] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3592] <... futex resumed>) = 0 [pid 3585] <... futex resumed>) = 1 [pid 3605] chdir("./bus" [pid 3592] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3585] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3592] <... mount resumed>) = 0 [pid 3607] <... mount resumed>) = 0 [pid 3605] <... chdir resumed>) = 0 [pid 3592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3607] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3592] <... futex resumed>) = 1 [pid 3585] <... futex resumed>) = 0 [pid 3607] <... openat resumed>) = 3 [pid 3592] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3585] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3607] chdir("./bus" [pid 3585] <... futex resumed>) = 0 [pid 3607] <... chdir resumed>) = 0 [pid 3585] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3607] ioctl(4, LOOP_CLR_FD [pid 3612] <... mount resumed>) = 0 [pid 3605] ioctl(4, LOOP_CLR_FD [pid 3612] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3612] chdir("./bus") = 0 [ 75.570819][ T3605] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/102/bus supports timestamps until 2038 (0x7fffffff) [ 75.586635][ T3612] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/100/bus supports timestamps until 2038 (0x7fffffff) [ 75.586644][ T3607] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/99/bus supports timestamps until 2038 (0x7fffffff) [pid 3612] ioctl(4, LOOP_CLR_FD [pid 3606] <... mount resumed>) = 0 [pid 3606] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3606] chdir("./bus") = 0 [pid 3606] ioctl(4, LOOP_CLR_FD [pid 3607] <... ioctl resumed>) = 0 [pid 3605] <... ioctl resumed>) = 0 [pid 3592] <... open resumed>) = 6 [pid 3607] close(4 [pid 3605] close(4 [pid 3592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3607] <... close resumed>) = 0 [pid 3605] <... close resumed>) = 0 [pid 3592] <... futex resumed>) = 1 [pid 3585] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 3607] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3605] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3592] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3585] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3607] <... futex resumed>) = 1 [pid 3605] <... futex resumed>) = 1 [pid 3602] <... futex resumed>) = 0 [pid 3601] <... futex resumed>) = 0 [pid 3592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3585] <... futex resumed>) = 0 [pid 3607] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3605] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3602] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3601] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3592] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3585] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... ioctl resumed>) = 0 [pid 3607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3602] <... futex resumed>) = 0 [pid 3601] <... futex resumed>) = 0 [pid 375] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3612] close(4 [pid 3607] chdir("./file0" [pid 3605] chdir("./file0" [pid 3602] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3601] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3612] <... close resumed>) = 0 [pid 3607] <... chdir resumed>) = 0 [pid 3606] <... ioctl resumed>) = 0 [pid 3605] <... chdir resumed>) = 0 [pid 3607] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3606] close(4 [pid 3605] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3607] <... futex resumed>) = 1 [pid 3605] <... futex resumed>) = 1 [pid 3602] <... futex resumed>) = 0 [pid 3601] <... futex resumed>) = 0 [pid 375] lstat("./99/bus", [pid 3607] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3605] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3602] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3601] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3602] <... futex resumed>) = 0 [pid 3601] <... futex resumed>) = 0 [pid 3607] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3605] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3602] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3601] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3592] <... write resumed>) = 1048576 [pid 3592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3585] <... futex resumed>) = 0 [pid 3592] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3612] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3609] <... futex resumed>) = 0 [pid 3585] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3612] chdir("./file0" [pid 3609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3612] <... chdir resumed>) = 0 [pid 3609] <... futex resumed>) = 0 [pid 3605] <... open resumed>) = 4 [pid 3585] <... futex resumed>) = 1 [pid 3612] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3607] <... open resumed>) = 4 [pid 3605] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3585] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3612] <... futex resumed>) = 0 [pid 3609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3607] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3605] <... futex resumed>) = 1 [pid 3601] <... futex resumed>) = 0 [pid 375] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3612] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3607] <... futex resumed>) = 1 [pid 3605] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3602] <... futex resumed>) = 0 [pid 3601] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3612] <... open resumed>) = 4 [pid 3609] <... futex resumed>) = 0 [pid 3607] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3606] <... close resumed>) = 0 [pid 3605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3602] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3601] <... futex resumed>) = 0 [pid 3612] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3605] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3602] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./99/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3601] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... futex resumed>) = 0 [pid 3609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3607] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3612] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3605] <... openat resumed>) = 5 [pid 3612] <... openat resumed>) = 5 [pid 3609] <... futex resumed>) = 0 [pid 3607] <... openat resumed>) = 5 [pid 3605] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3602] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... openat resumed>) = 4 [pid 3612] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3607] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3605] <... futex resumed>) = 1 [pid 3602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3601] <... futex resumed>) = 0 [pid 3612] <... futex resumed>) = 0 [pid 3609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3607] <... futex resumed>) = 0 [pid 3606] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3605] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3602] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fstat(4, [pid 3612] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3607] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3606] <... futex resumed>) = 1 [pid 3605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3603] <... futex resumed>) = 0 [pid 3602] <... futex resumed>) = 0 [pid 3601] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3612] <... write resumed>) = 196608 [pid 3609] <... futex resumed>) = 0 [pid 3592] <... futex resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3609] <... futex resumed>) = 0 [pid 3612] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3612] <... mount resumed>) = 0 [pid 3609] <... futex resumed>) = 0 [pid 3612] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... futex resumed>) = 0 [pid 3609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3612] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3612] <... open resumed>) = 6 [pid 3609] <... futex resumed>) = 0 [pid 3612] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... futex resumed>) = 0 [pid 3609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3612] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3607] <... write resumed>) = 196608 [pid 3606] chdir("./file0" [pid 3605] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3603] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3602] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3601] <... futex resumed>) = 0 [pid 3592] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 375] getdents64(4, [pid 3609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3605] <... write resumed>) = 196608 [pid 3603] <... futex resumed>) = 0 [pid 3601] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3603] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3606] <... chdir resumed>) = 0 [pid 375] getdents64(4, [ 75.588993][ T3606] ext4 filesystem being mounted at /root/syzkaller.43WzWH/101/bus supports timestamps until 2038 (0x7fffffff) [pid 3607] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3606] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3605] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3602] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3602] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(4 [pid 3602] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 3602] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] rmdir("./99/bus" [pid 3606] <... futex resumed>) = 1 [pid 3603] <... futex resumed>) = 0 [pid 3606] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3603] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3607] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 375] <... rmdir resumed>) = 0 [pid 3603] <... futex resumed>) = 0 [pid 375] getdents64(3, [pid 3603] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3607] <... mount resumed>) = 0 [pid 3607] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 3606] <... open resumed>) = 4 [pid 375] <... close resumed>) = 0 [pid 3607] <... futex resumed>) = 1 [pid 3602] <... futex resumed>) = 0 [pid 3602] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3602] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] rmdir("./99" [pid 3607] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3606] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3605] <... futex resumed>) = 1 [pid 3601] <... futex resumed>) = 0 [pid 3601] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 3601] <... futex resumed>) = 0 [pid 3601] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] mkdir("./100", 0777) = 0 [pid 3607] <... open resumed>) = 6 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3606] <... futex resumed>) = 1 [pid 3607] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3605] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3603] <... futex resumed>) = 0 [pid 3603] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3607] <... futex resumed>) = 1 [pid 3603] <... futex resumed>) = 0 [pid 3602] <... futex resumed>) = 0 [pid 3607] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3603] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3602] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3602] <... futex resumed>) = 0 [pid 3607] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3606] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 375] <... openat resumed>) = 3 [pid 3605] <... mount resumed>) = 0 [pid 3602] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] ioctl(3, LOOP_CLR_FD [pid 3606] <... openat resumed>) = 5 [pid 3605] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3606] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 3601] <... futex resumed>) = 0 [pid 3605] <... futex resumed>) = 1 [pid 3601] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 3601] <... futex resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3601] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... write resumed>) = 1048576 [pid 3612] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3609] <... futex resumed>) = 0 [pid 3609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... futex resumed>) = 1 [pid 3612] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3585] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3606] <... futex resumed>) = 1 [pid 3605] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3603] <... futex resumed>) = 0 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3622 [pid 3603] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3606] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3603] <... futex resumed>) = 0 [pid 3606] <... write resumed>) = 196608 [pid 3605] <... open resumed>) = 6 [pid 3603] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3585] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3605] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3606] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3585] <... futex resumed>) = 0 [pid 3606] <... futex resumed>) = 1 [pid 3605] <... futex resumed>) = 1 [pid 3603] <... futex resumed>) = 0 [pid 3601] <... futex resumed>) = 0 [pid 3585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3606] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3603] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3601] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3603] <... futex resumed>) = 0 [pid 3601] <... futex resumed>) = 0 [pid 3605] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3603] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3601] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... openat resumed>) = 7 [pid 3612] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3609] <... futex resumed>) = 0 [pid 3609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... futex resumed>) = 1 [pid 3612] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3612] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3609] <... futex resumed>) = 0 [pid 3609] exit_group(0) = ? [pid 3612] <... futex resumed>) = ? [pid 3612] +++ exited with 0 +++ [pid 3609] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3609, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 3622 attached [pid 3622] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3622] chdir("./100") = 0 [pid 3622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3622] setpgid(0, 0) = 0 [pid 374] <... restart_syscall resumed>) = 0 [pid 374] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 75.672815][ T3592] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 75.679713][ T3612] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 75.701415][ T3612] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 3622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] getdents64(3, [pid 3606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3602] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3585] <... mmap resumed>) = 0x7f64f6d23000 [pid 3606] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3602] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3602] <... futex resumed>) = 0 [pid 3585] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3606] <... mount resumed>) = 0 [pid 3602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3606] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3602] <... mmap resumed>) = 0x7f64f6d23000 [pid 3585] <... mprotect resumed>) = 0 [pid 374] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3606] <... futex resumed>) = 1 [pid 3603] <... futex resumed>) = 0 [pid 3602] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3606] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3603] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3603] <... futex resumed>) = 0 [pid 3585] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3603] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3602] <... mprotect resumed>) = 0 [pid 374] lstat("./100/binderfs", [pid 3602] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3622] <... openat resumed>) = 3 [pid 374] unlink("./100/binderfs" [pid 3602] <... clone resumed>, parent_tid=[3623], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3623 [pid 3622] write(3, "1000", 4) = 4 [pid 3622] close(3) = 0 [pid 3602] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... unlink resumed>) = 0 [pid 3606] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3602] <... futex resumed>) = 0 [pid 374] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3622] symlink("/dev/binderfs", "./binderfs" [pid 3602] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3606] <... open resumed>) = 6 [pid 3606] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3585] <... clone resumed>, parent_tid=[3624], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3624 [pid 3622] <... symlink resumed>) = 0 [pid 3606] <... futex resumed>) = 1 [pid 3603] <... futex resumed>) = 0 [pid 3606] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3603] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3585] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3603] <... futex resumed>) = 0 [pid 3622] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3603] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... futex resumed>) = 0 [pid 3622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3622] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3622] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3625], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3625 [pid 3606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3622] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3606] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3622] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3592] <... openat resumed>) = 7 [pid 3592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3592] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3585] <... futex resumed>) = 0 [pid 3585] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3605] <... write resumed>) = 1048576 [pid 3605] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3605] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3601] <... futex resumed>) = 0 [pid 3601] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3601] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3623 attached [pid 3623] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3623] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 3624 attached [pid 3607] <... write resumed>) = 1048576 [pid 3605] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3625 attached [pid 3625] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3625] memfd_create("syzkaller", 0) = 3 [pid 3625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 374] <... umount2 resumed>) = 0 [ 75.715762][ T3592] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 75.741406][ T3623] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 75.758283][ T3605] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3605] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 374] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3625] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3625] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 3625] ioctl(4, LOOP_SET_FD, 3 [pid 3624] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3624] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3624] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3624] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3607] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3607] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3606] <... write resumed>) = 1048576 [pid 3585] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3606] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3585] exit_group(0 [pid 374] lstat("./100/bus", [pid 3606] <... futex resumed>) = 1 [pid 3603] <... futex resumed>) = 0 [pid 3592] <... futex resumed>) = ? [pid 3585] <... exit_group resumed>) = ? [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3606] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3603] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3592] +++ exited with 0 +++ [pid 374] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3625] <... ioctl resumed>) = 0 [pid 3603] <... futex resumed>) = 0 [pid 3602] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3601] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3602] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3607] <... futex resumed>) = 0 [pid 3602] <... futex resumed>) = 1 [pid 374] <... openat resumed>) = 4 [pid 3624] <... futex resumed>) = ? [pid 3607] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3602] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] fstat(4, [pid 3624] +++ exited with 0 +++ [pid 3585] +++ exited with 0 +++ [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3585, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] close(4 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3625] close(3 [pid 374] <... close resumed>) = 0 [pid 373] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3625] <... close resumed>) = 0 [pid 374] rmdir("./100/bus" [pid 373] <... openat resumed>) = 3 [pid 3625] mkdir("./bus", 0777 [pid 374] <... rmdir resumed>) = 0 [pid 373] fstat(3, [pid 3625] <... mkdir resumed>) = 0 [pid 374] getdents64(3, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3625] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3603] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3601] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] getdents64(3, [pid 374] close(3 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] <... close resumed>) = 0 [pid 373] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] rmdir("./100" [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... rmdir resumed>) = 0 [pid 373] lstat("./101/binderfs", [pid 374] mkdir("./101", 0777 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 373] unlink("./101/binderfs" [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 373] <... unlink resumed>) = 0 [pid 373] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3623] <... openat resumed>) = 7 [pid 3606] <... openat resumed>) = 7 [pid 3601] <... futex resumed>) = 0 [pid 3606] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3606] <... futex resumed>) = 1 [pid 3603] <... futex resumed>) = 0 [pid 3601] <... mmap resumed>) = 0x7f64f6d23000 [pid 3606] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3603] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3601] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3603] <... futex resumed>) = 0 [pid 3601] <... mprotect resumed>) = 0 [pid 3606] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3603] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3601] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3606] <... openat resumed>) = 8 [pid 3606] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3601] <... clone resumed>, parent_tid=[3627], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3627 [pid 3606] <... futex resumed>) = 1 [pid 3603] <... futex resumed>) = 0 [pid 3601] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3606] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3603] exit_group(0 [pid 3601] <... futex resumed>) = 0 [pid 3606] <... futex resumed>) = ? [pid 3603] <... exit_group resumed>) = ? [pid 3601] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3606] +++ exited with 0 +++ [pid 3623] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3623] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3607] <... openat resumed>) = 8 [pid 3607] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3602] <... futex resumed>) = 0 [pid 3607] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3627 attached [pid 3627] set_robust_list(0x7f64f6d439e0, 24 [pid 3602] exit_group(0 [pid 3623] <... futex resumed>) = ? [pid 3607] <... futex resumed>) = ? [pid 3602] <... exit_group resumed>) = ? [pid 3623] +++ exited with 0 +++ [pid 3627] <... set_robust_list resumed>) = 0 [pid 3627] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3605] <... openat resumed>) = 7 [pid 3605] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3605] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3627] <... openat resumed>) = 8 [pid 3627] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3601] <... futex resumed>) = 0 [pid 3601] exit_group(0) = ? [pid 3605] <... futex resumed>) = ? [pid 3605] +++ exited with 0 +++ [pid 3627] <... futex resumed>) = ? [ 75.767526][ T3623] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 75.776712][ T3606] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 75.796577][ T3606] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 75.810141][ T3605] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 3625] <... mount resumed>) = 0 [pid 3625] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3603] +++ exited with 0 +++ [pid 374] <... openat resumed>) = 3 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3603, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 374] ioctl(3, LOOP_CLR_FD [pid 3625] <... openat resumed>) = 3 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] close(3 [pid 377] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./101/binderfs" [pid 3625] chdir("./bus" [pid 377] <... unlink resumed>) = 0 [pid 377] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3625] <... chdir resumed>) = 0 [pid 3625] ioctl(4, LOOP_CLR_FD [pid 3607] +++ exited with 0 +++ [pid 3602] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3602, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 372] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./99/binderfs") = 0 [pid 372] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3627] +++ exited with 0 +++ [pid 3601] +++ exited with 0 +++ [pid 374] <... close resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3601, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 376] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3630 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./102/binderfs") = 0 [pid 376] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3630 attached [pid 3630] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3630] chdir("./101") = 0 [pid 3630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3630] setpgid(0, 0) = 0 [pid 3630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3630] write(3, "1000", 4) = 4 [pid 3630] close(3) = 0 [pid 3630] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3630] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3630] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3630] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3631], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3631 [pid 3630] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3630] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3631 attached [pid 3631] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3631] memfd_create("syzkaller", 0) = 3 [pid 3631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3631] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3631] munmap(0x7f64f6c44000, 1048576) = 0 [ 75.827869][ T3625] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/100/bus supports timestamps until 2038 (0x7fffffff) [pid 3631] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3625] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./101/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3625] close(4 [pid 377] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 3625] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, [pid 3625] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3622] <... futex resumed>) = 0 [pid 377] lstat("./101/bus", [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 3625] chdir("./file0" [pid 3622] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] close(4 [pid 3625] <... chdir resumed>) = 0 [pid 3622] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 373] rmdir("./101/bus" [pid 3625] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... rmdir resumed>) = 0 [pid 3625] <... futex resumed>) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3625] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3625] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3622] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 3625] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3622] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 373] rmdir("./101" [pid 3625] <... open resumed>) = 4 [pid 3622] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3625] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] <... rmdir resumed>) = 0 [pid 3625] <... futex resumed>) = 0 [pid 3622] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 373] mkdir("./102", 0777 [pid 3622] <... futex resumed>) = 0 [pid 3625] <... openat resumed>) = 5 [pid 377] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3622] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3625] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] <... mkdir resumed>) = 0 [pid 3625] <... futex resumed>) = 0 [pid 3622] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3622] <... futex resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3622] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 4 [pid 3625] <... write resumed>) = 196608 [pid 377] fstat(4, [pid 3625] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3622] <... futex resumed>) = 0 [pid 3625] <... futex resumed>) = 1 [pid 3622] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3622] <... futex resumed>) = 0 [pid 3622] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3625] <... mount resumed>) = 0 [pid 3625] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 3622] <... futex resumed>) = 0 [pid 3625] <... futex resumed>) = 1 [pid 3622] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3622] <... futex resumed>) = 0 [pid 3622] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./101/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./101") = 0 [pid 377] mkdir("./102", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3622] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3622] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3622] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3622] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3622] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3622] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3622] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3622] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3632 attached , parent_tid=[3632], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3632 [pid 3632] set_robust_list(0x7f64f6d439e0, 24 [pid 3622] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3632] <... set_robust_list resumed>) = 0 [pid 3622] <... futex resumed>) = 0 [pid 3622] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3632] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 3632] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3622] <... futex resumed>) = 0 [pid 3632] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3622] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3632] <... futex resumed>) = 0 [pid 3622] <... futex resumed>) = 1 [pid 3632] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3622] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3632] <... openat resumed>) = 7 [pid 3632] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... futex resumed>) = 0 [pid 3622] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3632] <... futex resumed>) = 1 [pid 3632] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3632] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... futex resumed>) = 0 [pid 3632] <... futex resumed>) = 1 [pid 3632] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3631] <... openat resumed>) = 4 [pid 3625] <... open resumed>) = 6 [pid 377] <... openat resumed>) = 3 [pid 376] <... umount2 resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 3631] ioctl(4, LOOP_SET_FD, 3 [pid 3625] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] <... ioctl resumed>) = 0 [pid 3625] <... futex resumed>) = 0 [pid 376] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] ioctl(3, LOOP_CLR_FD [pid 372] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3631] close(3 [pid 3625] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3622] exit_group(0 [pid 3632] <... futex resumed>) = ? [pid 3631] <... close resumed>) = 0 [pid 3622] <... exit_group resumed>) = ? [pid 3632] +++ exited with 0 +++ [pid 3631] mkdir("./bus", 0777) = 0 [pid 3631] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3625] <... futex resumed>) = ? [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3625] +++ exited with 0 +++ [pid 3622] +++ exited with 0 +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3622, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 373] close(3 [pid 375] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./100/binderfs") = 0 [pid 375] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] close(3 [pid 376] lstat("./102/bus", [pid 372] lstat("./99/bus", ./strace-static-x86_64: Process 3635 attached [pid 3635] set_robust_list(0x55555713c5e0, 24 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3635 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... close resumed>) = 0 [pid 376] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3635] <... set_robust_list resumed>) = 0 [pid 3635] chdir("./102") = 0 [pid 3635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3635] setpgid(0, 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... openat resumed>) = 4 [pid 3635] <... setpgid resumed>) = 0 [pid 3635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 376] fstat(4, [pid 372] openat(AT_FDCWD, "./99/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... openat resumed>) = 4 [pid 376] getdents64(4, [pid 372] fstat(4, [pid 3635] <... openat resumed>) = 3 [pid 3635] write(3, "1000", 4 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3636 [pid 376] getdents64(4, [pid 372] getdents64(4, [pid 3635] <... write resumed>) = 4 [pid 3635] close(3) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 3636 attached [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] getdents64(4, [pid 3636] set_robust_list(0x55555713c5e0, 24 [pid 376] close(4 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] <... close resumed>) = 0 [pid 372] close(4 [pid 3636] <... set_robust_list resumed>) = 0 [pid 376] rmdir("./102/bus" [pid 3636] chdir("./102" [pid 376] <... rmdir resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3636] <... chdir resumed>) = 0 [pid 376] getdents64(3, [pid 372] rmdir("./99/bus" [pid 3636] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 3636] <... prctl resumed>) = 0 [pid 376] close(3 [pid 372] getdents64(3, [pid 3636] setpgid(0, 0 [pid 376] <... close resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3636] <... setpgid resumed>) = 0 [pid 376] rmdir("./102" [pid 372] close(3 [pid 3636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 376] <... rmdir resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3636] <... openat resumed>) = 3 [pid 376] mkdir("./103", 0777 [pid 372] rmdir("./99" [pid 3636] write(3, "1000", 4 [pid 376] <... mkdir resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 3636] <... write resumed>) = 4 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 372] mkdir("./100", 0777 [pid 3636] close(3 [pid 372] <... mkdir resumed>) = 0 [pid 3636] <... close resumed>) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3636] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3636] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3636] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3636] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3638], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3638 [pid 3636] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] symlink("/dev/binderfs", "./binderfs" [pid 3636] <... futex resumed>) = 0 [pid 3635] <... symlink resumed>) = 0 [pid 3636] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3635] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 ./strace-static-x86_64: Process 3638 attached [pid 3635] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3638] set_robust_list(0x7f64ff0649e0, 24 [pid 3635] <... mprotect resumed>) = 0 [pid 3631] <... mount resumed>) = 0 [pid 3638] <... set_robust_list resumed>) = 0 [pid 3635] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3638] memfd_create("syzkaller", 0 [pid 3631] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3638] <... memfd_create resumed>) = 3 [pid 3631] <... openat resumed>) = 3 [pid 3638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 3639 attached ) = 0x7f64f6c44000 [pid 3631] chdir("./bus" [pid 3635] <... clone resumed>, parent_tid=[3639], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3639 [pid 3635] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3635] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3639] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3639] memfd_create("syzkaller", 0) = 3 [pid 3639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3631] <... chdir resumed>) = 0 [pid 3631] ioctl(4, LOOP_CLR_FD [pid 3639] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3638] <... write resumed>) = 1048576 [pid 3638] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3638] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3639] <... write resumed>) = 1048576 [pid 3639] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3639] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 375] <... umount2 resumed>) = 0 [pid 375] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./100/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./100/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./100") = 0 [pid 375] mkdir("./101", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3631] <... ioctl resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 375] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 3631] close(4 [pid 376] ioctl(3, LOOP_CLR_FD [pid 375] ioctl(3, LOOP_CLR_FD [pid 372] ioctl(3, LOOP_CLR_FD [pid 3631] <... close resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3640 [pid 3639] <... openat resumed>) = 4 [pid 3639] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 3640 attached [pid 3631] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3630] <... futex resumed>) = 0 [pid 3630] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] chdir("./file0" [pid 3630] <... futex resumed>) = 0 [pid 3631] <... chdir resumed>) = 0 [pid 3630] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3631] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3630] <... futex resumed>) = 0 [pid 3630] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3630] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] <... ioctl resumed>) = 0 [pid 3639] close(3) = 0 [pid 3639] mkdir("./bus", 0777) = 0 [pid 3631] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3639] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3631] <... open resumed>) = 4 [pid 3631] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3630] <... futex resumed>) = 0 [pid 3631] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3630] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3630] <... futex resumed>) = 0 [pid 3631] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3630] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3631] <... openat resumed>) = 5 [pid 3631] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3630] <... futex resumed>) = 0 [pid 3631] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3630] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3630] <... futex resumed>) = 0 [pid 3631] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3630] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3631] <... write resumed>) = 196608 [pid 3631] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3630] <... futex resumed>) = 0 [pid 3631] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3630] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] <... mount resumed>) = 0 [pid 3630] <... futex resumed>) = 0 [pid 3631] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3630] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3631] <... futex resumed>) = 0 [pid 3630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3631] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3630] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3630] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3631] <... open resumed>) = 6 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3631] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 372] close(3 [pid 3631] <... futex resumed>) = 1 [pid 3630] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3638] <... openat resumed>) = 4 [pid 3631] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3630] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3642 attached [pid 3640] set_robust_list(0x55555713c5e0, 24 [pid 3638] ioctl(4, LOOP_SET_FD, 3 [pid 3630] <... futex resumed>) = 0 [pid 3630] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3642 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3643 [pid 3640] <... set_robust_list resumed>) = 0 [pid 3638] <... ioctl resumed>) = 0 [pid 3638] close(3) = 0 [pid 3638] mkdir("./bus", 0777 [ 76.042048][ T3631] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/101/bus supports timestamps until 2038 (0x7fffffff) [pid 3642] set_robust_list(0x55555713c5e0, 24 [pid 3640] chdir("./101" [pid 3638] <... mkdir resumed>) = 0 [pid 3638] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3642] <... set_robust_list resumed>) = 0 [pid 3640] <... chdir resumed>) = 0 [pid 3640] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3642] chdir("./103") = 0 [pid 3640] <... prctl resumed>) = 0 [pid 3642] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3640] setpgid(0, 0./strace-static-x86_64: Process 3643 attached [pid 3642] <... prctl resumed>) = 0 [pid 3640] <... setpgid resumed>) = 0 [pid 3642] setpgid(0, 0 [pid 3640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3643] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3642] <... setpgid resumed>) = 0 [pid 3640] <... openat resumed>) = 3 [pid 3643] chdir("./100" [pid 3642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3640] write(3, "1000", 4 [pid 3631] <... write resumed>) = 1048576 [pid 3643] <... chdir resumed>) = 0 [pid 3640] <... write resumed>) = 4 [pid 3642] <... openat resumed>) = 3 [pid 3642] write(3, "1000", 4) = 4 [pid 3642] close(3) = 0 [pid 3642] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3642] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3642] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3642] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3647], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3647 [pid 3642] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3642] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3631] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3630] <... futex resumed>) = 0 [pid 3631] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3630] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3630] <... futex resumed>) = 0 [pid 3631] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3630] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3643] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3640] close(3 [pid 3643] <... prctl resumed>) = 0 [pid 3640] <... close resumed>) = 0 [pid 3643] setpgid(0, 0 [pid 3640] symlink("/dev/binderfs", "./binderfs" [pid 3643] <... setpgid resumed>) = 0 [pid 3640] <... symlink resumed>) = 0 [pid 3643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3640] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] <... openat resumed>) = 3 [pid 3640] <... futex resumed>) = 0 [pid 3643] write(3, "1000", 4 [pid 3640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3643] <... write resumed>) = 4 [pid 3640] <... mmap resumed>) = 0x7f64ff044000 [pid 3643] close(3 [pid 3640] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3643] <... close resumed>) = 0 [pid 3640] <... mprotect resumed>) = 0 [pid 3643] symlink("/dev/binderfs", "./binderfs" [pid 3640] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3643] <... symlink resumed>) = 0 [pid 3643] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] <... clone resumed>, parent_tid=[3648], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3648 [pid 3643] <... futex resumed>) = 0 [pid 3640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3640] <... futex resumed>) = 0 [pid 3643] <... mmap resumed>) = 0x7f64ff044000 [pid 3640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3643] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3643] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3649], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3649 [pid 3643] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3643] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3648 attached [pid 3648] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3648] memfd_create("syzkaller", 0./strace-static-x86_64: Process 3649 attached [pid 3649] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3649] memfd_create("syzkaller", 0 [pid 3648] <... memfd_create resumed>) = 3 [pid 3648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3649] <... memfd_create resumed>) = 3 [pid 3648] <... mmap resumed>) = 0x7f64f6c44000 [pid 3649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 3647 attached [pid 3647] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3647] memfd_create("syzkaller", 0) = 3 [pid 3647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3639] <... mount resumed>) = 0 [pid 3639] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3648] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3639] <... openat resumed>) = 3 [pid 3631] <... openat resumed>) = 7 [pid 3631] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3631] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3649] <... write resumed>) = 1048576 [pid 3649] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3649] ioctl(4, LOOP_SET_FD, 3 [pid 3647] <... write resumed>) = 1048576 [pid 3639] chdir("./bus" [pid 3630] <... futex resumed>) = 0 [pid 3630] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] <... chdir resumed>) = 0 [pid 3630] <... futex resumed>) = 1 [pid 3630] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] ioctl(4, LOOP_CLR_FD [pid 3648] <... write resumed>) = 1048576 [pid 3648] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3648] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3649] <... ioctl resumed>) = 0 [pid 3649] close(3) = 0 [pid 3649] mkdir("./bus", 0777) = 0 [pid 3649] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3648] <... openat resumed>) = 4 [ 76.110809][ T3639] ext4 filesystem being mounted at /root/syzkaller.k3ECep/102/bus supports timestamps until 2038 (0x7fffffff) [ 76.114006][ T3631] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 76.137970][ T3631] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 3648] ioctl(4, LOOP_SET_FD, 3 [pid 3647] munmap(0x7f64f6c44000, 1048576 [pid 3631] <... futex resumed>) = 0 [pid 3647] <... munmap resumed>) = 0 [pid 3631] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3647] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3638] <... mount resumed>) = 0 [pid 3631] <... openat resumed>) = 8 [pid 3638] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3631] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] <... ioctl resumed>) = 0 [pid 3647] <... openat resumed>) = 4 [pid 3639] <... ioctl resumed>) = 0 [pid 3638] <... openat resumed>) = 3 [pid 3631] <... futex resumed>) = 1 [pid 3630] <... futex resumed>) = 0 [pid 3647] ioctl(4, LOOP_SET_FD, 3 [pid 3639] close(4 [pid 3631] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3630] exit_group(0 [pid 3639] <... close resumed>) = 0 [pid 3630] <... exit_group resumed>) = ? [pid 3639] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] <... futex resumed>) = ? [pid 3639] <... futex resumed>) = 1 [pid 3635] <... futex resumed>) = 0 [pid 3639] chdir("./file0" [pid 3635] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3635] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] <... chdir resumed>) = 0 [pid 3639] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] close(3 [pid 3639] <... futex resumed>) = 1 [pid 3635] <... futex resumed>) = 0 [pid 3648] <... close resumed>) = 0 [pid 3639] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3635] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] mkdir("./bus", 0777 [pid 3635] <... futex resumed>) = 0 [pid 3639] <... open resumed>) = 4 [pid 3638] chdir("./bus" [pid 3635] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3647] <... ioctl resumed>) = 0 [pid 3638] <... chdir resumed>) = 0 [pid 3638] ioctl(4, LOOP_CLR_FD) = 0 [pid 3638] close(4) = 0 [pid 3638] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] close(3 [pid 3639] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] +++ exited with 0 +++ [pid 3630] +++ exited with 0 +++ [pid 3636] <... futex resumed>) = 0 [pid 3636] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3636] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3638] <... futex resumed>) = 1 [pid 3638] chdir("./file0" [pid 3647] <... close resumed>) = 0 [pid 3639] <... futex resumed>) = 1 [pid 3635] <... futex resumed>) = 0 [pid 3648] <... mkdir resumed>) = 0 [pid 3647] mkdir("./bus", 0777 [pid 3639] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3635] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3630, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3635] <... futex resumed>) = 0 [pid 374] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3635] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3647] <... mkdir resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 3647] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] fstat(3, [pid 3648] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3639] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3639] <... openat resumed>) = 5 [pid 374] getdents64(3, [pid 3639] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3639] <... futex resumed>) = 1 [pid 3635] <... futex resumed>) = 0 [pid 374] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3639] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3635] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3635] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3639] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3635] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] lstat("./101/binderfs", [pid 3639] <... write resumed>) = 196608 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3639] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] <... chdir resumed>) = 0 [pid 374] unlink("./101/binderfs" [pid 3639] <... futex resumed>) = 1 [pid 3638] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... futex resumed>) = 0 [pid 3639] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3638] <... futex resumed>) = 1 [pid 3636] <... futex resumed>) = 0 [pid 3635] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... unlink resumed>) = 0 [pid 3639] <... mount resumed>) = 0 [pid 3638] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3636] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... futex resumed>) = 0 [pid 3639] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] <... futex resumed>) = 0 [pid 3635] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3639] <... futex resumed>) = 0 [pid 3636] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3639] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3635] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] <... open resumed>) = 6 [pid 3635] <... futex resumed>) = 0 [pid 3639] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] <... futex resumed>) = 0 [pid 3635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3639] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3635] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3635] <... futex resumed>) = 0 [pid 3635] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 76.151643][ T3638] ext4 filesystem being mounted at /root/syzkaller.43WzWH/102/bus supports timestamps until 2038 (0x7fffffff) [pid 3639] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3638] <... open resumed>) = 4 [pid 3649] <... mount resumed>) = 0 [pid 3649] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3649] chdir("./bus") = 0 [pid 3649] ioctl(4, LOOP_CLR_FD) = 0 [pid 3649] close(4) = 0 [pid 3649] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] <... futex resumed>) = 0 [pid 3643] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3643] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3649] <... futex resumed>) = 1 [pid 3649] chdir("./file0") = 0 [pid 3649] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] <... futex resumed>) = 0 [pid 3643] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3643] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3649] <... futex resumed>) = 1 [pid 3649] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3649] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] <... futex resumed>) = 0 [pid 3643] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3643] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3649] <... futex resumed>) = 1 [pid 3649] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3649] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] <... futex resumed>) = 0 [pid 3643] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3643] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3649] <... futex resumed>) = 1 [pid 3649] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 3649] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3636] <... futex resumed>) = 0 [pid 3638] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3636] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3636] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3643] <... futex resumed>) = 0 [pid 3643] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3643] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3649] <... futex resumed>) = 1 [pid 3649] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3649] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] <... futex resumed>) = 0 [pid 3643] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3643] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3649] <... futex resumed>) = 1 [pid 3638] <... openat resumed>) = 5 [pid 3648] <... mount resumed>) = 0 [pid 3648] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3648] chdir("./bus") = 0 [pid 3648] ioctl(4, LOOP_CLR_FD) = 0 [pid 3648] close(4) = 0 [pid 3648] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] <... futex resumed>) = 0 [pid 3640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3648] <... futex resumed>) = 1 [pid 3648] chdir("./file0" [pid 3638] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] <... futex resumed>) = 0 [pid 3638] <... futex resumed>) = 1 [pid 3636] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3636] <... futex resumed>) = 0 [pid 3636] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3648] <... chdir resumed>) = 0 [pid 3648] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] <... futex resumed>) = 0 [pid 3640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3648] <... futex resumed>) = 1 [pid 3648] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3638] <... write resumed>) = 196608 [pid 3648] <... open resumed>) = 4 [pid 3649] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3638] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3636] <... futex resumed>) = 0 [pid 3648] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3636] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] <... futex resumed>) = 1 [pid 3640] <... futex resumed>) = 0 [pid 3640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] <... futex resumed>) = 0 [pid 3648] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3640] <... futex resumed>) = 0 [pid 3638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3638] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3636] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3648] <... openat resumed>) = 5 [pid 3639] <... write resumed>) = 1048576 [pid 3639] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3639] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3638] <... mount resumed>) = 0 [pid 3638] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3638] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3636] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] <... futex resumed>) = 0 [pid 3636] <... futex resumed>) = 1 [pid 3638] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3636] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3648] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3640] <... futex resumed>) = 0 [pid 3648] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] <... write resumed>) = 196608 [pid 3640] <... futex resumed>) = 0 [pid 3640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3648] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] <... futex resumed>) = 0 [pid 3640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3648] <... futex resumed>) = 1 [pid 3648] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3648] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] <... futex resumed>) = 0 [pid 3640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3648] <... futex resumed>) = 1 [pid 3648] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3635] <... futex resumed>) = 0 [pid 3635] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3635] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] <... futex resumed>) = 0 [pid 3639] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3647] <... mount resumed>) = 0 [ 76.194635][ T3649] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/100/bus supports timestamps until 2038 (0x7fffffff) [ 76.201392][ T3648] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/101/bus supports timestamps until 2038 (0x7fffffff) [ 76.232695][ T3647] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/103/bus supports timestamps until 2038 (0x7fffffff) [pid 3647] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3647] chdir("./bus") = 0 [pid 3647] ioctl(4, LOOP_CLR_FD) = 0 [pid 3639] <... openat resumed>) = 7 [pid 3638] <... open resumed>) = 6 [pid 374] <... umount2 resumed>) = 0 [pid 3647] close(4 [pid 3639] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3649] <... open resumed>) = 6 [pid 3648] <... open resumed>) = 6 [pid 3647] <... close resumed>) = 0 [pid 3639] <... futex resumed>) = 1 [pid 3638] <... futex resumed>) = 1 [pid 3636] <... futex resumed>) = 0 [pid 3635] <... futex resumed>) = 0 [pid 3643] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3649] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3638] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3636] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3649] <... futex resumed>) = 0 [pid 3648] <... futex resumed>) = 1 [pid 3647] <... futex resumed>) = 1 [pid 3643] <... futex resumed>) = 0 [pid 3642] <... futex resumed>) = 0 [pid 3640] <... futex resumed>) = 0 [pid 3639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3636] <... futex resumed>) = 0 [pid 3635] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3649] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3648] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3647] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3643] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3638] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3636] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] lstat("./101/bus", [ 76.245273][ T3639] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 76.259342][ T3639] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 3648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3642] <... futex resumed>) = 0 [pid 3640] <... futex resumed>) = 0 [pid 3639] <... openat resumed>) = 8 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3648] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3647] chdir("./file0" [pid 3642] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] <... write resumed>) = 1048576 [pid 374] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3647] <... chdir resumed>) = 0 [pid 3639] <... futex resumed>) = 1 [pid 3635] <... futex resumed>) = 0 [pid 3647] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3635] exit_group(0 [pid 3647] <... futex resumed>) = 0 [pid 3639] <... futex resumed>) = ? [pid 3635] <... exit_group resumed>) = ? [pid 3647] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3639] +++ exited with 0 +++ [pid 3635] +++ exited with 0 +++ [pid 3649] <... write resumed>) = 1048576 [pid 3649] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] <... futex resumed>) = 0 [pid 3643] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3643] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3649] <... futex resumed>) = 1 [pid 3649] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3638] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3635, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3642] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] <... futex resumed>) = 1 [pid 3636] <... futex resumed>) = 0 [pid 374] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3647] <... futex resumed>) = 0 [pid 3642] <... futex resumed>) = 1 [pid 3638] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3636] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... openat resumed>) = 4 [pid 3647] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3642] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3636] <... futex resumed>) = 0 [pid 374] fstat(4, [pid 373] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3647] <... open resumed>) = 4 [pid 3636] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3647] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(4, [pid 373] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3647] <... futex resumed>) = 1 [pid 3642] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] <... openat resumed>) = 3 [pid 3647] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3642] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(4, [pid 373] fstat(3, [pid 3647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3642] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3647] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3642] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] close(4 [pid 373] getdents64(3, [pid 3648] <... write resumed>) = 1048576 [pid 3647] <... openat resumed>) = 5 [pid 374] <... close resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3648] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] rmdir("./101/bus" [pid 373] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3648] <... futex resumed>) = 1 [pid 3647] <... futex resumed>) = 1 [pid 3642] <... futex resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3648] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3647] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3642] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(3, [pid 373] lstat("./102/binderfs", [pid 3647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3642] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3647] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3642] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] close(3 [pid 373] unlink("./102/binderfs" [pid 3647] <... write resumed>) = 196608 [pid 374] <... close resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 3647] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] <... futex resumed>) = 0 [pid 374] rmdir("./101" [pid 373] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3647] <... futex resumed>) = 1 [pid 3642] <... futex resumed>) = 0 [pid 3640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... rmdir resumed>) = 0 [pid 3649] <... openat resumed>) = 7 [pid 3649] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3642] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] <... futex resumed>) = 1 [pid 3649] <... futex resumed>) = 1 [pid 3643] <... futex resumed>) = 0 [pid 3640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3649] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3643] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3643] <... futex resumed>) = 0 [pid 3649] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3643] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3649] <... openat resumed>) = 8 [pid 3649] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3643] <... futex resumed>) = 0 [pid 3649] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3643] exit_group(0 [pid 3649] <... futex resumed>) = ? [pid 3643] <... exit_group resumed>) = ? [pid 3649] +++ exited with 0 +++ [pid 3643] +++ exited with 0 +++ [pid 3648] <... futex resumed>) = 0 [ 76.301693][ T3649] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 76.316033][ T3638] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 76.316261][ T3649] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 76.340134][ T3638] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 3648] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3647] <... mount resumed>) = 0 [pid 3642] <... futex resumed>) = 0 [pid 3638] <... openat resumed>) = 7 [pid 374] mkdir("./102", 0777 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3643, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3647] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3642] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3638] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... mkdir resumed>) = 0 [pid 3642] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] <... futex resumed>) = 1 [pid 3636] <... futex resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3647] <... futex resumed>) = 0 [pid 3642] <... futex resumed>) = 1 [pid 3638] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3636] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3642] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3636] <... futex resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 372] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3647] <... open resumed>) = 6 [pid 3638] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3636] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3647] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] <... openat resumed>) = 8 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3647] <... futex resumed>) = 1 [pid 372] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3642] <... futex resumed>) = 0 [pid 3647] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3638] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3642] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(3 [pid 372] <... openat resumed>) = 3 [pid 3647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3642] <... futex resumed>) = 0 [pid 3638] <... futex resumed>) = 1 [pid 3636] <... futex resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 372] fstat(3, [pid 3647] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3648] <... openat resumed>) = 7 [pid 3642] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3638] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3636] exit_group(0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3638] <... futex resumed>) = ? [pid 3636] <... exit_group resumed>) = ? [pid 372] getdents64(3, [pid 3638] +++ exited with 0 +++ [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3661 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./100/binderfs") = 0 [pid 372] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3661 attached [pid 3648] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3640] <... futex resumed>) = 0 [pid 3648] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3648] <... openat resumed>) = 8 [pid 3640] <... futex resumed>) = 0 [pid 3648] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3647] <... write resumed>) = 1048576 [pid 3647] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3661] set_robust_list(0x55555713c5e0, 24 [pid 3648] <... futex resumed>) = 0 [pid 3647] <... futex resumed>) = 1 [pid 3642] <... futex resumed>) = 0 [pid 3640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3661] <... set_robust_list resumed>) = 0 [pid 3648] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3647] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3642] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] exit_group(0 [pid 3648] <... futex resumed>) = ? [pid 3642] <... futex resumed>) = 0 [pid 3640] <... exit_group resumed>) = ? [pid 3648] +++ exited with 0 +++ [ 76.348285][ T3648] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 76.363528][ T3648] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 3642] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3661] chdir("./102") = 0 [pid 3661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3661] setpgid(0, 0) = 0 [pid 3661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3661] write(3, "1000", 4) = 4 [pid 3661] close(3) = 0 [pid 3661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3661] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3661] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3661] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3662], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3662 [pid 3661] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3661] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3662 attached [pid 3662] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3662] memfd_create("syzkaller", 0) = 3 [pid 3662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3662] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3647] <... openat resumed>) = 7 [pid 3647] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3642] <... futex resumed>) = 0 [pid 3647] <... futex resumed>) = 1 [pid 3642] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3642] <... futex resumed>) = 0 [pid 3642] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3647] <... openat resumed>) = 8 [pid 3647] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3642] <... futex resumed>) = 0 [pid 3642] exit_group(0 [pid 3647] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3662] <... write resumed>) = 1048576 [pid 3642] <... exit_group resumed>) = ? [pid 3662] munmap(0x7f64f6c44000, 1048576 [pid 3647] <... futex resumed>) = ? [pid 3662] <... munmap resumed>) = 0 [pid 3662] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 3640] +++ exited with 0 +++ [pid 3636] +++ exited with 0 +++ [pid 373] <... umount2 resumed>) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3636, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3640, si_uid=0, si_status=0, si_utime=1, si_stime=4} --- [pid 377] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... openat resumed>) = 3 [pid 375] <... openat resumed>) = 3 [pid 377] fstat(3, [pid 375] fstat(3, [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, [pid 375] getdents64(3, [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./102/binderfs", [pid 375] lstat("./101/binderfs", [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./102/binderfs" [pid 375] unlink("./101/binderfs" [pid 377] <... unlink resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 377] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3662] ioctl(4, LOOP_SET_FD, 3 [pid 373] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./102/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./102/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./102") = 0 [pid 373] mkdir("./103", 0777) = 0 [ 76.390007][ T3647] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 76.405156][ T3647] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD [pid 3647] +++ exited with 0 +++ [pid 3642] +++ exited with 0 +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3642, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./103/binderfs") = 0 [pid 376] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3662] <... ioctl resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... umount2 resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 3662] close(3 [pid 373] close(3 [pid 3662] <... close resumed>) = 0 [pid 372] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3662] mkdir("./bus", 0777 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3662] <... mkdir resumed>) = 0 [pid 372] lstat("./100/bus", [pid 3662] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./101/bus", [pid 372] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] getdents64(4, [pid 375] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] <... openat resumed>) = 4 [pid 372] close(4) = 0 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] rmdir("./100/bus") = 0 [pid 375] getdents64(4, [pid 372] getdents64(3, [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(3 [pid 375] close(4 [pid 372] <... close resumed>) = 0 [pid 372] rmdir("./100" [pid 375] <... close resumed>) = 0 [pid 375] rmdir("./101/bus" [pid 372] <... rmdir resumed>) = 0 [pid 372] mkdir("./101", 0777 [pid 375] <... rmdir resumed>) = 0 [pid 375] getdents64(3, [pid 372] <... mkdir resumed>) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./101") = 0 [pid 375] mkdir("./102", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 377] <... umount2 resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 377] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3664 [pid 375] <... openat resumed>) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3./strace-static-x86_64: Process 3664 attached [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 3664] set_robust_list(0x55555713c5e0, 24 [pid 377] lstat("./102/bus", [pid 376] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 3665 attached [pid 3664] <... set_robust_list resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3665] set_robust_list(0x55555713c5e0, 24 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3665 [pid 3665] <... set_robust_list resumed>) = 0 [pid 3665] chdir("./102") = 0 [pid 3665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3665] setpgid(0, 0) = 0 [pid 3665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] lstat("./103/bus", [pid 3665] <... openat resumed>) = 3 [pid 3665] write(3, "1000", 4) = 4 [pid 3665] close(3) = 0 [pid 3665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3665] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] close(3 [pid 3665] <... mmap resumed>) = 0x7f64ff044000 [pid 377] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3664] chdir("./103" [pid 377] <... openat resumed>) = 4 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... close resumed>) = 0 [pid 3664] <... chdir resumed>) = 0 [pid 377] fstat(4, [pid 376] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3665] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3664] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... openat resumed>) = 4 [pid 3665] <... mprotect resumed>) = 0 [pid 3665] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3667 attached ./strace-static-x86_64: Process 3666 attached [pid 3664] <... prctl resumed>) = 0 [pid 377] getdents64(4, [pid 376] fstat(4, [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3666 [pid 3667] set_robust_list(0x7f64ff0649e0, 24 [pid 3666] set_robust_list(0x55555713c5e0, 24 [pid 3665] <... clone resumed>, parent_tid=[3667], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3667 [pid 3664] setpgid(0, 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3667] <... set_robust_list resumed>) = 0 [pid 3666] <... set_robust_list resumed>) = 0 [pid 3665] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3664] <... setpgid resumed>) = 0 [pid 377] getdents64(4, [pid 376] getdents64(4, [pid 3667] memfd_create("syzkaller", 0 [pid 3666] chdir("./101" [pid 3665] <... futex resumed>) = 0 [pid 3664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3667] <... memfd_create resumed>) = 3 [pid 3666] <... chdir resumed>) = 0 [pid 3665] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3664] <... openat resumed>) = 3 [pid 377] close(4 [pid 376] getdents64(4, [pid 3667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3666] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3664] write(3, "1000", 4 [pid 377] <... close resumed>) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3667] <... mmap resumed>) = 0x7f64f6c44000 [pid 3666] <... prctl resumed>) = 0 [pid 3664] <... write resumed>) = 4 [pid 377] rmdir("./102/bus" [pid 376] close(4 [pid 3666] setpgid(0, 0 [pid 3664] close(3 [pid 3667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3667] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3667] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 3667] ioctl(4, LOOP_SET_FD, 3 [pid 377] <... rmdir resumed>) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./102") = 0 [pid 377] mkdir("./103", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 376] <... close resumed>) = 0 [pid 3664] <... close resumed>) = 0 [pid 376] rmdir("./103/bus" [pid 3666] <... setpgid resumed>) = 0 [pid 3664] symlink("/dev/binderfs", "./binderfs" [pid 376] <... rmdir resumed>) = 0 [pid 3666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3664] <... symlink resumed>) = 0 [pid 376] getdents64(3, [pid 3662] <... mount resumed>) = 0 [pid 3666] write(3, "1000", 4 [pid 3664] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 3667] <... ioctl resumed>) = 0 [pid 3666] <... write resumed>) = 4 [pid 3664] <... futex resumed>) = 0 [pid 3662] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 377] <... close resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3666] close(3 [pid 3664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] close(3 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3666] <... close resumed>) = 0 [pid 3664] <... mmap resumed>) = 0x7f64ff044000 [pid 376] <... close resumed>) = 0 [pid 3666] symlink("/dev/binderfs", "./binderfs" [pid 3664] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 376] rmdir("./103"./strace-static-x86_64: Process 3671 attached [pid 3667] close(3 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3671 [pid 3662] <... openat resumed>) = 3 [pid 3667] <... close resumed>) = 0 [pid 3662] chdir("./bus" [pid 3671] set_robust_list(0x55555713c5e0, 24 [pid 3667] mkdir("./bus", 0777 [pid 3666] <... symlink resumed>) = 0 [pid 3664] <... mprotect resumed>) = 0 [pid 3662] <... chdir resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 3666] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3664] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] mkdir("./104", 0777 [pid 3662] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 3672 attached [pid 3671] <... set_robust_list resumed>) = 0 [pid 3667] <... mkdir resumed>) = 0 [pid 3666] <... futex resumed>) = 0 [pid 3662] <... ioctl resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 3666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3664] <... clone resumed>, parent_tid=[3672], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3672 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3666] <... mmap resumed>) = 0x7f64ff044000 [pid 3664] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 3 [pid 3666] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3664] <... futex resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 3666] <... mprotect resumed>) = 0 [pid 3664] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3666] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3662] close(4 [pid 376] close(3) = 0 [pid 3666] <... clone resumed>, parent_tid=[3673], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3673 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3666] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3666] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3674 [pid 3672] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3672] memfd_create("syzkaller", 0) = 3 [pid 3672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3662] <... close resumed>) = 0 [pid 3667] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3662] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3671] chdir("./103") = 0 [pid 3662] <... futex resumed>) = 1 [pid 3661] <... futex resumed>) = 0 [pid 3661] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3673 attached [pid 3673] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3673] memfd_create("syzkaller", 0) = 3 [pid 3661] <... futex resumed>) = 0 [pid 3661] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3662] chdir("./file0" [pid 3671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3671] setpgid(0, 0 [pid 3662] <... chdir resumed>) = 0 [pid 3671] <... setpgid resumed>) = 0 [pid 3662] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3662] <... futex resumed>) = 1 [pid 3661] <... futex resumed>) = 0 [pid 3661] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3661] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3662] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3671] <... openat resumed>) = 3 [pid 3671] write(3, "1000", 4 [pid 3662] <... open resumed>) = 4 [pid 3671] <... write resumed>) = 4 [pid 3671] close(3) = 0 [pid 3671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3662] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3671] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3662] <... futex resumed>) = 1 [pid 3661] <... futex resumed>) = 0 [pid 3671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3662] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3661] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3671] <... mmap resumed>) = 0x7f64ff044000 [pid 3661] <... futex resumed>) = 0 [pid 3671] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3661] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3671] <... mprotect resumed>) = 0 [pid 3662] <... openat resumed>) = 5 [pid 3671] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3662] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3661] <... futex resumed>) = 0 [pid 3671] <... clone resumed>, parent_tid=[3676], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3676 [pid 3662] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3661] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3661] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3662] <... write resumed>) = 196608 [pid 3671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3662] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3661] <... futex resumed>) = 0 [pid 3662] <... futex resumed>) = 1 [pid 3661] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3661] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3662] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3673] <... write resumed>) = 1048576 [pid 3673] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3673] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3662] <... mount resumed>) = 0 ./strace-static-x86_64: Process 3676 attached ./strace-static-x86_64: Process 3674 attached [pid 3673] <... openat resumed>) = 4 [ 76.598496][ T3662] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/102/bus supports timestamps until 2038 (0x7fffffff) [pid 3676] set_robust_list(0x7f64ff0649e0, 24 [pid 3674] set_robust_list(0x55555713c5e0, 24 [pid 3673] ioctl(4, LOOP_SET_FD, 3 [pid 3672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3662] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] <... set_robust_list resumed>) = 0 [pid 3674] chdir("./104") = 0 [pid 3674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3674] setpgid(0, 0) = 0 [pid 3674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3674] write(3, "1000", 4) = 4 [pid 3674] close(3) = 0 [pid 3674] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3674] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3674] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3674] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3678], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3678 [pid 3674] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3674] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3661] <... futex resumed>) = 0 [pid 3661] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3661] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3662] <... futex resumed>) = 1 [pid 3662] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3662] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3661] <... futex resumed>) = 0 [pid 3661] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3661] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3662] <... futex resumed>) = 1 [pid 3662] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3676] <... set_robust_list resumed>) = 0 [pid 3676] memfd_create("syzkaller", 0) = 3 [pid 3676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 3678 attached [pid 3667] <... mount resumed>) = 0 [pid 3678] set_robust_list(0x7f64ff0649e0, 24 [pid 3673] <... ioctl resumed>) = 0 [pid 3667] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3678] <... set_robust_list resumed>) = 0 [pid 3673] close(3 [pid 3667] <... openat resumed>) = 3 [pid 3678] memfd_create("syzkaller", 0 [pid 3673] <... close resumed>) = 0 [pid 3667] chdir("./bus" [pid 3678] <... memfd_create resumed>) = 3 [pid 3673] mkdir("./bus", 0777 [pid 3678] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3667] <... chdir resumed>) = 0 [pid 3673] <... mkdir resumed>) = 0 [pid 3678] <... mmap resumed>) = 0x7f64f6c44000 [pid 3673] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3678] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3667] ioctl(4, LOOP_CLR_FD) = 0 [pid 3667] close(4 [pid 3678] <... write resumed>) = 1048576 [pid 3678] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3678] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3667] <... close resumed>) = 0 [pid 3678] <... openat resumed>) = 4 [pid 3678] ioctl(4, LOOP_SET_FD, 3 [pid 3667] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3665] <... futex resumed>) = 0 [pid 3665] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3665] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3667] chdir("./file0") = 0 [pid 3667] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3665] <... futex resumed>) = 0 [pid 3665] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3665] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3667] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3662] <... write resumed>) = 1048576 [pid 3662] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3661] <... futex resumed>) = 0 [pid 3661] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3662] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3661] <... futex resumed>) = 0 [pid 3661] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3667] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3665] <... futex resumed>) = 0 [pid 3665] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3665] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3667] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3667] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3665] <... futex resumed>) = 0 [pid 3665] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3665] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3667] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 3667] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3665] <... futex resumed>) = 0 [pid 3665] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3665] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3667] <... futex resumed>) = 1 [pid 3667] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3667] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3665] <... futex resumed>) = 0 [pid 3665] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3665] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3667] <... futex resumed>) = 1 [pid 3667] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3672] <... write resumed>) = 1048576 [pid 3672] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3672] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3678] <... ioctl resumed>) = 0 [pid 3678] close(3 [pid 3672] <... openat resumed>) = 4 [pid 3667] <... open resumed>) = 6 [ 76.645721][ T3667] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/102/bus supports timestamps until 2038 (0x7fffffff) [ 76.681170][ T3662] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3676] <... write resumed>) = 1048576 [pid 3676] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3676] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 3676] ioctl(4, LOOP_SET_FD, 3 [pid 3678] <... close resumed>) = 0 [pid 3678] mkdir("./bus", 0777) = 0 [pid 3678] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3672] ioctl(4, LOOP_SET_FD, 3 [pid 3667] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3665] <... futex resumed>) = 0 [pid 3667] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3665] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3665] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3676] <... ioctl resumed>) = 0 [pid 3676] close(3) = 0 [pid 3676] mkdir("./bus", 0777) = 0 [pid 3676] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3673] <... mount resumed>) = 0 [pid 3673] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3673] chdir("./bus") = 0 [pid 3673] ioctl(4, LOOP_CLR_FD [pid 3672] <... ioctl resumed>) = 0 [pid 3662] <... openat resumed>) = 7 [pid 3673] <... ioctl resumed>) = 0 [pid 3667] <... write resumed>) = 1048576 [pid 3662] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3673] close(4 [pid 3672] close(3 [pid 3673] <... close resumed>) = 0 [pid 3672] <... close resumed>) = 0 [pid 3673] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3672] mkdir("./bus", 0777 [pid 3673] <... futex resumed>) = 1 [pid 3672] <... mkdir resumed>) = 0 [pid 3666] <... futex resumed>) = 0 [pid 3673] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3672] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3661] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3666] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3661] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3666] <... futex resumed>) = 1 [pid 3666] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3673] <... futex resumed>) = 0 [pid 3661] <... futex resumed>) = 0 [pid 3673] chdir("./file0" [pid 3661] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3673] <... chdir resumed>) = 0 [pid 3673] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3666] <... futex resumed>) = 0 [pid 3667] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3666] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3662] <... futex resumed>) = 1 [pid 3661] <... futex resumed>) = 0 [pid 3666] <... futex resumed>) = 0 [pid 3661] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [pid 3666] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3673] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3662] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3673] <... open resumed>) = 4 [pid 3667] <... futex resumed>) = 1 [pid 3665] <... futex resumed>) = 0 [pid 3673] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3667] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3665] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3662] <... openat resumed>) = 8 [pid 3662] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3661] <... futex resumed>) = 0 [pid 3662] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3661] exit_group(0 [pid 3662] <... futex resumed>) = ? [pid 3661] <... exit_group resumed>) = ? [pid 3662] +++ exited with 0 +++ [pid 3661] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3661, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 3673] <... futex resumed>) = 1 [pid 3666] <... futex resumed>) = 0 [ 76.696439][ T3673] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/101/bus supports timestamps until 2038 (0x7fffffff) [ 76.708455][ T3662] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 3673] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3666] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3673] <... openat resumed>) = 5 [pid 3666] <... futex resumed>) = 0 [pid 3673] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3666] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... restart_syscall resumed>) = 0 [pid 3665] <... futex resumed>) = 0 [pid 3673] <... futex resumed>) = 0 [pid 3666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3673] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3666] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3673] <... write resumed>) = 196608 [pid 3666] <... futex resumed>) = 0 [pid 3665] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3673] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3666] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3673] <... futex resumed>) = 0 [pid 3666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3673] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3666] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... openat resumed>) = 3 [pid 3673] <... mount resumed>) = 0 [pid 3666] <... futex resumed>) = 0 [pid 374] fstat(3, [pid 3673] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3666] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3673] <... futex resumed>) = 0 [pid 3666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] getdents64(3, [pid 3673] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3666] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3673] <... open resumed>) = 6 [pid 3666] <... futex resumed>) = 0 [pid 374] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3673] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3666] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3673] <... futex resumed>) = 0 [pid 3666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] lstat("./102/binderfs", [pid 3673] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3666] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3678] <... mount resumed>) = 0 [pid 3676] <... mount resumed>) = 0 [pid 3667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3666] <... futex resumed>) = 0 [pid 374] unlink("./102/binderfs" [pid 3676] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3667] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3666] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... unlink resumed>) = 0 [pid 3678] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3676] <... openat resumed>) = 3 [pid 3673] <... write resumed>) = 1048576 [pid 3673] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3673] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3678] <... openat resumed>) = 3 [pid 3678] chdir("./bus") = 0 [pid 3678] ioctl(4, LOOP_CLR_FD) = 0 [pid 3678] close(4) = 0 [pid 3678] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] <... futex resumed>) = 0 [pid 3674] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3674] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3678] <... futex resumed>) = 1 [pid 3678] chdir("./file0") = 0 [pid 3678] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] <... futex resumed>) = 0 [pid 3674] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3674] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3678] <... futex resumed>) = 1 [pid 3678] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3678] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] <... futex resumed>) = 0 [pid 3674] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3674] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3678] <... futex resumed>) = 1 [pid 3678] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3678] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] <... futex resumed>) = 0 [pid 3674] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3674] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3678] <... futex resumed>) = 1 [pid 3678] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 3678] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] <... futex resumed>) = 0 [pid 3674] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3674] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3678] <... futex resumed>) = 1 [pid 3678] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3678] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] <... futex resumed>) = 0 [pid 3674] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3674] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3678] <... futex resumed>) = 1 [pid 3678] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3678] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] <... futex resumed>) = 0 [pid 3674] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3674] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3678] <... futex resumed>) = 1 [pid 3678] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3676] chdir("./bus" [pid 3666] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3676] <... chdir resumed>) = 0 [pid 374] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3666] <... futex resumed>) = 1 [pid 3676] ioctl(4, LOOP_CLR_FD [pid 3673] <... futex resumed>) = 0 [pid 3666] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3676] <... ioctl resumed>) = 0 [pid 3676] close(4 [pid 3673] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3676] <... close resumed>) = 0 [ 76.735569][ T3676] ext4 filesystem being mounted at /root/syzkaller.43WzWH/103/bus supports timestamps until 2038 (0x7fffffff) [ 76.748860][ T3678] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/104/bus supports timestamps until 2038 (0x7fffffff) [ 76.764251][ T3667] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3676] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3678] <... write resumed>) = 1048576 [pid 3678] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] <... futex resumed>) = 0 [pid 3674] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3674] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3678] <... futex resumed>) = 1 [pid 3678] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3676] <... futex resumed>) = 1 [pid 3671] <... futex resumed>) = 0 [pid 3665] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3665] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3665] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3665] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3691], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3691 [pid 3665] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3665] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3676] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3666] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3672] <... mount resumed>) = 0 ./strace-static-x86_64: Process 3691 attached [pid 3691] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3691] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3672] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3671] <... futex resumed>) = 0 [pid 3666] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3676] chdir("./file0" [pid 3671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3666] <... futex resumed>) = 0 [pid 3672] <... openat resumed>) = 3 [pid 3666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3676] <... chdir resumed>) = 0 [pid 3666] <... mmap resumed>) = 0x7f64f6d23000 [ 76.785619][ T3673] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 76.791131][ T3672] ext4 filesystem being mounted at /root/syzkaller.k3ECep/103/bus supports timestamps until 2038 (0x7fffffff) [ 76.803883][ T3678] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 76.812561][ T3667] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 76.826157][ T3673] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 3676] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3672] chdir("./bus" [pid 3667] <... openat resumed>) = 7 [pid 3666] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3676] <... futex resumed>) = 1 [pid 3671] <... futex resumed>) = 0 [pid 3666] <... mprotect resumed>) = 0 [pid 3676] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3666] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3671] <... futex resumed>) = 0 [pid 3671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3666] <... clone resumed>, parent_tid=[3692], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3692 [pid 3666] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3666] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3672] <... chdir resumed>) = 0 [pid 3672] ioctl(4, LOOP_CLR_FD) = 0 [pid 3672] close(4 [pid 3691] <... openat resumed>) = 8 [pid 3676] <... open resumed>) = 4 [pid 3674] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3672] <... close resumed>) = 0 [pid 3691] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3676] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3691] <... futex resumed>) = 1 [pid 3676] <... futex resumed>) = 1 [pid 3674] <... futex resumed>) = 0 [pid 3671] <... futex resumed>) = 0 [pid 3665] <... futex resumed>) = 0 [pid 3691] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3676] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3676] <... openat resumed>) = 5 [pid 3674] <... mmap resumed>) = 0x7f64f6d23000 [pid 3671] <... futex resumed>) = 0 [pid 3676] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3676] <... futex resumed>) = 0 [pid 3674] <... mprotect resumed>) = 0 [pid 3671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3676] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3674] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3676] <... write resumed>) = 196608 [pid 3672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3671] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3693 attached ./strace-static-x86_64: Process 3692 attached [pid 3678] <... openat resumed>) = 7 [pid 3676] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3674] <... clone resumed>, parent_tid=[3693], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3693 [pid 3673] <... openat resumed>) = 7 [pid 3672] <... futex resumed>) = 1 [pid 3671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3667] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3664] <... futex resumed>) = 0 [pid 3693] set_robust_list(0x7f64f6d439e0, 24 [pid 3692] set_robust_list(0x7f64f6d439e0, 24 [pid 3678] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3676] <... futex resumed>) = 0 [pid 3674] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3673] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3672] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3667] <... futex resumed>) = 0 [pid 3664] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3693] <... set_robust_list resumed>) = 0 [pid 3692] <... set_robust_list resumed>) = 0 [pid 3678] <... futex resumed>) = 0 [pid 3676] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3674] <... futex resumed>) = 0 [pid 3673] <... futex resumed>) = 0 [pid 3672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3667] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3664] <... futex resumed>) = 0 [pid 3693] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3692] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3678] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3676] <... mount resumed>) = 0 [pid 3674] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3673] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3672] chdir("./file0" [pid 3671] <... futex resumed>) = 0 [pid 3664] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3676] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3672] <... chdir resumed>) = 0 [pid 3671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3665] exit_group(0 [pid 3691] <... futex resumed>) = ? [pid 3671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3667] <... futex resumed>) = ? [pid 3665] <... exit_group resumed>) = ? [pid 3693] <... openat resumed>) = 8 [pid 3692] <... openat resumed>) = 8 [pid 3691] +++ exited with 0 +++ [pid 3676] <... futex resumed>) = 0 [pid 3672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3672] <... futex resumed>) = 1 [pid 3671] <... futex resumed>) = 0 [pid 3664] <... futex resumed>) = 0 [pid 3692] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3676] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3672] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3664] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3693] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3664] <... futex resumed>) = 0 [pid 3672] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3664] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3692] <... futex resumed>) = 1 [pid 3674] <... futex resumed>) = 0 [pid 3666] <... futex resumed>) = 0 [pid 3674] exit_group(0 [pid 3678] <... futex resumed>) = ? [pid 3674] <... exit_group resumed>) = ? [pid 3678] +++ exited with 0 +++ [pid 3666] exit_group(0 [pid 3693] <... futex resumed>) = ? [pid 3672] <... open resumed>) = 4 [pid 3666] <... exit_group resumed>) = ? [pid 3672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3664] <... futex resumed>) = 0 [pid 3673] <... futex resumed>) = ? [pid 3672] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3664] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3664] <... futex resumed>) = 0 [pid 3673] +++ exited with 0 +++ [pid 3672] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3664] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3672] <... openat resumed>) = 5 [pid 3672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3664] <... futex resumed>) = 0 [pid 3672] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 3664] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3672] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3664] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3672] <... write resumed>) = 196608 [pid 3672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3664] <... futex resumed>) = 0 [pid 3672] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3664] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3664] <... futex resumed>) = 0 [pid 3672] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3664] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3672] <... mount resumed>) = 0 [pid 3672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3664] <... futex resumed>) = 0 [pid 3672] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3664] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3664] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3676] <... open resumed>) = 6 [pid 3667] +++ exited with 0 +++ [pid 3693] +++ exited with 0 +++ [pid 3692] +++ exited with 0 +++ [pid 3674] +++ exited with 0 +++ [pid 3666] +++ exited with 0 +++ [pid 3665] +++ exited with 0 +++ [pid 374] <... umount2 resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3674, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3665, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 374] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3666, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./102/bus", [pid 376] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... openat resumed>) = 3 [pid 375] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... openat resumed>) = 3 [pid 376] fstat(3, [pid 375] fstat(3, [pid 374] <... openat resumed>) = 4 [pid 372] fstat(3, [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] fstat(4, [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, [pid 375] getdents64(3, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] getdents64(4, [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] getdents64(4, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./104/binderfs", [pid 375] lstat("./102/binderfs", [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] lstat("./101/binderfs", [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] close(4 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./104/binderfs" [pid 375] unlink("./102/binderfs" [pid 374] <... close resumed>) = 0 [pid 372] unlink("./101/binderfs" [pid 376] <... unlink resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 374] rmdir("./102/bus" [pid 372] <... unlink resumed>) = 0 [pid 3676] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3672] <... open resumed>) = 6 [pid 376] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... rmdir resumed>) = 0 [pid 372] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3676] <... futex resumed>) = 1 [pid 3672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3671] <... futex resumed>) = 0 [pid 3676] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3672] <... futex resumed>) = 1 [pid 3671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3664] <... futex resumed>) = 0 [pid 3676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3672] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3671] <... futex resumed>) = 0 [pid 3664] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3676] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3664] <... futex resumed>) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3 [pid 3664] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... close resumed>) = 0 [pid 374] rmdir("./102") = 0 [pid 374] mkdir("./103", 0777) = 0 [ 76.844216][ T3678] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3672] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3676] <... write resumed>) = 1048576 [pid 3676] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3671] <... futex resumed>) = 0 [pid 3676] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3672] <... write resumed>) = 1048576 [pid 3671] <... futex resumed>) = 0 [pid 3672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3672] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3664] <... futex resumed>) = 0 [pid 3664] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3672] <... futex resumed>) = 0 [pid 3664] <... futex resumed>) = 1 [pid 3672] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3664] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3676] <... openat resumed>) = 7 [pid 3676] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3671] <... futex resumed>) = 0 [pid 3676] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3676] <... openat resumed>) = 8 [pid 3671] <... futex resumed>) = 0 [pid 3676] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3676] <... futex resumed>) = 0 [pid 3671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3676] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3671] exit_group(0 [pid 3676] <... futex resumed>) = ? [pid 3671] <... exit_group resumed>) = ? [pid 374] <... openat resumed>) = 3 [pid 374] ioctl(3, LOOP_CLR_FD [pid 375] <... umount2 resumed>) = 0 [pid 375] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./102/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./102/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./102" [pid 3672] <... openat resumed>) = 7 [pid 375] <... rmdir resumed>) = 0 [pid 375] mkdir("./103", 0777 [pid 3672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... mkdir resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3672] <... futex resumed>) = 1 [pid 3672] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3664] <... futex resumed>) = 0 [pid 3664] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3664] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3672] <... futex resumed>) = 0 [pid 3672] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3664] <... futex resumed>) = 0 [pid 3672] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3664] exit_group(0 [pid 3672] <... futex resumed>) = ? [pid 3664] <... exit_group resumed>) = ? [ 76.916937][ T3676] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 76.930187][ T3672] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 76.931190][ T3676] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 76.944814][ T3672] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 375] <... openat resumed>) = 3 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3676] +++ exited with 0 +++ [pid 3671] +++ exited with 0 +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3671, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 377] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./103/binderfs") = 0 [pid 377] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] ioctl(3, LOOP_CLR_FD [pid 374] close(3 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3672] +++ exited with 0 +++ [pid 3664] +++ exited with 0 +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3664, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 376] <... umount2 resumed>) = 0 [pid 375] close(3 [pid 374] <... close resumed>) = 0 [pid 373] <... restart_syscall resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 376] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] lstat("./104/bus", [pid 373] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3694 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3695 [pid 373] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... openat resumed>) = 3 [pid 372] lstat("./101/bus", [pid 376] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] fstat(3, [pid 376] <... openat resumed>) = 4 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] fstat(4, [pid 373] getdents64(3, [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] getdents64(4, [pid 373] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] getdents64(4, [pid 373] lstat("./103/binderfs", [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] close(4 [pid 373] unlink("./103/binderfs" [pid 376] <... close resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 372] <... openat resumed>) = 4 [pid 376] rmdir("./104/bus" [pid 373] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] fstat(4, ./strace-static-x86_64: Process 3695 attached [pid 3695] set_robust_list(0x55555713c5e0, 24) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3695] chdir("./103" [pid 376] <... rmdir resumed>) = 0 [pid 372] getdents64(4, [pid 3695] <... chdir resumed>) = 0 [pid 3695] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3695] setpgid(0, 0) = 0 [pid 3695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3695] write(3, "1000", 4) = 4 [pid 3695] close(3) = 0 [pid 3695] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3695] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3695] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3695] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3695] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3696], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3696 [pid 3695] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3695] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] getdents64(4, [pid 3695] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 376] close(3 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] <... close resumed>) = 0 [pid 372] close(4 [pid 376] rmdir("./104" [pid 372] <... close resumed>) = 0 ./strace-static-x86_64: Process 3696 attached [pid 372] rmdir("./101/bus" [pid 3696] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 372] getdents64(3, [pid 376] <... rmdir resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] mkdir("./105", 0777 [pid 372] close(3 [pid 3696] memfd_create("syzkaller", 0 [pid 376] <... mkdir resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3696] <... memfd_create resumed>) = 3 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 372] rmdir("./101" [pid 3696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 372] <... rmdir resumed>) = 0 [pid 372] mkdir("./102", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 3694 attached [pid 3694] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3694] chdir("./103") = 0 [pid 3694] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3694] setpgid(0, 0) = 0 [pid 3694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3694] write(3, "1000", 4) = 4 [pid 3694] close(3) = 0 [pid 3694] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3694] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3694] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3694] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3697], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3697 [pid 3694] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3694] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3696] <... write resumed>) = 1048576 [pid 3696] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3696] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 3697 attached [pid 3697] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3697] memfd_create("syzkaller", 0) = 3 [pid 3697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./103/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./103/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./103" [pid 3697] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 373] <... rmdir resumed>) = 0 [pid 373] mkdir("./104", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3697] <... write resumed>) = 1048576 [pid 3697] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3697] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3696] <... openat resumed>) = 4 [pid 376] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 3696] ioctl(4, LOOP_SET_FD, 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 373] ioctl(3, LOOP_CLR_FD [pid 372] ioctl(3, LOOP_CLR_FD [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] close(3 [pid 373] close(3 [pid 372] close(3 [pid 3697] <... openat resumed>) = 4 [pid 3696] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3697] ioctl(4, LOOP_SET_FD, 3 [pid 3696] close(3 [pid 377] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3697] <... ioctl resumed>) = 0 [pid 3696] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3697] close(3 [pid 3696] mkdir("./bus", 0777 [pid 377] lstat("./103/bus", [pid 3697] <... close resumed>) = 0 [pid 3696] <... mkdir resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3697] mkdir("./bus", 0777 [pid 3696] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 377] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3702 attached ./strace-static-x86_64: Process 3700 attached [pid 3697] <... mkdir resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3702] set_robust_list(0x55555713c5e0, 24 [pid 3700] set_robust_list(0x55555713c5e0, 24 [pid 3697] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 377] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3702] <... set_robust_list resumed>) = 0 [pid 3700] <... set_robust_list resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3700 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3701 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3702 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./103/bus" [pid 3702] chdir("./102" [pid 3700] chdir("./105" [pid 377] <... rmdir resumed>) = 0 [pid 377] getdents64(3, [pid 3702] <... chdir resumed>) = 0 [pid 3702] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3700] <... chdir resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3702] <... prctl resumed>) = 0 [pid 3700] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 377] close(3./strace-static-x86_64: Process 3701 attached [pid 3702] setpgid(0, 0 [pid 3700] <... prctl resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 3701] set_robust_list(0x55555713c5e0, 24 [pid 377] rmdir("./103" [pid 3702] <... setpgid resumed>) = 0 [pid 3701] <... set_robust_list resumed>) = 0 [pid 3700] setpgid(0, 0 [pid 377] <... rmdir resumed>) = 0 [pid 3702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3701] chdir("./104" [pid 3700] <... setpgid resumed>) = 0 [pid 377] mkdir("./104", 0777 [pid 3701] <... chdir resumed>) = 0 [pid 3700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] <... mkdir resumed>) = 0 [pid 3702] <... openat resumed>) = 3 [pid 3701] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3702] write(3, "1000", 4 [pid 3701] <... prctl resumed>) = 0 [pid 3700] <... openat resumed>) = 3 [pid 377] <... openat resumed>) = 3 [pid 3701] setpgid(0, 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 3702] <... write resumed>) = 4 [pid 3701] <... setpgid resumed>) = 0 [pid 3700] write(3, "1000", 4 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] close(3 [pid 3702] close(3 [pid 3701] <... openat resumed>) = 3 [pid 3700] <... write resumed>) = 4 [pid 377] <... close resumed>) = 0 [pid 3702] <... close resumed>) = 0 [pid 3701] write(3, "1000", 4 [pid 3700] close(3 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3702] symlink("/dev/binderfs", "./binderfs" [pid 3701] <... write resumed>) = 4 [pid 3700] <... close resumed>) = 0 [pid 3701] close(3 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3704 [pid 3702] <... symlink resumed>) = 0 [pid 3701] <... close resumed>) = 0 [pid 3700] symlink("/dev/binderfs", "./binderfs" [pid 3701] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3701] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3701] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3701] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3701] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3706], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3706 [pid 3701] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3701] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3702] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3700] <... symlink resumed>) = 0 [pid 3702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3700] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3702] <... mmap resumed>) = 0x7f64ff044000 [pid 3700] <... futex resumed>) = 0 [pid 3702] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3702] <... mprotect resumed>) = 0 [pid 3700] <... mmap resumed>) = 0x7f64ff044000 ./strace-static-x86_64: Process 3704 attached [pid 3704] set_robust_list(0x55555713c5e0, 24 [pid 3702] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3700] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3704] <... set_robust_list resumed>) = 0 [pid 3704] chdir("./104" [pid 3700] <... mprotect resumed>) = 0 [pid 3702] <... clone resumed>, parent_tid=[3708], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3708 [pid 3704] <... chdir resumed>) = 0 [pid 3700] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3702] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3704] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3702] <... futex resumed>) = 0 [pid 3702] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3700] <... clone resumed>, parent_tid=[3709], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3709 [pid 3700] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3700] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3704] <... prctl resumed>) = 0 [pid 3704] setpgid(0, 0) = 0 [pid 3704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3704] write(3, "1000", 4) = 4 [pid 3704] close(3) = 0 [pid 3704] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 3708 attached ) = 0 [pid 3708] set_robust_list(0x7f64ff0649e0, 24 [pid 3704] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3706 attached [pid 3708] <... set_robust_list resumed>) = 0 [pid 3704] <... futex resumed>) = 0 [pid 3704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3704] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3704] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3711], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3711 [pid 3704] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3704] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3709 attached [pid 3709] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3709] memfd_create("syzkaller", 0) = 3 [pid 3709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3696] <... mount resumed>) = 0 [pid 3696] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3696] chdir("./bus") = 0 [pid 3696] ioctl(4, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 3711 attached [pid 3709] <... write resumed>) = 1048576 [pid 3708] memfd_create("syzkaller", 0 [pid 3706] set_robust_list(0x7f64ff0649e0, 24 [pid 3697] <... mount resumed>) = 0 [pid 3711] set_robust_list(0x7f64ff0649e0, 24 [pid 3696] close(4 [pid 3708] <... memfd_create resumed>) = 3 [pid 3706] <... set_robust_list resumed>) = 0 [pid 3711] <... set_robust_list resumed>) = 0 [pid 3708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3711] memfd_create("syzkaller", 0 [pid 3709] munmap(0x7f64f6c44000, 1048576 [pid 3708] <... mmap resumed>) = 0x7f64f6c44000 [pid 3706] memfd_create("syzkaller", 0 [pid 3697] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3696] <... close resumed>) = 0 [pid 3711] <... memfd_create resumed>) = 3 [pid 3709] <... munmap resumed>) = 0 [pid 3706] <... memfd_create resumed>) = 3 [pid 3697] <... openat resumed>) = 3 [pid 3696] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3695] <... futex resumed>) = 0 [pid 3695] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3695] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3696] <... futex resumed>) = 1 [pid 3696] chdir("./file0") = 0 [pid 3696] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3695] <... futex resumed>) = 0 [pid 3695] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3695] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3696] <... futex resumed>) = 1 [pid 3696] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3709] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 3697] chdir("./bus") = 0 [pid 3709] ioctl(4, LOOP_SET_FD, 3 [pid 3697] ioctl(4, LOOP_CLR_FD [pid 3708] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3709] <... ioctl resumed>) = 0 [pid 3711] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3706] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3697] <... ioctl resumed>) = 0 [pid 3697] close(4) = 0 [pid 3697] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3694] <... futex resumed>) = 0 [pid 3697] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3694] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3706] <... write resumed>) = 1048576 [pid 3694] <... futex resumed>) = 0 [pid 3709] close(3 [pid 3706] munmap(0x7f64f6c44000, 1048576 [pid 3697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3696] <... open resumed>) = 4 [ 77.128709][ T3696] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/103/bus supports timestamps until 2038 (0x7fffffff) [ 77.135331][ T3697] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/103/bus supports timestamps until 2038 (0x7fffffff) [pid 3694] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3709] <... close resumed>) = 0 [pid 3697] chdir("./file0" [pid 3696] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3709] mkdir("./bus", 0777 [pid 3711] <... write resumed>) = 1048576 [pid 3709] <... mkdir resumed>) = 0 [pid 3708] <... write resumed>) = 1048576 [pid 3706] <... munmap resumed>) = 0 [pid 3697] <... chdir resumed>) = 0 [pid 3696] <... futex resumed>) = 1 [pid 3695] <... futex resumed>) = 0 [pid 3709] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3706] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3697] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3696] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3695] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] munmap(0x7f64f6c44000, 1048576 [pid 3708] munmap(0x7f64f6c44000, 1048576 [pid 3706] <... openat resumed>) = 4 [pid 3695] <... futex resumed>) = 0 [pid 3706] ioctl(4, LOOP_SET_FD, 3 [pid 3697] <... futex resumed>) = 1 [pid 3696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3695] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3694] <... futex resumed>) = 0 [pid 3711] <... munmap resumed>) = 0 [pid 3708] <... munmap resumed>) = 0 [pid 3697] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3696] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3694] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3706] <... ioctl resumed>) = 0 [pid 3697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3696] <... openat resumed>) = 5 [pid 3694] <... futex resumed>) = 0 [pid 3711] <... openat resumed>) = 4 [pid 3708] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3706] close(3 [pid 3697] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3696] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3694] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3711] ioctl(4, LOOP_SET_FD, 3 [pid 3708] <... openat resumed>) = 4 [pid 3706] <... close resumed>) = 0 [pid 3696] <... futex resumed>) = 1 [pid 3695] <... futex resumed>) = 0 [pid 3706] mkdir("./bus", 0777 [pid 3697] <... open resumed>) = 4 [pid 3696] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3695] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] <... ioctl resumed>) = 0 [pid 3708] ioctl(4, LOOP_SET_FD, 3 [pid 3706] <... mkdir resumed>) = 0 [pid 3696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3695] <... futex resumed>) = 0 [pid 3711] close(3 [pid 3706] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3697] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3696] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3695] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3711] <... close resumed>) = 0 [pid 3708] <... ioctl resumed>) = 0 [pid 3697] <... futex resumed>) = 1 [pid 3696] <... write resumed>) = 196608 [pid 3694] <... futex resumed>) = 0 [pid 3697] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3696] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] mkdir("./bus", 0777 [pid 3708] close(3 [pid 3697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3696] <... futex resumed>) = 1 [pid 3695] <... futex resumed>) = 0 [pid 3694] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] <... mkdir resumed>) = 0 [pid 3708] <... close resumed>) = 0 [pid 3697] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3696] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3695] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3708] mkdir("./bus", 0777 [pid 3697] <... openat resumed>) = 5 [pid 3696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3695] <... futex resumed>) = 0 [pid 3694] <... futex resumed>) = 0 [pid 3697] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3696] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3695] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3708] <... mkdir resumed>) = 0 [pid 3697] <... futex resumed>) = 0 [pid 3696] <... mount resumed>) = 0 [pid 3694] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3708] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3697] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3696] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3695] <... futex resumed>) = 0 [pid 3694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3696] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3695] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3694] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3695] <... futex resumed>) = 0 [pid 3697] <... futex resumed>) = 0 [pid 3696] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3695] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3694] <... futex resumed>) = 1 [pid 3697] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3696] <... open resumed>) = 6 [pid 3694] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3696] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3695] <... futex resumed>) = 0 [pid 3696] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3695] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3695] <... futex resumed>) = 0 [pid 3696] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3695] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3697] <... write resumed>) = 196608 [pid 3697] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3694] <... futex resumed>) = 0 [pid 3697] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3694] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3697] <... mount resumed>) = 0 [pid 3696] <... write resumed>) = 1048576 [pid 3697] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3696] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3697] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3696] <... futex resumed>) = 1 [pid 3696] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3697] <... futex resumed>) = 0 [pid 3694] <... futex resumed>) = 1 [pid 3697] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3694] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 3694] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3697] <... futex resumed>) = 0 [pid 3694] <... futex resumed>) = 1 [pid 3697] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3694] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3697] <... open resumed>) = 6 [pid 3697] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3694] <... futex resumed>) = 0 [pid 3697] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3694] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3694] <... futex resumed>) = 0 [pid 3697] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3694] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3695] <... futex resumed>) = 0 [pid 3695] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3697] <... write resumed>) = 1048576 [pid 3697] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3694] <... futex resumed>) = 0 [pid 3694] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3694] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3697] <... futex resumed>) = 1 [pid 3697] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3709] <... mount resumed>) = 0 [pid 3706] <... mount resumed>) = 0 [pid 3696] <... futex resumed>) = 0 [pid 3695] <... futex resumed>) = 1 [pid 3696] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 77.224726][ T3709] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/105/bus supports timestamps until 2038 (0x7fffffff) [ 77.237386][ T3706] ext4 filesystem being mounted at /root/syzkaller.k3ECep/104/bus supports timestamps until 2038 (0x7fffffff) [ 77.248661][ T3697] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3695] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3711] <... mount resumed>) = 0 [pid 3709] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3706] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3711] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3706] <... openat resumed>) = 3 [pid 3711] <... openat resumed>) = 3 [pid 3709] <... openat resumed>) = 3 [pid 3711] chdir("./bus" [pid 3709] chdir("./bus" [pid 3706] chdir("./bus" [pid 3711] <... chdir resumed>) = 0 [pid 3709] <... chdir resumed>) = 0 [pid 3706] <... chdir resumed>) = 0 [pid 3711] ioctl(4, LOOP_CLR_FD [pid 3709] ioctl(4, LOOP_CLR_FD [pid 3708] <... mount resumed>) = 0 [pid 3706] ioctl(4, LOOP_CLR_FD [pid 3695] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3694] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3711] <... ioctl resumed>) = 0 [pid 3709] <... ioctl resumed>) = 0 [pid 3706] <... ioctl resumed>) = 0 [pid 3695] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3694] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] close(4 [pid 3709] close(4 [pid 3706] close(4 [pid 3695] <... futex resumed>) = 0 [pid 3694] <... futex resumed>) = 0 [pid 3711] <... close resumed>) = 0 [pid 3709] <... close resumed>) = 0 [pid 3706] <... close resumed>) = 0 [pid 3695] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3711] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3706] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3695] <... mmap resumed>) = 0x7f64f6d23000 [pid 3694] <... mmap resumed>) = 0x7f64f6d23000 [pid 3711] <... futex resumed>) = 1 [pid 3709] <... futex resumed>) = 1 [pid 3706] <... futex resumed>) = 1 [pid 3704] <... futex resumed>) = 0 [pid 3701] <... futex resumed>) = 0 [pid 3700] <... futex resumed>) = 0 [pid 3695] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3694] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3711] chdir("./file0" [pid 3709] chdir("./file0" [pid 3706] chdir("./file0" [pid 3704] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3701] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3700] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3695] <... mprotect resumed>) = 0 [pid 3694] <... mprotect resumed>) = 0 [pid 3711] <... chdir resumed>) = 0 [pid 3706] <... chdir resumed>) = 0 [pid 3704] <... futex resumed>) = 0 [pid 3701] <... futex resumed>) = 0 [pid 3700] <... futex resumed>) = 0 [pid 3695] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3694] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3711] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3706] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3704] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3701] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3700] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3711] <... futex resumed>) = 0 [pid 3706] <... futex resumed>) = 0 [pid 3704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3701] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3695] <... clone resumed>, parent_tid=[3724], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3724 [pid 3694] <... clone resumed>, parent_tid=[3725], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3725 [pid 3704] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3701] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3706] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3704] <... futex resumed>) = 0 [pid 3701] <... futex resumed>) = 0 [pid 3695] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3694] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] <... open resumed>) = 4 [pid 3706] <... open resumed>) = 4 [pid 3704] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3701] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3695] <... futex resumed>) = 0 [pid 3694] <... futex resumed>) = 0 [pid 3711] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3706] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3701] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3695] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3694] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3711] <... futex resumed>) = 1 [pid 3706] <... futex resumed>) = 0 [pid 3704] <... futex resumed>) = 0 [pid 3701] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3706] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3704] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3701] <... futex resumed>) = 0 [pid 3711] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3706] <... openat resumed>) = 5 [pid 3704] <... futex resumed>) = 0 [pid 3701] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3711] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3706] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3704] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3701] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3711] <... openat resumed>) = 5 [pid 3706] <... futex resumed>) = 0 [pid 3701] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3706] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3701] <... futex resumed>) = 0 [pid 3711] <... futex resumed>) = 1 [pid 3706] <... write resumed>) = 196608 [pid 3704] <... futex resumed>) = 0 [pid 3701] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3711] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3706] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3704] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3701] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3711] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3706] <... futex resumed>) = 0 [pid 3704] <... futex resumed>) = 0 [pid 3701] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3706] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3704] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3701] <... futex resumed>) = 0 [pid 3711] <... write resumed>) = 196608 [pid 3706] <... mount resumed>) = 0 [pid 3701] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3711] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3706] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] <... futex resumed>) = 1 [pid 3706] <... futex resumed>) = 1 [pid 3704] <... futex resumed>) = 0 [pid 3701] <... futex resumed>) = 0 [pid 3711] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3706] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3704] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3701] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] <... mount resumed>) = 0 [pid 3706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3704] <... futex resumed>) = 0 [pid 3701] <... futex resumed>) = 0 [pid 3711] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3706] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3704] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3701] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3711] <... futex resumed>) = 0 [pid 3706] <... open resumed>) = 6 [pid 3704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3711] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3706] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3704] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3706] <... futex resumed>) = 1 [pid 3704] <... futex resumed>) = 0 [pid 3701] <... futex resumed>) = 0 [pid 3711] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3706] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3704] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3701] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] <... open resumed>) = 6 [pid 3706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3701] <... futex resumed>) = 0 [pid 3711] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3706] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3701] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3711] <... futex resumed>) = 1 [pid 3708] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3704] <... futex resumed>) = 0 [pid 3696] <... openat resumed>) = 7 [pid 3711] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3709] <... chdir resumed>) = 0 [pid 3708] <... openat resumed>) = 3 [pid 3704] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3696] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3711] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3708] chdir("./bus" [pid 3704] <... futex resumed>) = 0 [pid 3696] <... futex resumed>) = 0 [pid 3711] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3709] <... futex resumed>) = 1 [pid 3708] <... chdir resumed>) = 0 [pid 3704] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3700] <... futex resumed>) = 0 [pid 3696] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3725 attached ./strace-static-x86_64: Process 3724 attached [pid 3725] set_robust_list(0x7f64f6d439e0, 24 [pid 3724] set_robust_list(0x7f64f6d439e0, 24 [pid 3725] <... set_robust_list resumed>) = 0 [pid 3724] <... set_robust_list resumed>) = 0 [pid 3725] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3724] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3724] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3709] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3700] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3724] <... futex resumed>) = 1 [pid 3724] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3695] <... futex resumed>) = 0 [pid 3709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3700] <... futex resumed>) = 0 [pid 3695] exit_group(0 [pid 3709] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3700] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3724] <... futex resumed>) = ? [pid 3696] <... futex resumed>) = ? [pid 3695] <... exit_group resumed>) = ? [pid 3724] +++ exited with 0 +++ [pid 3696] +++ exited with 0 +++ [pid 3695] +++ exited with 0 +++ [pid 3709] <... open resumed>) = 4 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3695, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 3709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 3708] ioctl(4, LOOP_CLR_FD) = 0 [pid 3708] close(4) = 0 [pid 3709] <... futex resumed>) = 1 [pid 3700] <... futex resumed>) = 0 [pid 375] <... restart_syscall resumed>) = 0 [pid 3709] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3700] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3708] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3702] <... futex resumed>) = 0 [pid 3702] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3700] <... futex resumed>) = 0 [pid 3702] <... futex resumed>) = 1 [pid 3700] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3702] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3709] <... openat resumed>) = 5 [pid 3709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3709] <... futex resumed>) = 1 [pid 3700] <... futex resumed>) = 0 [pid 375] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3700] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3709] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3700] <... futex resumed>) = 0 [pid 3711] <... write resumed>) = 1048576 [pid 3711] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 77.250398][ T3696] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 77.264599][ T3711] ext4 filesystem being mounted at /root/syzkaller.43WzWH/104/bus supports timestamps until 2038 (0x7fffffff) [ 77.290680][ T3708] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/102/bus supports timestamps until 2038 (0x7fffffff) [ 77.290687][ T3696] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 77.290776][ T3697] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 3711] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3725] <... openat resumed>) = 8 [pid 3725] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3704] <... futex resumed>) = 0 [pid 3700] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3694] <... futex resumed>) = 0 [pid 375] lstat("./103/binderfs", [pid 3704] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3704] <... futex resumed>) = 1 [pid 3725] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3704] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] unlink("./103/binderfs" [pid 3709] <... write resumed>) = 196608 [pid 375] <... unlink resumed>) = 0 [pid 3708] <... futex resumed>) = 0 [pid 3708] chdir("./file0") = 0 [pid 3708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3702] <... futex resumed>) = 0 [pid 3702] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3702] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3708] <... futex resumed>) = 1 [pid 3708] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3711] <... futex resumed>) = 0 [pid 3709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3697] <... openat resumed>) = 7 [pid 3706] <... write resumed>) = 1048576 [pid 375] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3711] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3709] <... futex resumed>) = 1 [pid 3708] <... open resumed>) = 4 [pid 3706] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3700] <... futex resumed>) = 0 [pid 3697] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3709] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3700] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3694] exit_group(0 [pid 3725] <... futex resumed>) = ? [pid 3709] <... mount resumed>) = 0 [pid 3700] <... futex resumed>) = 0 [pid 3694] <... exit_group resumed>) = ? [pid 3725] +++ exited with 0 +++ [pid 3709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3700] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3709] <... futex resumed>) = 0 [pid 3700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3709] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3700] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3709] <... open resumed>) = 6 [pid 3700] <... futex resumed>) = 0 [pid 3709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3700] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3709] <... futex resumed>) = 0 [pid 3700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3709] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3700] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3700] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3697] <... futex resumed>) = ? [pid 3708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3706] <... futex resumed>) = 0 [pid 3701] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3697] +++ exited with 0 +++ [pid 3694] +++ exited with 0 +++ [pid 3701] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3694, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- [pid 3702] <... futex resumed>) = 0 [pid 3702] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3702] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3708] <... futex resumed>) = 1 [pid 3708] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3706] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3701] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3708] <... futex resumed>) = 1 [pid 3702] <... futex resumed>) = 0 [pid 374] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3711] <... openat resumed>) = 7 [pid 3709] <... write resumed>) = 1048576 [pid 374] <... openat resumed>) = 3 [pid 3711] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] fstat(3, [pid 3711] <... futex resumed>) = 1 [pid 3709] <... futex resumed>) = 1 [pid 3704] <... futex resumed>) = 0 [pid 3700] <... futex resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3711] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3709] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3704] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3700] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(3, [pid 3711] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3704] <... futex resumed>) = 0 [pid 3700] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3711] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3709] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 77.360025][ T3711] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 77.377447][ T3711] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 77.388944][ T3706] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3708] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3704] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3702] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3700] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3711] <... openat resumed>) = 8 [pid 3711] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3708] <... write resumed>) = 196608 [pid 3702] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3711] <... futex resumed>) = 1 [pid 3708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3704] <... futex resumed>) = 0 [pid 3702] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] lstat("./103/binderfs", [pid 3711] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3708] <... futex resumed>) = 0 [pid 3704] exit_group(0 [pid 3702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3711] <... futex resumed>) = ? [pid 3708] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3704] <... exit_group resumed>) = ? [pid 3702] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] unlink("./103/binderfs" [pid 3711] +++ exited with 0 +++ [pid 3708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3702] <... futex resumed>) = 0 [pid 374] <... unlink resumed>) = 0 [pid 3708] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3702] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3708] <... mount resumed>) = 0 [pid 3708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3702] <... futex resumed>) = 0 [pid 3708] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3702] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3702] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3708] <... open resumed>) = 6 [pid 3706] <... openat resumed>) = 7 [pid 3704] +++ exited with 0 +++ [pid 375] <... umount2 resumed>) = 0 [pid 3708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3702] <... futex resumed>) = 0 [pid 3708] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3702] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3709] <... openat resumed>) = 7 [pid 3706] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3702] <... futex resumed>) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3704, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 375] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3706] <... futex resumed>) = 1 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3706] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] lstat("./103/bus", [pid 377] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... openat resumed>) = 3 [pid 377] fstat(3, [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3702] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3701] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 375] <... openat resumed>) = 4 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] fstat(4, [pid 377] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] getdents64(4, [pid 377] lstat("./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] unlink("./104/binderfs") = 0 [pid 375] getdents64(4, [pid 3701] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3706] <... futex resumed>) = 0 [pid 3701] <... futex resumed>) = 1 [pid 375] close(4) = 0 [pid 375] rmdir("./103/bus" [pid 3706] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3701] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... rmdir resumed>) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./103" [pid 3706] <... openat resumed>) = 8 [pid 375] <... rmdir resumed>) = 0 [pid 3706] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] mkdir("./104", 0777 [pid 3706] <... futex resumed>) = 1 [pid 3701] <... futex resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 3706] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3701] exit_group(0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3706] <... futex resumed>) = ? [pid 3701] <... exit_group resumed>) = ? [pid 3708] <... write resumed>) = 1048576 [pid 3708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3708] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3702] <... futex resumed>) = 0 [pid 3702] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3702] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3700] <... futex resumed>) = 0 [pid 3709] <... futex resumed>) = 1 [pid 3708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3700] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3700] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3709] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3708] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3709] <... futex resumed>) = 1 [pid 3700] <... futex resumed>) = 0 [pid 3709] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3700] exit_group(0) = ? [pid 3709] <... futex resumed>) = ? [ 77.397223][ T3709] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 77.403779][ T3706] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 77.426014][ T3709] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./103/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, [pid 3708] <... openat resumed>) = 7 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3702] <... futex resumed>) = 0 [pid 3708] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3702] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3708] <... openat resumed>) = 8 [pid 3702] <... futex resumed>) = 0 [pid 374] close(4 [pid 3708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3702] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3708] <... futex resumed>) = 0 [pid 3702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3708] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3702] exit_group(0 [pid 3708] <... futex resumed>) = ? [pid 3702] <... exit_group resumed>) = ? [pid 374] <... close resumed>) = 0 [pid 374] rmdir("./103/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./103") = 0 [pid 374] mkdir("./104", 0777) = 0 [ 77.455833][ T3708] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 77.470445][ T3708] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3709] +++ exited with 0 +++ [pid 3706] +++ exited with 0 +++ [pid 3701] +++ exited with 0 +++ [pid 3700] +++ exited with 0 +++ [pid 375] <... openat resumed>) = 3 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3700, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./105/binderfs") = 0 [pid 376] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] ioctl(3, LOOP_CLR_FD [pid 374] <... openat resumed>) = 3 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] <... umount2 resumed>) = 0 [pid 375] close(3 [pid 377] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3701, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 375] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] lstat("./104/bus", ./strace-static-x86_64: Process 3726 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3726 [pid 373] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3726] set_robust_list(0x55555713c5e0, 24 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3726] <... set_robust_list resumed>) = 0 [pid 3726] chdir("./104") = 0 [pid 3726] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3726] setpgid(0, 0) = 0 [pid 3726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] <... openat resumed>) = 4 [pid 373] <... openat resumed>) = 3 [pid 3726] <... openat resumed>) = 3 [pid 377] fstat(4, [pid 373] fstat(3, [pid 3726] write(3, "1000", 4 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3726] <... write resumed>) = 4 [pid 377] getdents64(4, [pid 373] getdents64(3, [pid 3726] close(3 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3726] <... close resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] getdents64(4, [pid 3726] symlink("/dev/binderfs", "./binderfs" [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3726] <... symlink resumed>) = 0 [pid 3726] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] close(4 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... close resumed>) = 0 [pid 373] lstat("./104/binderfs", [pid 3726] <... futex resumed>) = 0 [pid 3726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3726] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3726] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] rmdir("./104/bus" [pid 3726] <... clone resumed>, parent_tid=[3727], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3727 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3726] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3726] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3727 attached [pid 377] <... rmdir resumed>) = 0 [pid 373] unlink("./104/binderfs" [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3727] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 373] <... unlink resumed>) = 0 [pid 377] close(3) = 0 [pid 373] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3727] memfd_create("syzkaller", 0) = 3 [pid 3727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 377] rmdir("./104") = 0 [pid 377] mkdir("./105", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3708] +++ exited with 0 +++ [pid 3702] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3702, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 372] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./102/binderfs") = 0 [pid 372] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3727] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3727] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3727] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 377] <... openat resumed>) = 3 [pid 376] <... umount2 resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] ioctl(3, LOOP_CLR_FD [pid 374] close(3 [pid 376] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./105/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./105/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./105") = 0 [pid 376] mkdir("./106", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... openat resumed>) = 3 [pid 374] <... close resumed>) = 0 [pid 377] close(3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3728 ./strace-static-x86_64: Process 3728 attached [pid 3728] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3728] chdir("./104") = 0 [pid 3728] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3728] setpgid(0, 0) = 0 [pid 3728] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3728] write(3, "1000", 4) = 4 [pid 3728] close(3) = 0 [pid 3728] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3728] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3728] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3728] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3728] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3729], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3729 [pid 3728] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3728] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3729 attached [pid 3729] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3729] memfd_create("syzkaller", 0) = 3 [pid 3729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3729] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3729] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3729] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 3727] <... openat resumed>) = 4 [pid 377] <... close resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... umount2 resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 3729] ioctl(4, LOOP_SET_FD, 3 [pid 3727] ioctl(4, LOOP_SET_FD, 3 [pid 376] close(3 [pid 372] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./102/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./102/bus") = 0 [pid 372] getdents64(3, [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./102") = 0 [pid 372] mkdir("./103", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3731 [pid 373] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./104/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./104/bus"./strace-static-x86_64: Process 3731 attached [pid 3727] <... ioctl resumed>) = 0 [pid 3727] close(3) = 0 [pid 3727] mkdir("./bus", 0777) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 3727] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] getdents64(3, [pid 3729] <... ioctl resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] <... openat resumed>) = 3 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3733 [pid 373] close(3 [pid 372] close(3 [pid 373] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 373] rmdir("./104" [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3733 attached [pid 3733] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3733] chdir("./106") = 0 [pid 3733] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 373] <... rmdir resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3734 [pid 373] mkdir("./105", 0777 [pid 3733] <... prctl resumed>) = 0 [pid 3733] setpgid(0, 0) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3729] close(3 [pid 373] <... openat resumed>) = 3 [pid 3733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 373] ioctl(3, LOOP_CLR_FD [pid 3733] write(3, "1000", 4) = 4 [pid 3733] close(3) = 0 [pid 3733] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3733] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3733] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3733] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3735], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3735 [pid 3733] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3733] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3735 attached [pid 3735] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3735] memfd_create("syzkaller", 0) = 3 [pid 3735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3729] <... close resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] close(3 [pid 3729] mkdir("./bus", 0777 [pid 373] <... close resumed>) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3729] <... mkdir resumed>) = 0 [pid 3729] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3736 ./strace-static-x86_64: Process 3736 attached [pid 3736] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3736] chdir("./105") = 0 [pid 3736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3736] setpgid(0, 0) = 0 [pid 3736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3736] write(3, "1000", 4) = 4 [pid 3736] close(3) = 0 [pid 3736] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3736] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3736] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3736] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3738], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3738 [pid 3736] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3736] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3731] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3731] chdir("./105") = 0 [pid 3731] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3731] setpgid(0, 0) = 0 [pid 3735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3731] write(3, "1000", 4) = 4 [pid 3731] close(3) = 0 ./strace-static-x86_64: Process 3734 attached [pid 3731] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3734] set_robust_list(0x55555713c5e0, 24 [pid 3731] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3734] <... set_robust_list resumed>) = 0 [pid 3731] <... futex resumed>) = 0 [pid 3731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3734] chdir("./103" [pid 3731] <... mmap resumed>) = 0x7f64ff044000 [pid 3731] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 3738 attached ) = 0 [pid 3738] set_robust_list(0x7f64ff0649e0, 24 [pid 3731] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3734] <... chdir resumed>) = 0 [pid 3738] <... set_robust_list resumed>) = 0 [pid 3738] memfd_create("syzkaller", 0) = 3 [pid 3738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 3740 attached [pid 3731] <... clone resumed>, parent_tid=[3740], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3740 [pid 3734] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3738] <... mmap resumed>) = 0x7f64f6c44000 [pid 3731] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3740] set_robust_list(0x7f64ff0649e0, 24 [pid 3734] <... prctl resumed>) = 0 [pid 3731] <... futex resumed>) = 0 [pid 3731] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3734] setpgid(0, 0) = 0 [pid 3740] <... set_robust_list resumed>) = 0 [pid 3734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3734] write(3, "1000", 4) = 4 [pid 3734] close(3 [pid 3740] memfd_create("syzkaller", 0 [pid 3734] <... close resumed>) = 0 [pid 3734] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3740] <... memfd_create resumed>) = 3 [pid 3734] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3740] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3734] <... futex resumed>) = 0 [pid 3734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3740] <... mmap resumed>) = 0x7f64f6c44000 [pid 3734] <... mmap resumed>) = 0x7f64ff044000 [pid 3735] <... write resumed>) = 1048576 [pid 3735] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3735] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 3735] ioctl(4, LOOP_SET_FD, 3 [pid 3729] <... mount resumed>) = 0 [pid 3729] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3729] chdir("./bus") = 0 [pid 3729] ioctl(4, LOOP_CLR_FD [pid 3738] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3734] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3734] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3744], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3744 [pid 3734] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3734] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3738] <... write resumed>) = 1048576 [pid 3738] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3735] <... ioctl resumed>) = 0 [pid 3729] <... ioctl resumed>) = 0 [pid 3735] close(3 [pid 3729] close(4 [pid 3735] <... close resumed>) = 0 [pid 3729] <... close resumed>) = 0 [pid 3735] mkdir("./bus", 0777 [pid 3729] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3735] <... mkdir resumed>) = 0 [pid 3729] <... futex resumed>) = 1 [pid 3728] <... futex resumed>) = 0 [pid 3735] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3729] chdir("./file0" [pid 3728] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3729] <... chdir resumed>) = 0 [pid 3728] <... futex resumed>) = 0 [pid 3729] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3728] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3729] <... futex resumed>) = 0 [pid 3728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3729] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3728] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3729] <... open resumed>) = 4 [pid 3728] <... futex resumed>) = 0 [pid 3729] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3728] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3729] <... futex resumed>) = 0 [pid 3728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3729] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3728] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3729] <... openat resumed>) = 5 [pid 3728] <... futex resumed>) = 0 [pid 3729] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3728] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3729] <... futex resumed>) = 0 [pid 3728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3729] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3728] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3729] <... write resumed>) = 196608 [pid 3728] <... futex resumed>) = 0 [pid 3728] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3729] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3728] <... futex resumed>) = 0 [pid 3728] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3728] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3729] <... futex resumed>) = 1 [pid 3729] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3729] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3728] <... futex resumed>) = 0 [pid 3728] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3728] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3729] <... futex resumed>) = 1 [pid 3729] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3729] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3728] <... futex resumed>) = 0 [pid 3728] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3728] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3729] <... futex resumed>) = 1 [ 77.684379][ T3729] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/104/bus supports timestamps until 2038 (0x7fffffff) [ 77.706930][ T3727] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/104/bus supports timestamps until 2038 (0x7fffffff) [pid 3729] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651./strace-static-x86_64: Process 3744 attached [pid 3740] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3738] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3727] <... mount resumed>) = 0 [pid 3729] <... write resumed>) = 1048576 [pid 3738] <... openat resumed>) = 4 [pid 3729] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3728] <... futex resumed>) = 0 [pid 3728] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3728] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3729] <... futex resumed>) = 1 [pid 3729] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3738] ioctl(4, LOOP_SET_FD, 3 [pid 3744] set_robust_list(0x7f64ff0649e0, 24 [pid 3740] <... write resumed>) = 1048576 [pid 3738] <... ioctl resumed>) = 0 [pid 3735] <... mount resumed>) = 0 [pid 3727] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3744] <... set_robust_list resumed>) = 0 [pid 3740] munmap(0x7f64f6c44000, 1048576 [pid 3738] close(3 [pid 3735] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3727] <... openat resumed>) = 3 [pid 3744] memfd_create("syzkaller", 0 [pid 3740] <... munmap resumed>) = 0 [pid 3738] <... close resumed>) = 0 [pid 3735] <... openat resumed>) = 3 [pid 3727] chdir("./bus" [pid 3744] <... memfd_create resumed>) = 3 [pid 3740] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3738] mkdir("./bus", 0777 [pid 3735] chdir("./bus" [pid 3727] <... chdir resumed>) = 0 [pid 3744] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3740] <... openat resumed>) = 4 [pid 3738] <... mkdir resumed>) = 0 [pid 3735] <... chdir resumed>) = 0 [pid 3727] ioctl(4, LOOP_CLR_FD [pid 3744] <... mmap resumed>) = 0x7f64f6c44000 [pid 3740] ioctl(4, LOOP_SET_FD, 3 [pid 3738] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3735] ioctl(4, LOOP_CLR_FD [pid 3727] <... ioctl resumed>) = 0 [pid 3735] <... ioctl resumed>) = 0 [pid 3729] <... openat resumed>) = 7 [pid 3727] close(4 [pid 3740] <... ioctl resumed>) = 0 [pid 3735] close(4 [pid 3729] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3740] close(3 [pid 3735] <... close resumed>) = 0 [pid 3727] <... close resumed>) = 0 [pid 3740] <... close resumed>) = 0 [pid 3735] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3740] mkdir("./bus", 0777 [pid 3735] <... futex resumed>) = 1 [pid 3733] <... futex resumed>) = 0 [pid 3740] <... mkdir resumed>) = 0 [pid 3735] chdir("./file0" [pid 3733] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3740] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3735] <... chdir resumed>) = 0 [pid 3733] <... futex resumed>) = 0 [pid 3735] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3733] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3735] <... futex resumed>) = 0 [pid 3733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3735] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3733] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3735] <... open resumed>) = 4 [pid 3733] <... futex resumed>) = 0 [pid 3735] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3733] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3735] <... futex resumed>) = 0 [pid 3733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3735] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3733] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3735] <... openat resumed>) = 5 [pid 3733] <... futex resumed>) = 0 [pid 3735] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3733] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3735] <... futex resumed>) = 0 [pid 3733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3735] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3733] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3744] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3733] <... futex resumed>) = 0 [pid 3729] <... futex resumed>) = 1 [pid 3728] <... futex resumed>) = 0 [pid 3727] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3735] <... write resumed>) = 196608 [pid 3733] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3729] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3728] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3727] <... futex resumed>) = 1 [pid 3726] <... futex resumed>) = 0 [pid 3735] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3728] <... futex resumed>) = 0 [pid 3727] chdir("./file0" [pid 3729] <... openat resumed>) = 8 [pid 3726] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3735] <... futex resumed>) = 1 [pid 3733] <... futex resumed>) = 0 [pid 3728] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3726] <... futex resumed>) = 0 [pid 3727] <... chdir resumed>) = 0 [pid 3729] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3735] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3733] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3729] <... futex resumed>) = 0 [pid 3728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3727] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3726] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3735] <... mount resumed>) = 0 [pid 3733] <... futex resumed>) = 0 [pid 3735] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3733] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3735] <... futex resumed>) = 0 [pid 3733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3729] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3728] exit_group(0 [pid 3727] <... futex resumed>) = 0 [pid 3726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3735] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3733] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3729] <... futex resumed>) = ? [pid 3728] <... exit_group resumed>) = ? [pid 3727] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3726] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3735] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3733] <... futex resumed>) = 0 [pid 3727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3726] <... futex resumed>) = 0 [pid 3735] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3733] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3727] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3726] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3735] <... open resumed>) = 6 [pid 3735] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3733] <... futex resumed>) = 0 [pid 3735] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3733] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3729] +++ exited with 0 +++ [pid 3728] +++ exited with 0 +++ [pid 3727] <... open resumed>) = 4 [pid 3744] <... write resumed>) = 1048576 [pid 3733] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3727] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3726] <... futex resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3728, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3727] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3726] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3726] <... futex resumed>) = 0 [pid 3727] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3726] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3727] <... openat resumed>) = 5 [pid 3727] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3727] <... futex resumed>) = 1 [pid 3726] <... futex resumed>) = 0 [pid 3727] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3726] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3726] <... futex resumed>) = 0 [pid 374] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3727] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3726] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3744] munmap(0x7f64f6c44000, 1048576 [pid 3727] <... write resumed>) = 196608 [pid 374] <... openat resumed>) = 3 [pid 3744] <... munmap resumed>) = 0 [pid 3727] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3744] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3727] <... futex resumed>) = 1 [pid 3726] <... futex resumed>) = 0 [pid 3744] <... openat resumed>) = 4 [pid 3727] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3726] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3744] ioctl(4, LOOP_SET_FD, 3 [pid 3727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3726] <... futex resumed>) = 0 [pid 3727] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3726] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3727] <... mount resumed>) = 0 [ 77.737117][ T3735] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/106/bus supports timestamps until 2038 (0x7fffffff) [ 77.750650][ T3729] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 77.765642][ T3729] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 3727] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3726] <... futex resumed>) = 0 [pid 3727] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3726] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3726] <... futex resumed>) = 0 [pid 3727] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3726] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./104/binderfs") = 0 [pid 374] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3744] <... ioctl resumed>) = 0 [pid 3727] <... open resumed>) = 6 [pid 3727] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3744] close(3 [pid 3727] <... futex resumed>) = 1 [pid 3726] <... futex resumed>) = 0 [pid 3744] <... close resumed>) = 0 [pid 3727] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3726] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3744] mkdir("./bus", 0777 [pid 3726] <... futex resumed>) = 0 [pid 3744] <... mkdir resumed>) = 0 [pid 3726] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3744] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3740] <... mount resumed>) = 0 [pid 3738] <... mount resumed>) = 0 [pid 3738] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3738] chdir("./bus") = 0 [pid 3738] ioctl(4, LOOP_CLR_FD [pid 3735] <... write resumed>) = 1048576 [pid 3738] <... ioctl resumed>) = 0 [pid 3735] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3738] close(4 [pid 3735] <... futex resumed>) = 1 [pid 3738] <... close resumed>) = 0 [pid 3735] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3733] <... futex resumed>) = 0 [pid 3733] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3738] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3735] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3733] <... futex resumed>) = 0 [pid 3738] <... futex resumed>) = 1 [pid 3736] <... futex resumed>) = 0 [pid 3735] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 77.804877][ T3738] ext4 filesystem being mounted at /root/syzkaller.k3ECep/105/bus supports timestamps until 2038 (0x7fffffff) [ 77.821681][ T3740] ext4 filesystem being mounted at /root/syzkaller.43WzWH/105/bus supports timestamps until 2038 (0x7fffffff) [pid 3733] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3738] chdir("./file0" [pid 3736] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3740] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3738] <... chdir resumed>) = 0 [pid 3736] <... futex resumed>) = 0 [pid 3740] <... openat resumed>) = 3 [pid 3738] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3736] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3727] <... write resumed>) = 1048576 [pid 3738] <... futex resumed>) = 0 [pid 3736] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3727] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3738] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3736] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3727] <... futex resumed>) = 1 [pid 3726] <... futex resumed>) = 0 [pid 3738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3736] <... futex resumed>) = 0 [pid 3727] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3726] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3738] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3736] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3726] <... futex resumed>) = 0 [pid 3727] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3726] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3740] chdir("./bus" [pid 3738] <... open resumed>) = 4 [pid 3735] <... openat resumed>) = 7 [pid 3740] <... chdir resumed>) = 0 [pid 3740] ioctl(4, LOOP_CLR_FD [pid 3735] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3733] <... futex resumed>) = 0 [pid 3735] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3733] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3735] <... openat resumed>) = 8 [pid 3733] <... futex resumed>) = 0 [pid 3735] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3733] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3735] <... futex resumed>) = 0 [pid 3733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3735] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3733] exit_group(0 [pid 3735] <... futex resumed>) = ? [pid 3733] <... exit_group resumed>) = ? [pid 3738] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3727] <... openat resumed>) = 7 [pid 3738] <... futex resumed>) = 1 [pid 3736] <... futex resumed>) = 0 [pid 3738] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3736] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3738] <... openat resumed>) = 5 [pid 3736] <... futex resumed>) = 0 [pid 3738] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3736] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3738] <... futex resumed>) = 0 [pid 3736] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3738] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3736] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3738] <... write resumed>) = 196608 [pid 3736] <... futex resumed>) = 0 [pid 3738] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3736] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3738] <... futex resumed>) = 0 [pid 3736] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3738] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3736] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3738] <... mount resumed>) = 0 [pid 3736] <... futex resumed>) = 0 [pid 3738] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3736] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3738] <... futex resumed>) = 0 [pid 3736] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3738] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3736] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3736] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3727] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3726] <... futex resumed>) = 0 [pid 3726] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3726] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3727] <... futex resumed>) = 1 [pid 3727] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3727] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3726] <... futex resumed>) = 0 [pid 3726] exit_group(0) = ? [pid 3727] <... futex resumed>) = ? [pid 3744] <... mount resumed>) = 0 [pid 3744] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3744] chdir("./bus") = 0 [pid 3744] ioctl(4, LOOP_CLR_FD) = 0 [pid 3740] <... ioctl resumed>) = 0 [pid 3738] <... open resumed>) = 6 [pid 3735] +++ exited with 0 +++ [pid 3733] +++ exited with 0 +++ [pid 3727] +++ exited with 0 +++ [pid 3726] +++ exited with 0 +++ [pid 374] <... umount2 resumed>) = 0 [pid 3744] close(4 [pid 3740] close(4) = 0 [pid 3738] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3744] <... close resumed>) = 0 [pid 3740] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3738] <... futex resumed>) = 1 [pid 3736] <... futex resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3733, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3726, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3744] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3740] <... futex resumed>) = 1 [pid 3738] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3736] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3731] <... futex resumed>) = 0 [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 374] lstat("./104/bus", [pid 3744] <... futex resumed>) = 1 [pid 3740] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3736] <... futex resumed>) = 0 [pid 3734] <... futex resumed>) = 0 [pid 3731] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... restart_syscall resumed>) = 0 [pid 375] <... restart_syscall resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3744] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 77.842185][ T3735] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 77.859152][ T3735] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 77.863943][ T3727] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 77.883295][ T3727] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 77.889347][ T3744] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/103/bus supports timestamps until 2038 (0x7fffffff) [pid 3738] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3736] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3734] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3731] <... futex resumed>) = 0 [pid 374] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3740] chdir("./file0" [pid 3734] <... futex resumed>) = 0 [pid 3731] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3744] chdir("./file0" [pid 3740] <... chdir resumed>) = 0 [pid 3734] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3744] <... chdir resumed>) = 0 [pid 3740] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... openat resumed>) = 4 [pid 3744] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3740] <... futex resumed>) = 1 [pid 3731] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] fstat(4, [pid 3744] <... futex resumed>) = 1 [pid 3740] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3734] <... futex resumed>) = 0 [pid 3731] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 3 [pid 375] <... openat resumed>) = 3 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3744] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3738] <... write resumed>) = 1048576 [pid 3734] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3731] <... futex resumed>) = 0 [pid 376] fstat(3, [pid 375] fstat(3, [pid 374] getdents64(4, [pid 3744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3740] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3738] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3734] <... futex resumed>) = 0 [pid 3731] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3744] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3740] <... open resumed>) = 4 [pid 3738] <... futex resumed>) = 1 [pid 3736] <... futex resumed>) = 0 [pid 3734] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(3, [pid 375] getdents64(3, [pid 374] getdents64(4, [pid 3744] <... open resumed>) = 4 [pid 3740] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3738] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3736] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3744] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3740] <... futex resumed>) = 1 [pid 3736] <... futex resumed>) = 0 [pid 3731] <... futex resumed>) = 0 [pid 376] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] close(4 [pid 3744] <... futex resumed>) = 1 [pid 3740] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3736] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3734] <... futex resumed>) = 0 [pid 3731] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... close resumed>) = 0 [pid 3744] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3734] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3731] <... futex resumed>) = 0 [pid 376] lstat("./106/binderfs", [pid 375] lstat("./104/binderfs", [pid 374] rmdir("./104/bus" [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 376] unlink("./106/binderfs" [pid 375] unlink("./104/binderfs" [pid 374] getdents64(3, [pid 376] <... unlink resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] close(3) = 0 [pid 374] rmdir("./104") = 0 [pid 374] mkdir("./105", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3756 [pid 3744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3744] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3744] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3744] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3740] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3740] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3740] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3744] <... futex resumed>) = 0 [pid 3734] <... futex resumed>) = 1 [pid 3744] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3734] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 3734] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3744] <... futex resumed>) = 0 [pid 3734] <... futex resumed>) = 1 [pid 3744] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3734] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3744] <... write resumed>) = 196608 [pid 3744] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3734] <... futex resumed>) = 0 [pid 3744] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3734] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3734] <... futex resumed>) = 0 [pid 3744] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3734] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3744] <... mount resumed>) = 0 [pid 3744] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3734] <... futex resumed>) = 0 [pid 3744] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3734] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3734] <... futex resumed>) = 0 [pid 3744] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3734] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3744] <... open resumed>) = 6 [pid 3744] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3734] <... futex resumed>) = 0 [pid 3744] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3734] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3734] <... futex resumed>) = 0 [pid 3744] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3734] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3756 attached [pid 3731] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3756] set_robust_list(0x55555713c5e0, 24 [pid 3731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3756] <... set_robust_list resumed>) = 0 [pid 3744] <... write resumed>) = 1048576 [pid 3731] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3756] chdir("./105" [pid 3744] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3740] <... futex resumed>) = 0 [pid 3731] <... futex resumed>) = 1 [pid 3756] <... chdir resumed>) = 0 [pid 3744] <... futex resumed>) = 1 [pid 3740] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3734] <... futex resumed>) = 0 [pid 3731] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3756] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3744] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3756] <... prctl resumed>) = 0 [pid 3756] setpgid(0, 0) = 0 [pid 3756] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3756] write(3, "1000", 4) = 4 [pid 3756] close(3) = 0 [pid 3756] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3756] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3756] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3756] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3756] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3740] <... write resumed>) = 196608 [pid 3756] <... clone resumed>, parent_tid=[3757], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3757 [pid 3756] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3740] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3734] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3756] <... futex resumed>) = 0 [pid 3744] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3740] <... futex resumed>) = 1 [pid 3734] <... futex resumed>) = 0 [pid 3731] <... futex resumed>) = 0 [pid 3756] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3757 attached [pid 3757] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3757] memfd_create("syzkaller", 0) = 3 [pid 3757] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3757] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3757] munmap(0x7f64f6c44000, 1048576) = 0 [ 77.946733][ T3738] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 77.977401][ T3744] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3757] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3740] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3736] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3734] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3731] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3740] <... mount resumed>) = 0 [pid 3736] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3731] <... futex resumed>) = 0 [pid 3736] <... futex resumed>) = 0 [pid 3731] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3740] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3731] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3731] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3740] <... futex resumed>) = 1 [pid 3731] <... futex resumed>) = 0 [pid 3740] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3731] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=49000000} [pid 3736] <... mmap resumed>) = 0x7f64f6d23000 [pid 3736] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3736] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3758], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3758 [pid 3736] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3736] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3758 attached [pid 3758] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3758] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3757] <... openat resumed>) = 4 [pid 375] <... umount2 resumed>) = 0 [pid 3757] ioctl(4, LOOP_SET_FD, 3 [pid 375] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./104/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3744] <... openat resumed>) = 7 [pid 3738] <... openat resumed>) = 7 [pid 3744] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3744] <... futex resumed>) = 1 [pid 3734] <... futex resumed>) = 0 [pid 3758] <... openat resumed>) = 8 [pid 3744] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3734] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 4 [pid 3758] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3757] <... ioctl resumed>) = 0 [pid 3744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3738] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3734] <... futex resumed>) = 0 [pid 375] fstat(4, [pid 3757] close(3 [pid 3734] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3757] <... close resumed>) = 0 [pid 3757] mkdir("./bus", 0777 [pid 3758] <... futex resumed>) = 1 [pid 3744] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3738] <... futex resumed>) = 0 [pid 3736] <... futex resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3757] <... mkdir resumed>) = 0 [pid 3736] exit_group(0) = ? [pid 3757] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3744] <... openat resumed>) = 8 [pid 375] getdents64(4, [pid 3738] +++ exited with 0 +++ [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./104/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./104") = 0 [pid 375] mkdir("./105", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3744] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3734] <... futex resumed>) = 0 [pid 3734] exit_group(0) = ? [pid 3744] <... futex resumed>) = ? [pid 3740] <... open resumed>) = 6 [pid 3758] +++ exited with 0 +++ [pid 3744] +++ exited with 0 +++ [pid 3740] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3736] +++ exited with 0 +++ [pid 3734] +++ exited with 0 +++ [pid 376] <... umount2 resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 3740] <... futex resumed>) = 1 [pid 3731] <... futex resumed>) = 0 [pid 376] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3736, si_uid=0, si_status=0, si_utime=1, si_stime=6} --- [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3734, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3740] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3731] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3731] <... futex resumed>) = 0 [pid 376] lstat("./106/bus", [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3740] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3731] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 77.989705][ T3738] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 78.000594][ T3744] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 376] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] close(3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./106/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 373] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] rmdir("./106" [pid 375] <... close resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... rmdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] mkdir("./107", 0777 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 376] <... mkdir resumed>) = 0 [pid 373] fstat(3, [pid 372] fstat(3, [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... openat resumed>) = 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 373] getdents64(3, [pid 372] getdents64(3, [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3761 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] close(3 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] <... close resumed>) = 0 [pid 373] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./105/binderfs", [pid 372] lstat("./103/binderfs", [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3762 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./105/binderfs" [pid 372] unlink("./103/binderfs" [pid 373] <... unlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 373] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3761 attached [pid 3761] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3761] chdir("./105") = 0 [pid 3761] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3761] setpgid(0, 0) = 0 [pid 3761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3761] write(3, "1000", 4) = 4 [pid 3761] close(3) = 0 [pid 3761] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3761] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3761] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3761] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3761] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3764], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3764 [pid 3761] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3761] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3764 attached [pid 3764] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3764] memfd_create("syzkaller", 0) = 3 [pid 3764] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3764] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 3762 attached ) = 1048576 [pid 3740] <... write resumed>) = 1048576 [pid 3757] <... mount resumed>) = 0 [pid 3757] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3740] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] munmap(0x7f64f6c44000, 1048576 [pid 3762] set_robust_list(0x55555713c5e0, 24 [pid 3757] <... openat resumed>) = 3 [pid 3757] chdir("./bus") = 0 [pid 3757] ioctl(4, LOOP_CLR_FD [pid 3731] <... futex resumed>) = 0 [pid 3731] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3731] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3740] <... futex resumed>) = 1 [pid 3740] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3762] <... set_robust_list resumed>) = 0 [pid 3762] chdir("./107") = 0 [pid 3764] <... munmap resumed>) = 0 [pid 3762] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3764] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3762] setpgid(0, 0 [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./103/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./103/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./103") = 0 [pid 372] mkdir("./104", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3762] <... setpgid resumed>) = 0 [pid 3762] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3762] write(3, "1000", 4) = 4 [pid 3762] close(3) = 0 [pid 3762] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3762] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3762] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3762] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3762] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3765], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3765 [pid 3762] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3762] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3765 attached [pid 3765] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3765] memfd_create("syzkaller", 0) = 3 [pid 3765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3765] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3740] <... openat resumed>) = 7 [pid 3740] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3731] <... futex resumed>) = 0 [pid 3731] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3731] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3740] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3740] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3731] <... futex resumed>) = 0 [pid 3731] exit_group(0) = ? [pid 3765] <... write resumed>) = 1048576 [pid 3765] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3765] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3764] <... openat resumed>) = 4 [pid 3757] <... ioctl resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 3765] <... openat resumed>) = 4 [pid 3764] ioctl(4, LOOP_SET_FD, 3 [pid 3757] close(4 [pid 373] <... umount2 resumed>) = 0 [pid 372] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./105/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3765] ioctl(4, LOOP_SET_FD, 3 [pid 3740] +++ exited with 0 +++ [pid 3731] +++ exited with 0 +++ [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3764] <... ioctl resumed>) = 0 [pid 3757] <... close resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3757] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3731, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3764] close(3 [pid 373] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] close(3 [pid 3764] <... close resumed>) = 0 [pid 3757] <... futex resumed>) = 1 [pid 3756] <... futex resumed>) = 0 [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 3764] mkdir("./bus", 0777 [pid 3757] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3756] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... restart_syscall resumed>) = 0 [pid 373] <... openat resumed>) = 4 [pid 3757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3757] chdir("./file0" [pid 373] fstat(4, [pid 3764] <... mkdir resumed>) = 0 [pid 3757] <... chdir resumed>) = 0 [pid 3756] <... futex resumed>) = 0 [pid 3764] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3757] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3756] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3757] <... futex resumed>) = 0 [pid 3757] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] getdents64(4, [pid 377] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3756] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3757] <... futex resumed>) = 0 [pid 3756] <... futex resumed>) = 1 [pid 3757] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3756] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 3757] <... open resumed>) = 4 [pid 377] <... openat resumed>) = 3 [pid 377] fstat(3, [pid 3757] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3756] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3757] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3756] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] getdents64(3, [pid 3757] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3756] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3756] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3757] <... openat resumed>) = 5 [pid 373] close(4 [pid 3757] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 3757] <... futex resumed>) = 1 [pid 3756] <... futex resumed>) = 0 [pid 373] rmdir("./105/bus" [pid 3765] <... ioctl resumed>) = 0 [pid 3757] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3756] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... rmdir resumed>) = 0 [pid 3765] close(3 [pid 373] getdents64(3, [pid 3765] <... close resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3765] mkdir("./bus", 0777 [pid 373] close(3 [pid 3765] <... mkdir resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 3765] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] rmdir("./105") = 0 [pid 373] mkdir("./106", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3756] <... futex resumed>) = 0 [pid 377] lstat("./105/binderfs", [pid 372] <... close resumed>) = 0 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3768 [pid 3757] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3756] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3768 attached [pid 3768] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3768] chdir("./106") = 0 [pid 3768] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3768] setpgid(0, 0) = 0 [pid 3768] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3768] write(3, "1000", 4) = 4 [pid 3768] close(3) = 0 [pid 3768] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3768] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3768] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3768] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3768] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3770], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3770 [pid 3768] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3768] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3757] <... write resumed>) = 196608 ./strace-static-x86_64: Process 3770 attached [pid 3770] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 377] unlink("./105/binderfs" [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3771 [pid 3770] memfd_create("syzkaller", 0) = 3 [pid 3770] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 377] <... unlink resumed>) = 0 [pid 3757] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3770] <... mmap resumed>) = 0x7f64f6c44000 [pid 3757] <... futex resumed>) = 1 [pid 3756] <... futex resumed>) = 0 [pid 377] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3756] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3756] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3757] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3757] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3756] <... futex resumed>) = 0 [pid 3757] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3756] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3757] <... open resumed>) = 6 [ 78.087045][ T3757] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/105/bus supports timestamps until 2038 (0x7fffffff) [ 78.102088][ T3740] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 78.116457][ T3740] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 3756] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3757] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3756] <... futex resumed>) = 0 [pid 3756] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3757] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3756] <... futex resumed>) = 0 [pid 3756] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3771 attached [pid 3771] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3771] chdir("./104") = 0 [pid 3771] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3771] setpgid(0, 0) = 0 [pid 3771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3771] write(3, "1000", 4) = 4 [pid 3771] close(3) = 0 [pid 3771] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3757] <... write resumed>) = 1048576 [pid 3771] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3757] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3771] <... futex resumed>) = 0 [pid 3757] <... futex resumed>) = 1 [pid 3771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3756] <... futex resumed>) = 0 [pid 3757] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3771] <... mmap resumed>) = 0x7f64ff044000 [pid 3771] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3756] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3771] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3756] <... futex resumed>) = 1 [pid 3756] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3757] <... futex resumed>) = 0 [pid 3757] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3770] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3771] <... clone resumed>, parent_tid=[3775], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3775 [pid 3771] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3770] <... write resumed>) = 1048576 [pid 3770] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3770] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 3775 attached [pid 3775] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3775] memfd_create("syzkaller", 0) = 3 [pid 3775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3775] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3775] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3775] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3757] <... openat resumed>) = 7 [pid 3757] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3757] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3765] <... mount resumed>) = 0 [pid 3765] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3765] chdir("./bus") = 0 [pid 3765] ioctl(4, LOOP_CLR_FD [pid 3771] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3756] <... futex resumed>) = 0 [pid 3756] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3757] <... futex resumed>) = 0 [pid 3756] <... futex resumed>) = 1 [pid 3757] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3756] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3757] <... openat resumed>) = 8 [pid 3757] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3756] <... futex resumed>) = 0 [pid 3757] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3756] exit_group(0 [pid 3757] <... futex resumed>) = ? [pid 3756] <... exit_group resumed>) = ? [pid 3775] <... openat resumed>) = 4 [pid 3770] <... openat resumed>) = 4 [pid 377] <... umount2 resumed>) = 0 [pid 3775] ioctl(4, LOOP_SET_FD, 3 [pid 3770] ioctl(4, LOOP_SET_FD, 3 [pid 377] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./105/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, [pid 3764] <... mount resumed>) = 0 [pid 3775] <... ioctl resumed>) = 0 [pid 3765] <... ioctl resumed>) = 0 [pid 3764] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3757] +++ exited with 0 +++ [pid 3756] +++ exited with 0 +++ [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3770] <... ioctl resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3756, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 374] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, [pid 3775] close(3 [pid 3770] close(3 [pid 377] getdents64(4, [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./105/binderfs") = 0 [pid 3775] <... close resumed>) = 0 [pid 3770] <... close resumed>) = 0 [pid 3765] close(4 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3775] mkdir("./bus", 0777 [pid 3770] mkdir("./bus", 0777 [pid 3765] <... close resumed>) = 0 [pid 377] close(4 [pid 3775] <... mkdir resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 3775] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3770] <... mkdir resumed>) = 0 [pid 377] rmdir("./105/bus" [pid 3765] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] <... openat resumed>) = 3 [pid 3770] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3765] <... futex resumed>) = 1 [pid 3764] chdir("./bus" [pid 3762] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 3765] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3764] <... chdir resumed>) = 0 [pid 3762] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(3, [pid 3765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3764] ioctl(4, LOOP_CLR_FD [pid 3762] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3765] chdir("./file0" [pid 3762] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] close(3 [pid 3765] <... chdir resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 3765] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] rmdir("./105" [pid 3765] <... futex resumed>) = 1 [pid 3762] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 3765] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3762] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] mkdir("./106", 0777 [pid 3765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3762] <... futex resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 3765] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3762] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3765] <... open resumed>) = 4 [pid 3765] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3762] <... futex resumed>) = 0 [pid 3765] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3762] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3762] <... futex resumed>) = 0 [pid 3765] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3762] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3765] <... openat resumed>) = 5 [pid 3765] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3765] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3762] <... futex resumed>) = 0 [pid 3762] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3765] <... futex resumed>) = 0 [pid 3762] <... futex resumed>) = 1 [pid 3765] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3762] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3765] <... write resumed>) = 196608 [pid 3765] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3762] <... futex resumed>) = 0 [pid 3765] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3762] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3762] <... futex resumed>) = 0 [pid 3765] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3762] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3765] <... mount resumed>) = 0 [pid 3765] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3762] <... futex resumed>) = 0 [pid 3765] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3762] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3762] <... futex resumed>) = 0 [pid 3765] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [ 78.183336][ T3757] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 78.198195][ T3765] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/107/bus supports timestamps until 2038 (0x7fffffff) [ 78.208464][ T3757] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 78.210301][ T3764] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/105/bus supports timestamps until 2038 (0x7fffffff) [pid 3762] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3765] <... open resumed>) = 6 [pid 3764] <... ioctl resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 374] <... umount2 resumed>) = 0 [pid 3765] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] close(4 [pid 374] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3765] <... futex resumed>) = 1 [pid 3762] <... futex resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3765] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3762] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] lstat("./105/bus", [pid 3765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3762] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3765] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3762] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3770] <... mount resumed>) = 0 [pid 3764] <... close resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3770] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3764] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 374] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, [pid 3770] <... openat resumed>) = 3 [pid 3764] <... futex resumed>) = 1 [pid 3761] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, [pid 3765] <... write resumed>) = 1048576 [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3765] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(4, [pid 3765] <... futex resumed>) = 1 [pid 3762] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3765] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3762] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(4 [pid 3770] chdir("./bus" [pid 3764] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3762] <... futex resumed>) = 0 [pid 3761] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3770] <... chdir resumed>) = 0 [pid 3764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3761] <... futex resumed>) = 0 [pid 3770] ioctl(4, LOOP_CLR_FD [pid 3764] chdir("./file0" [pid 3761] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3782 [pid 3770] <... ioctl resumed>) = 0 [pid 3764] <... chdir resumed>) = 0 [pid 3770] close(4 [pid 3764] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3770] <... close resumed>) = 0 [pid 3764] <... futex resumed>) = 1 [pid 3761] <... futex resumed>) = 0 [pid 3770] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3761] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3770] <... futex resumed>) = 1 [pid 3768] <... futex resumed>) = 0 [pid 3764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3761] <... futex resumed>) = 0 [pid 3770] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3768] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3761] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3770] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3768] <... futex resumed>) = 0 [pid 3764] <... open resumed>) = 4 [pid 3770] chdir("./file0" [pid 3768] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3764] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3770] <... chdir resumed>) = 0 [pid 3764] <... futex resumed>) = 1 [pid 3761] <... futex resumed>) = 0 [pid 3770] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3761] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3770] <... futex resumed>) = 1 [pid 3768] <... futex resumed>) = 0 [pid 3764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3761] <... futex resumed>) = 0 [pid 3770] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3768] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3761] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3770] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3768] <... futex resumed>) = 0 [pid 3764] <... openat resumed>) = 5 [ 78.285778][ T3770] ext4 filesystem being mounted at /root/syzkaller.k3ECep/106/bus supports timestamps until 2038 (0x7fffffff) [ 78.304147][ T3765] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 78.318310][ T3765] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 3770] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3768] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3764] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3770] <... open resumed>) = 4 [pid 3764] <... futex resumed>) = 1 [pid 3761] <... futex resumed>) = 0 [pid 3770] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3761] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3770] <... futex resumed>) = 1 [pid 3768] <... futex resumed>) = 0 [pid 3764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3761] <... futex resumed>) = 0 [pid 3770] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3768] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3761] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3770] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3768] <... futex resumed>) = 0 [pid 3764] <... write resumed>) = 196608 [pid 3762] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... close resumed>) = 0 [pid 3770] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3768] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3764] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] rmdir("./105/bus" [pid 3770] <... openat resumed>) = 5 [pid 3764] <... futex resumed>) = 1 [pid 3761] <... futex resumed>) = 0 [pid 3770] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3761] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3770] <... futex resumed>) = 1 [pid 3768] <... futex resumed>) = 0 [pid 3764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3761] <... futex resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 3770] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3768] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3761] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] getdents64(3, [pid 3770] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3768] <... futex resumed>) = 0 [pid 3764] <... mount resumed>) = 0 [pid 3770] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3768] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3764] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 3782 attached [pid 3775] <... mount resumed>) = 0 [pid 3770] <... write resumed>) = 196608 [pid 3765] <... openat resumed>) = 7 [pid 3764] <... futex resumed>) = 1 [pid 3761] <... futex resumed>) = 0 [pid 3770] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3761] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(3 [pid 3782] set_robust_list(0x55555713c5e0, 24 [pid 3770] <... futex resumed>) = 1 [pid 3768] <... futex resumed>) = 0 [pid 3764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3761] <... futex resumed>) = 0 [pid 3770] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3768] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3761] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... close resumed>) = 0 [pid 3782] <... set_robust_list resumed>) = 0 [pid 3775] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3770] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3768] <... futex resumed>) = 0 [pid 3765] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] <... open resumed>) = 6 [pid 3770] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3768] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3764] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3782] chdir("./106" [pid 3770] <... mount resumed>) = 0 [pid 3764] <... futex resumed>) = 1 [pid 3761] <... futex resumed>) = 0 [pid 374] rmdir("./105" [pid 3782] <... chdir resumed>) = 0 [pid 3775] <... openat resumed>) = 3 [pid 3770] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3765] <... futex resumed>) = 1 [pid 3764] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3762] <... futex resumed>) = 0 [pid 3761] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3782] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3770] <... futex resumed>) = 1 [pid 3768] <... futex resumed>) = 0 [pid 3764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3762] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3761] <... futex resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 3782] <... prctl resumed>) = 0 [pid 3775] chdir("./bus" [pid 3770] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3768] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3765] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3764] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3762] <... futex resumed>) = 0 [pid 3761] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] mkdir("./106", 0777 [pid 3782] setpgid(0, 0 [pid 3775] <... chdir resumed>) = 0 [pid 3770] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3768] <... futex resumed>) = 0 [pid 3765] <... openat resumed>) = 8 [pid 3762] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... mkdir resumed>) = 0 [pid 3782] <... setpgid resumed>) = 0 [pid 3775] ioctl(4, LOOP_CLR_FD [pid 3770] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3768] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3765] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3762] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3782] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3775] <... ioctl resumed>) = 0 [pid 3770] <... open resumed>) = 6 [pid 3765] <... futex resumed>) = 0 [pid 3762] exit_group(0 [pid 374] <... openat resumed>) = 3 [pid 3782] <... openat resumed>) = 3 [pid 3775] close(4 [pid 3770] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3762] <... exit_group resumed>) = ? [pid 374] ioctl(3, LOOP_CLR_FD [pid 3782] write(3, "1000", 4 [pid 3775] <... close resumed>) = 0 [pid 3770] <... futex resumed>) = 1 [pid 3768] <... futex resumed>) = 0 [pid 3764] <... write resumed>) = 1048576 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3782] <... write resumed>) = 4 [pid 3775] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3770] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3768] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3764] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(3 [pid 3770] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3768] <... futex resumed>) = 0 [pid 3764] <... futex resumed>) = 1 [pid 3761] <... futex resumed>) = 0 [pid 3770] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3768] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3764] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 78.327434][ T3775] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/104/bus supports timestamps until 2038 (0x7fffffff) [pid 3761] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3782] close(3 [pid 3775] <... futex resumed>) = 1 [pid 3771] <... futex resumed>) = 0 [pid 3765] +++ exited with 0 +++ [pid 3762] +++ exited with 0 +++ [pid 3761] <... futex resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 3782] <... close resumed>) = 0 [pid 3775] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3771] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3782] symlink("/dev/binderfs", "./binderfs" [pid 3775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3771] <... futex resumed>) = 0 [pid 3782] <... symlink resumed>) = 0 [pid 3775] chdir("./file0" [pid 3771] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3783 [pid 3782] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3775] <... chdir resumed>) = 0 [pid 3782] <... futex resumed>) = 0 [pid 3775] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3782] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3775] <... futex resumed>) = 1 [pid 3771] <... futex resumed>) = 0 [pid 3782] <... mmap resumed>) = 0x7f64ff044000 [pid 3775] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3771] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3782] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3771] <... futex resumed>) = 0 [pid 3782] <... mprotect resumed>) = 0 [pid 3775] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3771] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3782] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3784], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3784 [pid 3782] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3782] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3783 attached ./strace-static-x86_64: Process 3784 attached [pid 3783] set_robust_list(0x55555713c5e0, 24 [pid 3784] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3784] memfd_create("syzkaller", 0 [pid 3783] <... set_robust_list resumed>) = 0 [pid 3775] <... open resumed>) = 4 [pid 3761] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3762, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3775] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3784] <... memfd_create resumed>) = 3 [pid 3783] chdir("./106" [pid 3775] <... futex resumed>) = 1 [pid 3771] <... futex resumed>) = 0 [pid 3770] <... write resumed>) = 1048576 [pid 3775] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3784] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3771] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3770] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3771] <... futex resumed>) = 0 [pid 376] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3775] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3771] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3770] <... futex resumed>) = 1 [pid 3768] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3768] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3775] <... openat resumed>) = 5 [pid 376] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3770] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3768] <... futex resumed>) = 0 [pid 3775] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 3 [pid 3768] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3775] <... futex resumed>) = 1 [pid 376] fstat(3, [pid 3771] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3775] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3771] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 3771] <... futex resumed>) = 0 [pid 3784] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3771] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3784] <... write resumed>) = 1048576 [pid 3784] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3784] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 3784] ioctl(4, LOOP_SET_FD, 3 [pid 3783] <... chdir resumed>) = 0 [pid 3775] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 376] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3784] <... ioctl resumed>) = 0 [pid 3764] <... openat resumed>) = 7 [pid 3784] close(3 [pid 3764] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3784] <... close resumed>) = 0 [pid 3764] <... futex resumed>) = 1 [pid 3784] mkdir("./bus", 0777 [pid 3764] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3784] <... mkdir resumed>) = 0 [pid 3784] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3783] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3761] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3761] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] lstat("./107/binderfs", [pid 3764] <... futex resumed>) = 0 [pid 3761] <... futex resumed>) = 1 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3764] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3761] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] unlink("./107/binderfs" [pid 3764] <... openat resumed>) = 8 [pid 376] <... unlink resumed>) = 0 [pid 3764] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3764] <... futex resumed>) = 1 [pid 3761] <... futex resumed>) = 0 [pid 3764] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3761] exit_group(0 [pid 3764] <... futex resumed>) = ? [pid 3761] <... exit_group resumed>) = ? [pid 3764] +++ exited with 0 +++ [pid 3761] +++ exited with 0 +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3761, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 375] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./105/binderfs") = 0 [pid 375] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3783] <... prctl resumed>) = 0 [pid 3775] <... write resumed>) = 196608 [pid 3775] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3775] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3783] setpgid(0, 0 [pid 3771] <... futex resumed>) = 0 [pid 3783] <... setpgid resumed>) = 0 [pid 3771] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3783] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3771] <... futex resumed>) = 1 [pid 3771] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3783] <... openat resumed>) = 3 [pid 3783] write(3, "1000", 4) = 4 [pid 3783] close(3 [pid 3770] <... openat resumed>) = 7 [pid 3770] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3770] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3775] <... futex resumed>) = 0 [pid 3775] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3775] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 78.373810][ T3764] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 78.390916][ T3770] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 78.398116][ T3764] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 78.405693][ T3770] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 3775] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3784] <... mount resumed>) = 0 [pid 3783] <... close resumed>) = 0 [pid 3771] <... futex resumed>) = 0 [pid 3768] <... futex resumed>) = 0 [pid 3784] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3784] chdir("./bus") = 0 [pid 3784] ioctl(4, LOOP_CLR_FD [pid 3783] symlink("/dev/binderfs", "./binderfs" [pid 3771] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3768] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3783] <... symlink resumed>) = 0 [pid 3775] <... futex resumed>) = 0 [pid 3771] <... futex resumed>) = 1 [pid 3775] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3771] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3770] <... futex resumed>) = 0 [pid 3768] <... futex resumed>) = 1 [pid 3770] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3768] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3770] <... openat resumed>) = 8 [pid 3783] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3770] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3783] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3770] <... futex resumed>) = 1 [pid 3768] <... futex resumed>) = 0 [pid 3783] <... mmap resumed>) = 0x7f64ff044000 [pid 3770] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3783] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3768] exit_group(0 [pid 3783] <... mprotect resumed>) = 0 [pid 3783] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3770] <... futex resumed>) = ? [pid 3768] <... exit_group resumed>) = ? [pid 3783] <... clone resumed>, parent_tid=[3788], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3788 [pid 3783] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3770] +++ exited with 0 +++ [pid 3783] <... futex resumed>) = 0 [pid 3783] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3788 attached [pid 3788] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3788] memfd_create("syzkaller", 0) = 3 [pid 3788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3788] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3788] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3788] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3784] <... ioctl resumed>) = 0 [pid 3775] <... open resumed>) = 6 [pid 376] <... umount2 resumed>) = 0 [pid 3784] close(4 [pid 3775] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3775] <... futex resumed>) = 1 [pid 3771] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3775] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3771] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] lstat("./107/bus", [pid 3775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3771] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3775] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3771] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./107/bus" [pid 3775] <... write resumed>) = 1048576 [pid 376] <... rmdir resumed>) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./107" [pid 3775] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... rmdir resumed>) = 0 [pid 376] mkdir("./108", 0777 [pid 3775] <... futex resumed>) = 1 [pid 3771] <... futex resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3775] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3771] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 78.435508][ T3784] ext4 filesystem being mounted at /root/syzkaller.43WzWH/106/bus supports timestamps until 2038 (0x7fffffff) [pid 3771] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3775] <... openat resumed>) = 7 [pid 3775] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3775] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3771] <... futex resumed>) = 0 [pid 3771] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3775] <... futex resumed>) = 0 [pid 3771] <... futex resumed>) = 1 [pid 3775] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3771] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3775] <... openat resumed>) = 8 [pid 3775] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3771] <... futex resumed>) = 0 [pid 3775] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3771] exit_group(0 [pid 3775] <... futex resumed>) = ? [pid 3771] <... exit_group resumed>) = ? [pid 3788] <... openat resumed>) = 4 [pid 3784] <... close resumed>) = 0 [pid 3775] +++ exited with 0 +++ [pid 3771] +++ exited with 0 +++ [pid 3768] +++ exited with 0 +++ [pid 376] <... openat resumed>) = 3 [pid 375] <... umount2 resumed>) = 0 [pid 3788] ioctl(4, LOOP_SET_FD, 3 [pid 3784] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] ioctl(3, LOOP_CLR_FD [pid 375] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3771, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3788] <... ioctl resumed>) = 0 [pid 3784] <... futex resumed>) = 1 [pid 3782] <... futex resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3768, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3788] close(3 [pid 3784] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3782] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 375] lstat("./105/bus", [pid 3788] <... close resumed>) = 0 [pid 3784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3782] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3788] mkdir("./bus", 0777 [pid 3784] chdir("./file0" [pid 3782] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3788] <... mkdir resumed>) = 0 [pid 3784] <... chdir resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3788] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3784] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3790 [pid 375] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... openat resumed>) = 3 [pid 3784] <... futex resumed>) = 1 [pid 3782] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] fstat(3, [pid 3784] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3782] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fstat(4, [pid 373] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3782] <... futex resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, [pid 3784] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3782] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(4, [pid 373] <... openat resumed>) = 3 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3784] <... open resumed>) = 4 [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] fstat(3, [pid 372] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3784] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(4, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3784] <... futex resumed>) = 1 [pid 3782] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] lstat("./104/binderfs", [pid 3784] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3782] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(4 [pid 373] getdents64(3, [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3782] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 372] unlink("./104/binderfs" [pid 3784] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3782] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] rmdir("./105/bus" [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... unlink resumed>) = 0 [pid 3784] <... openat resumed>) = 5 [pid 375] <... rmdir resumed>) = 0 [pid 373] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3784] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(3, [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3784] <... futex resumed>) = 1 [pid 3782] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3784] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3782] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 373] lstat("./106/binderfs", [pid 3784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3782] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3784] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3782] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] rmdir("./105" [pid 373] unlink("./106/binderfs" [pid 3784] <... write resumed>) = 196608 ./strace-static-x86_64: Process 3790 attached [pid 3784] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 3790] set_robust_list(0x55555713c5e0, 24 [pid 3784] <... futex resumed>) = 1 [pid 3782] <... futex resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 3784] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3782] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] mkdir("./106", 0777 [pid 373] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3782] <... futex resumed>) = 0 [pid 3790] <... set_robust_list resumed>) = 0 [ 78.486639][ T3775] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 78.500908][ T3775] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 3790] chdir("./108" [pid 3784] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3782] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... mkdir resumed>) = 0 [pid 3790] <... chdir resumed>) = 0 [pid 3784] <... mount resumed>) = 0 [pid 3790] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3790] setpgid(0, 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3790] <... setpgid resumed>) = 0 [pid 3784] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3784] <... futex resumed>) = 1 [pid 3782] <... futex resumed>) = 0 [pid 3790] <... openat resumed>) = 3 [pid 3784] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3790] write(3, "1000", 4 [pid 3784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3782] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3790] <... write resumed>) = 4 [pid 3784] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3782] <... futex resumed>) = 0 [pid 3790] close(3 [pid 3782] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3790] <... close resumed>) = 0 [pid 3790] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3790] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3788] <... mount resumed>) = 0 [pid 3790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3788] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3790] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3790] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3793 attached [pid 3788] <... openat resumed>) = 3 [pid 3788] chdir("./bus" [pid 3793] set_robust_list(0x7f64ff0649e0, 24 [pid 3790] <... clone resumed>, parent_tid=[3793], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3793 [pid 3788] <... chdir resumed>) = 0 [pid 3788] ioctl(4, LOOP_CLR_FD [pid 3793] <... set_robust_list resumed>) = 0 [pid 3793] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3790] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3790] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3793] <... futex resumed>) = 0 [pid 3793] memfd_create("syzkaller", 0) = 3 [pid 3793] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 375] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 372] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./104/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./104/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./104") = 0 [pid 372] mkdir("./105", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3793] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3793] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3793] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3782] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3782] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3782] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3782] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3782] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3782] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3782] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3794], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3794 ./strace-static-x86_64: Process 3794 attached [pid 3782] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3782] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3794] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3794] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 3794] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3782] <... futex resumed>) = 0 [pid 3782] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3782] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3794] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 [pid 3794] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3782] <... futex resumed>) = 0 [pid 3782] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3782] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3794] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3794] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3782] <... futex resumed>) = 0 [ 78.552555][ T3788] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/106/bus supports timestamps until 2038 (0x7fffffff) [pid 3794] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3793] <... openat resumed>) = 4 [pid 3788] <... ioctl resumed>) = 0 [pid 3784] <... open resumed>) = 6 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 3793] ioctl(4, LOOP_SET_FD, 3 [pid 3788] close(4 [pid 3784] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 373] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] ioctl(3, LOOP_CLR_FD [pid 3784] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3784] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] lstat("./106/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 3793] <... ioctl resumed>) = 0 [pid 3788] <... close resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 3782] exit_group(0 [pid 3794] <... futex resumed>) = ? [pid 3782] <... exit_group resumed>) = ? [pid 3794] +++ exited with 0 +++ [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3796 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 3788] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3784] <... futex resumed>) = ? [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] close(4) = 0 [pid 373] rmdir("./106/bus" [pid 3793] close(3 [pid 3788] <... futex resumed>) = 1 [pid 3784] +++ exited with 0 +++ [pid 3783] <... futex resumed>) = 0 [pid 3782] +++ exited with 0 +++ [pid 373] <... rmdir resumed>) = 0 [pid 3793] <... close resumed>) = 0 [pid 3788] chdir("./file0" [pid 3783] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3782, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3797 [pid 373] getdents64(3, [pid 3788] <... chdir resumed>) = 0 [pid 3783] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3793] mkdir("./bus", 0777 [pid 3788] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 3788] <... futex resumed>) = 0 [pid 3783] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... close resumed>) = 0 [pid 3793] <... mkdir resumed>) = 0 [pid 3788] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] rmdir("./106" [pid 3793] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3783] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... rmdir resumed>) = 0 [pid 3788] <... futex resumed>) = 0 [pid 3783] <... futex resumed>) = 1 [pid 373] mkdir("./107", 0777 [pid 3788] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3783] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... mkdir resumed>) = 0 [pid 3788] <... open resumed>) = 4 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3788] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... openat resumed>) = 3 [pid 3788] <... futex resumed>) = 1 [pid 3783] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD [pid 3788] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3783] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(3, [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 3797 attached [pid 3788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3783] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] close(3 [pid 3788] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3783] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(3, [pid 373] <... close resumed>) = 0 [pid 3788] <... openat resumed>) = 5 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3797] set_robust_list(0x55555713c5e0, 24 [pid 3788] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3788] <... futex resumed>) = 1 [pid 3783] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3799 [pid 3788] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3783] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./106/binderfs", [pid 3788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3783] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 3796 attached [pid 3797] <... set_robust_list resumed>) = 0 [pid 3788] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3783] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] unlink("./106/binderfs") = 0 [pid 377] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3799 attached [pid 3799] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3788] <... write resumed>) = 196608 [pid 3788] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3783] <... futex resumed>) = 0 [pid 3788] <... futex resumed>) = 1 [pid 3783] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3797] chdir("./106" [pid 3788] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3783] <... futex resumed>) = 0 [pid 3797] <... chdir resumed>) = 0 [pid 3796] set_robust_list(0x55555713c5e0, 24 [pid 3788] <... mount resumed>) = 0 [pid 3783] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3797] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3796] <... set_robust_list resumed>) = 0 [pid 3799] chdir("./107") = 0 [pid 3799] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3799] setpgid(0, 0) = 0 [pid 3799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3799] write(3, "1000", 4) = 4 [pid 3799] close(3) = 0 [pid 3799] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3799] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3799] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3799] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3801], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3801 [pid 3799] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3799] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3801 attached [pid 3801] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3801] memfd_create("syzkaller", 0) = 3 [pid 3801] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3788] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3797] <... prctl resumed>) = 0 [pid 3788] <... futex resumed>) = 1 [pid 3783] <... futex resumed>) = 0 [pid 3797] setpgid(0, 0 [pid 3788] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3783] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3797] <... setpgid resumed>) = 0 [pid 3796] chdir("./105" [pid 3788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3783] <... futex resumed>) = 0 [pid 3797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3796] <... chdir resumed>) = 0 [pid 3793] <... mount resumed>) = 0 [pid 3788] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3783] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3796] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3797] <... openat resumed>) = 3 [pid 3796] <... prctl resumed>) = 0 [pid 3793] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3796] setpgid(0, 0 [pid 3797] write(3, "1000", 4 [pid 3796] <... setpgid resumed>) = 0 [pid 3793] <... openat resumed>) = 3 [pid 3797] <... write resumed>) = 4 [pid 3796] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3793] chdir("./bus" [pid 3797] close(3 [pid 3796] <... openat resumed>) = 3 [pid 3793] <... chdir resumed>) = 0 [pid 3797] <... close resumed>) = 0 [pid 3796] write(3, "1000", 4 [pid 3793] ioctl(4, LOOP_CLR_FD [pid 3797] symlink("/dev/binderfs", "./binderfs" [pid 3796] <... write resumed>) = 4 [pid 3797] <... symlink resumed>) = 0 [pid 3796] close(3) = 0 [pid 3797] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3796] symlink("/dev/binderfs", "./binderfs" [pid 3797] <... futex resumed>) = 0 [pid 3796] <... symlink resumed>) = 0 [pid 3797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3796] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3797] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3796] <... futex resumed>) = 0 [pid 3797] <... mprotect resumed>) = 0 [pid 3796] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3797] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3796] <... mmap resumed>) = 0x7f64ff044000 [pid 3796] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3796] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3797] <... clone resumed>, parent_tid=[3802], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3802 [pid 3797] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3796] <... clone resumed>, parent_tid=[3803], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3803 [pid 3797] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3796] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3796] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3801] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 3803 attached [pid 3803] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3803] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 3802 attached [pid 3803] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3801] <... write resumed>) = 1048576 [pid 3803] <... mmap resumed>) = 0x7f64f6c44000 [pid 3802] set_robust_list(0x7f64ff0649e0, 24 [pid 3801] munmap(0x7f64f6c44000, 1048576 [pid 3803] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3802] <... set_robust_list resumed>) = 0 [pid 3802] memfd_create("syzkaller", 0) = 3 [pid 3802] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3801] <... munmap resumed>) = 0 [pid 3802] <... mmap resumed>) = 0x7f64f6c44000 [pid 3801] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3802] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3803] <... write resumed>) = 1048576 [pid 3803] munmap(0x7f64f6c44000, 1048576 [pid 3802] <... write resumed>) = 1048576 [pid 3803] <... munmap resumed>) = 0 [pid 3802] munmap(0x7f64f6c44000, 1048576 [pid 3803] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3802] <... munmap resumed>) = 0 [pid 3802] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3801] <... openat resumed>) = 4 [pid 3788] <... open resumed>) = 6 [pid 377] <... umount2 resumed>) = 0 [pid 3788] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3788] <... futex resumed>) = 1 [pid 3783] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3788] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3783] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./106/bus", [pid 3788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3783] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3788] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3783] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3803] <... openat resumed>) = 4 [pid 3802] <... openat resumed>) = 4 [pid 3801] ioctl(4, LOOP_SET_FD, 3 [pid 3793] <... ioctl resumed>) = 0 [pid 3803] ioctl(4, LOOP_SET_FD, 3 [pid 3802] ioctl(4, LOOP_SET_FD, 3 [pid 3793] close(4 [pid 3801] <... ioctl resumed>) = 0 [pid 3801] close(3) = 0 [pid 3801] mkdir("./bus", 0777) = 0 [pid 3803] <... ioctl resumed>) = 0 [ 78.657111][ T3793] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/108/bus supports timestamps until 2038 (0x7fffffff) [pid 3802] <... ioctl resumed>) = 0 [pid 3801] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3793] <... close resumed>) = 0 [pid 3788] <... write resumed>) = 1048576 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3803] close(3 [pid 3802] close(3 [pid 3793] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3788] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3803] <... close resumed>) = 0 [pid 3802] <... close resumed>) = 0 [pid 3793] <... futex resumed>) = 1 [pid 3790] <... futex resumed>) = 0 [pid 3788] <... futex resumed>) = 1 [pid 3783] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 3803] mkdir("./bus", 0777 [pid 3802] mkdir("./bus", 0777 [pid 3793] chdir("./file0" [pid 3790] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3783] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3803] <... mkdir resumed>) = 0 [pid 3802] <... mkdir resumed>) = 0 [pid 3793] <... chdir resumed>) = 0 [pid 3790] <... futex resumed>) = 0 [pid 3788] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3783] <... futex resumed>) = 0 [pid 377] fstat(4, [pid 3803] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3802] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3793] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3790] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3793] <... futex resumed>) = 0 [pid 3790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3783] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3793] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3790] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 3793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3790] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3793] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3790] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 3793] <... open resumed>) = 4 [pid 3793] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3790] <... futex resumed>) = 0 [pid 3793] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3790] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3790] <... futex resumed>) = 0 [pid 3793] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3790] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3793] <... openat resumed>) = 5 [pid 3793] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3790] <... futex resumed>) = 0 [pid 3793] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3790] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3790] <... futex resumed>) = 0 [pid 3793] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3790] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3793] <... write resumed>) = 196608 [pid 3793] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3790] <... futex resumed>) = 0 [pid 3793] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3790] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3793] <... mount resumed>) = 0 [pid 3790] <... futex resumed>) = 0 [pid 3793] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3790] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3793] <... futex resumed>) = 0 [pid 3790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3793] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3790] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3793] <... open resumed>) = 6 [pid 3790] <... futex resumed>) = 0 [pid 3793] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3790] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3793] <... futex resumed>) = 0 [pid 3790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3793] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3790] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3790] <... futex resumed>) = 0 [pid 3793] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3790] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3788] <... openat resumed>) = 7 [pid 377] close(4 [pid 3788] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 3788] <... futex resumed>) = 1 [pid 3783] <... futex resumed>) = 0 [pid 377] rmdir("./106/bus" [pid 3783] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 3783] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 3788] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 377] rmdir("./106") = 0 [pid 377] mkdir("./107", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 3788] <... openat resumed>) = 8 [pid 377] <... close resumed>) = 0 [pid 3788] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3788] <... futex resumed>) = 1 [pid 3783] <... futex resumed>) = 0 [pid 3788] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3783] exit_group(0 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3811 [pid 3788] <... futex resumed>) = ? [pid 3783] <... exit_group resumed>) = ? [pid 3788] +++ exited with 0 +++ [pid 3783] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3783, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./106/binderfs" [pid 3793] <... write resumed>) = 1048576 [pid 374] <... unlink resumed>) = 0 [pid 3793] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3793] <... futex resumed>) = 1 [pid 3790] <... futex resumed>) = 0 [pid 3793] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3790] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 78.723604][ T3788] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 78.739229][ T3788] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 78.757769][ T3802] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/106/bus supports timestamps until 2038 (0x7fffffff) [pid 3793] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3790] <... futex resumed>) = 0 [pid 3790] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 3811 attached [pid 3802] <... mount resumed>) = 0 [pid 3793] <... openat resumed>) = 7 [pid 374] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3811] set_robust_list(0x55555713c5e0, 24 [pid 3802] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3793] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3811] <... set_robust_list resumed>) = 0 [pid 3802] <... openat resumed>) = 3 [pid 3793] <... futex resumed>) = 1 [pid 3790] <... futex resumed>) = 0 [pid 374] lstat("./106/bus", [pid 3811] chdir("./107" [pid 3802] chdir("./bus" [pid 3793] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3790] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3811] <... chdir resumed>) = 0 [pid 3802] <... chdir resumed>) = 0 [pid 3793] <... openat resumed>) = 8 [pid 3790] <... futex resumed>) = 0 [pid 374] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3811] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3802] ioctl(4, LOOP_CLR_FD [pid 3793] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3790] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3811] <... prctl resumed>) = 0 [pid 3793] <... futex resumed>) = 0 [pid 3790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3811] setpgid(0, 0 [pid 3793] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3790] exit_group(0 [pid 374] <... openat resumed>) = 4 [pid 3811] <... setpgid resumed>) = 0 [pid 3793] <... futex resumed>) = ? [pid 3790] <... exit_group resumed>) = ? [pid 374] fstat(4, [pid 3811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3811] <... openat resumed>) = 3 [pid 374] getdents64(4, [pid 3811] write(3, "1000", 4 [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3811] <... write resumed>) = 4 [pid 374] getdents64(4, [pid 3811] close(3 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3811] <... close resumed>) = 0 [pid 374] close(4 [pid 3811] symlink("/dev/binderfs", "./binderfs" [pid 374] <... close resumed>) = 0 [pid 3811] <... symlink resumed>) = 0 [pid 374] rmdir("./106/bus" [pid 3811] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... rmdir resumed>) = 0 [pid 3811] <... futex resumed>) = 0 [pid 374] getdents64(3, [pid 3811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3811] <... mmap resumed>) = 0x7f64ff044000 [pid 374] close(3 [pid 3811] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 374] <... close resumed>) = 0 [pid 3811] <... mprotect resumed>) = 0 [pid 374] rmdir("./106" [pid 3811] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... rmdir resumed>) = 0 [pid 374] mkdir("./107", 0777 [pid 3811] <... clone resumed>, parent_tid=[3814], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3814 [pid 374] <... mkdir resumed>) = 0 [pid 3811] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3811] <... futex resumed>) = 0 [pid 3811] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3814 attached [pid 3803] <... mount resumed>) = 0 [pid 3814] set_robust_list(0x7f64ff0649e0, 24 [pid 3803] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3814] <... set_robust_list resumed>) = 0 [pid 3803] <... openat resumed>) = 3 [pid 3814] memfd_create("syzkaller", 0 [pid 3803] chdir("./bus" [pid 3814] <... memfd_create resumed>) = 3 [pid 3803] <... chdir resumed>) = 0 [pid 3814] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3803] ioctl(4, LOOP_CLR_FD [pid 3814] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3814] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3814] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3801] <... mount resumed>) = 0 [pid 3801] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3801] chdir("./bus") = 0 [pid 3801] ioctl(4, LOOP_CLR_FD) = 0 [pid 3801] close(4) = 0 [pid 3801] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3799] <... futex resumed>) = 0 [pid 3799] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3799] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3801] <... futex resumed>) = 1 [pid 3801] chdir("./file0" [pid 3802] <... ioctl resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 3803] <... ioctl resumed>) = 0 [pid 3803] close(4) = 0 [pid 3803] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3796] <... futex resumed>) = 0 [pid 3803] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3796] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3796] <... futex resumed>) = 0 [pid 3803] chdir("./file0" [pid 3796] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3803] <... chdir resumed>) = 0 [pid 3803] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3796] <... futex resumed>) = 0 [pid 3803] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3796] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3796] <... futex resumed>) = 0 [pid 3803] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3796] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3814] <... openat resumed>) = 4 [pid 3803] <... open resumed>) = 4 [pid 3814] ioctl(4, LOOP_SET_FD, 3 [pid 3803] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3802] close(4 [pid 3801] <... chdir resumed>) = 0 [pid 3796] <... futex resumed>) = 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 3803] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3801] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3796] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3801] <... futex resumed>) = 1 [pid 3799] <... futex resumed>) = 0 [pid 3796] <... futex resumed>) = 0 [pid 3803] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3801] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3799] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3796] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3803] <... openat resumed>) = 5 [pid 3801] <... open resumed>) = 4 [pid 3799] <... futex resumed>) = 0 [pid 3803] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3801] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3799] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3803] <... futex resumed>) = 1 [pid 3799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3796] <... futex resumed>) = 0 [pid 3803] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3799] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3796] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3799] <... futex resumed>) = 0 [pid 3793] +++ exited with 0 +++ [pid 3802] <... close resumed>) = 0 [pid 3790] +++ exited with 0 +++ [pid 3801] <... futex resumed>) = 0 [pid 3801] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3801] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3801] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3814] <... ioctl resumed>) = 0 [pid 3814] close(3) = 0 [pid 3814] mkdir("./bus", 0777) = 0 [pid 3814] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3796] <... futex resumed>) = 0 [pid 3796] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3790, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 3803] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 3802] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3799] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... restart_syscall resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3803] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3802] <... futex resumed>) = 1 [pid 3799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3797] <... futex resumed>) = 0 [pid 374] close(3 [pid 3803] <... futex resumed>) = 1 [pid 3802] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3799] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3797] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3796] <... futex resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 3803] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3801] <... futex resumed>) = 0 [pid 3799] <... futex resumed>) = 1 [pid 3797] <... futex resumed>) = 0 [pid 3796] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3802] chdir("./file0" [pid 3799] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3797] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3796] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3803] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3802] <... chdir resumed>) = 0 [pid 3801] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3796] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3803] <... mount resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 3803] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(3, [pid 3803] <... futex resumed>) = 1 [pid 3796] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3803] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3802] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3796] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3817 [pid 3803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3802] <... futex resumed>) = 1 [pid 3797] <... futex resumed>) = 0 [pid 3796] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3803] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3802] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3797] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3796] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3803] <... open resumed>) = 6 [pid 3802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3797] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3803] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3802] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3797] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./108/binderfs", [pid 3803] <... futex resumed>) = 1 [pid 3796] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3803] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3802] <... open resumed>) = 4 [pid 3796] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] unlink("./108/binderfs"./strace-static-x86_64: Process 3817 attached [pid 3803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3802] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3801] <... write resumed>) = 196608 [pid 3796] <... futex resumed>) = 0 [pid 376] <... unlink resumed>) = 0 [ 78.777565][ T3793] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 78.792097][ T3793] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 78.792473][ T3803] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/105/bus supports timestamps until 2038 (0x7fffffff) [ 78.808652][ T3801] ext4 filesystem being mounted at /root/syzkaller.k3ECep/107/bus supports timestamps until 2038 (0x7fffffff) [pid 3817] set_robust_list(0x55555713c5e0, 24 [pid 3803] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3802] <... futex resumed>) = 1 [pid 3801] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3797] <... futex resumed>) = 0 [pid 3796] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3817] <... set_robust_list resumed>) = 0 [pid 3802] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3801] <... futex resumed>) = 1 [pid 3799] <... futex resumed>) = 0 [pid 3797] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3817] chdir("./107" [pid 3802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3799] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3797] <... futex resumed>) = 0 [pid 3817] <... chdir resumed>) = 0 [pid 3802] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3801] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3799] <... futex resumed>) = 0 [pid 3797] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3817] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3802] <... openat resumed>) = 5 [pid 3799] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3817] <... prctl resumed>) = 0 [pid 3817] setpgid(0, 0) = 0 [pid 3817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3817] write(3, "1000", 4) = 4 [pid 3817] close(3) = 0 [pid 3817] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3802] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3797] <... futex resumed>) = 0 [pid 3802] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3797] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3817] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3797] <... futex resumed>) = 0 [pid 3817] <... futex resumed>) = 0 [pid 3802] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3801] <... mount resumed>) = 0 [pid 3797] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3817] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3817] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3819], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3819 [pid 3817] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3817] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3802] <... write resumed>) = 196608 [pid 3801] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3802] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3801] <... futex resumed>) = 1 [pid 3799] <... futex resumed>) = 0 [pid 3797] <... futex resumed>) = 0 [pid 3802] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3801] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3799] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3797] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3799] <... futex resumed>) = 0 [pid 3797] <... futex resumed>) = 0 [pid 3802] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3799] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3797] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3802] <... mount resumed>) = 0 [pid 3802] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3797] <... futex resumed>) = 0 [pid 3802] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3797] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3797] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3819 attached [pid 3803] <... write resumed>) = 1048576 [pid 3803] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3803] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3819] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3819] memfd_create("syzkaller", 0) = 3 [pid 3819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3796] <... futex resumed>) = 0 [pid 3796] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3814] <... mount resumed>) = 0 [pid 3803] <... futex resumed>) = 0 [pid 3796] <... futex resumed>) = 1 [pid 3796] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3814] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3803] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3819] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3819] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3814] <... openat resumed>) = 3 [pid 3814] chdir("./bus") = 0 [pid 3814] ioctl(4, LOOP_CLR_FD [pid 3802] <... open resumed>) = 6 [pid 3801] <... open resumed>) = 6 [pid 376] <... umount2 resumed>) = 0 [pid 3802] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3801] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3802] <... futex resumed>) = 1 [pid 3801] <... futex resumed>) = 1 [pid 3799] <... futex resumed>) = 0 [pid 3797] <... futex resumed>) = 0 [pid 3802] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3801] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3799] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3797] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3819] <... openat resumed>) = 4 [pid 3814] <... ioctl resumed>) = 0 [pid 3799] <... futex resumed>) = 0 [pid 3797] <... futex resumed>) = 0 [pid 376] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./108/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./108/bus") = 0 [pid 3799] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3797] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./108") = 0 [pid 376] mkdir("./109", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3820 [ 78.871105][ T3814] ext4 filesystem being mounted at /root/syzkaller.43WzWH/107/bus supports timestamps until 2038 (0x7fffffff) [ 78.886120][ T3803] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3819] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 3820 attached [pid 3814] close(4 [pid 3802] <... write resumed>) = 1048576 [pid 3820] set_robust_list(0x55555713c5e0, 24 [pid 3802] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3820] <... set_robust_list resumed>) = 0 [pid 3802] <... futex resumed>) = 1 [pid 3797] <... futex resumed>) = 0 [pid 3820] chdir("./109" [pid 3802] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3797] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3820] <... chdir resumed>) = 0 [pid 3802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3797] <... futex resumed>) = 0 [pid 3820] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3802] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3797] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3820] <... prctl resumed>) = 0 [pid 3819] <... ioctl resumed>) = 0 [pid 3814] <... close resumed>) = 0 [pid 3801] <... write resumed>) = 1048576 [pid 3819] close(3 [pid 3814] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3801] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3819] <... close resumed>) = 0 [pid 3814] <... futex resumed>) = 1 [pid 3811] <... futex resumed>) = 0 [pid 3801] <... futex resumed>) = 1 [pid 3819] mkdir("./bus", 0777 [pid 3814] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3811] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3801] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3819] <... mkdir resumed>) = 0 [pid 3814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3811] <... futex resumed>) = 0 [pid 3796] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3819] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3814] chdir("./file0" [pid 3811] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3796] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3814] <... chdir resumed>) = 0 [pid 3796] <... futex resumed>) = 0 [pid 3814] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3796] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3814] <... futex resumed>) = 1 [pid 3811] <... futex resumed>) = 0 [pid 3803] <... openat resumed>) = 7 [pid 3799] <... futex resumed>) = 0 [pid 3796] <... mmap resumed>) = 0x7f64f6d23000 [pid 3820] setpgid(0, 0 [pid 3814] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3811] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3799] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3820] <... setpgid resumed>) = 0 [pid 3814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3811] <... futex resumed>) = 0 [pid 3801] <... futex resumed>) = 0 [pid 3799] <... futex resumed>) = 1 [pid 3796] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3820] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3814] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3811] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3801] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3799] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3796] <... mprotect resumed>) = 0 [pid 3820] <... openat resumed>) = 3 [pid 3820] write(3, "1000", 4) = 4 [pid 3820] close(3) = 0 [pid 3820] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3820] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3820] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3820] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3820] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3822], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3822 [pid 3820] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3820] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3802] <... openat resumed>) = 7 [pid 3802] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3797] <... futex resumed>) = 0 [pid 3797] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3797] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3802] <... futex resumed>) = 1 [pid 3802] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3802] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3797] <... futex resumed>) = 0 [pid 3797] exit_group(0) = ? [pid 3802] <... futex resumed>) = ? [pid 3802] +++ exited with 0 +++ [pid 3797] +++ exited with 0 +++ [pid 3796] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3797, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3803] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3803] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3823 attached [pid 3823] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3823] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3822 attached [pid 3822] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3822] memfd_create("syzkaller", 0) = 3 [pid 3822] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3814] <... open resumed>) = 4 [pid 3814] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3814] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3796] <... clone resumed>, parent_tid=[3823], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3823 [pid 3796] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3823] <... futex resumed>) = 0 [pid 3796] <... futex resumed>) = 1 [pid 3823] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3796] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3823] <... openat resumed>) = 8 [pid 3823] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3796] <... futex resumed>) = 0 [pid 3823] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3796] exit_group(0 [pid 3823] <... futex resumed>) = ? [pid 3803] <... futex resumed>) = ? [pid 3796] <... exit_group resumed>) = ? [pid 3823] +++ exited with 0 +++ [pid 3811] <... futex resumed>) = 0 [pid 3803] +++ exited with 0 +++ [pid 3796] +++ exited with 0 +++ [pid 3811] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3796, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3814] <... futex resumed>) = 0 [pid 3811] <... futex resumed>) = 1 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3814] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3811] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3814] <... openat resumed>) = 5 [pid 375] <... openat resumed>) = 3 [pid 3814] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3811] <... futex resumed>) = 0 [pid 375] fstat(3, [pid 3814] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3811] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3811] <... futex resumed>) = 0 [pid 3814] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3811] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(3, [pid 372] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./105/binderfs") = 0 [pid 3814] <... write resumed>) = 196608 [pid 372] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3814] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3814] <... futex resumed>) = 1 [pid 3811] <... futex resumed>) = 0 [pid 375] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3814] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3811] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3814] <... mount resumed>) = 0 [pid 3811] <... futex resumed>) = 0 [pid 375] lstat("./106/binderfs", [pid 3814] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3811] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3814] <... futex resumed>) = 0 [pid 3811] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] unlink("./106/binderfs" [pid 3814] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3811] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3814] <... open resumed>) = 6 [pid 3811] <... futex resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 3814] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3811] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3814] <... futex resumed>) = 0 [pid 3811] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3811] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3814] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3811] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 3811] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./105/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [ 78.918584][ T3803] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 78.925197][ T3802] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 78.947566][ T3802] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 78.948701][ T3801] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 372] rmdir("./105/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./105") = 0 [pid 372] mkdir("./106", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3799] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3799] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 372] <... openat resumed>) = 3 [pid 3822] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3799] <... mmap resumed>) = 0x7f64f6d23000 [pid 3799] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 372] ioctl(3, LOOP_CLR_FD [pid 3799] <... mprotect resumed>) = 0 [pid 3799] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3826], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3826 [pid 3799] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3799] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3801] <... openat resumed>) = 7 [pid 3822] <... write resumed>) = 1048576 [pid 3822] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3822] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 3826 attached [pid 3826] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3826] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3826] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3799] <... futex resumed>) = 0 [pid 3826] <... futex resumed>) = 1 [pid 3826] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3801] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3801] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3799] exit_group(0) = ? [pid 3801] <... futex resumed>) = ? [pid 3801] +++ exited with 0 +++ [pid 3826] <... futex resumed>) = ? [pid 3819] <... mount resumed>) = 0 [pid 3819] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3819] chdir("./bus") = 0 [pid 3819] ioctl(4, LOOP_CLR_FD [pid 3814] <... write resumed>) = 1048576 [pid 3814] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3814] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3811] <... futex resumed>) = 0 [pid 3811] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3811] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3814] <... futex resumed>) = 0 [pid 3814] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 [pid 3814] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3811] <... futex resumed>) = 0 [pid 3811] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3811] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3814] <... futex resumed>) = 1 [pid 3814] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3814] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3811] <... futex resumed>) = 0 [pid 3811] exit_group(0) = ? [pid 3814] <... futex resumed>) = ? [ 78.996624][ T3801] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 79.008338][ T3819] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/107/bus supports timestamps until 2038 (0x7fffffff) [ 79.024032][ T3814] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 79.038237][ T3814] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 3826] +++ exited with 0 +++ [pid 3822] <... openat resumed>) = 4 [pid 3819] <... ioctl resumed>) = 0 [pid 3799] +++ exited with 0 +++ [pid 375] <... umount2 resumed>) = 0 [pid 3822] ioctl(4, LOOP_SET_FD, 3 [pid 3819] close(4 [pid 375] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3819] <... close resumed>) = 0 [pid 3819] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3819] <... futex resumed>) = 1 [pid 3819] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] lstat("./106/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3817] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./106/bus" [pid 3817] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 3819] <... futex resumed>) = 0 [pid 3817] <... futex resumed>) = 1 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3799, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./106" [pid 3819] chdir("./file0" [pid 3817] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... rmdir resumed>) = 0 [pid 375] mkdir("./107", 0777 [pid 3819] <... chdir resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 373] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3819] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3822] <... ioctl resumed>) = 0 [pid 3822] close(3) = 0 [pid 3822] mkdir("./bus", 0777) = 0 [pid 3819] <... futex resumed>) = 1 [pid 3817] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 373] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... ioctl resumed>) = 0 [pid 3822] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] ioctl(3, LOOP_CLR_FD [pid 372] close(3 [pid 3819] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3817] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... openat resumed>) = 3 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... close resumed>) = 0 [pid 375] close(3 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3819] <... open resumed>) = 4 [pid 3817] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 373] fstat(3, [pid 3819] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3828 [pid 3819] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3817] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3829 [pid 3817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] getdents64(3, ./strace-static-x86_64: Process 3828 attached ./strace-static-x86_64: Process 3829 attached [pid 3829] set_robust_list(0x55555713c5e0, 24 [pid 3817] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3817] <... futex resumed>) = 1 [pid 3819] <... futex resumed>) = 0 [pid 3819] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3817] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3819] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3819] <... futex resumed>) = 1 [pid 3817] <... futex resumed>) = 0 [pid 373] lstat("./107/binderfs", [pid 3819] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3817] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3819] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3817] <... futex resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3819] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3817] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] unlink("./107/binderfs" [pid 3819] <... write resumed>) = 196608 [pid 3814] +++ exited with 0 +++ [pid 3811] +++ exited with 0 +++ [pid 3819] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3817] <... futex resumed>) = 0 [pid 3819] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3817] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3819] <... mount resumed>) = 0 [pid 3817] <... futex resumed>) = 0 [pid 3819] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3817] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3819] <... futex resumed>) = 0 [pid 3817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3819] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3817] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3819] <... open resumed>) = 6 [pid 3817] <... futex resumed>) = 0 [pid 3819] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3817] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3819] <... futex resumed>) = 0 [pid 3817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3819] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3817] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] <... unlink resumed>) = 0 [pid 3817] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3811, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 373] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./107/binderfs") = 0 [pid 377] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3829] <... set_robust_list resumed>) = 0 [pid 3828] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3828] chdir("./106") = 0 [pid 3828] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3829] chdir("./107" [pid 3828] setpgid(0, 0 [pid 3829] <... chdir resumed>) = 0 [pid 3828] <... setpgid resumed>) = 0 [pid 3829] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3829] <... prctl resumed>) = 0 [pid 3828] <... openat resumed>) = 3 [pid 3829] setpgid(0, 0 [pid 3828] write(3, "1000", 4 [pid 3829] <... setpgid resumed>) = 0 [pid 3828] <... write resumed>) = 4 [pid 3819] <... write resumed>) = 1048576 [pid 3829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3828] close(3 [pid 3829] <... openat resumed>) = 3 [pid 3828] <... close resumed>) = 0 [pid 3829] write(3, "1000", 4 [pid 3828] symlink("/dev/binderfs", "./binderfs" [pid 3829] <... write resumed>) = 4 [pid 3828] <... symlink resumed>) = 0 [pid 3829] close(3 [pid 3828] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3829] <... close resumed>) = 0 [pid 3828] <... futex resumed>) = 0 [pid 3829] symlink("/dev/binderfs", "./binderfs" [pid 3828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3829] <... symlink resumed>) = 0 [pid 3828] <... mmap resumed>) = 0x7f64ff044000 [pid 3829] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3828] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3829] <... futex resumed>) = 0 [pid 3828] <... mprotect resumed>) = 0 [pid 3829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3828] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3829] <... mmap resumed>) = 0x7f64ff044000 [pid 3829] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3828] <... clone resumed>, parent_tid=[3832], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3832 [pid 3829] <... mprotect resumed>) = 0 [pid 3828] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3829] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3828] <... futex resumed>) = 0 [pid 3828] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3829] <... clone resumed>, parent_tid=[3833], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3833 [pid 3829] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3829] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3819] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3819] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3832 attached [pid 3832] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3832] memfd_create("syzkaller", 0) = 3 [pid 3832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 3833 attached [pid 3817] <... futex resumed>) = 0 [pid 3817] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3833] set_robust_list(0x7f64ff0649e0, 24 [pid 3822] <... mount resumed>) = 0 [pid 3833] <... set_robust_list resumed>) = 0 [pid 3819] <... futex resumed>) = 0 [pid 3817] <... futex resumed>) = 1 [pid 3819] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3817] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3833] memfd_create("syzkaller", 0 [pid 3822] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3832] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3832] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3832] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3833] <... memfd_create resumed>) = 3 [pid 3833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3822] <... openat resumed>) = 3 [pid 3822] chdir("./bus") = 0 [pid 3822] ioctl(4, LOOP_CLR_FD [pid 3833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3833] munmap(0x7f64f6c44000, 1048576 [pid 373] <... umount2 resumed>) = 0 [pid 3819] <... openat resumed>) = 7 [pid 373] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3833] <... munmap resumed>) = 0 [pid 3819] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3833] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3819] <... futex resumed>) = 1 [pid 3817] <... futex resumed>) = 0 [pid 373] lstat("./107/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3819] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3817] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3817] <... futex resumed>) = 0 [pid 373] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3819] <... openat resumed>) = 8 [pid 373] <... openat resumed>) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3819] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3817] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(4, [pid 3819] <... futex resumed>) = 0 [pid 3817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3819] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] getdents64(4, [pid 3817] exit_group(0 [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./107/bus" [pid 3819] <... futex resumed>) = ? [pid 3817] <... exit_group resumed>) = ? [pid 373] <... rmdir resumed>) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./107") = 0 [pid 373] mkdir("./108", 0777) = 0 [ 79.108806][ T3822] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/109/bus supports timestamps until 2038 (0x7fffffff) [ 79.121753][ T3819] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 79.136526][ T3819] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3832] <... openat resumed>) = 4 [pid 3822] <... ioctl resumed>) = 0 [pid 3833] <... openat resumed>) = 4 [pid 3832] ioctl(4, LOOP_SET_FD, 3 [pid 3822] close(4 [pid 3819] +++ exited with 0 +++ [pid 3817] +++ exited with 0 +++ [pid 377] <... umount2 resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 3833] ioctl(4, LOOP_SET_FD, 3 [pid 3832] <... ioctl resumed>) = 0 [pid 3822] <... close resumed>) = 0 [pid 377] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3817, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3832] close(3 [pid 3822] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] ioctl(3, LOOP_CLR_FD [pid 3832] <... close resumed>) = 0 [pid 3833] <... ioctl resumed>) = 0 [pid 3822] <... futex resumed>) = 1 [pid 3820] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3832] mkdir("./bus", 0777 [pid 3822] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3820] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./107/bus", [pid 3822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3820] <... futex resumed>) = 0 [pid 373] close(3 [pid 3832] <... mkdir resumed>) = 0 [pid 3833] close(3 [pid 3822] chdir("./file0" [pid 3820] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 3822] <... chdir resumed>) = 0 [pid 3833] <... close resumed>) = 0 [pid 3822] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3832] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3822] <... futex resumed>) = 1 [pid 3820] <... futex resumed>) = 0 [pid 374] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3833] mkdir("./bus", 0777 [pid 3822] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3820] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 4 ./strace-static-x86_64: Process 3836 attached [pid 3836] set_robust_list(0x55555713c5e0, 24 [pid 3820] <... futex resumed>) = 0 [pid 377] fstat(4, [pid 374] <... openat resumed>) = 3 [pid 3836] <... set_robust_list resumed>) = 0 [pid 3836] chdir("./108") = 0 [pid 3833] <... mkdir resumed>) = 0 [pid 3820] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] fstat(3, [pid 3822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3836 [pid 3836] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3822] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 377] getdents64(4, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3833] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3822] <... open resumed>) = 4 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(3, [pid 3822] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3820] <... futex resumed>) = 0 [pid 3822] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3820] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3820] <... futex resumed>) = 0 [pid 3822] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3820] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3822] <... openat resumed>) = 5 [pid 377] getdents64(4, [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3822] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3820] <... futex resumed>) = 0 [pid 3822] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3820] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3820] <... futex resumed>) = 0 [pid 3822] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3820] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3822] <... write resumed>) = 196608 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3822] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3836] setpgid(0, 0 [pid 3822] <... futex resumed>) = 1 [pid 3820] <... futex resumed>) = 0 [pid 377] close(4 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3836] <... setpgid resumed>) = 0 [pid 3822] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3820] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3820] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 374] lstat("./107/binderfs", [pid 3836] <... openat resumed>) = 3 [pid 3822] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3820] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3836] write(3, "1000", 4 [pid 3822] <... mount resumed>) = 0 [pid 3836] <... write resumed>) = 4 [pid 3822] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3836] close(3 [pid 3822] <... futex resumed>) = 1 [pid 3820] <... futex resumed>) = 0 [pid 3836] <... close resumed>) = 0 [pid 3822] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3820] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3836] symlink("/dev/binderfs", "./binderfs" [pid 3822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3820] <... futex resumed>) = 0 [pid 3836] <... symlink resumed>) = 0 [pid 3822] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3820] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] rmdir("./107/bus" [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3836] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3822] <... open resumed>) = 6 [pid 3836] <... futex resumed>) = 0 [pid 3822] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] unlink("./107/binderfs" [pid 3836] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3822] <... futex resumed>) = 1 [pid 3820] <... futex resumed>) = 0 [pid 3836] <... mmap resumed>) = 0x7f64ff044000 [pid 3822] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3820] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... rmdir resumed>) = 0 [pid 3836] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3820] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 374] <... unlink resumed>) = 0 [pid 3836] <... mprotect resumed>) = 0 [pid 3822] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3820] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3836] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3836] <... clone resumed>, parent_tid=[3840], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3840 [pid 3836] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3836] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3822] <... write resumed>) = 1048576 [pid 3822] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3820] <... futex resumed>) = 0 [pid 3820] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3820] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3822] <... futex resumed>) = 1 [pid 3822] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 3840 attached [pid 3832] <... mount resumed>) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./107") = 0 [pid 377] mkdir("./108", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3841 [pid 3832] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3832] chdir("./bus") = 0 [pid 3832] ioctl(4, LOOP_CLR_FD) = 0 [pid 3832] close(4) = 0 [pid 3832] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3832] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3840] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3840] memfd_create("syzkaller", 0) = 3 [pid 3840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3828] <... futex resumed>) = 0 [pid 3828] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3832] <... futex resumed>) = 0 [pid 3828] <... futex resumed>) = 1 ./strace-static-x86_64: Process 3841 attached [pid 3841] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3841] chdir("./108") = 0 [pid 3841] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3832] chdir("./file0" [pid 3828] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3841] <... prctl resumed>) = 0 [pid 3841] setpgid(0, 0) = 0 [pid 3841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3841] write(3, "1000", 4) = 4 [pid 3841] close(3) = 0 [pid 3841] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3841] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3841] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3841] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3841] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3843], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3843 [pid 3841] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3841] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3843 attached [pid 3843] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3843] memfd_create("syzkaller", 0) = 3 [pid 3843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3832] <... chdir resumed>) = 0 [pid 3832] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3828] <... futex resumed>) = 0 [pid 3832] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3828] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3828] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3832] <... open resumed>) = 4 [pid 3832] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3828] <... futex resumed>) = 0 [pid 3832] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3828] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3828] <... futex resumed>) = 0 [pid 3832] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 79.215260][ T3832] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/106/bus supports timestamps until 2038 (0x7fffffff) [ 79.224409][ T3822] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 79.248022][ T3822] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 3828] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3832] <... openat resumed>) = 5 [pid 3843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3840] <... write resumed>) = 1048576 [pid 3832] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3822] <... openat resumed>) = 7 [pid 3840] munmap(0x7f64f6c44000, 1048576 [pid 3832] <... futex resumed>) = 1 [pid 3828] <... futex resumed>) = 0 [pid 3840] <... munmap resumed>) = 0 [pid 3832] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3828] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3840] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3832] <... write resumed>) = 196608 [pid 3828] <... futex resumed>) = 0 [pid 3833] <... mount resumed>) = 0 [pid 3828] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3833] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3833] chdir("./bus" [pid 3832] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3828] <... futex resumed>) = 0 [pid 3828] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3832] <... futex resumed>) = 1 [pid 3828] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3833] <... chdir resumed>) = 0 [pid 3832] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3833] ioctl(4, LOOP_CLR_FD [pid 3832] <... mount resumed>) = 0 [pid 3820] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3832] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3820] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 3832] <... futex resumed>) = 1 [pid 3828] <... futex resumed>) = 0 [pid 3820] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3832] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3828] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3820] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3828] <... futex resumed>) = 0 [pid 3822] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3820] <... futex resumed>) = 0 [pid 3828] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3822] <... futex resumed>) = 0 [pid 3820] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3822] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3820] <... mmap resumed>) = 0x7f64f6d23000 [pid 3820] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3820] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3844], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3844 [pid 3820] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3820] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3844 attached [pid 3843] <... write resumed>) = 1048576 [pid 3843] munmap(0x7f64f6c44000, 1048576 [pid 3844] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3844] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3843] <... munmap resumed>) = 0 [pid 3844] <... openat resumed>) = 8 [pid 3843] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3844] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3820] <... futex resumed>) = 0 [pid 3820] exit_group(0 [pid 3822] <... futex resumed>) = ? [pid 3820] <... exit_group resumed>) = ? [pid 3822] +++ exited with 0 +++ [pid 3844] <... futex resumed>) = ? [pid 3844] +++ exited with 0 +++ [pid 3840] <... openat resumed>) = 4 [pid 3833] <... ioctl resumed>) = 0 [pid 3832] <... open resumed>) = 6 [pid 3820] +++ exited with 0 +++ [pid 374] <... umount2 resumed>) = 0 [pid 3843] <... openat resumed>) = 4 [pid 3833] close(4 [pid 3832] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3820, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 3843] ioctl(4, LOOP_SET_FD, 3 [pid 3833] <... close resumed>) = 0 [pid 3832] <... futex resumed>) = 1 [pid 3828] <... futex resumed>) = 0 [pid 3833] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3832] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3828] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3833] <... futex resumed>) = 1 [pid 3832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3829] <... futex resumed>) = 0 [pid 3828] <... futex resumed>) = 0 [pid 376] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3833] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3832] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3829] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3828] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3840] ioctl(4, LOOP_SET_FD, 3 [pid 3833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3829] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3833] chdir("./file0" [pid 3829] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... openat resumed>) = 3 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3833] <... chdir resumed>) = 0 [pid 376] fstat(3, [pid 374] lstat("./107/bus", [pid 3833] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3833] <... futex resumed>) = 1 [pid 3829] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 374] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3833] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3829] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3829] <... futex resumed>) = 0 [pid 376] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3833] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3829] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... openat resumed>) = 4 [pid 3833] <... open resumed>) = 4 [pid 376] lstat("./109/binderfs", [pid 374] fstat(4, [ 79.259585][ T3833] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/107/bus supports timestamps until 2038 (0x7fffffff) [pid 3833] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3843] <... ioctl resumed>) = 0 [pid 3833] <... futex resumed>) = 1 [pid 3832] <... write resumed>) = 1048576 [pid 3829] <... futex resumed>) = 0 [pid 376] unlink("./109/binderfs" [pid 3843] close(3 [pid 3833] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3832] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3829] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... unlink resumed>) = 0 [pid 3843] <... close resumed>) = 0 [pid 3833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3832] <... futex resumed>) = 1 [pid 3829] <... futex resumed>) = 0 [pid 3828] <... futex resumed>) = 0 [pid 376] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3843] mkdir("./bus", 0777 [pid 3833] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3832] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3829] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3828] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(4, [pid 3843] <... mkdir resumed>) = 0 [pid 3833] <... openat resumed>) = 5 [pid 3832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3828] <... futex resumed>) = 0 [pid 3843] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3833] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3832] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3828] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3833] <... futex resumed>) = 1 [pid 3829] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3840] <... ioctl resumed>) = 0 [pid 3833] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3829] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3829] <... futex resumed>) = 0 [pid 3833] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3829] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3840] close(3 [pid 3833] <... write resumed>) = 196608 [pid 374] getdents64(4, [pid 3840] <... close resumed>) = 0 [pid 3833] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3833] <... futex resumed>) = 1 [pid 3829] <... futex resumed>) = 0 [pid 3833] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3829] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3829] <... futex resumed>) = 0 [pid 3833] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3829] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3833] <... mount resumed>) = 0 [pid 3833] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3829] <... futex resumed>) = 0 [pid 3833] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3829] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3829] <... futex resumed>) = 0 [pid 3833] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3829] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3833] <... open resumed>) = 6 [pid 3833] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3829] <... futex resumed>) = 0 [pid 3833] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3829] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3829] <... futex resumed>) = 0 [pid 3833] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3829] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3840] mkdir("./bus", 0777 [pid 374] close(4 [pid 3840] <... mkdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 3840] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 374] rmdir("./107/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./107") = 0 [pid 374] mkdir("./108", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3832] <... openat resumed>) = 7 [pid 3833] <... write resumed>) = 1048576 [pid 3833] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3829] <... futex resumed>) = 0 [pid 3829] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3829] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3833] <... futex resumed>) = 1 [pid 3833] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3843] <... mount resumed>) = 0 [pid 3832] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3828] <... futex resumed>) = 0 [pid 3832] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3828] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3828] <... futex resumed>) = 0 [pid 3832] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3828] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3832] <... openat resumed>) = 8 [pid 3832] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3828] <... futex resumed>) = 0 [pid 3832] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3828] exit_group(0 [pid 3832] <... futex resumed>) = ? [pid 3828] <... exit_group resumed>) = ? [pid 3832] +++ exited with 0 +++ [pid 3843] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3843] chdir("./bus") = 0 [ 79.317946][ T3832] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 79.343174][ T3832] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 79.352670][ T3843] ext4 filesystem being mounted at /root/syzkaller.43WzWH/108/bus supports timestamps until 2038 (0x7fffffff) [pid 3843] ioctl(4, LOOP_CLR_FD) = 0 [pid 3833] <... openat resumed>) = 7 [pid 3828] +++ exited with 0 +++ [pid 376] <... umount2 resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 3843] close(4 [pid 376] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] ioctl(3, LOOP_CLR_FD [pid 3843] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3843] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] lstat("./109/bus", [pid 374] close(3 [pid 3843] <... futex resumed>) = 1 [pid 3841] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... close resumed>) = 0 [pid 3843] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3841] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3841] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3843] chdir("./file0" [pid 3841] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3849 [pid 3843] <... chdir resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 3843] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(4, [pid 3843] <... futex resumed>) = 1 [pid 3841] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3843] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3841] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 3843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3841] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3843] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3841] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 3843] <... open resumed>) = 4 [pid 376] rmdir("./109/bus" [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3828, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 3843] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... rmdir resumed>) = 0 [pid 3843] <... futex resumed>) = 1 [pid 3841] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 3843] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3841] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3841] <... futex resumed>) = 0 [pid 376] close(3 [pid 3843] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3841] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... close resumed>) = 0 [pid 3843] <... openat resumed>) = 5 [pid 376] rmdir("./109" [pid 3843] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... rmdir resumed>) = 0 [pid 372] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3843] <... futex resumed>) = 1 [pid 3841] <... futex resumed>) = 0 [pid 376] mkdir("./110", 0777 [pid 3843] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3841] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... mkdir resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3841] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 372] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3843] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3841] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 ./strace-static-x86_64: Process 3849 attached [pid 3833] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] fstat(3, [pid 3833] <... futex resumed>) = 1 [pid 3829] <... futex resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3849] set_robust_list(0x55555713c5e0, 24 [pid 3833] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] getdents64(3, [pid 3849] <... set_robust_list resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3849] chdir("./108" [pid 372] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3849] <... chdir resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 372] lstat("./106/binderfs", [pid 3849] <... prctl resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3849] setpgid(0, 0 [pid 372] unlink("./106/binderfs" [pid 3849] <... setpgid resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 3849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3829] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] ioctl(3, LOOP_CLR_FD [pid 372] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3849] <... openat resumed>) = 3 [pid 3843] <... write resumed>) = 196608 [pid 3833] <... futex resumed>) = 0 [pid 3829] <... futex resumed>) = 1 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3849] write(3, "1000", 4 [pid 3843] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3833] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 376] close(3 [pid 3849] <... write resumed>) = 4 [pid 3843] <... futex resumed>) = 1 [pid 3833] <... openat resumed>) = 8 [pid 376] <... close resumed>) = 0 [pid 3849] close(3 [pid 3843] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3833] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3849] <... close resumed>) = 0 [pid 3833] <... futex resumed>) = 0 [pid 3849] symlink("/dev/binderfs", "./binderfs" [pid 3833] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3852 [pid 3849] <... symlink resumed>) = 0 [pid 3849] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3849] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3849] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3853], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3853 [pid 3849] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3849] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3829] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 3829] exit_group(0 [pid 3833] <... futex resumed>) = ? [pid 3829] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 3853 attached ./strace-static-x86_64: Process 3852 attached [pid 3841] <... futex resumed>) = 0 [pid 3840] <... mount resumed>) = 0 [pid 3833] +++ exited with 0 +++ [pid 3829] +++ exited with 0 +++ [pid 3853] set_robust_list(0x7f64ff0649e0, 24 [pid 3852] set_robust_list(0x55555713c5e0, 24 [pid 3841] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3829, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 3853] <... set_robust_list resumed>) = 0 [pid 3852] <... set_robust_list resumed>) = 0 [pid 3843] <... futex resumed>) = 0 [pid 3841] <... futex resumed>) = 1 [pid 3840] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3853] memfd_create("syzkaller", 0 [pid 3852] chdir("./110" [pid 3843] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3841] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3853] <... memfd_create resumed>) = 3 [pid 3852] <... chdir resumed>) = 0 [pid 3843] <... mount resumed>) = 0 [pid 3840] <... openat resumed>) = 3 [pid 3853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3852] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3843] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3853] <... mmap resumed>) = 0x7f64f6c44000 [pid 3852] <... prctl resumed>) = 0 [pid 3843] <... futex resumed>) = 1 [pid 3841] <... futex resumed>) = 0 [pid 3840] chdir("./bus" [pid 375] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3852] setpgid(0, 0 [pid 3843] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3841] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3852] <... setpgid resumed>) = 0 [pid 3843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3841] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3843] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3841] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... openat resumed>) = 3 [pid 3852] <... openat resumed>) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./107/binderfs") = 0 [pid 375] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3852] write(3, "1000", 4 [pid 3840] <... chdir resumed>) = 0 [pid 3853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3852] <... write resumed>) = 4 [pid 3840] ioctl(4, LOOP_CLR_FD [pid 3852] close(3) = 0 [pid 3852] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3852] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3852] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3852] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3852] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3854], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3854 [pid 3852] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3852] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3854 attached [pid 3854] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3854] memfd_create("syzkaller", 0) = 3 [pid 3854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3853] <... write resumed>) = 1048576 [pid 3853] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3853] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3843] <... open resumed>) = 6 [pid 372] <... umount2 resumed>) = 0 [pid 3843] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3843] <... futex resumed>) = 1 [pid 3841] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3843] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3841] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] lstat("./106/bus", [pid 3843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3841] <... futex resumed>) = 0 [pid 3843] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3841] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3854] <... write resumed>) = 1048576 [ 79.362295][ T3833] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 79.378394][ T3833] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 79.405870][ T3840] ext4 filesystem being mounted at /root/syzkaller.k3ECep/108/bus supports timestamps until 2038 (0x7fffffff) [pid 3854] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3854] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 372] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./106/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3 [pid 3843] <... write resumed>) = 1048576 [pid 372] <... close resumed>) = 0 [pid 3843] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] rmdir("./106" [pid 3843] <... futex resumed>) = 1 [pid 3843] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3841] <... futex resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 3841] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] mkdir("./107", 0777 [pid 3843] <... futex resumed>) = 0 [pid 3841] <... futex resumed>) = 1 [pid 3841] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... mkdir resumed>) = 0 [pid 3843] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3843] <... openat resumed>) = 7 [pid 3843] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3853] <... openat resumed>) = 4 [pid 3840] <... ioctl resumed>) = 0 [pid 3843] <... futex resumed>) = 1 [pid 3841] <... futex resumed>) = 0 [pid 3843] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3841] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3841] <... futex resumed>) = 0 [pid 3843] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3841] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3854] <... openat resumed>) = 4 [pid 3843] <... openat resumed>) = 8 [pid 372] <... openat resumed>) = 3 [pid 3854] ioctl(4, LOOP_SET_FD, 3 [pid 3853] ioctl(4, LOOP_SET_FD, 3 [pid 3840] close(4 [pid 375] <... umount2 resumed>) = 0 [pid 3843] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] ioctl(3, LOOP_CLR_FD [pid 3854] <... ioctl resumed>) = 0 [pid 375] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3854] close(3 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3854] <... close resumed>) = 0 [pid 3843] <... futex resumed>) = 1 [pid 3841] <... futex resumed>) = 0 [pid 375] lstat("./107/bus", [pid 3854] mkdir("./bus", 0777 [pid 3853] <... ioctl resumed>) = 0 [pid 3840] <... close resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3854] <... mkdir resumed>) = 0 [pid 3840] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] close(3 [pid 3854] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3853] close(3 [pid 3843] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3841] exit_group(0 [pid 3853] <... close resumed>) = 0 [pid 3843] <... futex resumed>) = ? [pid 3841] <... exit_group resumed>) = ? [pid 3840] <... futex resumed>) = 1 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3853] mkdir("./bus", 0777 [pid 3843] +++ exited with 0 +++ [pid 3841] +++ exited with 0 +++ [pid 3840] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3836] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... close resumed>) = 0 [pid 3853] <... mkdir resumed>) = 0 [pid 3836] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 4 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3853] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3840] <... futex resumed>) = 0 [pid 3836] <... futex resumed>) = 1 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3841, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 375] fstat(4, [pid 3840] chdir("./file0" [pid 3836] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3857 [pid 3840] <... chdir resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] getdents64(4, [pid 3840] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3840] <... futex resumed>) = 1 [pid 3836] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 375] getdents64(4, [pid 3840] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3836] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(3, [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3836] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] close(4 [pid 3840] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3836] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(3, [pid 375] <... close resumed>) = 0 [pid 3840] <... open resumed>) = 4 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] rmdir("./107/bus" [pid 3840] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... rmdir resumed>) = 0 [pid 3840] <... futex resumed>) = 1 [pid 3836] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] getdents64(3, [pid 3840] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3836] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./108/binderfs", [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3836] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] close(3 [pid 3840] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3836] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] unlink("./108/binderfs" [pid 375] <... close resumed>) = 0 ./strace-static-x86_64: Process 3857 attached [pid 3840] <... openat resumed>) = 5 [pid 3857] set_robust_list(0x55555713c5e0, 24) = 0 [ 79.459091][ T3843] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 79.473205][ T3843] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 3857] chdir("./107") = 0 [pid 3857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3857] setpgid(0, 0) = 0 [pid 3857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3857] write(3, "1000", 4) = 4 [pid 3857] close(3) = 0 [pid 3857] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3857] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3857] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3857] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3861], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3861 [pid 3857] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3857] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3861 attached [pid 3861] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3861] memfd_create("syzkaller", 0) = 3 [pid 3861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3861] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 377] <... unlink resumed>) = 0 [pid 375] rmdir("./107" [pid 3840] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 375] <... rmdir resumed>) = 0 [pid 3840] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3836] <... futex resumed>) = 0 [pid 3836] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] mkdir("./108", 0777 [pid 3854] <... mount resumed>) = 0 [pid 3840] <... futex resumed>) = 0 [pid 3836] <... futex resumed>) = 1 [pid 3840] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 375] <... mkdir resumed>) = 0 [pid 3836] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3861] <... write resumed>) = 1048576 [pid 3861] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3861] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3861] ioctl(4, LOOP_SET_FD, 3 [pid 3854] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3854] chdir("./bus") = 0 [pid 3854] ioctl(4, LOOP_CLR_FD [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3840] <... write resumed>) = 196608 [pid 3840] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3836] <... futex resumed>) = 0 [pid 3840] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3836] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3840] <... mount resumed>) = 0 [pid 3836] <... futex resumed>) = 0 [pid 3840] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3836] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3840] <... futex resumed>) = 0 [pid 3836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3840] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3836] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3836] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3861] <... ioctl resumed>) = 0 [pid 3861] close(3) = 0 [pid 3861] mkdir("./bus", 0777) = 0 [pid 3861] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3853] <... mount resumed>) = 0 [pid 3853] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 375] <... openat resumed>) = 3 [pid 3840] <... open resumed>) = 6 [pid 3840] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] ioctl(3, LOOP_CLR_FD [pid 3854] <... ioctl resumed>) = 0 [pid 3853] chdir("./bus") = 0 [pid 3853] ioctl(4, LOOP_CLR_FD) = 0 [pid 3853] close(4) = 0 [pid 3853] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3853] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3849] <... futex resumed>) = 0 [pid 3840] <... futex resumed>) = 1 [pid 3836] <... futex resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3854] close(4 [pid 3849] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3840] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3836] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 3849] <... futex resumed>) = 1 [pid 3854] <... close resumed>) = 0 [pid 3854] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3852] <... futex resumed>) = 0 [pid 3852] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3852] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3854] <... futex resumed>) = 1 [pid 3854] chdir("./file0" [pid 3836] <... futex resumed>) = 0 [pid 3849] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3836] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3865 [pid 3853] <... futex resumed>) = 0 [pid 3853] chdir("./file0" [pid 3854] <... chdir resumed>) = 0 [pid 3854] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3852] <... futex resumed>) = 0 [pid 3852] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3852] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3854] <... futex resumed>) = 1 [pid 3854] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000./strace-static-x86_64: Process 3865 attached [pid 3865] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3865] chdir("./108" [pid 3854] <... open resumed>) = 4 [pid 3865] <... chdir resumed>) = 0 [pid 3865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3865] setpgid(0, 0 [pid 3854] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3865] <... setpgid resumed>) = 0 [pid 3865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3852] <... futex resumed>) = 0 [pid 3865] write(3, "1000", 4 [pid 3852] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3865] <... write resumed>) = 4 [pid 3854] <... futex resumed>) = 1 [pid 3852] <... futex resumed>) = 0 [pid 3865] close(3 [pid 3854] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3852] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3865] <... close resumed>) = 0 [pid 3854] <... openat resumed>) = 5 [pid 3865] symlink("/dev/binderfs", "./binderfs" [pid 3854] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3852] <... futex resumed>) = 0 [pid 3865] <... symlink resumed>) = 0 [pid 3854] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3852] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3865] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3854] <... write resumed>) = 196608 [pid 3853] <... chdir resumed>) = 0 [pid 3852] <... futex resumed>) = 0 [pid 3840] <... write resumed>) = 1048576 [pid 3852] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3854] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3852] <... futex resumed>) = 0 [pid 3852] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 79.508981][ T3854] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/110/bus supports timestamps until 2038 (0x7fffffff) [ 79.525484][ T3853] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/108/bus supports timestamps until 2038 (0x7fffffff) [pid 3852] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3854] <... futex resumed>) = 1 [pid 3854] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3854] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3852] <... futex resumed>) = 0 [pid 3852] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3852] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3854] <... futex resumed>) = 1 [pid 3854] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3865] <... futex resumed>) = 0 [pid 3865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3865] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3865] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3867], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3867 [pid 3865] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3865] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3867 attached [pid 3867] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3867] memfd_create("syzkaller", 0) = 3 [pid 3867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3853] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3840] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3861] <... mount resumed>) = 0 [pid 3853] <... futex resumed>) = 1 [pid 3849] <... futex resumed>) = 0 [pid 3840] <... futex resumed>) = 1 [pid 3861] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3853] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3849] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3840] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3853] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3849] <... futex resumed>) = 0 [pid 3836] <... futex resumed>) = 0 [pid 3840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3836] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3849] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3853] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3840] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3836] <... futex resumed>) = 0 [pid 3853] <... open resumed>) = 4 [pid 3853] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3836] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3853] <... futex resumed>) = 1 [pid 3849] <... futex resumed>) = 0 [pid 3853] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3849] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3853] <... openat resumed>) = 5 [pid 3849] <... futex resumed>) = 0 [pid 3853] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3849] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3853] <... futex resumed>) = 0 [pid 3849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3853] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3849] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3853] <... write resumed>) = 196608 [pid 3849] <... futex resumed>) = 0 [pid 3849] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3853] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3849] <... futex resumed>) = 0 [pid 3849] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3849] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3853] <... futex resumed>) = 1 [pid 3853] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3853] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3849] <... futex resumed>) = 0 [pid 3849] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3849] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3853] <... futex resumed>) = 1 [pid 3853] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3867] <... write resumed>) = 1048576 [pid 3867] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3867] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3861] <... openat resumed>) = 3 [pid 3861] chdir("./bus") = 0 [pid 3861] ioctl(4, LOOP_CLR_FD [pid 3840] <... openat resumed>) = 7 [pid 3840] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3836] <... futex resumed>) = 0 [pid 3836] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3836] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3840] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3840] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3836] <... futex resumed>) = 0 [pid 3836] exit_group(0) = ? [pid 3854] <... open resumed>) = 6 [pid 377] <... umount2 resumed>) = 0 [pid 3854] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3852] <... futex resumed>) = 0 [pid 3854] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3852] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3854] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3852] <... futex resumed>) = 0 [pid 3854] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3852] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3867] <... openat resumed>) = 4 [pid 3853] <... open resumed>) = 6 [pid 377] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3867] ioctl(4, LOOP_SET_FD, 3 [pid 3853] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3853] <... futex resumed>) = 1 [pid 3849] <... futex resumed>) = 0 [pid 377] lstat("./108/bus", [pid 3867] <... ioctl resumed>) = 0 [pid 3861] <... ioctl resumed>) = 0 [pid 3854] <... write resumed>) = 1048576 [pid 3853] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3849] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3867] close(3 [pid 3861] close(4 [pid 3854] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3853] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3849] <... futex resumed>) = 0 [pid 3867] <... close resumed>) = 0 [pid 3861] <... close resumed>) = 0 [pid 3854] <... futex resumed>) = 1 [pid 3853] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3852] <... futex resumed>) = 0 [ 79.562325][ T3861] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/107/bus supports timestamps until 2038 (0x7fffffff) [ 79.576162][ T3840] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 79.590510][ T3840] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 3849] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3867] mkdir("./bus", 0777 [pid 3861] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3854] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3853] <... write resumed>) = 1048576 [pid 3852] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3840] +++ exited with 0 +++ [pid 3836] +++ exited with 0 +++ [pid 3853] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3849] <... futex resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3836, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3853] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3849] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3867] <... mkdir resumed>) = 0 [pid 3861] <... futex resumed>) = 1 [pid 3857] <... futex resumed>) = 0 [pid 3852] <... futex resumed>) = 0 [pid 3849] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3867] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3861] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3857] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3849] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3857] <... futex resumed>) = 0 [pid 3852] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... openat resumed>) = 3 [pid 3861] chdir("./file0" [pid 3857] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 4 [pid 373] fstat(3, [pid 3861] <... chdir resumed>) = 0 [pid 377] fstat(4, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3861] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, [pid 3861] <... futex resumed>) = 1 [pid 3857] <... futex resumed>) = 0 [pid 377] getdents64(4, [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3861] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3857] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3857] <... futex resumed>) = 0 [pid 377] getdents64(4, [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3861] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3857] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] lstat("./108/binderfs", [pid 3861] <... open resumed>) = 4 [pid 377] close(4 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3861] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] unlink("./108/binderfs" [pid 3861] <... futex resumed>) = 1 [pid 3857] <... futex resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 3861] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3857] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3857] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 377] rmdir("./108/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./108") = 0 [pid 377] mkdir("./109", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3869 [pid 3854] <... openat resumed>) = 7 [pid 3854] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3852] <... futex resumed>) = 0 [pid 3854] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3852] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3854] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3852] <... futex resumed>) = 0 [pid 3854] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3852] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3861] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3857] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3854] <... openat resumed>) = 8 [pid 3853] <... openat resumed>) = 7 [pid 3853] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3849] <... futex resumed>) = 0 [pid 3849] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3849] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3853] <... futex resumed>) = 1 [pid 3853] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3853] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3849] <... futex resumed>) = 0 [pid 3849] exit_group(0) = ? [pid 3853] <... futex resumed>) = ? [pid 3853] +++ exited with 0 +++ [pid 3849] +++ exited with 0 +++ ./strace-static-x86_64: Process 3869 attached [pid 3869] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3869] chdir("./109") = 0 [pid 3869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3869] setpgid(0, 0) = 0 [pid 3869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3869] write(3, "1000", 4) = 4 [pid 3869] close(3) = 0 [pid 3869] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3869] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3869] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3869] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3869] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3871], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3871 [pid 3869] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3869] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3871 attached [pid 3871] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3871] memfd_create("syzkaller", 0) = 3 [pid 3871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3849, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 374] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3861] <... openat resumed>) = 5 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, [pid 3861] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3861] <... futex resumed>) = 1 [pid 3857] <... futex resumed>) = 0 [pid 374] getdents64(3, [pid 3857] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3861] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3857] <... futex resumed>) = 0 [pid 3857] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./108/binderfs") = 0 [ 79.631654][ T3853] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 79.635774][ T3854] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 79.661388][ T3854] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 79.673054][ T3853] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 374] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3861] <... write resumed>) = 196608 [pid 3854] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3852] <... futex resumed>) = 0 [pid 3852] exit_group(0) = ? [pid 3854] <... futex resumed>) = ? [pid 3861] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3857] <... futex resumed>) = 0 [pid 3857] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3857] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3861] <... futex resumed>) = 1 [pid 3861] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3861] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3857] <... futex resumed>) = 0 [pid 3857] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3857] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3861] <... futex resumed>) = 1 [pid 3861] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3871] <... write resumed>) = 1048576 [pid 3871] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3871] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3867] <... mount resumed>) = 0 [pid 3867] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3867] chdir("./bus") = 0 [pid 3867] ioctl(4, LOOP_CLR_FD [pid 3871] <... openat resumed>) = 4 [pid 3867] <... ioctl resumed>) = 0 [pid 3861] <... open resumed>) = 6 [pid 3854] +++ exited with 0 +++ [pid 3852] +++ exited with 0 +++ [pid 373] <... umount2 resumed>) = 0 [pid 3861] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3871] ioctl(4, LOOP_SET_FD, 3 [pid 3867] close(4 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3852, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3861] <... futex resumed>) = 1 [pid 3857] <... futex resumed>) = 0 [pid 373] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3857] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] lstat("./108/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3857] <... futex resumed>) = 0 [pid 3857] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3861] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 376] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./108/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./108") = 0 [pid 373] mkdir("./109", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 376] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./110/binderfs") = 0 [pid 376] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3861] <... write resumed>) = 1048576 [pid 3861] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3857] <... futex resumed>) = 0 [pid 3861] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3857] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 79.693919][ T3867] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/108/bus supports timestamps until 2038 (0x7fffffff) [pid 3857] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3861] <... futex resumed>) = 0 [pid 3861] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 [pid 3861] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3857] <... futex resumed>) = 0 [pid 3861] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3857] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3861] <... openat resumed>) = 8 [pid 3857] <... futex resumed>) = 0 [pid 3861] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3857] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3861] <... futex resumed>) = 0 [pid 3857] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3861] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3857] exit_group(0 [pid 3861] <... futex resumed>) = ? [pid 3857] <... exit_group resumed>) = ? [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3871] <... ioctl resumed>) = 0 [pid 3867] <... close resumed>) = 0 [pid 3871] close(3 [pid 3867] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3871] <... close resumed>) = 0 [pid 3867] <... futex resumed>) = 1 [pid 3865] <... futex resumed>) = 0 [pid 3871] mkdir("./bus", 0777 [pid 3867] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3865] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3871] <... mkdir resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./108/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3871] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3865] <... futex resumed>) = 0 [pid 374] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3867] chdir("./file0" [pid 3865] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4 [pid 3867] <... chdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 3867] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] rmdir("./108/bus" [pid 3867] <... futex resumed>) = 1 [pid 3865] <... futex resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 3867] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3865] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3867] <... open resumed>) = 4 [pid 3865] <... futex resumed>) = 0 [pid 374] close(3 [pid 3867] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3865] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... close resumed>) = 0 [pid 3867] <... futex resumed>) = 0 [pid 3865] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] rmdir("./108" [pid 3867] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3865] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... rmdir resumed>) = 0 [pid 3867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3865] <... futex resumed>) = 0 [pid 374] mkdir("./109", 0777 [pid 3867] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3865] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... mkdir resumed>) = 0 [pid 3867] <... openat resumed>) = 5 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3867] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3865] <... futex resumed>) = 0 [pid 3867] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3865] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3865] <... futex resumed>) = 0 [pid 3867] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3865] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3867] <... write resumed>) = 196608 [pid 3867] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3865] <... futex resumed>) = 0 [pid 3867] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3865] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3865] <... futex resumed>) = 0 [pid 3867] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3865] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3867] <... mount resumed>) = 0 [pid 3867] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3865] <... futex resumed>) = 0 [pid 3867] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3865] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3865] <... futex resumed>) = 0 [pid 3867] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [ 79.742258][ T3861] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 79.756509][ T3861] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 3865] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3874 ./strace-static-x86_64: Process 3874 attached [pid 3874] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3874] chdir("./109") = 0 [pid 3874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3874] setpgid(0, 0) = 0 [pid 3874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3874] write(3, "1000", 4) = 4 [pid 3861] +++ exited with 0 +++ [pid 3857] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3857, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3867] <... open resumed>) = 6 [pid 374] <... openat resumed>) = 3 [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 372] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./107/binderfs") = 0 [pid 372] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 3874] close(3) = 0 [pid 3874] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3874] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3874] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3874] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3875], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3875 [pid 3874] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3874] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3875 attached [pid 3875] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3875] memfd_create("syzkaller", 0) = 3 [pid 3875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] close(3 [pid 376] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3867] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./110/bus", [pid 3867] <... futex resumed>) = 1 [pid 3865] <... futex resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3876 [pid 3865] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3867] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3865] <... futex resumed>) = 0 [pid 3865] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3876 attached [pid 3876] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3876] chdir("./109") = 0 [pid 3876] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3876] setpgid(0, 0) = 0 [pid 3876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3876] write(3, "1000", 4) = 4 [pid 3876] close(3) = 0 [pid 3876] symlink("/dev/binderfs", "./binderfs") = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3876] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3876] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3876] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3876] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3878], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3878 [pid 3876] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3876] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 376] <... openat resumed>) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4 [pid 3875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./110/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./110") = 0 [pid 376] mkdir("./111", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 3878 attached [pid 3878] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3867] <... write resumed>) = 1048576 [pid 3867] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3865] <... futex resumed>) = 0 [pid 3867] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3865] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3865] <... futex resumed>) = 0 [pid 3867] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3865] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3878] memfd_create("syzkaller", 0) = 3 [pid 3878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3878] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3878] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3875] <... write resumed>) = 1048576 [pid 3875] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3875] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3867] <... openat resumed>) = 7 [pid 3867] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3865] <... futex resumed>) = 0 [pid 3865] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3865] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3867] <... futex resumed>) = 1 [pid 3867] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3867] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3865] <... futex resumed>) = 0 [pid 3865] exit_group(0) = ? [pid 3867] <... futex resumed>) = ? [pid 3871] <... mount resumed>) = 0 [pid 3871] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3871] chdir("./bus") = 0 [pid 3871] ioctl(4, LOOP_CLR_FD [pid 3878] <... openat resumed>) = 4 [pid 3875] <... openat resumed>) = 4 [pid 376] <... openat resumed>) = 3 [pid 3878] ioctl(4, LOOP_SET_FD, 3 [pid 3875] ioctl(4, LOOP_SET_FD, 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 3878] <... ioctl resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 3878] close(3 [pid 372] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3878] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3878] mkdir("./bus", 0777 [pid 372] lstat("./107/bus", [pid 3878] <... mkdir resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3878] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./107/bus" [pid 3867] +++ exited with 0 +++ [pid 3865] +++ exited with 0 +++ [pid 3871] <... ioctl resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 3871] close(4 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3865, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 372] getdents64(3, [pid 3875] <... ioctl resumed>) = 0 [pid 3875] close(3 [pid 3871] <... close resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3875] <... close resumed>) = 0 [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3882 attached [pid 3875] mkdir("./bus", 0777 [pid 3871] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... restart_syscall resumed>) = 0 [pid 372] close(3 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3882 [pid 3882] set_robust_list(0x55555713c5e0, 24 [pid 3875] <... mkdir resumed>) = 0 [pid 3871] <... futex resumed>) = 1 [pid 3869] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3882] <... set_robust_list resumed>) = 0 [pid 3875] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3871] chdir("./file0" [pid 3869] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] rmdir("./107" [pid 3882] chdir("./111" [pid 3871] <... chdir resumed>) = 0 [pid 3869] <... futex resumed>) = 0 [pid 375] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... rmdir resumed>) = 0 [pid 3882] <... chdir resumed>) = 0 [pid 3871] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3869] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] mkdir("./108", 0777 [pid 3882] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3871] <... futex resumed>) = 0 [pid 3869] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... mkdir resumed>) = 0 [pid 3869] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3871] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 375] <... openat resumed>) = 3 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3869] <... futex resumed>) = 0 [pid 375] fstat(3, [pid 372] <... openat resumed>) = 3 [pid 3869] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] ioctl(3, LOOP_CLR_FD [pid 375] getdents64(3, [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] close(3 [pid 375] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3871] <... open resumed>) = 4 [pid 372] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3882] <... prctl resumed>) = 0 [pid 3871] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./108/binderfs", [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./108/binderfs" [pid 3869] <... futex resumed>) = 0 [pid 3869] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... unlink resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3883 [pid 3869] <... futex resumed>) = 0 [pid 375] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3869] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3871] <... futex resumed>) = 1 [ 79.842551][ T3867] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 79.857451][ T3867] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 79.859258][ T3871] ext4 filesystem being mounted at /root/syzkaller.43WzWH/109/bus supports timestamps until 2038 (0x7fffffff) [pid 3882] setpgid(0, 0 [pid 3871] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 3883 attached [pid 3883] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3883] chdir("./108") = 0 [pid 3883] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3883] setpgid(0, 0) = 0 [pid 3883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3883] write(3, "1000", 4) = 4 [pid 3883] close(3) = 0 [pid 3883] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3883] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3883] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3883] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3883] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3888], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3888 [pid 3883] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3883] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3888 attached [pid 3882] <... setpgid resumed>) = 0 [pid 3875] <... mount resumed>) = 0 [pid 3871] <... openat resumed>) = 5 [pid 3882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3871] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3882] <... openat resumed>) = 3 [pid 3871] <... futex resumed>) = 1 [pid 3869] <... futex resumed>) = 0 [pid 3882] write(3, "1000", 4 [pid 3871] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3869] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3882] <... write resumed>) = 4 [pid 3871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3869] <... futex resumed>) = 0 [pid 3882] close(3 [pid 3871] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3869] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3882] <... close resumed>) = 0 [pid 3871] <... write resumed>) = 196608 [pid 3882] symlink("/dev/binderfs", "./binderfs" [pid 3871] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3882] <... symlink resumed>) = 0 [pid 3871] <... futex resumed>) = 1 [pid 3869] <... futex resumed>) = 0 [pid 3882] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3871] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3869] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3882] <... futex resumed>) = 0 [pid 3871] <... mount resumed>) = 0 [pid 3869] <... futex resumed>) = 0 [pid 3882] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3875] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3871] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3869] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3882] <... mmap resumed>) = 0x7f64ff044000 [pid 3875] <... openat resumed>) = 3 [pid 3871] <... futex resumed>) = 0 [pid 3869] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3882] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3878] <... mount resumed>) = 0 [pid 3875] chdir("./bus" [pid 3871] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3869] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3882] <... mprotect resumed>) = 0 [pid 3875] <... chdir resumed>) = 0 [pid 3869] <... futex resumed>) = 0 [pid 3882] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3875] ioctl(4, LOOP_CLR_FD [pid 3869] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3875] <... ioctl resumed>) = 0 [pid 3882] <... clone resumed>, parent_tid=[3889], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3889 [pid 3875] close(4 [pid 3882] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3875] <... close resumed>) = 0 [pid 3882] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3875] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = 0 [pid 3875] <... futex resumed>) = 1 [pid 3874] <... futex resumed>) = 0 [pid 3875] chdir("./file0" [pid 3874] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3875] <... chdir resumed>) = 0 [pid 3874] <... futex resumed>) = 0 [pid 3875] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3874] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3875] <... futex resumed>) = 0 [pid 3874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3875] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3874] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3875] <... open resumed>) = 4 [pid 3874] <... futex resumed>) = 0 [pid 3875] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3874] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3875] <... futex resumed>) = 0 [pid 3874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3875] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3874] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3875] <... openat resumed>) = 5 [pid 3874] <... futex resumed>) = 0 [pid 3875] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3874] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3888] set_robust_list(0x7f64ff0649e0, 24 [pid 3875] <... futex resumed>) = 0 [pid 3874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3888] <... set_robust_list resumed>) = 0 [pid 3875] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3874] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3888] memfd_create("syzkaller", 0 [pid 3875] <... write resumed>) = 196608 [pid 3874] <... futex resumed>) = 0 [pid 3888] <... memfd_create resumed>) = 3 [pid 3874] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3875] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3874] <... futex resumed>) = 0 [pid 3874] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3875] <... futex resumed>) = 1 [pid 3874] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3875] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3871] <... open resumed>) = 6 [pid 375] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3875] <... mount resumed>) = 0 [pid 3871] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3875] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3878] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3875] <... futex resumed>) = 1 [pid 3874] <... futex resumed>) = 0 [pid 3871] <... futex resumed>) = 1 [pid 3869] <... futex resumed>) = 0 [pid 375] lstat("./108/bus", [pid 3878] <... openat resumed>) = 3 [pid 3875] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3874] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3871] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3869] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3878] chdir("./bus" [pid 3875] <... open resumed>) = 6 [pid 3874] <... futex resumed>) = 0 [pid 3871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3869] <... futex resumed>) = 0 [pid 375] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3878] <... chdir resumed>) = 0 [pid 3875] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3874] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3871] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3869] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3878] ioctl(4, LOOP_CLR_FD [pid 3875] <... futex resumed>) = 0 [pid 3874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 79.908285][ T3875] ext4 filesystem being mounted at /root/syzkaller.k3ECep/109/bus supports timestamps until 2038 (0x7fffffff) [ 79.911932][ T3878] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/109/bus supports timestamps until 2038 (0x7fffffff) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3875] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3874] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3889 attached [pid 3878] <... ioctl resumed>) = 0 [pid 3874] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3889] set_robust_list(0x7f64ff0649e0, 24 [pid 3878] close(4 [pid 3874] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... openat resumed>) = 4 [pid 3889] <... set_robust_list resumed>) = 0 [pid 3878] <... close resumed>) = 0 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 3889] memfd_create("syzkaller", 0 [pid 3888] <... write resumed>) = 1048576 [pid 3878] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3889] <... memfd_create resumed>) = 3 [pid 3888] munmap(0x7f64f6c44000, 1048576 [pid 375] getdents64(4, [pid 3889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3888] <... munmap resumed>) = 0 [pid 3889] <... mmap resumed>) = 0x7f64f6c44000 [pid 3889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3888] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3878] <... futex resumed>) = 1 [pid 3876] <... futex resumed>) = 0 [pid 3875] <... write resumed>) = 1048576 [pid 3871] <... write resumed>) = 1048576 [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3889] <... write resumed>) = 1048576 [pid 3888] <... openat resumed>) = 4 [pid 3878] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3876] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3871] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(4 [pid 3889] munmap(0x7f64f6c44000, 1048576 [pid 3888] ioctl(4, LOOP_SET_FD, 3 [pid 3878] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3876] <... futex resumed>) = 0 [pid 3875] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3889] <... munmap resumed>) = 0 [pid 3888] <... ioctl resumed>) = 0 [pid 3875] <... futex resumed>) = 1 [pid 3874] <... futex resumed>) = 0 [pid 3871] <... futex resumed>) = 1 [pid 3869] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 3889] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3888] close(3 [pid 3878] chdir("./file0" [pid 3876] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3875] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3874] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3889] <... openat resumed>) = 4 [pid 3888] <... close resumed>) = 0 [pid 3878] <... chdir resumed>) = 0 [pid 3874] <... futex resumed>) = 0 [pid 3871] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3869] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./108/bus" [pid 3889] ioctl(4, LOOP_SET_FD, 3 [pid 3888] mkdir("./bus", 0777 [pid 3878] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3874] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3888] <... mkdir resumed>) = 0 [pid 3888] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3875] <... openat resumed>) = 7 [pid 3875] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3874] <... futex resumed>) = 0 [pid 3874] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3874] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3875] <... futex resumed>) = 1 [pid 3875] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3875] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3874] <... futex resumed>) = 0 [pid 3874] exit_group(0) = ? [pid 3875] <... futex resumed>) = ? [pid 3869] <... futex resumed>) = 0 [pid 3869] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... rmdir resumed>) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./108") = 0 [pid 375] mkdir("./109", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3889] <... ioctl resumed>) = 0 [pid 3878] <... futex resumed>) = 1 [pid 3876] <... futex resumed>) = 0 [pid 3878] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3889] close(3 [pid 3878] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3876] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3875] +++ exited with 0 +++ [pid 3874] +++ exited with 0 +++ [pid 3871] <... openat resumed>) = 7 [pid 375] <... openat resumed>) = 3 [pid 3889] <... close resumed>) = 0 [pid 3878] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3876] <... futex resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3874, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3889] mkdir("./bus", 0777 [pid 3876] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3871] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3889] <... mkdir resumed>) = 0 [pid 3889] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] close(3 [pid 3878] <... open resumed>) = 4 [pid 3871] <... futex resumed>) = 1 [pid 375] <... close resumed>) = 0 [pid 373] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3869] <... futex resumed>) = 0 [pid 3878] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3878] <... futex resumed>) = 1 [pid 3876] <... futex resumed>) = 0 [pid 373] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3878] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3876] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3894 [pid 373] <... openat resumed>) = 3 [pid 3878] <... openat resumed>) = 5 [pid 3876] <... futex resumed>) = 0 [ 79.998579][ T3875] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 80.006429][ T3871] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 80.013306][ T3875] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 80.026482][ T3871] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 373] fstat(3, [pid 3878] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3876] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3869] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3894 attached [pid 3878] <... futex resumed>) = 0 [pid 3876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3871] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3869] <... futex resumed>) = 0 [pid 373] getdents64(3, [pid 3878] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3869] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3894] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3894] chdir("./109") = 0 [pid 3894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3894] setpgid(0, 0 [pid 3871] <... openat resumed>) = 8 [pid 3894] <... setpgid resumed>) = 0 [pid 3894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3871] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3869] <... futex resumed>) = 0 [pid 3869] exit_group(0) = ? [pid 3871] <... futex resumed>) = ? [pid 3876] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3878] <... futex resumed>) = 0 [pid 3876] <... futex resumed>) = 1 [pid 373] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3878] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3876] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./109/binderfs") = 0 [pid 373] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3878] <... write resumed>) = 196608 [pid 3894] <... openat resumed>) = 3 [pid 3894] write(3, "1000", 4) = 4 [pid 3894] close(3) = 0 [pid 3894] symlink("/dev/binderfs", "./binderfs" [pid 3878] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3876] <... futex resumed>) = 0 [pid 3878] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3876] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3878] <... mount resumed>) = 0 [pid 3878] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3876] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3878] <... futex resumed>) = 0 [pid 3876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3876] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3876] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3894] <... symlink resumed>) = 0 [pid 3878] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3894] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3894] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3894] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3896], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3896 [pid 3888] <... mount resumed>) = 0 [pid 3894] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3894] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3896 attached [pid 3896] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3896] memfd_create("syzkaller", 0 [pid 3888] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3896] <... memfd_create resumed>) = 3 [pid 3896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3896] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3896] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3888] chdir("./bus") = 0 [pid 3888] ioctl(4, LOOP_CLR_FD [pid 3889] <... mount resumed>) = 0 [pid 3889] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3889] chdir("./bus") = 0 [pid 3889] ioctl(4, LOOP_CLR_FD [pid 3896] <... openat resumed>) = 4 [pid 3889] <... ioctl resumed>) = 0 [pid 3888] <... ioctl resumed>) = 0 [pid 3878] <... open resumed>) = 6 [pid 3871] +++ exited with 0 +++ [pid 3869] +++ exited with 0 +++ [pid 373] <... umount2 resumed>) = 0 [pid 3896] ioctl(4, LOOP_SET_FD, 3 [pid 3889] close(4 [pid 3888] close(4 [pid 3878] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3876] <... futex resumed>) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3869, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 373] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3878] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3876] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] lstat("./109/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./109/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./109") = 0 [pid 373] mkdir("./110", 0777) = 0 [pid 3876] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 3888] <... close resumed>) = 0 [pid 3876] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3888] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 3 [pid 377] fstat(3, [pid 3888] <... futex resumed>) = 1 [pid 3883] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3888] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3883] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3883] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3899 [pid 3888] chdir("./file0" [pid 3883] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3888] <... chdir resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3888] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3889] <... close resumed>) = 0 [pid 3888] <... futex resumed>) = 1 [ 80.051630][ T3888] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/108/bus supports timestamps until 2038 (0x7fffffff) [ 80.075888][ T3889] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/111/bus supports timestamps until 2038 (0x7fffffff) [pid 3883] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3896] <... ioctl resumed>) = 0 [pid 3896] close(3 [pid 3889] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3888] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3883] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./109/binderfs", [pid 3888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3883] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3896] <... close resumed>) = 0 [pid 3889] <... futex resumed>) = 1 [pid 3888] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3883] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3882] <... futex resumed>) = 0 [pid 377] unlink("./109/binderfs" [pid 3888] <... open resumed>) = 4 [pid 3888] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3882] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3896] mkdir("./bus", 0777 [pid 3889] chdir("./file0" [pid 3888] <... futex resumed>) = 1 [pid 3883] <... futex resumed>) = 0 [pid 3878] <... write resumed>) = 1048576 [pid 377] <... unlink resumed>) = 0 [pid 3888] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3883] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3878] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3883] <... futex resumed>) = 0 [pid 3878] <... futex resumed>) = 1 [pid 3876] <... futex resumed>) = 0 [pid 3888] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3883] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3878] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3876] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3896] <... mkdir resumed>) = 0 [pid 3889] <... chdir resumed>) = 0 [pid 3888] <... openat resumed>) = 5 [pid 3882] <... futex resumed>) = 0 [pid 3876] <... futex resumed>) = 0 [pid 377] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3896] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3889] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3882] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3889] <... futex resumed>) = 0 [pid 3882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3876] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3889] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3882] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3882] <... futex resumed>) = 0 [pid 3889] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3882] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3889] <... open resumed>) = 4 [pid 3888] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3889] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3882] <... futex resumed>) = 0 [pid 3889] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3882] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3882] <... futex resumed>) = 0 [pid 3889] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3882] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3889] <... openat resumed>) = 5 [pid 3889] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3882] <... futex resumed>) = 0 [pid 3889] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3882] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3882] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3899 attached [pid 3889] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3882] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3899] set_robust_list(0x55555713c5e0, 24 [pid 3889] <... write resumed>) = 196608 [pid 3888] <... futex resumed>) = 1 [pid 3883] <... futex resumed>) = 0 [pid 3899] <... set_robust_list resumed>) = 0 [pid 3889] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3899] chdir("./110" [pid 3889] <... futex resumed>) = 1 [pid 3882] <... futex resumed>) = 0 [pid 3899] <... chdir resumed>) = 0 [pid 3889] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3882] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3899] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3889] <... mount resumed>) = 0 [pid 3882] <... futex resumed>) = 0 [pid 3899] <... prctl resumed>) = 0 [pid 3889] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3882] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3899] setpgid(0, 0 [pid 3889] <... futex resumed>) = 0 [pid 3882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3899] <... setpgid resumed>) = 0 [pid 3889] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3882] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3882] <... futex resumed>) = 0 [pid 3899] <... openat resumed>) = 3 [pid 3882] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3899] write(3, "1000", 4) = 4 [pid 3899] close(3) = 0 [pid 3899] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3899] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3899] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3899] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3900], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3900 [pid 3899] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3899] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3888] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3883] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3888] <... futex resumed>) = 0 [pid 3883] <... futex resumed>) = 1 [pid 3888] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3883] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3888] <... write resumed>) = 196608 [pid 3888] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3883] <... futex resumed>) = 0 [pid 3888] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3883] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3900 attached [pid 3888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3883] <... futex resumed>) = 0 [pid 3900] set_robust_list(0x7f64ff0649e0, 24 [pid 3888] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3883] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3878] <... openat resumed>) = 7 [pid 3900] <... set_robust_list resumed>) = 0 [pid 3888] <... mount resumed>) = 0 [pid 3900] memfd_create("syzkaller", 0 [pid 3888] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3878] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3900] <... memfd_create resumed>) = 3 [pid 3888] <... futex resumed>) = 1 [pid 3883] <... futex resumed>) = 0 [pid 3900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3888] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3883] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3900] <... mmap resumed>) = 0x7f64f6c44000 [pid 3883] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3878] <... futex resumed>) = 1 [pid 3876] <... futex resumed>) = 0 [pid 3878] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3876] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3878] <... futex resumed>) = 0 [pid 3876] <... futex resumed>) = 1 [pid 3878] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3876] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3878] <... openat resumed>) = 8 [pid 3878] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3876] <... futex resumed>) = 0 [pid 3878] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3876] exit_group(0 [pid 3878] <... futex resumed>) = ? [pid 3876] <... exit_group resumed>) = ? [pid 3878] +++ exited with 0 +++ [pid 3900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3889] <... open resumed>) = 6 [pid 3888] <... open resumed>) = 6 [pid 3876] +++ exited with 0 +++ [pid 377] <... umount2 resumed>) = 0 [pid 3889] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3888] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3889] <... futex resumed>) = 1 [pid 3888] <... futex resumed>) = 1 [pid 3883] <... futex resumed>) = 0 [pid 3882] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3889] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3888] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3883] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3882] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./109/bus", [pid 3889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3883] <... futex resumed>) = 0 [pid 3882] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3889] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3888] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3883] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3882] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3900] munmap(0x7f64f6c44000, 1048576 [pid 3896] <... mount resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3876, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 374] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./109/binderfs") = 0 [pid 374] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3900] <... munmap resumed>) = 0 [pid 3900] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 3900] ioctl(4, LOOP_SET_FD, 3 [pid 3896] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3896] chdir("./bus") = 0 [pid 3896] ioctl(4, LOOP_CLR_FD [pid 377] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./109/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./109") = 0 [pid 377] mkdir("./110", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3900] <... ioctl resumed>) = 0 [pid 3896] <... ioctl resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 3900] close(3 [pid 3896] close(4 [pid 377] ioctl(3, LOOP_CLR_FD [pid 3900] <... close resumed>) = 0 [pid 3896] <... close resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3900] mkdir("./bus", 0777 [pid 3896] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 3900] <... mkdir resumed>) = 0 [pid 3896] <... futex resumed>) = 1 [pid 3894] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 3900] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3896] chdir("./file0" [pid 3894] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3896] <... chdir resumed>) = 0 [pid 3894] <... futex resumed>) = 0 [pid 3896] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3894] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3904 [pid 3896] <... futex resumed>) = 0 [pid 3894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3896] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3894] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3896] <... open resumed>) = 4 [pid 3894] <... futex resumed>) = 0 [pid 3896] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3894] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3896] <... futex resumed>) = 0 [pid 3894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3896] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3894] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3896] <... openat resumed>) = 5 [pid 3894] <... futex resumed>) = 0 [pid 3896] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3894] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3896] <... futex resumed>) = 0 [pid 3894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3896] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [ 80.117587][ T3878] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 80.136974][ T3878] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 80.153908][ T3896] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/109/bus supports timestamps until 2038 (0x7fffffff) [pid 3894] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3896] <... write resumed>) = 196608 [pid 3894] <... futex resumed>) = 0 [pid 3894] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3896] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3894] <... futex resumed>) = 0 [pid 3896] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3894] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3896] <... mount resumed>) = 0 [pid 3894] <... futex resumed>) = 0 [pid 3896] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3894] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3896] <... futex resumed>) = 0 [pid 3894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3896] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3894] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3894] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3904 attached [pid 3904] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3904] chdir("./110") = 0 [pid 3904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3904] setpgid(0, 0) = 0 [pid 3904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3896] <... open resumed>) = 6 [pid 3896] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3904] <... openat resumed>) = 3 [pid 3904] write(3, "1000", 4) = 4 [pid 3896] <... futex resumed>) = 1 [pid 3894] <... futex resumed>) = 0 [pid 3896] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3894] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3904] close(3) = 0 [pid 3904] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3894] <... futex resumed>) = 0 [pid 3894] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3888] <... write resumed>) = 1048576 [pid 3888] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3883] <... futex resumed>) = 0 [pid 3883] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3883] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3888] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3904] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3889] <... write resumed>) = 1048576 [pid 374] <... umount2 resumed>) = 0 [pid 3889] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3889] <... futex resumed>) = 1 [pid 3882] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3889] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3882] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] lstat("./109/bus", [pid 3889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3882] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3889] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3882] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3904] <... futex resumed>) = 0 [pid 3904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3904] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3904] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3907], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3907 [pid 3904] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3904] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3907 attached [pid 3907] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3907] memfd_create("syzkaller", 0) = 3 [pid 3907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [ 80.215366][ T3888] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 80.224860][ T3889] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 80.244043][ T3888] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 80.244481][ T3900] ext4 filesystem being mounted at /root/syzkaller.k3ECep/110/bus supports timestamps until 2038 (0x7fffffff) [pid 3907] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3888] <... openat resumed>) = 7 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3907] <... write resumed>) = 1048576 [pid 3907] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3907] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 3907] ioctl(4, LOOP_SET_FD, 3 [pid 3900] <... mount resumed>) = 0 [pid 3900] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3900] chdir("./bus") = 0 [pid 3900] ioctl(4, LOOP_CLR_FD [pid 3894] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3894] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3894] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3894] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3908], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3908 [pid 3894] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3894] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3883] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3883] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3883] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3883] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3888] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3883] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3883] <... clone resumed>, parent_tid=[3909], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3909 [pid 3888] <... futex resumed>) = 0 [pid 374] <... openat resumed>) = 4 [pid 3896] <... write resumed>) = 1048576 [pid 3888] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] fstat(4, ./strace-static-x86_64: Process 3909 attached ./strace-static-x86_64: Process 3908 attached [pid 3896] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3909] set_robust_list(0x7f64f6d439e0, 24 [pid 3896] <... futex resumed>) = 0 [pid 374] getdents64(4, [pid 3896] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3909] <... set_robust_list resumed>) = 0 [pid 3908] set_robust_list(0x7f64f6d439e0, 24 [pid 3907] <... ioctl resumed>) = 0 [pid 3889] <... openat resumed>) = 7 [pid 3883] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3907] close(3 [pid 3883] <... futex resumed>) = 0 [pid 3907] <... close resumed>) = 0 [pid 3883] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3907] mkdir("./bus", 0777) = 0 [pid 3907] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 374] getdents64(4, [pid 3909] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4 [pid 3909] <... openat resumed>) = 8 [pid 374] <... close resumed>) = 0 [pid 3909] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] rmdir("./109/bus" [pid 3909] <... futex resumed>) = 1 [pid 3883] <... futex resumed>) = 0 [pid 3883] exit_group(0 [pid 3888] <... futex resumed>) = ? [pid 3883] <... exit_group resumed>) = ? [pid 3888] +++ exited with 0 +++ [pid 374] <... rmdir resumed>) = 0 [pid 3900] <... ioctl resumed>) = 0 [pid 374] getdents64(3, [pid 3900] close(4 [pid 3909] +++ exited with 0 +++ [pid 3908] <... set_robust_list resumed>) = 0 [pid 3883] +++ exited with 0 +++ [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3883, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 374] close(3 [pid 3908] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 372] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] <... close resumed>) = 0 [pid 372] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./108/binderfs") = 0 [pid 372] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3900] <... close resumed>) = 0 [pid 3889] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3900] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3882] <... futex resumed>) = 0 [pid 3882] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3882] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3899] <... futex resumed>) = 0 [pid 3899] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3899] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3889] <... futex resumed>) = 1 [pid 3900] <... futex resumed>) = 1 [pid 3889] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3900] chdir("./file0" [pid 3889] <... openat resumed>) = 8 [pid 3889] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3882] <... futex resumed>) = 0 [pid 3882] exit_group(0) = ? [pid 3900] <... chdir resumed>) = 0 [pid 3889] <... futex resumed>) = ? [pid 3889] +++ exited with 0 +++ [pid 3882] +++ exited with 0 +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3882, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 376] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./111/binderfs") = 0 [pid 376] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3900] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3899] <... futex resumed>) = 0 [pid 3899] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3900] <... futex resumed>) = 1 [pid 3899] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3900] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3900] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3899] <... futex resumed>) = 0 [pid 3899] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3899] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3900] <... futex resumed>) = 1 [pid 3900] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3900] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3899] <... futex resumed>) = 0 [pid 3899] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3900] <... futex resumed>) = 1 [pid 3899] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3900] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 3900] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3899] <... futex resumed>) = 0 [pid 3899] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3899] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3900] <... futex resumed>) = 1 [pid 3900] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3900] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3899] <... futex resumed>) = 0 [pid 3899] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3899] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3900] <... futex resumed>) = 1 [pid 3900] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3900] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3899] <... futex resumed>) = 0 [pid 3899] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3899] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3900] <... futex resumed>) = 1 [pid 3900] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 374] rmdir("./109") = 0 [pid 374] mkdir("./110", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3912 [pid 3908] <... openat resumed>) = 7 [pid 3908] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3908] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3912 attached [pid 3912] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3912] chdir("./110") = 0 [pid 3912] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3894] <... futex resumed>) = 0 [pid 3900] <... write resumed>) = 1048576 [pid 3900] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3899] <... futex resumed>) = 0 [pid 3894] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3899] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3894] <... futex resumed>) = 1 [ 80.254881][ T3889] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 80.289631][ T3908] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 80.304593][ T3908] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 3900] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3899] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3896] <... futex resumed>) = 0 [pid 3894] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3912] setpgid(0, 0 [pid 3896] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3912] <... setpgid resumed>) = 0 [pid 3912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3912] write(3, "1000", 4) = 4 [pid 3912] close(3) = 0 [pid 3912] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3912] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3912] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3912] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3912] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3914], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3914 [pid 3912] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3912] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3914 attached [pid 3914] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3914] memfd_create("syzkaller", 0) = 3 [pid 3914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3896] <... openat resumed>) = 8 [pid 3914] <... write resumed>) = 1048576 [pid 3914] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3914] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3907] <... mount resumed>) = 0 [pid 3896] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3896] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3907] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3907] chdir("./bus") = 0 [pid 3907] ioctl(4, LOOP_CLR_FD [pid 3894] <... futex resumed>) = 0 [pid 3894] exit_group(0 [pid 3908] <... futex resumed>) = ? [pid 3896] <... futex resumed>) = ? [pid 3894] <... exit_group resumed>) = ? [pid 3908] +++ exited with 0 +++ [pid 3896] +++ exited with 0 +++ [pid 3900] <... openat resumed>) = 7 [pid 3900] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3899] <... futex resumed>) = 0 [pid 3899] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3899] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3900] <... futex resumed>) = 1 [pid 3900] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3900] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3899] <... futex resumed>) = 0 [pid 3899] exit_group(0) = ? [pid 3900] <... futex resumed>) = ? [pid 3914] <... openat resumed>) = 4 [pid 3894] +++ exited with 0 +++ [pid 372] <... umount2 resumed>) = 0 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3894, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3914] ioctl(4, LOOP_SET_FD, 3 [pid 3907] <... ioctl resumed>) = 0 [pid 375] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3907] close(4 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./109/binderfs") = 0 [pid 372] lstat("./108/bus", [pid 375] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./108/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./108") = 0 [pid 372] mkdir("./109", 0777) = 0 [ 80.323444][ T3900] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 80.338391][ T3907] ext4 filesystem being mounted at /root/syzkaller.43WzWH/110/bus supports timestamps until 2038 (0x7fffffff) [ 80.342638][ T3900] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3900] +++ exited with 0 +++ [pid 3899] +++ exited with 0 +++ [pid 3914] <... ioctl resumed>) = 0 [pid 3907] <... close resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 3907] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3899, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 372] ioctl(3, LOOP_CLR_FD [pid 3914] close(3 [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 3904] <... futex resumed>) = 0 [pid 3904] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3907] <... futex resumed>) = 1 [pid 3904] <... futex resumed>) = 0 [pid 3914] <... close resumed>) = 0 [pid 3907] chdir("./file0" [pid 3904] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... restart_syscall resumed>) = 0 [pid 3907] <... chdir resumed>) = 0 [pid 3914] mkdir("./bus", 0777 [pid 3907] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3914] <... mkdir resumed>) = 0 [pid 3907] <... futex resumed>) = 1 [pid 3904] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3904] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3904] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3907] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3914] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] <... openat resumed>) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, [pid 3907] <... open resumed>) = 4 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3907] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3904] <... futex resumed>) = 0 [pid 373] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3904] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3904] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3907] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./110/binderfs", [pid 3907] <... openat resumed>) = 5 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3907] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] unlink("./110/binderfs" [pid 3907] <... futex resumed>) = 1 [pid 3904] <... futex resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 3904] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3904] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3907] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 373] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3907] <... write resumed>) = 196608 [pid 3907] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3904] <... futex resumed>) = 0 [pid 3904] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3907] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3904] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3907] <... mount resumed>) = 0 [pid 3907] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3904] <... futex resumed>) = 0 [pid 3907] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3904] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3907] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3904] <... futex resumed>) = 0 [pid 3907] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3904] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./111/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./111/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./111") = 0 [pid 376] mkdir("./112", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3904] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3904] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3904] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3904] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3916], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3916 ./strace-static-x86_64: Process 3916 attached [pid 3904] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3916] set_robust_list(0x7f64f6d439e0, 24 [pid 3904] <... futex resumed>) = 0 [pid 3916] <... set_robust_list resumed>) = 0 [pid 3904] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3916] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 3916] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3904] <... futex resumed>) = 0 [pid 3916] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3904] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3916] <... openat resumed>) = 7 [pid 3904] <... futex resumed>) = 0 [pid 3904] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3916] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3904] <... futex resumed>) = 0 [pid 3904] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3904] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3916] <... futex resumed>) = 1 [pid 3916] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3916] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3904] <... futex resumed>) = 0 [pid 3916] <... futex resumed>) = 1 [pid 3916] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3907] <... open resumed>) = 6 [pid 376] <... openat resumed>) = 3 [pid 375] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 372] close(3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 375] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] close(3 [pid 375] lstat("./109/bus", [pid 373] lstat("./110/bus", [pid 376] <... close resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3917 [pid 375] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... openat resumed>) = 4 [pid 373] <... openat resumed>) = 4 [pid 375] fstat(4, [pid 373] fstat(4, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, [pid 3907] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(4, [pid 372] <... close resumed>) = 0 [pid 3907] <... futex resumed>) = 0 [pid 3904] exit_group(0 [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3907] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] getdents64(4, [pid 373] getdents64(4, [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4 [pid 373] close(4 [pid 375] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 375] rmdir("./109/bus" [pid 373] rmdir("./110/bus" [pid 3916] <... futex resumed>) = ? [pid 3907] <... futex resumed>) = ? [pid 3904] <... exit_group resumed>) = ? [pid 375] <... rmdir resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 3916] +++ exited with 0 +++ [pid 3907] +++ exited with 0 +++ [pid 375] getdents64(3, [pid 373] getdents64(3, [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3 [pid 373] close(3 [pid 375] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 375] rmdir("./109" [pid 373] rmdir("./110" [pid 3904] +++ exited with 0 +++ [pid 375] <... rmdir resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3918 [pid 375] mkdir("./110", 0777 [pid 373] mkdir("./111", 0777 [pid 375] <... mkdir resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 375] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] ioctl(3, LOOP_CLR_FD [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] close(3 [pid 373] close(3 [pid 375] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3904, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3920 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3921 ./strace-static-x86_64: Process 3918 attached [pid 3918] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3918] chdir("./109") = 0 [pid 3918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3918] setpgid(0, 0) = 0 [pid 3918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3918] write(3, "1000", 4) = 4 [pid 3918] close(3) = 0 [pid 3918] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3918] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3918] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3918] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3918] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3922], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3922 [pid 3918] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3918] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3920 attached [pid 377] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 3921 attached ./strace-static-x86_64: Process 3917 attached [pid 3920] set_robust_list(0x55555713c5e0, 24 [pid 377] <... openat resumed>) = 3 [pid 3921] set_robust_list(0x55555713c5e0, 24 [pid 3920] <... set_robust_list resumed>) = 0 [pid 3917] set_robust_list(0x55555713c5e0, 24 [pid 377] fstat(3, [pid 3921] <... set_robust_list resumed>) = 0 [pid 3920] chdir("./110" [pid 3917] <... set_robust_list resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3921] chdir("./111" [pid 3920] <... chdir resumed>) = 0 [pid 3917] chdir("./112" [pid 377] getdents64(3, [pid 3921] <... chdir resumed>) = 0 [pid 3920] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3917] <... chdir resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3921] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3920] <... prctl resumed>) = 0 [pid 3917] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 377] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3921] <... prctl resumed>) = 0 [pid 3920] setpgid(0, 0 [pid 3917] <... prctl resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3921] setpgid(0, 0 [pid 3920] <... setpgid resumed>) = 0 [pid 3917] setpgid(0, 0 [pid 377] lstat("./110/binderfs", [pid 3921] <... setpgid resumed>) = 0 [pid 3920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3917] <... setpgid resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3920] <... openat resumed>) = 3 [pid 3917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] unlink("./110/binderfs"./strace-static-x86_64: Process 3922 attached [pid 3921] <... openat resumed>) = 3 [pid 3920] write(3, "1000", 4 [pid 3917] <... openat resumed>) = 3 [pid 377] <... unlink resumed>) = 0 [pid 3922] set_robust_list(0x7f64ff0649e0, 24 [pid 3921] write(3, "1000", 4 [pid 3920] <... write resumed>) = 4 [pid 3917] write(3, "1000", 4 [pid 3922] <... set_robust_list resumed>) = 0 [pid 3921] <... write resumed>) = 4 [pid 3920] close(3 [pid 3917] <... write resumed>) = 4 [pid 3922] memfd_create("syzkaller", 0 [pid 3921] close(3 [pid 3920] <... close resumed>) = 0 [pid 3917] close(3 [pid 3922] <... memfd_create resumed>) = 3 [pid 3921] <... close resumed>) = 0 [pid 3920] symlink("/dev/binderfs", "./binderfs" [pid 3917] <... close resumed>) = 0 [pid 3922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3921] symlink("/dev/binderfs", "./binderfs" [pid 3920] <... symlink resumed>) = 0 [pid 3917] symlink("/dev/binderfs", "./binderfs" [pid 3922] <... mmap resumed>) = 0x7f64f6c44000 [pid 3921] <... symlink resumed>) = 0 [pid 3920] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3917] <... symlink resumed>) = 0 [pid 3922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3921] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3920] <... futex resumed>) = 0 [pid 3917] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3921] <... futex resumed>) = 0 [pid 3920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3917] <... futex resumed>) = 0 [pid 3921] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3920] <... mmap resumed>) = 0x7f64ff044000 [pid 3917] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3921] <... mmap resumed>) = 0x7f64ff044000 [pid 3920] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3917] <... mmap resumed>) = 0x7f64ff044000 [pid 3921] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3920] <... mprotect resumed>) = 0 [pid 3917] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3921] <... mprotect resumed>) = 0 [pid 3920] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3917] <... mprotect resumed>) = 0 [pid 3921] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3917] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3920] <... clone resumed>, parent_tid=[3924], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3924 [pid 3921] <... clone resumed>, parent_tid=[3925], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3925 [pid 3920] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3917] <... clone resumed>, parent_tid=[3926], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3926 [pid 3921] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3920] <... futex resumed>) = 0 [pid 3917] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3921] <... futex resumed>) = 0 [pid 3920] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3917] <... futex resumed>) = 0 [pid 3921] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3917] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3922] <... write resumed>) = 1048576 [pid 3922] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3922] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3922] ioctl(4, LOOP_SET_FD, 3 [pid 377] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 3926 attached ./strace-static-x86_64: Process 3925 attached ./strace-static-x86_64: Process 3924 attached [pid 3926] set_robust_list(0x7f64ff0649e0, 24 [pid 3925] set_robust_list(0x7f64ff0649e0, 24 [pid 3924] set_robust_list(0x7f64ff0649e0, 24 [pid 3914] <... mount resumed>) = 0 [pid 3926] <... set_robust_list resumed>) = 0 [pid 3925] <... set_robust_list resumed>) = 0 [pid 3924] <... set_robust_list resumed>) = 0 [pid 3922] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 3926] memfd_create("syzkaller", 0 [pid 3925] memfd_create("syzkaller", 0 [pid 3924] memfd_create("syzkaller", 0) = 3 [pid 3926] <... memfd_create resumed>) = 3 [pid 3925] <... memfd_create resumed>) = 3 [pid 3926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3926] <... mmap resumed>) = 0x7f64f6c44000 [pid 3924] <... mmap resumed>) = 0x7f64f6c44000 [pid 3925] <... mmap resumed>) = 0x7f64f6c44000 [pid 3924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 377] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./110/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3922] close(3 [pid 3914] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./110/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./110") = 0 [pid 377] mkdir("./111", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3922] <... close resumed>) = 0 [pid 3914] <... openat resumed>) = 3 [pid 3922] mkdir("./bus", 0777 [pid 3914] chdir("./bus" [pid 3922] <... mkdir resumed>) = 0 [pid 3914] <... chdir resumed>) = 0 [pid 3926] <... write resumed>) = 1048576 [pid 3925] <... write resumed>) = 1048576 [pid 3924] <... write resumed>) = 1048576 [pid 3922] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3914] ioctl(4, LOOP_CLR_FD [pid 3926] munmap(0x7f64f6c44000, 1048576 [pid 3924] munmap(0x7f64f6c44000, 1048576 [pid 3914] <... ioctl resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 3926] <... munmap resumed>) = 0 [pid 3914] close(4 [pid 377] ioctl(3, LOOP_CLR_FD [pid 3926] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3925] munmap(0x7f64f6c44000, 1048576 [pid 3924] <... munmap resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 3926] <... openat resumed>) = 4 [pid 3925] <... munmap resumed>) = 0 [pid 3924] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3914] <... close resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 3926] ioctl(4, LOOP_SET_FD, 3 [pid 3925] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3924] <... openat resumed>) = 4 [pid 3914] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3926] <... ioctl resumed>) = 0 [pid 3925] <... openat resumed>) = 4 [pid 3924] ioctl(4, LOOP_SET_FD, 3 [pid 3914] <... futex resumed>) = 1 [pid 3912] <... futex resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3926] close(3 [pid 3925] ioctl(4, LOOP_SET_FD, 3 [pid 3914] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3912] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3926] <... close resumed>) = 0 [pid 3914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3912] <... futex resumed>) = 0 [pid 3926] mkdir("./bus", 0777 [pid 3914] chdir("./file0" [pid 3912] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3930 [pid 3926] <... mkdir resumed>) = 0 [pid 3914] <... chdir resumed>) = 0 [pid 3926] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3914] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3912] <... futex resumed>) = 0 [pid 3914] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3912] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3912] <... futex resumed>) = 0 [pid 3914] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3912] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3914] <... open resumed>) = 4 [pid 3914] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3912] <... futex resumed>) = 0 [pid 3914] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3912] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3912] <... futex resumed>) = 0 [pid 3914] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3912] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3914] <... openat resumed>) = 5 [pid 3914] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3912] <... futex resumed>) = 0 [pid 3914] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3912] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3912] <... futex resumed>) = 0 [ 80.515655][ T3914] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/110/bus supports timestamps until 2038 (0x7fffffff) [pid 3914] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3912] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3914] <... write resumed>) = 196608 [pid 3914] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3912] <... futex resumed>) = 0 [pid 3914] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3912] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3912] <... futex resumed>) = 0 [pid 3914] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3912] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3914] <... mount resumed>) = 0 [pid 3914] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3912] <... futex resumed>) = 0 [pid 3924] <... ioctl resumed>) = 0 [pid 3914] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3912] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3924] close(3 [pid 3914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3912] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3930 attached [pid 3924] <... close resumed>) = 0 [pid 3914] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3912] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3930] set_robust_list(0x55555713c5e0, 24 [pid 3924] mkdir("./bus", 0777 [pid 3930] <... set_robust_list resumed>) = 0 [pid 3925] <... ioctl resumed>) = 0 [pid 3924] <... mkdir resumed>) = 0 [pid 3914] <... open resumed>) = 6 [pid 3930] chdir("./111" [pid 3925] close(3 [pid 3924] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3914] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3930] <... chdir resumed>) = 0 [pid 3925] <... close resumed>) = 0 [pid 3914] <... futex resumed>) = 1 [pid 3912] <... futex resumed>) = 0 [pid 3930] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3925] mkdir("./bus", 0777 [pid 3914] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3912] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3930] <... prctl resumed>) = 0 [pid 3914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3912] <... futex resumed>) = 0 [pid 3930] setpgid(0, 0 [pid 3925] <... mkdir resumed>) = 0 [pid 3914] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3912] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3930] <... setpgid resumed>) = 0 [pid 3925] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3930] write(3, "1000", 4) = 4 [pid 3930] close(3) = 0 [pid 3930] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3914] <... write resumed>) = 1048576 [pid 3930] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3914] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3930] <... futex resumed>) = 0 [pid 3914] <... futex resumed>) = 1 [pid 3912] <... futex resumed>) = 0 [pid 3930] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3914] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3912] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3930] <... mmap resumed>) = 0x7f64ff044000 [pid 3912] <... futex resumed>) = 0 [pid 3930] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3912] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3930] <... mprotect resumed>) = 0 [pid 3924] <... mount resumed>) = 0 [pid 3922] <... mount resumed>) = 0 [pid 3930] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3922] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3930] <... clone resumed>, parent_tid=[3939], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3939 [pid 3922] chdir("./bus" [pid 3930] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3922] <... chdir resumed>) = 0 [pid 3930] <... futex resumed>) = 0 [pid 3922] ioctl(4, LOOP_CLR_FD [pid 3930] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3922] <... ioctl resumed>) = 0 [pid 3922] close(4) = 0 [pid 3922] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3922] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3924] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3924] chdir("./bus") = 0 [pid 3924] ioctl(4, LOOP_CLR_FD) = 0 [pid 3924] close(4) = 0 [pid 3924] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 80.600037][ T3922] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/109/bus supports timestamps until 2038 (0x7fffffff) [ 80.600344][ T3914] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 80.612660][ T3924] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/110/bus supports timestamps until 2038 (0x7fffffff) [ 80.626708][ T3914] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 3924] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3920] <... futex resumed>) = 0 [pid 3918] <... futex resumed>) = 0 [pid 3926] <... mount resumed>) = 0 [pid 3926] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3926] chdir("./bus") = 0 [pid 3926] ioctl(4, LOOP_CLR_FD) = 0 [pid 3926] close(4) = 0 [pid 3926] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3926] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3939 attached [pid 3939] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3939] memfd_create("syzkaller", 0) = 3 [pid 3925] <... mount resumed>) = 0 [pid 3920] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3918] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3917] <... futex resumed>) = 0 [pid 3914] <... openat resumed>) = 7 [pid 3925] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3917] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3914] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3926] <... futex resumed>) = 0 [pid 3917] <... futex resumed>) = 1 [pid 3926] chdir("./file0" [pid 3925] <... openat resumed>) = 3 [pid 3917] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3914] <... futex resumed>) = 1 [pid 3926] <... chdir resumed>) = 0 [pid 3925] chdir("./bus" [pid 3924] <... futex resumed>) = 0 [pid 3922] <... futex resumed>) = 0 [pid 3920] <... futex resumed>) = 1 [pid 3918] <... futex resumed>) = 1 [pid 3914] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3912] <... futex resumed>) = 0 [pid 3926] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3925] <... chdir resumed>) = 0 [pid 3922] chdir("./file0" [pid 3918] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3912] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3926] <... futex resumed>) = 1 [pid 3925] ioctl(4, LOOP_CLR_FD [pid 3917] <... futex resumed>) = 0 [pid 3922] <... chdir resumed>) = 0 [pid 3914] <... futex resumed>) = 0 [pid 3917] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3912] <... futex resumed>) = 1 [pid 3926] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3925] <... ioctl resumed>) = 0 [pid 3922] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3917] <... futex resumed>) = 0 [pid 3914] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3912] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3925] close(4 [pid 3924] chdir("./file0" [pid 3922] <... futex resumed>) = 1 [pid 3920] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3918] <... futex resumed>) = 0 [pid 3917] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3914] <... openat resumed>) = 8 [pid 3926] <... open resumed>) = 4 [pid 3926] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3925] <... close resumed>) = 0 [pid 3924] <... chdir resumed>) = 0 [pid 3922] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3918] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3914] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3924] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3920] <... futex resumed>) = 0 [pid 3924] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3920] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3926] <... futex resumed>) = 1 [pid 3924] <... open resumed>) = 4 [pid 3922] <... open resumed>) = 4 [pid 3920] <... futex resumed>) = 0 [pid 3918] <... futex resumed>) = 0 [pid 3917] <... futex resumed>) = 0 [pid 3914] <... futex resumed>) = 1 [pid 3912] <... futex resumed>) = 0 [pid 3924] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3920] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3924] <... futex resumed>) = 0 [pid 3920] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3917] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3926] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3924] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3922] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3920] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3918] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3914] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3912] exit_group(0 [pid 3917] <... futex resumed>) = 0 [pid 3926] <... openat resumed>) = 5 [pid 3924] <... openat resumed>) = 5 [pid 3922] <... futex resumed>) = 0 [pid 3920] <... futex resumed>) = 0 [pid 3918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3917] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3914] <... futex resumed>) = ? [pid 3912] <... exit_group resumed>) = ? [pid 3924] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3920] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3918] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3914] +++ exited with 0 +++ [pid 3924] <... futex resumed>) = 0 [pid 3920] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3924] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3920] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3924] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3920] <... futex resumed>) = 0 [pid 3924] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3920] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3926] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3924] <... write resumed>) = 196608 [pid 3922] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3918] <... futex resumed>) = 0 [pid 3912] +++ exited with 0 +++ [pid 3926] <... futex resumed>) = 1 [pid 3925] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3924] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3922] <... openat resumed>) = 5 [pid 3918] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3917] <... futex resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3912, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3926] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3924] <... futex resumed>) = 1 [pid 3922] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3920] <... futex resumed>) = 0 [pid 3918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3917] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3926] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3924] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3922] <... futex resumed>) = 0 [pid 3920] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3918] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3917] <... futex resumed>) = 0 [pid 3926] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3924] <... mount resumed>) = 0 [pid 3922] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3920] <... futex resumed>) = 0 [pid 3918] <... futex resumed>) = 0 [pid 3917] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3924] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3920] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3924] <... futex resumed>) = 0 [pid 3920] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3924] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3920] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3924] <... open resumed>) = 6 [pid 3920] <... futex resumed>) = 0 [pid 3924] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3920] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3924] <... futex resumed>) = 0 [pid 3920] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3924] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3920] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3926] <... write resumed>) = 196608 [pid 3922] <... write resumed>) = 196608 [pid 3920] <... futex resumed>) = 0 [pid 3918] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3926] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3922] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3920] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3926] <... futex resumed>) = 1 [pid 3922] <... futex resumed>) = 1 [pid 3918] <... futex resumed>) = 0 [pid 3917] <... futex resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 3926] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 3922] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 3918] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3917] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] fstat(3, [pid 3926] <... mount resumed>) = 0 [pid 3922] <... mount resumed>) = 0 [pid 3918] <... futex resumed>) = 0 [pid 3917] <... futex resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3926] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3922] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3918] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3917] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3926] <... futex resumed>) = 0 [pid 3922] <... futex resumed>) = 0 [pid 3918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3917] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] getdents64(3, [pid 3926] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3922] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3918] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3917] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3922] <... open resumed>) = 6 [pid 3918] <... futex resumed>) = 0 [pid 3917] <... futex resumed>) = 0 [pid 3926] <... open resumed>) = 6 [pid 3922] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3918] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3917] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3926] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3925] <... futex resumed>) = 1 [pid 3922] <... futex resumed>) = 0 [pid 3921] <... futex resumed>) = 0 [pid 3918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3917] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3926] <... futex resumed>) = 0 [pid 3925] chdir("./file0" [pid 3922] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3921] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3918] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3917] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] lstat("./110/binderfs", [pid 3939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3926] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3925] <... chdir resumed>) = 0 [pid 3922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3921] <... futex resumed>) = 0 [pid 3918] <... futex resumed>) = 0 [pid 3917] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3925] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3922] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3921] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3918] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3917] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] unlink("./110/binderfs" [pid 3925] <... futex resumed>) = 0 [pid 3921] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3925] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3921] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... unlink resumed>) = 0 [pid 3921] <... futex resumed>) = 1 [pid 374] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3921] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3925] <... futex resumed>) = 0 [pid 3925] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3925] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3939] <... mmap resumed>) = 0x7f64f6c44000 [pid 3925] <... futex resumed>) = 1 [pid 3921] <... futex resumed>) = 0 [pid 3921] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3921] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3925] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3925] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3921] <... futex resumed>) = 0 [pid 3925] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3921] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3921] <... futex resumed>) = 0 [pid 3925] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3921] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3924] <... write resumed>) = 1048576 [pid 3925] <... write resumed>) = 196608 [ 80.641694][ T3926] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/112/bus supports timestamps until 2038 (0x7fffffff) [ 80.653280][ T3925] ext4 filesystem being mounted at /root/syzkaller.k3ECep/111/bus supports timestamps until 2038 (0x7fffffff) [pid 3924] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3925] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3924] <... futex resumed>) = 1 [pid 3920] <... futex resumed>) = 0 [pid 3920] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3924] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3920] <... futex resumed>) = 0 [pid 3920] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3926] <... write resumed>) = 1048576 [pid 3926] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3926] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3917] <... futex resumed>) = 0 [pid 3917] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3926] <... futex resumed>) = 0 [pid 3917] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3926] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3939] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3939] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3918] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3918] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3918] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3918] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3918] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3925] <... futex resumed>) = 1 [pid 3921] <... futex resumed>) = 0 [pid 3921] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3918] <... clone resumed>, parent_tid=[3941], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3941 [pid 3921] <... futex resumed>) = 0 [pid 3918] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3921] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3918] <... futex resumed>) = 0 [pid 3918] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3925] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 374] <... umount2 resumed>) = 0 [pid 3939] <... openat resumed>) = 4 [pid 3939] ioctl(4, LOOP_SET_FD, 3 [pid 3922] <... write resumed>) = 1048576 [pid 3922] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3922] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3941 attached [pid 3941] set_robust_list(0x7f64f6d439e0, 24) = 0 [ 80.712076][ T3924] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 80.727087][ T3926] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 80.747272][ T3926] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 3941] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3925] <... mount resumed>) = 0 [pid 374] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3925] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3920] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3917] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3925] <... futex resumed>) = 1 [pid 3921] <... futex resumed>) = 0 [pid 3920] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3917] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] lstat("./110/bus", [pid 3925] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3921] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3920] <... futex resumed>) = 0 [pid 3917] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3921] <... futex resumed>) = 0 [pid 3920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3917] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3921] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3920] <... mmap resumed>) = 0x7f64f6d23000 [pid 3917] <... mmap resumed>) = 0x7f64f6d23000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3920] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3917] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 374] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3920] <... mprotect resumed>) = 0 [pid 3917] <... mprotect resumed>) = 0 [pid 374] <... openat resumed>) = 4 [pid 3920] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3917] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] fstat(4, [pid 3939] <... ioctl resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3920] <... clone resumed>, parent_tid=[3944], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3944 [pid 3917] <... clone resumed>, parent_tid=[3943], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3943 [pid 374] getdents64(4, [pid 3920] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3917] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3920] <... futex resumed>) = 0 [pid 3917] <... futex resumed>) = 0 [pid 374] getdents64(4, [pid 3920] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3917] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./110/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 3939] close(3 [pid 3926] <... openat resumed>) = 7 [pid 3925] <... open resumed>) = 6 [pid 374] rmdir("./110" [pid 3939] <... close resumed>) = 0 [pid 3926] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3925] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3944 attached ./strace-static-x86_64: Process 3943 attached [pid 3941] <... openat resumed>) = 7 [pid 3939] mkdir("./bus", 0777 [pid 3926] <... futex resumed>) = 0 [pid 3925] <... futex resumed>) = 1 [pid 3924] <... openat resumed>) = 7 [pid 3921] <... futex resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 3918] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 374] mkdir("./111", 0777 [pid 3918] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 374] <... mkdir resumed>) = 0 [pid 3918] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3918] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... openat resumed>) = 3 [pid 3944] set_robust_list(0x7f64f6d439e0, 24 [pid 3922] <... futex resumed>) = 0 [pid 3918] <... futex resumed>) = 1 [pid 374] ioctl(3, LOOP_CLR_FD [pid 3944] <... set_robust_list resumed>) = 0 [pid 3939] <... mkdir resumed>) = 0 [pid 3926] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3925] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3924] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3922] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3921] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3918] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3944] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3939] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3924] <... futex resumed>) = 0 [pid 3922] <... openat resumed>) = 8 [pid 3921] <... futex resumed>) = 0 [pid 374] close(3 [pid 3944] <... openat resumed>) = 8 [pid 374] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3945 ./strace-static-x86_64: Process 3945 attached [pid 3945] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3945] chdir("./111") = 0 [pid 3945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3945] setpgid(0, 0) = 0 [pid 3924] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3925] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3944] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3922] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3921] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3945] write(3, "1000", 4) = 4 [pid 3945] close(3) = 0 [pid 3945] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3945] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3945] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3945] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3946], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3946 [pid 3945] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3944] <... futex resumed>) = 1 [pid 3920] <... futex resumed>) = 0 [pid 3944] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3922] <... futex resumed>) = 1 [pid 3920] exit_group(0 [pid 3918] <... futex resumed>) = 0 [pid 3944] <... futex resumed>) = ? [pid 3924] <... futex resumed>) = ? [pid 3922] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3920] <... exit_group resumed>) = ? [pid 3924] +++ exited with 0 +++ [pid 3945] <... futex resumed>) = 0 [pid 3945] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3946 attached [pid 3944] +++ exited with 0 +++ [pid 3920] +++ exited with 0 +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3920, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 3946] set_robust_list(0x7f64ff0649e0, 24 [pid 375] <... restart_syscall resumed>) = 0 [pid 375] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./110/binderfs") = 0 [pid 375] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3946] <... set_robust_list resumed>) = 0 [pid 3946] memfd_create("syzkaller", 0) = 3 [pid 3946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3941] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3941] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3918] exit_group(0 [pid 3941] <... futex resumed>) = ? [pid 3922] <... futex resumed>) = ? [pid 3918] <... exit_group resumed>) = ? [pid 3922] +++ exited with 0 +++ [pid 3941] +++ exited with 0 +++ [pid 3918] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3918, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 372] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [ 80.754677][ T3941] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 80.756628][ T3924] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 80.770404][ T3941] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 372] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./109/binderfs") = 0 [pid 372] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3943] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 3943] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3943] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3917] <... futex resumed>) = 0 [pid 3917] exit_group(0 [pid 3943] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 3926] <... futex resumed>) = ? [pid 3917] <... exit_group resumed>) = ? [pid 3926] +++ exited with 0 +++ [pid 3946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3946] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3946] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3925] <... write resumed>) = 1048576 [pid 3925] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3925] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3921] <... futex resumed>) = 0 [pid 3921] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3921] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3925] <... futex resumed>) = 0 [pid 3925] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3943] +++ exited with 0 +++ [pid 3939] <... mount resumed>) = 0 [pid 3917] +++ exited with 0 +++ [pid 375] <... umount2 resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3917, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 376] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./112/binderfs") = 0 [pid 376] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./110/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./110/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 3946] <... openat resumed>) = 4 [pid 375] rmdir("./110" [pid 3946] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... rmdir resumed>) = 0 [pid 375] mkdir("./111", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3939] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3939] chdir("./bus") = 0 [pid 3939] ioctl(4, LOOP_CLR_FD [pid 3925] <... openat resumed>) = 7 [pid 3925] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3946] <... ioctl resumed>) = 0 [pid 3925] <... futex resumed>) = 1 [pid 3921] <... futex resumed>) = 0 [pid 3921] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3946] close(3) = 0 [pid 3921] <... futex resumed>) = 0 [pid 3946] mkdir("./bus", 0777 [pid 3921] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3925] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3925] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3921] <... futex resumed>) = 0 [pid 3921] exit_group(0) = ? [pid 3925] +++ exited with 0 +++ [pid 3921] +++ exited with 0 +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3921, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3946] <... mkdir resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 3946] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./111/binderfs") = 0 [ 80.835847][ T3939] ext4 filesystem being mounted at /root/syzkaller.43WzWH/111/bus supports timestamps until 2038 (0x7fffffff) [ 80.846061][ T3925] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 80.861552][ T3925] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 373] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3939] <... ioctl resumed>) = 0 [pid 3939] close(4 [pid 376] <... umount2 resumed>) = 0 [pid 3939] <... close resumed>) = 0 [pid 376] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... umount2 resumed>) = 0 [pid 3939] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3939] <... futex resumed>) = 1 [pid 3930] <... futex resumed>) = 0 [pid 376] lstat("./112/bus", [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3939] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3930] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] lstat("./111/bus", [pid 3939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3930] <... futex resumed>) = 0 [pid 376] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3939] chdir("./file0" [pid 3930] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3939] <... chdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3939] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 4 [pid 373] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3939] <... futex resumed>) = 1 [pid 3930] <... futex resumed>) = 0 [pid 376] fstat(4, [pid 373] <... openat resumed>) = 4 [pid 3939] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3930] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] fstat(4, [pid 3939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3930] <... futex resumed>) = 0 [pid 376] getdents64(4, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3939] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3930] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] close(3 [pid 373] getdents64(4, [pid 3939] <... open resumed>) = 4 [pid 376] getdents64(4, [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 3939] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] getdents64(4, [pid 3939] <... futex resumed>) = 1 [pid 3930] <... futex resumed>) = 0 [pid 376] close(4 [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3939] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3930] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... close resumed>) = 0 [pid 373] close(4 [pid 3939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3930] <... futex resumed>) = 0 [pid 376] rmdir("./112/bus" [pid 373] <... close resumed>) = 0 [pid 3939] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3930] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... rmdir resumed>) = 0 [pid 373] rmdir("./111/bus" [pid 3939] <... openat resumed>) = 5 [pid 376] getdents64(3, [pid 373] <... rmdir resumed>) = 0 [pid 3939] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] <... close resumed>) = 0 [pid 373] getdents64(3, [pid 3939] <... futex resumed>) = 1 [pid 3930] <... futex resumed>) = 0 [pid 376] close(3 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3939] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3930] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... close resumed>) = 0 [pid 373] close(3 [pid 3939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3930] <... futex resumed>) = 0 [pid 376] rmdir("./112" [pid 373] <... close resumed>) = 0 [pid 3939] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3930] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... rmdir resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] rmdir("./111"./strace-static-x86_64: Process 3950 attached [pid 3939] <... write resumed>) = 196608 [pid 376] mkdir("./113", 0777 [pid 373] <... rmdir resumed>) = 0 [pid 3950] set_robust_list(0x55555713c5e0, 24 [pid 3939] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... mkdir resumed>) = 0 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3950 [pid 373] mkdir("./112", 0777 [pid 3950] <... set_robust_list resumed>) = 0 [pid 3939] <... futex resumed>) = 1 [pid 3930] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 373] <... mkdir resumed>) = 0 [pid 3950] chdir("./111" [pid 3939] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3930] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3950] <... chdir resumed>) = 0 [pid 3939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3930] <... futex resumed>) = 0 [pid 3950] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3939] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3930] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3950] <... prctl resumed>) = 0 [pid 3939] <... mount resumed>) = 0 [pid 3950] setpgid(0, 0 [pid 3939] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3950] <... setpgid resumed>) = 0 [pid 3939] <... futex resumed>) = 1 [pid 3930] <... futex resumed>) = 0 [pid 3950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3939] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3930] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3950] <... openat resumed>) = 3 [pid 3939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3930] <... futex resumed>) = 0 [pid 3950] write(3, "1000", 4 [pid 3939] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3930] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3950] <... write resumed>) = 4 [pid 3950] close(3) = 0 [pid 3950] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3950] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3950] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3950] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3950] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3951], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3951 [pid 3950] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3950] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3951 attached [pid 3951] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3951] memfd_create("syzkaller", 0) = 3 [pid 3951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3951] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3951] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3946] <... mount resumed>) = 0 [pid 3946] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3946] chdir("./bus") = 0 [pid 3946] ioctl(4, LOOP_CLR_FD) = 0 [pid 3946] close(4) = 0 [pid 3946] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3945] <... futex resumed>) = 0 [pid 3945] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3945] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3946] <... futex resumed>) = 1 [pid 3946] chdir("./file0" [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./109/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./109/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./109") = 0 [pid 372] mkdir("./110", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3946] <... chdir resumed>) = 0 [pid 3946] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3945] <... futex resumed>) = 0 [pid 3945] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3945] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3946] <... futex resumed>) = 1 [pid 3946] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3946] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3945] <... futex resumed>) = 0 [pid 3945] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3945] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3946] <... futex resumed>) = 1 [pid 3946] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3946] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3945] <... futex resumed>) = 0 [pid 3945] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3946] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3945] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3946] <... write resumed>) = 196608 [pid 3946] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3946] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3945] <... futex resumed>) = 0 [pid 3945] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3946] <... futex resumed>) = 0 [pid 3945] <... futex resumed>) = 1 [pid 3946] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 3945] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3946] <... mount resumed>) = 0 [pid 3946] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3945] <... futex resumed>) = 0 [pid 3945] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3945] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3946] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3939] <... open resumed>) = 6 [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3954 [pid 3939] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3930] <... futex resumed>) = 0 [pid 3939] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3930] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3930] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... openat resumed>) = 3 [pid 376] <... openat resumed>) = 3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 376] ioctl(3, LOOP_CLR_FD [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3955 ./strace-static-x86_64: Process 3955 attached [pid 3955] set_robust_list(0x55555713c5e0, 24) = 0 [pid 372] <... close resumed>) = 0 [ 80.975959][ T3946] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/111/bus supports timestamps until 2038 (0x7fffffff) [pid 3955] chdir("./113" [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3955] <... chdir resumed>) = 0 [pid 3955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3955] setpgid(0, 0) = 0 [pid 3955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3955] write(3, "1000", 4) = 4 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3956 [pid 3951] <... openat resumed>) = 4 [pid 3951] ioctl(4, LOOP_SET_FD, 3 [pid 3955] close(3) = 0 ./strace-static-x86_64: Process 3956 attached [pid 3951] <... ioctl resumed>) = 0 [pid 3939] <... write resumed>) = 1048576 [pid 3946] <... open resumed>) = 6 [pid 3955] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3951] close(3 [pid 3955] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3955] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3955] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3951] <... close resumed>) = 0 [pid 3946] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3955] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3951] mkdir("./bus", 0777 [pid 3946] <... futex resumed>) = 1 [pid 3945] <... futex resumed>) = 0 [pid 3939] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3945] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3955] <... clone resumed>, parent_tid=[3958], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3958 [pid 3945] <... futex resumed>) = 0 [pid 3955] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3945] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3951] <... mkdir resumed>) = 0 [pid 3946] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3951] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3955] <... futex resumed>) = 0 [pid 3955] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3958 attached [pid 3958] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3958] memfd_create("syzkaller", 0) = 3 [pid 3958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3930] <... futex resumed>) = 0 [pid 3939] <... futex resumed>) = 1 [pid 3956] set_robust_list(0x55555713c5e0, 24 [pid 3930] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3956] <... set_robust_list resumed>) = 0 [pid 3939] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3956] chdir("./110" [pid 3930] <... futex resumed>) = 0 [pid 3930] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3958] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3958] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 3958] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3958] close(3) = 0 [pid 3958] mkdir("./bus", 0777) = 0 [pid 3958] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3956] <... chdir resumed>) = 0 [pid 3956] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3956] setpgid(0, 0) = 0 [pid 3956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3956] write(3, "1000", 4) = 4 [pid 3956] close(3) = 0 [pid 3956] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3956] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3956] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 3954 attached ) = 0x7f64ff044000 [pid 3956] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3954] set_robust_list(0x55555713c5e0, 24 [pid 3956] <... mprotect resumed>) = 0 [pid 3954] <... set_robust_list resumed>) = 0 [pid 3956] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3954] chdir("./112") = 0 [pid 3956] <... clone resumed>, parent_tid=[3961], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3961 [pid 3954] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3956] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3954] <... prctl resumed>) = 0 [pid 3956] <... futex resumed>) = 0 [pid 3954] setpgid(0, 0 [pid 3956] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3954] <... setpgid resumed>) = 0 [pid 3954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3954] write(3, "1000", 4) = 4 [pid 3954] close(3) = 0 [pid 3954] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3954] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3961 attached ) = 0 [pid 3946] <... write resumed>) = 1048576 [pid 3958] <... mount resumed>) = 0 [pid 3958] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3958] chdir("./bus") = 0 [pid 3958] ioctl(4, LOOP_CLR_FD) = 0 [pid 3958] close(4) = 0 [pid 3958] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3955] <... futex resumed>) = 0 [pid 3955] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3955] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3958] <... futex resumed>) = 1 [pid 3958] chdir("./file0") = 0 [pid 3958] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3955] <... futex resumed>) = 0 [pid 3955] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3955] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3958] <... futex resumed>) = 1 [pid 3958] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 3958] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3955] <... futex resumed>) = 0 [pid 3955] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3955] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3958] <... futex resumed>) = 1 [pid 3958] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3958] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3955] <... futex resumed>) = 0 [pid 3955] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3955] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3958] <... futex resumed>) = 1 [ 81.050084][ T3939] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 81.079859][ T3958] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/113/bus supports timestamps until 2038 (0x7fffffff) [pid 3958] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3961] set_robust_list(0x7f64ff0649e0, 24 [pid 3954] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3946] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3958] <... write resumed>) = 196608 [pid 3958] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3955] <... futex resumed>) = 0 [pid 3955] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3955] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3958] <... futex resumed>) = 1 [pid 3958] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3958] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3955] <... futex resumed>) = 0 [pid 3955] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3955] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3958] <... futex resumed>) = 1 [pid 3958] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3958] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3955] <... futex resumed>) = 0 [pid 3955] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3955] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3958] <... futex resumed>) = 1 [pid 3961] <... set_robust_list resumed>) = 0 [pid 3945] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3930] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3954] <... mmap resumed>) = 0x7f64ff044000 [pid 3961] memfd_create("syzkaller", 0 [pid 3946] <... futex resumed>) = 0 [pid 3930] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3945] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3954] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3958] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3946] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3945] <... futex resumed>) = 0 [pid 3930] <... futex resumed>) = 0 [pid 3961] <... memfd_create resumed>) = 3 [pid 3954] <... mprotect resumed>) = 0 [pid 3958] <... write resumed>) = 1048576 [pid 3958] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3955] <... futex resumed>) = 0 [pid 3955] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3955] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3958] <... futex resumed>) = 1 [pid 3958] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3954] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3951] <... mount resumed>) = 0 [pid 3945] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 81.091808][ T3939] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 81.108229][ T3951] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/111/bus supports timestamps until 2038 (0x7fffffff) [ 81.121232][ T3946] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 81.130139][ T3958] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3930] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 3965 attached [pid 3961] <... mmap resumed>) = 0x7f64f6c44000 [pid 3951] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3946] <... openat resumed>) = 7 [pid 3930] <... mmap resumed>) = 0x7f64f6d23000 [pid 3965] set_robust_list(0x7f64ff0649e0, 24 [pid 3961] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3954] <... clone resumed>, parent_tid=[3965], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3965 [pid 3951] <... openat resumed>) = 3 [pid 3930] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3965] <... set_robust_list resumed>) = 0 [pid 3954] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3951] chdir("./bus" [pid 3930] <... mprotect resumed>) = 0 [pid 3965] memfd_create("syzkaller", 0 [pid 3954] <... futex resumed>) = 0 [pid 3951] <... chdir resumed>) = 0 [pid 3939] <... openat resumed>) = 7 [pid 3930] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3965] <... memfd_create resumed>) = 3 [pid 3954] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3951] ioctl(4, LOOP_CLR_FD [pid 3939] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3951] <... ioctl resumed>) = 0 [pid 3939] <... futex resumed>) = 0 [pid 3930] <... clone resumed>, parent_tid=[3966], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3966 [pid 3965] <... mmap resumed>) = 0x7f64f6c44000 [pid 3951] close(4 [pid 3939] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3930] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3958] <... openat resumed>) = 7 [pid 3930] <... futex resumed>) = 0 [pid 3965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3958] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3951] <... close resumed>) = 0 [pid 3930] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3958] <... futex resumed>) = 1 [pid 3955] <... futex resumed>) = 0 [pid 3946] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3955] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3951] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3955] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3951] <... futex resumed>) = 1 [pid 3950] <... futex resumed>) = 0 [pid 3951] chdir("./file0" [pid 3950] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3951] <... chdir resumed>) = 0 [pid 3950] <... futex resumed>) = 0 [pid 3958] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3951] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3950] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3946] <... futex resumed>) = 1 [pid 3945] <... futex resumed>) = 0 [pid 3951] <... futex resumed>) = 0 [pid 3958] <... openat resumed>) = 8 [pid 3950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3946] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3945] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3951] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3950] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3945] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3966 attached [pid 3961] <... write resumed>) = 1048576 [pid 3958] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3950] <... futex resumed>) = 0 [pid 3946] <... openat resumed>) = 8 [pid 3945] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3958] <... futex resumed>) = 1 [pid 3955] <... futex resumed>) = 0 [pid 3951] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3950] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3946] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3958] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3955] exit_group(0 [pid 3951] <... open resumed>) = 4 [pid 3945] exit_group(0 [pid 3946] <... futex resumed>) = 231 [pid 3961] munmap(0x7f64f6c44000, 1048576 [pid 3958] <... futex resumed>) = ? [pid 3955] <... exit_group resumed>) = ? [pid 3951] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3946] +++ exited with 0 +++ [pid 3965] <... write resumed>) = 1048576 [pid 3961] <... munmap resumed>) = 0 [pid 3966] set_robust_list(0x7f64f6d439e0, 24 [pid 3945] <... exit_group resumed>) = ? [pid 3966] <... set_robust_list resumed>) = 0 [pid 3965] munmap(0x7f64f6c44000, 1048576 [pid 3961] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3958] +++ exited with 0 +++ [pid 3955] +++ exited with 0 +++ [pid 3951] <... futex resumed>) = 1 [pid 3950] <... futex resumed>) = 0 [pid 3945] +++ exited with 0 +++ [pid 3961] <... openat resumed>) = 4 [pid 3961] ioctl(4, LOOP_SET_FD, 3 [pid 3965] <... munmap resumed>) = 0 [pid 3965] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3966] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3966] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3930] <... futex resumed>) = 0 [pid 3930] exit_group(0 [pid 3950] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3939] <... futex resumed>) = ? [pid 3930] <... exit_group resumed>) = ? [pid 3951] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3950] <... futex resumed>) = 0 [pid 3939] +++ exited with 0 +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3955, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3951] <... openat resumed>) = 5 [pid 3950] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3945, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 3951] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3966] <... futex resumed>) = ? [pid 3951] <... futex resumed>) = 0 [pid 3950] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3961] <... ioctl resumed>) = 0 [pid 3951] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3950] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3966] +++ exited with 0 +++ [pid 3965] <... openat resumed>) = 4 [pid 3961] close(3 [pid 3930] +++ exited with 0 +++ [pid 3965] ioctl(4, LOOP_SET_FD, 3 [pid 3961] <... close resumed>) = 0 [pid 3961] mkdir("./bus", 0777) = 0 [pid 3961] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3951] <... write resumed>) = 196608 [pid 3950] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3930, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 376] fstat(3, [pid 374] <... openat resumed>) = 3 [pid 3951] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] fstat(3, [pid 3951] <... futex resumed>) = 0 [pid 3950] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3965] <... ioctl resumed>) = 0 [pid 3951] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3950] <... futex resumed>) = 0 [pid 377] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] getdents64(3, [pid 3965] close(3) = 0 [pid 3965] mkdir("./bus", 0777) = 0 [pid 3965] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3951] <... mount resumed>) = 0 [pid 3950] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3951] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3951] <... futex resumed>) = 0 [pid 3950] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 3 [pid 376] lstat("./113/binderfs", [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3951] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3950] <... futex resumed>) = 0 [pid 377] fstat(3, [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] lstat("./111/binderfs", [pid 3951] <... open resumed>) = 6 [pid 3950] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] unlink("./113/binderfs" [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3951] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] getdents64(3, [pid 376] <... unlink resumed>) = 0 [ 81.135973][ T3946] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 81.149567][ T3958] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 374] unlink("./111/binderfs" [pid 3951] <... futex resumed>) = 0 [pid 3950] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... unlink resumed>) = 0 [pid 3951] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3950] <... futex resumed>) = 0 [pid 377] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3961] <... mount resumed>) = 0 [pid 3961] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3961] chdir("./bus" [pid 3950] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./111/binderfs", [pid 3961] <... chdir resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3961] ioctl(4, LOOP_CLR_FD [pid 377] unlink("./111/binderfs" [pid 3961] <... ioctl resumed>) = 0 [pid 3961] close(4) = 0 [pid 377] <... unlink resumed>) = 0 [pid 3961] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3961] <... futex resumed>) = 1 [pid 3956] <... futex resumed>) = 0 [pid 3961] chdir("./file0" [pid 3956] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3961] <... chdir resumed>) = 0 [pid 3956] <... futex resumed>) = 0 [pid 3961] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3956] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3961] <... futex resumed>) = 0 [pid 3956] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3961] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3956] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3956] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3951] <... write resumed>) = 1048576 [pid 3951] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3950] <... futex resumed>) = 0 [pid 3950] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3950] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3951] <... futex resumed>) = 1 [pid 3951] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3965] <... mount resumed>) = 0 [pid 3961] <... futex resumed>) = 0 [pid 3965] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3961] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3965] <... openat resumed>) = 3 [pid 3961] <... open resumed>) = 4 [pid 3965] chdir("./bus" [pid 3961] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3965] <... chdir resumed>) = 0 [pid 3961] <... futex resumed>) = 1 [pid 3965] ioctl(4, LOOP_CLR_FD [ 81.198337][ T3961] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/110/bus supports timestamps until 2038 (0x7fffffff) [ 81.221027][ T3965] ext4 filesystem being mounted at /root/syzkaller.k3ECep/112/bus supports timestamps until 2038 (0x7fffffff) [ 81.229843][ T3951] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 3961] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3956] <... futex resumed>) = 0 [pid 3956] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3961] <... futex resumed>) = 0 [pid 3956] <... futex resumed>) = 1 [pid 3961] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3956] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3961] <... openat resumed>) = 5 [pid 3961] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3956] <... futex resumed>) = 0 [pid 3961] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3956] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3961] <... write resumed>) = 196608 [pid 3956] <... futex resumed>) = 0 [pid 3956] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3961] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3956] <... futex resumed>) = 0 [pid 3956] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3956] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3961] <... futex resumed>) = 1 [pid 3961] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3961] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3956] <... futex resumed>) = 0 [pid 3956] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3956] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3961] <... futex resumed>) = 1 [pid 3961] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3951] <... openat resumed>) = 7 [pid 3951] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3950] <... futex resumed>) = 0 [pid 3950] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3950] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3951] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3951] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3950] <... futex resumed>) = 0 [pid 3951] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3950] exit_group(0) = ? [pid 3951] <... futex resumed>) = ? [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./113/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./113/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./113") = 0 [pid 376] mkdir("./114", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3956] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3956] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3956] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3956] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3956] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3973 attached , parent_tid=[3973], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3973 [pid 3973] set_robust_list(0x7f64f6d439e0, 24 [pid 3956] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3973] <... set_robust_list resumed>) = 0 [pid 3956] <... futex resumed>) = 0 [pid 3973] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3956] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3973] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 3973] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3956] <... futex resumed>) = 0 [pid 3973] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3956] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3956] <... futex resumed>) = 0 [pid 3973] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3956] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3973] <... openat resumed>) = 7 [pid 3973] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3956] <... futex resumed>) = 0 [pid 3973] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3956] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3956] <... futex resumed>) = 0 [pid 3973] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 81.246982][ T3951] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 3956] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3973] <... openat resumed>) = 8 [pid 3973] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3973] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3956] <... futex resumed>) = 0 [pid 3965] <... ioctl resumed>) = 0 [pid 3965] close(4) = 0 [pid 3961] <... open resumed>) = 6 [pid 3951] +++ exited with 0 +++ [pid 3950] +++ exited with 0 +++ [pid 377] <... umount2 resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 374] <... umount2 resumed>) = 0 [pid 3965] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3961] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3956] exit_group(0 [pid 377] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] ioctl(3, LOOP_CLR_FD [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3950, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 374] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3973] <... futex resumed>) = ? [pid 3965] <... futex resumed>) = 1 [pid 3961] <... futex resumed>) = ? [pid 3956] <... exit_group resumed>) = ? [pid 3954] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3973] +++ exited with 0 +++ [pid 3965] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3961] +++ exited with 0 +++ [pid 3956] +++ exited with 0 +++ [pid 374] lstat("./111/bus", [pid 375] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] close(3 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3956, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3954] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./111/bus", [pid 376] <... close resumed>) = 0 [pid 375] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 3965] <... futex resumed>) = 0 [pid 3954] <... futex resumed>) = 1 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3965] chdir("./file0" [pid 3954] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] fstat(3, [pid 374] <... openat resumed>) = 4 [pid 372] <... restart_syscall resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] fstat(4, [pid 3965] <... chdir resumed>) = 0 [pid 377] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] getdents64(3, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3965] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3974 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] getdents64(4, [pid 372] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3965] <... futex resumed>) = 1 [pid 3954] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3965] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3954] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 4 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] getdents64(4, [pid 372] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3954] <... futex resumed>) = 0 [pid 377] fstat(4, [pid 375] lstat("./111/binderfs", [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] <... openat resumed>) = 3 [pid 3965] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3954] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] close(4 [pid 372] fstat(3, [pid 375] unlink("./111/binderfs" [pid 374] <... close resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, [pid 375] <... unlink resumed>) = 0 [pid 374] rmdir("./111/bus" [pid 3965] <... open resumed>) = 4 [pid 372] getdents64(3, [pid 3965] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... rmdir resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3965] <... futex resumed>) = 1 [pid 3954] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(3, [pid 372] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3965] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3954] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3965] <... openat resumed>) = 5 [pid 374] close(3 [pid 372] lstat("./110/binderfs", [pid 3954] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3954] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... close resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3965] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3954] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] close(4 [pid 374] rmdir("./111" [pid 372] unlink("./110/binderfs" [pid 3965] <... futex resumed>) = 0 [pid 3954] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 3965] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3954] <... futex resumed>) = 0 [pid 377] rmdir("./111/bus" [pid 374] mkdir("./112", 0777 [pid 372] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... mkdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3975 ./strace-static-x86_64: Process 3975 attached [pid 3975] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3975] chdir("./112") = 0 [pid 3975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3975] setpgid(0, 0) = 0 [pid 3975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3965] <... write resumed>) = 196608 [pid 3954] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3975] <... openat resumed>) = 3 [pid 3975] write(3, "1000", 4 [pid 377] <... rmdir resumed>) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3965] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 3975] <... write resumed>) = 4 [pid 3975] close(3 [pid 3965] <... futex resumed>) = 1 [pid 3954] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 3965] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3954] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] rmdir("./111" [pid 3954] <... futex resumed>) = 0 [pid 3975] <... close resumed>) = 0 [pid 3975] symlink("/dev/binderfs", "./binderfs" [pid 3954] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... rmdir resumed>) = 0 [pid 3965] <... mount resumed>) = 0 [pid 3965] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] mkdir("./112", 0777) = 0 [pid 3965] <... futex resumed>) = 1 [pid 3954] <... futex resumed>) = 0 [pid 3954] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3965] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3954] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3954] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3975] <... symlink resumed>) = 0 [pid 3975] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3975] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3975] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3975] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3976], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3976 [pid 3975] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3975] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3976 attached [pid 3976] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3976] memfd_create("syzkaller", 0) = 3 [pid 3976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 3974 attached [pid 3974] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3974] chdir("./114") = 0 [pid 3974] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3974] setpgid(0, 0) = 0 [pid 3974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3974] write(3, "1000", 4) = 4 [pid 3974] close(3) = 0 [pid 3974] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3974] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3974] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3974] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3974] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3977 attached , parent_tid=[3977], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3977 [pid 3977] set_robust_list(0x7f64ff0649e0, 24 [pid 3974] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3974] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3977] <... set_robust_list resumed>) = 0 [pid 3977] memfd_create("syzkaller", 0) = 3 [pid 3976] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3976] <... write resumed>) = 1048576 [pid 3976] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3976] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3965] <... open resumed>) = 6 [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./110/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./110/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./110") = 0 [pid 372] mkdir("./111", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 377] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 3978 ./strace-static-x86_64: Process 3978 attached [pid 3978] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3978] chdir("./111") = 0 [pid 3978] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3978] setpgid(0, 0) = 0 [pid 3978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3978] write(3, "1000", 4) = 4 [pid 3978] close(3) = 0 [pid 3978] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3978] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3978] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3978] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3978] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3979], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3979 [pid 3978] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3978] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3979 attached [pid 3979] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3979] memfd_create("syzkaller", 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 3965] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3979] <... memfd_create resumed>) = 3 [pid 3979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3965] <... futex resumed>) = 1 [pid 3954] <... futex resumed>) = 0 [pid 3954] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3965] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3954] <... futex resumed>) = 0 [pid 3954] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3979] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3965] <... write resumed>) = 1048576 [pid 3965] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3954] <... futex resumed>) = 0 [pid 3965] <... futex resumed>) = 1 [pid 3954] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3965] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3954] <... futex resumed>) = 0 [pid 3954] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3979] <... write resumed>) = 1048576 [pid 3979] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3979] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3977] <... write resumed>) = 1048576 [pid 3977] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3977] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3976] <... openat resumed>) = 4 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3965] <... openat resumed>) = 7 [pid 3965] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3965] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3977] <... openat resumed>) = 4 [pid 3977] ioctl(4, LOOP_SET_FD, 3 [pid 3979] <... openat resumed>) = 4 [pid 3979] ioctl(4, LOOP_SET_FD, 3 [pid 3976] ioctl(4, LOOP_SET_FD, 3 [pid 3954] <... futex resumed>) = 0 [pid 377] close(3 [pid 3954] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3954] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3977] <... ioctl resumed>) = 0 [pid 3977] close(3) = 0 [pid 3977] mkdir("./bus", 0777) = 0 [pid 3965] <... futex resumed>) = 0 [pid 3965] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3965] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3965] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] <... umount2 resumed>) = 0 [pid 3954] <... futex resumed>) = 0 [pid 3977] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3954] exit_group(0 [pid 375] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./111/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, [pid 3954] <... exit_group resumed>) = ? [pid 3965] <... futex resumed>) = ? [pid 3979] <... ioctl resumed>) = 0 [pid 3965] +++ exited with 0 +++ [pid 3954] +++ exited with 0 +++ [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3979] close(3) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3954, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 3979] mkdir("./bus", 0777 [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 3979] <... mkdir resumed>) = 0 [pid 375] close(4 [pid 3979] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] <... restart_syscall resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 3976] <... ioctl resumed>) = 0 [pid 3976] close(3 [pid 373] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3976] <... close resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3976] mkdir("./bus", 0777 [pid 373] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3976] <... mkdir resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 3976] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 377] <... close resumed>) = 0 [pid 375] rmdir("./111/bus" [pid 373] fstat(3, [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./112/binderfs") = 0 [pid 373] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3983 [pid 375] <... rmdir resumed>) = 0 [pid 375] getdents64(3, ./strace-static-x86_64: Process 3983 attached 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./111") = 0 [pid 375] mkdir("./112", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3983] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3983] chdir("./112") = 0 [pid 3983] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3983] setpgid(0, 0) = 0 [pid 3983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3983] write(3, "1000", 4) = 4 [pid 3983] close(3) = 0 [pid 3983] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3983] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3983] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3983] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3983] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3986], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3986 [pid 3983] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3983] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3986 attached [pid 3986] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3986] memfd_create("syzkaller", 0) = 3 [pid 3986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [ 81.446786][ T3965] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 81.460998][ T3965] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 3986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3977] <... mount resumed>) = 0 [pid 3977] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3977] chdir("./bus") = 0 [pid 3977] ioctl(4, LOOP_CLR_FD [pid 3986] <... write resumed>) = 1048576 [pid 3986] munmap(0x7f64f6c44000, 1048576) = 0 [pid 3986] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3979] <... mount resumed>) = 0 [pid 3979] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 3979] chdir("./bus") = 0 [pid 3979] ioctl(4, LOOP_CLR_FD [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./112/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, [pid 3986] <... openat resumed>) = 4 [pid 3977] <... ioctl resumed>) = 0 [pid 3976] <... mount resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 3986] ioctl(4, LOOP_SET_FD, 3 [pid 3977] close(4 [pid 375] ioctl(3, LOOP_CLR_FD [pid 3976] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3986] <... ioctl resumed>) = 0 [pid 3976] <... openat resumed>) = 3 [pid 3986] close(3 [pid 3977] <... close resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] close(4 [pid 3976] chdir("./bus" [pid 375] close(3 [pid 3977] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 3986] <... close resumed>) = 0 [pid 3977] <... futex resumed>) = 1 [pid 3974] <... futex resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3976] <... chdir resumed>) = 0 [pid 3976] ioctl(4, LOOP_CLR_FD) = 0 [pid 3976] close(4) = 0 [pid 3976] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3975] <... futex resumed>) = 0 [pid 3975] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3975] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3976] <... futex resumed>) = 1 [pid 3977] chdir("./file0" [pid 3974] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3976] chdir("./file0" [pid 3977] <... chdir resumed>) = 0 [pid 3974] <... futex resumed>) = 0 [pid 3986] mkdir("./bus", 0777 [pid 3977] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3974] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3976] <... chdir resumed>) = 0 [pid 3986] <... mkdir resumed>) = 0 [pid 3977] <... futex resumed>) = 0 [pid 3974] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3992 [pid 3986] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3977] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3974] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3974] <... futex resumed>) = 0 [pid 3977] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3974] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3976] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3977] <... open resumed>) = 4 [pid 3977] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... close resumed>) = 0 [pid 3977] <... futex resumed>) = 1 [pid 3974] <... futex resumed>) = 0 [pid 373] rmdir("./112/bus" [pid 3977] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3974] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3977] <... openat resumed>) = 5 [pid 3974] <... futex resumed>) = 0 [pid 3974] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3977] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3974] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3977] <... futex resumed>) = 0 [pid 3974] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... rmdir resumed>) = 0 [pid 3977] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3974] <... futex resumed>) = 0 [pid 3975] <... futex resumed>) = 0 [pid 3975] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3975] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3976] <... futex resumed>) = 1 [pid 3976] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3979] <... ioctl resumed>) = 0 [pid 3974] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3979] close(4) = 0 [pid 373] getdents64(3, [pid 3979] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3978] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 3978] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] close(3 [pid 3978] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3977] <... write resumed>) = 196608 [pid 3977] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... close resumed>) = 0 [pid 3974] <... futex resumed>) = 0 [pid 373] rmdir("./112" [pid 3977] <... futex resumed>) = 1 [pid 3974] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3974] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3979] chdir("./file0" [pid 3977] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 373] <... rmdir resumed>) = 0 [pid 3977] <... mount resumed>) = 0 [pid 373] mkdir("./113", 0777 [pid 3979] <... chdir resumed>) = 0 [pid 3977] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3974] <... futex resumed>) = 0 [pid 3977] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3974] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... mkdir resumed>) = 0 [pid 3977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3974] <... futex resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3977] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3974] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3979] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3977] <... open resumed>) = 6 [pid 373] <... openat resumed>) = 3 [pid 3977] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3979] <... futex resumed>) = 1 [pid 3978] <... futex resumed>) = 0 [pid 3977] <... futex resumed>) = 1 [pid 3974] <... futex resumed>) = 0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 3978] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3977] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3974] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3978] <... futex resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3978] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3974] <... futex resumed>) = 0 [pid 3974] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3979] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 373] close(3 [pid 3979] <... open resumed>) = 4 [pid 373] <... close resumed>) = 0 [pid 3979] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3979] <... futex resumed>) = 1 [pid 3978] <... futex resumed>) = 0 [pid 3978] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3978] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3979] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 3979] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3978] <... futex resumed>) = 0 [pid 3979] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3978] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 3993 [pid 3979] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3978] <... futex resumed>) = 0 [pid 3978] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3979] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 3979] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3978] <... futex resumed>) = 0 [pid 3979] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3978] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3976] <... open resumed>) = 4 [pid 3979] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3978] <... futex resumed>) = 0 [pid 3978] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3979] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3979] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3978] <... futex resumed>) = 0 [pid 3979] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3978] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3979] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3978] <... futex resumed>) = 0 [pid 3979] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3978] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3976] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3975] <... futex resumed>) = 0 [pid 3979] <... open resumed>) = 6 [pid 3975] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3979] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3979] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 3992 attached [pid 3978] <... futex resumed>) = 0 [pid 3975] <... futex resumed>) = 0 [pid 3992] set_robust_list(0x55555713c5e0, 24) = 0 [pid 3992] chdir("./112") = 0 [pid 3992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3992] setpgid(0, 0 [pid 3978] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3975] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3976] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3979] <... futex resumed>) = 0 [pid 3978] <... futex resumed>) = 1 [pid 3978] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3979] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3992] <... setpgid resumed>) = 0 [pid 3992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3992] write(3, "1000", 4) = 4 [pid 3992] close(3) = 0 [pid 3992] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3992] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3976] <... openat resumed>) = 5 [pid 3976] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3975] <... futex resumed>) = 0 [pid 3976] <... futex resumed>) = 1 [pid 3975] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3976] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3975] <... futex resumed>) = 0 [pid 3992] <... futex resumed>) = 0 [pid 3975] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3992] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3992] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3992] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3995], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3995 [pid 3992] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3992] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 3995 attached [pid 3995] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3995] memfd_create("syzkaller", 0./strace-static-x86_64: Process 3993 attached ) = 3 [pid 3995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 3993] set_robust_list(0x55555713c5e0, 24) = 0 [ 81.500398][ T3977] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/114/bus supports timestamps until 2038 (0x7fffffff) [ 81.500653][ T3979] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/111/bus supports timestamps until 2038 (0x7fffffff) [ 81.523918][ T3976] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/112/bus supports timestamps until 2038 (0x7fffffff) [pid 3993] chdir("./113") = 0 [pid 3993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3993] setpgid(0, 0) = 0 [pid 3993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3993] write(3, "1000", 4) = 4 [pid 3993] close(3) = 0 [pid 3993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3993] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 3993] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 3976] <... write resumed>) = 196608 [pid 3993] <... mprotect resumed>) = 0 [pid 3993] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3997], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 3997 [pid 3993] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3993] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 3976] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3975] <... futex resumed>) = 0 [pid 3995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 3995] munmap(0x7f64f6c44000, 1048576 [pid 3975] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3975] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3976] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 3976] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3975] <... futex resumed>) = 0 [pid 3975] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3975] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3976] <... futex resumed>) = 1 [pid 3976] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 3976] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3975] <... futex resumed>) = 0 [pid 3975] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3975] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3976] <... futex resumed>) = 1 [pid 3976] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3995] <... munmap resumed>) = 0 [pid 3986] <... mount resumed>) = 0 [pid 3986] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3974] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3995] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 3995] ioctl(4, LOOP_SET_FD, 3 [pid 3974] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3986] <... openat resumed>) = 3 [pid 3974] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3986] chdir("./bus" [pid 3974] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 3986] <... chdir resumed>) = 0 [pid 3974] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 3997 attached [pid 3986] ioctl(4, LOOP_CLR_FD [pid 3974] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3997] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 3974] <... clone resumed>, parent_tid=[3999], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 3999 [pid 3997] memfd_create("syzkaller", 0 [pid 3974] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3997] <... memfd_create resumed>) = 3 [pid 3974] <... futex resumed>) = 0 [pid 3997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 3974] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3997] <... mmap resumed>) = 0x7f64f6c44000 [pid 3997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 3977] <... write resumed>) = 1048576 [pid 3978] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3978] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3978] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3978] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 3978] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3978] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4000 attached [pid 3997] <... write resumed>) = 1048576 [pid 3995] <... ioctl resumed>) = 0 [pid 3977] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4000] set_robust_list(0x7f64f6d439e0, 24 [pid 3997] munmap(0x7f64f6c44000, 1048576 [pid 3995] close(3 [pid 3977] <... futex resumed>) = 0 [pid 4000] <... set_robust_list resumed>) = 0 [pid 3997] <... munmap resumed>) = 0 [pid 3995] <... close resumed>) = 0 [pid 3977] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4000] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3997] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3995] mkdir("./bus", 0777 [pid 3986] <... ioctl resumed>) = 0 [pid 3978] <... clone resumed>, parent_tid=[4000], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4000 ./strace-static-x86_64: Process 3999 attached [pid 3986] close(4 [pid 3978] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3976] <... write resumed>) = 1048576 [pid 4000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3997] <... openat resumed>) = 4 [pid 3995] <... mkdir resumed>) = 0 [pid 3986] <... close resumed>) = 0 [pid 4000] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 81.589298][ T3986] ext4 filesystem being mounted at /root/syzkaller.43WzWH/112/bus supports timestamps until 2038 (0x7fffffff) [pid 3997] ioctl(4, LOOP_SET_FD, 3 [pid 3995] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 3986] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3978] <... futex resumed>) = 0 [pid 3976] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3999] set_robust_list(0x7f64f6d439e0, 24 [pid 3986] <... futex resumed>) = 1 [pid 3983] <... futex resumed>) = 0 [pid 3978] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3976] <... futex resumed>) = 1 [pid 3975] <... futex resumed>) = 0 [pid 3999] <... set_robust_list resumed>) = 0 [pid 3986] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3983] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3976] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3975] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3999] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3983] <... futex resumed>) = 0 [pid 3976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3975] <... futex resumed>) = 0 [pid 3986] chdir("./file0" [pid 3983] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3975] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3974] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3986] <... chdir resumed>) = 0 [pid 3974] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3979] <... write resumed>) = 1048576 [pid 3979] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3979] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3986] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3976] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3974] <... futex resumed>) = 1 [pid 4000] <... openat resumed>) = 7 [pid 3997] <... ioctl resumed>) = 0 [pid 3986] <... futex resumed>) = 1 [pid 3983] <... futex resumed>) = 0 [pid 3977] <... futex resumed>) = 0 [pid 3974] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3997] close(3 [pid 3983] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3977] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3997] <... close resumed>) = 0 [pid 3983] <... futex resumed>) = 0 [pid 3997] mkdir("./bus", 0777 [pid 3983] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3997] <... mkdir resumed>) = 0 [pid 3997] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4000] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3978] <... futex resumed>) = 0 [pid 3978] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3979] <... futex resumed>) = 0 [pid 3978] <... futex resumed>) = 1 [pid 3979] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3978] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3979] <... openat resumed>) = 8 [pid 3979] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3978] <... futex resumed>) = 0 [pid 3979] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3978] exit_group(0 [pid 3979] <... futex resumed>) = ? [pid 3978] <... exit_group resumed>) = ? [pid 3979] +++ exited with 0 +++ [pid 4000] <... futex resumed>) = ? [pid 3999] <... openat resumed>) = 7 [pid 3986] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3977] <... openat resumed>) = 8 [pid 3999] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3986] <... open resumed>) = 4 [pid 3977] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3999] <... futex resumed>) = 0 [pid 3986] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3977] <... futex resumed>) = 1 [pid 3974] <... futex resumed>) = 0 [ 81.637887][ T4000] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 81.640548][ T3999] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 81.667620][ T4000] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 3999] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3986] <... futex resumed>) = 1 [pid 3983] <... futex resumed>) = 0 [pid 3977] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3974] exit_group(0 [pid 3999] <... futex resumed>) = ? [pid 3986] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3983] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3977] <... futex resumed>) = ? [pid 3974] <... exit_group resumed>) = ? [pid 3999] +++ exited with 0 +++ [pid 3986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3983] <... futex resumed>) = 0 [pid 3977] +++ exited with 0 +++ [pid 3974] +++ exited with 0 +++ [pid 3986] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3983] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3974, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 3986] <... openat resumed>) = 5 [pid 3986] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3983] <... futex resumed>) = 0 [pid 3986] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3983] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3983] <... futex resumed>) = 0 [pid 3986] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3983] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3986] <... write resumed>) = 196608 [pid 3986] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3983] <... futex resumed>) = 0 [pid 3986] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 3983] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3986] <... mount resumed>) = 0 [pid 3983] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3986] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3983] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3986] <... futex resumed>) = 0 [pid 3983] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... openat resumed>) = 3 [pid 3986] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3983] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(3, [pid 3986] <... open resumed>) = 6 [pid 3983] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3986] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3983] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(3, [pid 3986] <... futex resumed>) = 0 [pid 3983] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 3986] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3983] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3983] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3986] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3983] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./114/binderfs") = 0 [pid 376] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4000] +++ exited with 0 +++ [pid 3978] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3978, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 372] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3976] <... openat resumed>) = 7 [pid 3975] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3976] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3975] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3976] <... futex resumed>) = 0 [pid 3975] <... futex resumed>) = 0 [pid 3976] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3975] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3976] <... openat resumed>) = 8 [pid 3976] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3975] <... futex resumed>) = 0 [pid 3976] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3975] exit_group(0 [pid 3976] <... futex resumed>) = ? [pid 3975] <... exit_group resumed>) = ? [pid 3976] +++ exited with 0 +++ [pid 3975] +++ exited with 0 +++ [pid 372] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3975, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 372] <... openat resumed>) = 3 [pid 374] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./112/binderfs") = 0 [pid 374] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./111/binderfs") = 0 [pid 372] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3986] <... write resumed>) = 1048576 [pid 3986] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 81.669131][ T3976] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 81.676453][ T3999] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 81.701764][ T3976] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 81.721174][ T3995] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/112/bus supports timestamps until 2038 (0x7fffffff) [pid 3986] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3997] <... mount resumed>) = 0 [pid 3995] <... mount resumed>) = 0 [pid 3983] <... futex resumed>) = 0 [pid 3997] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3995] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 3983] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3997] <... openat resumed>) = 3 [pid 3995] <... openat resumed>) = 3 [pid 3983] <... futex resumed>) = 1 [pid 3997] chdir("./bus" [pid 3995] chdir("./bus" [pid 3983] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3997] <... chdir resumed>) = 0 [pid 3995] <... chdir resumed>) = 0 [pid 3997] ioctl(4, LOOP_CLR_FD [pid 3995] ioctl(4, LOOP_CLR_FD [pid 3986] <... futex resumed>) = 0 [pid 3986] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 376] <... umount2 resumed>) = 0 [pid 3997] <... ioctl resumed>) = 0 [pid 3995] <... ioctl resumed>) = 0 [pid 3997] close(4 [pid 3995] close(4 [pid 3997] <... close resumed>) = 0 [pid 3995] <... close resumed>) = 0 [pid 3997] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3995] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3986] <... openat resumed>) = 7 [pid 376] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3993] <... futex resumed>) = 0 [pid 3997] <... futex resumed>) = 1 [pid 3995] <... futex resumed>) = 1 [pid 3992] <... futex resumed>) = 0 [pid 3993] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3993] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./114/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./114/bus" [pid 3997] chdir("./file0" [pid 3995] chdir("./file0" [pid 3992] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... rmdir resumed>) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./114" [pid 3992] <... futex resumed>) = 0 [pid 3997] <... chdir resumed>) = 0 [pid 3992] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... rmdir resumed>) = 0 [pid 376] mkdir("./115", 0777 [pid 3997] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3995] <... chdir resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3986] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3983] <... futex resumed>) = 0 [pid 3983] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3983] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3986] <... futex resumed>) = 1 [pid 3986] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3986] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3983] <... futex resumed>) = 0 [pid 3997] <... futex resumed>) = 1 [pid 3995] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3993] <... futex resumed>) = 0 [pid 3983] exit_group(0 [pid 3997] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3995] <... futex resumed>) = 1 [pid 3993] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3992] <... futex resumed>) = 0 [pid 3983] <... exit_group resumed>) = ? [pid 3993] <... futex resumed>) = 0 [pid 3992] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3995] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 3993] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3986] <... futex resumed>) = ? [pid 3992] <... futex resumed>) = 0 [pid 3992] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3997] <... open resumed>) = 4 [pid 3995] <... open resumed>) = 4 [pid 3997] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3995] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3997] <... futex resumed>) = 1 [pid 3993] <... futex resumed>) = 0 [pid 3997] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3995] <... futex resumed>) = 1 [pid 3993] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3992] <... futex resumed>) = 0 [pid 3997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3995] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3993] <... futex resumed>) = 0 [pid 3992] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3997] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3993] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3992] <... futex resumed>) = 0 [pid 3997] <... openat resumed>) = 5 [pid 3992] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3995] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3997] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3995] <... openat resumed>) = 5 [pid 3997] <... futex resumed>) = 1 [pid 3995] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3993] <... futex resumed>) = 0 [pid 3997] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3995] <... futex resumed>) = 1 [pid 3993] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3992] <... futex resumed>) = 0 [pid 3997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3995] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3993] <... futex resumed>) = 0 [pid 3992] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3993] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3997] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3992] <... futex resumed>) = 0 [pid 3995] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3997] <... write resumed>) = 196608 [pid 3992] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3997] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3993] <... futex resumed>) = 0 [pid 3997] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 3993] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3997] <... mount resumed>) = 0 [pid 3995] <... write resumed>) = 196608 [pid 3993] <... futex resumed>) = 0 [pid 3995] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3993] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3995] <... futex resumed>) = 1 [pid 3992] <... futex resumed>) = 0 [pid 3995] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 3992] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3995] <... mount resumed>) = 0 [pid 3992] <... futex resumed>) = 0 [pid 3995] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3992] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3995] <... futex resumed>) = 0 [pid 3992] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3995] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3992] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3992] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3997] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3993] <... futex resumed>) = 0 [pid 3997] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 3993] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3993] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3997] <... open resumed>) = 6 [pid 3995] <... open resumed>) = 6 [pid 376] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 3997] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3995] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 3997] <... futex resumed>) = 1 [pid 3995] <... futex resumed>) = 1 [pid 3993] <... futex resumed>) = 0 [pid 3992] <... futex resumed>) = 0 [pid 376] close(3 [pid 374] lstat("./112/bus", [pid 372] lstat("./111/bus", [pid 3997] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3995] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3993] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3992] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... close resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3993] <... futex resumed>) = 0 [pid 3992] <... futex resumed>) = 0 [pid 3986] +++ exited with 0 +++ [pid 3983] +++ exited with 0 +++ [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 3997] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3995] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3993] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3992] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3983, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4006 [pid 374] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 374] <... openat resumed>) = 4 [pid 372] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... restart_syscall resumed>) = 0 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... openat resumed>) = 4 [pid 377] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] getdents64(4, [pid 372] fstat(4, [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... openat resumed>) = 3 [pid 374] getdents64(4, [pid 372] getdents64(4, [pid 377] fstat(3, [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] close(4 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(3, [pid 374] <... close resumed>) = 0 [pid 372] getdents64(4, [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] rmdir("./112/bus" [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] <... rmdir resumed>) = 0 [pid 372] close(4 [pid 377] lstat("./112/binderfs", [pid 374] getdents64(3, [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... close resumed>) = 0 [pid 377] unlink("./112/binderfs" [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] rmdir("./111/bus" [pid 377] <... unlink resumed>) = 0 [pid 374] close(3 [pid 377] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... close resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 4006 attached [pid 4006] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4006] chdir("./115") = 0 [pid 4006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4006] setpgid(0, 0) = 0 [pid 4006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] rmdir("./112" [pid 372] getdents64(3, [pid 4006] <... openat resumed>) = 3 [pid 374] <... rmdir resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] mkdir("./113", 0777 [pid 372] close(3 [pid 4006] write(3, "1000", 4) = 4 [pid 4006] close(3 [pid 372] <... close resumed>) = 0 [pid 4006] <... close resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 372] rmdir("./111" [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4006] symlink("/dev/binderfs", "./binderfs" [pid 372] <... rmdir resumed>) = 0 [pid 372] mkdir("./112", 0777 [pid 4006] <... symlink resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4006] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4006] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [ 81.734373][ T3997] ext4 filesystem being mounted at /root/syzkaller.k3ECep/113/bus supports timestamps until 2038 (0x7fffffff) [ 81.748222][ T3986] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 81.763771][ T3986] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 4006] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4007], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4007 [pid 4006] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4006] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4007 attached [pid 4007] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4007] memfd_create("syzkaller", 0) = 3 [pid 3997] <... write resumed>) = 1048576 [pid 3995] <... write resumed>) = 1048576 [pid 3995] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3997] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3995] <... futex resumed>) = 1 [pid 3992] <... futex resumed>) = 0 [pid 3993] <... futex resumed>) = 0 [pid 3997] <... futex resumed>) = 1 [pid 3997] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3995] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3993] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3992] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3993] <... futex resumed>) = 0 [pid 3992] <... futex resumed>) = 0 [pid 3995] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 3993] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3992] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4007] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4007] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3995] <... openat resumed>) = 7 [pid 3995] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3992] <... futex resumed>) = 0 [pid 3992] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3992] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3995] <... futex resumed>) = 1 [pid 3995] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 3995] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3992] <... futex resumed>) = 0 [pid 3992] exit_group(0) = ? [pid 3995] <... futex resumed>) = ? [pid 4007] <... openat resumed>) = 4 [pid 377] <... umount2 resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 4007] ioctl(4, LOOP_SET_FD, 3 [pid 377] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] ioctl(3, LOOP_CLR_FD [pid 3995] +++ exited with 0 +++ [pid 3992] +++ exited with 0 +++ [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3992, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 3997] <... openat resumed>) = 7 [pid 377] lstat("./112/bus", [pid 4007] <... ioctl resumed>) = 0 [pid 4007] close(3 [pid 3993] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... restart_syscall resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3993] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] close(3 [pid 372] close(3 [pid 3993] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 3993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4007] <... close resumed>) = 0 [pid 3993] <... mmap resumed>) = 0x7f64f6d23000 [pid 377] <... openat resumed>) = 4 [pid 4007] mkdir("./bus", 0777 [pid 3993] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 377] fstat(4, [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4010 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4009 [pid 3993] <... mprotect resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4007] <... mkdir resumed>) = 0 [pid 3993] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] getdents64(4, [pid 375] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4007] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 3993] <... clone resumed>, parent_tid=[4011], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4011 [pid 377] getdents64(4, [pid 375] <... openat resumed>) = 3 [pid 3993] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3993] <... futex resumed>) = 0 [pid 377] close(4 [pid 375] getdents64(3, [pid 3993] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] rmdir("./112/bus" [pid 375] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... rmdir resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./112/binderfs", [pid 377] getdents64(3, [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] unlink("./112/binderfs" [pid 377] close(3 [pid 375] <... unlink resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 375] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] rmdir("./112") = 0 [pid 377] mkdir("./113", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4012 [pid 3997] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3997] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 4009 attached [pid 4009] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4009] chdir("./112") = 0 [pid 4009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4009] setpgid(0, 0) = 0 [pid 4009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4009] write(3, "1000", 4) = 4 [pid 4009] close(3) = 0 [pid 4009] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4009] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4009] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4009] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4013], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4013 ./strace-static-x86_64: Process 4013 attached ./strace-static-x86_64: Process 4012 attached ./strace-static-x86_64: Process 4011 attached ./strace-static-x86_64: Process 4010 attached [pid 4009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4012] set_robust_list(0x55555713c5e0, 24 [pid 4011] set_robust_list(0x7f64f6d439e0, 24 [pid 4012] <... set_robust_list resumed>) = 0 [pid 4011] <... set_robust_list resumed>) = 0 [pid 4010] set_robust_list(0x55555713c5e0, 24 [pid 4012] chdir("./113" [pid 4011] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4012] <... chdir resumed>) = 0 [pid 4010] <... set_robust_list resumed>) = 0 [pid 4013] set_robust_list(0x7f64ff0649e0, 24 [pid 4011] <... openat resumed>) = 8 [pid 4013] <... set_robust_list resumed>) = 0 [pid 4010] chdir("./113" [pid 4012] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4011] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4012] <... prctl resumed>) = 0 [pid 4010] <... chdir resumed>) = 0 [pid 4011] <... futex resumed>) = 1 [pid 3993] <... futex resumed>) = 0 [pid 4012] setpgid(0, 0 [pid 4011] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4010] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4012] <... setpgid resumed>) = 0 [pid 4010] <... prctl resumed>) = 0 [pid 3993] exit_group(0 [pid 4013] memfd_create("syzkaller", 0 [pid 4012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4011] <... futex resumed>) = ? [pid 3993] <... exit_group resumed>) = ? [pid 4010] setpgid(0, 0 [pid 3997] <... futex resumed>) = ? [pid 4013] <... memfd_create resumed>) = 3 [pid 4012] <... openat resumed>) = 3 [pid 4011] +++ exited with 0 +++ [pid 4010] <... setpgid resumed>) = 0 [pid 4012] write(3, "1000", 4 [pid 4010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4012] <... write resumed>) = 4 [pid 4012] close(3 [pid 4010] <... openat resumed>) = 3 [pid 4012] <... close resumed>) = 0 [pid 4010] write(3, "1000", 4 [pid 4012] symlink("/dev/binderfs", "./binderfs" [pid 4010] <... write resumed>) = 4 [pid 4013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4012] <... symlink resumed>) = 0 [pid 4010] close(3 [pid 4009] <... futex resumed>) = 0 [pid 4012] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4010] <... close resumed>) = 0 [pid 4012] <... futex resumed>) = 0 [pid 4010] symlink("/dev/binderfs", "./binderfs" [pid 4012] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4010] <... symlink resumed>) = 0 [pid 4009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4012] <... mmap resumed>) = 0x7f64ff044000 [pid 4010] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4012] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4010] <... futex resumed>) = 0 [pid 4012] <... mprotect resumed>) = 0 [pid 4010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4012] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4010] <... mmap resumed>) = 0x7f64ff044000 [pid 4010] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4012] <... clone resumed>, parent_tid=[4016], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4016 [pid 4010] <... mprotect resumed>) = 0 [pid 4012] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4010] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4012] <... futex resumed>) = 0 [pid 4012] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4010] <... clone resumed>, parent_tid=[4017], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4017 [pid 4010] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4010] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4017 attached [pid 4017] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4017] memfd_create("syzkaller", 0) = 3 [pid 4017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [ 81.832168][ T3995] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 81.845073][ T3997] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 81.855205][ T3995] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 81.860189][ T3997] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 4017] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4017] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4017] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 4016 attached [pid 4016] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4016] memfd_create("syzkaller", 0) = 3 [pid 4016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4007] <... mount resumed>) = 0 [pid 4007] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4007] chdir("./bus") = 0 [pid 4016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4013] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4007] ioctl(4, LOOP_CLR_FD [pid 375] <... umount2 resumed>) = 0 [pid 4007] <... ioctl resumed>) = 0 [pid 4007] close(4) = 0 [pid 4007] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4006] <... futex resumed>) = 0 [pid 4006] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4006] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4007] <... futex resumed>) = 1 [pid 4007] chdir("./file0") = 0 [pid 4007] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4006] <... futex resumed>) = 0 [pid 4006] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4006] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4007] <... futex resumed>) = 1 [pid 4007] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 4007] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4017] <... openat resumed>) = 4 [pid 4017] ioctl(4, LOOP_SET_FD, 3 [pid 3997] +++ exited with 0 +++ [pid 3993] +++ exited with 0 +++ [pid 375] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./112/bus", [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3993, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 4017] <... ioctl resumed>) = 0 [pid 4016] <... write resumed>) = 1048576 [pid 4013] <... write resumed>) = 1048576 [pid 4007] <... futex resumed>) = 1 [pid 4006] <... futex resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4017] close(3 [pid 4016] munmap(0x7f64f6c44000, 1048576 [pid 375] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4017] <... close resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4017] mkdir("./bus", 0777 [pid 375] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... openat resumed>) = 3 [pid 4006] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4017] <... mkdir resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 4017] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] fstat(3, [pid 375] fstat(4, [pid 4006] <... futex resumed>) = 0 [pid 4006] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, [pid 373] getdents64(3, [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] close(4 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... close resumed>) = 0 [pid 373] lstat("./113/binderfs", [pid 375] rmdir("./112/bus" [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 373] unlink("./113/binderfs" [pid 375] getdents64(3, [pid 373] <... unlink resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3 [pid 373] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... close resumed>) = 0 [pid 4007] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 375] rmdir("./112" [pid 4007] <... openat resumed>) = 5 [pid 375] <... rmdir resumed>) = 0 [pid 4007] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4006] <... futex resumed>) = 0 [pid 375] mkdir("./113", 0777 [pid 4006] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4006] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4007] <... futex resumed>) = 1 [pid 4007] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 375] <... mkdir resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4019 [pid 4013] munmap(0x7f64f6c44000, 1048576 [pid 4007] <... write resumed>) = 196608 [pid 4013] <... munmap resumed>) = 0 [pid 4007] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4016] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 4019 attached [pid 4016] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4013] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4007] <... futex resumed>) = 1 [pid 4006] <... futex resumed>) = 0 [pid 4007] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4006] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4007] <... mount resumed>) = 0 [pid 4006] <... futex resumed>) = 0 [pid 4006] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4019] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4019] chdir("./113" [pid 4007] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4006] <... futex resumed>) = 0 [pid 4007] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4006] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4019] <... chdir resumed>) = 0 [pid 4007] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4006] <... futex resumed>) = 0 [pid 4007] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4006] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4019] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4019] setpgid(0, 0) = 0 [pid 4019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4019] write(3, "1000", 4) = 4 [pid 4019] close(3) = 0 [pid 4019] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4019] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4019] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4019] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4021 attached [ 81.911421][ T4007] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/115/bus supports timestamps until 2038 (0x7fffffff) , parent_tid=[4021], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4021 [pid 4021] set_robust_list(0x7f64ff0649e0, 24 [pid 4019] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4021] <... set_robust_list resumed>) = 0 [pid 4019] <... futex resumed>) = 0 [pid 4021] memfd_create("syzkaller", 0 [pid 4019] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4021] <... memfd_create resumed>) = 3 [pid 4021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 373] <... umount2 resumed>) = 0 [pid 4013] <... openat resumed>) = 4 [pid 4016] <... openat resumed>) = 4 [pid 4016] ioctl(4, LOOP_SET_FD, 3 [pid 4013] ioctl(4, LOOP_SET_FD, 3 [pid 4007] <... open resumed>) = 6 [pid 4007] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4007] <... futex resumed>) = 1 [pid 4006] <... futex resumed>) = 0 [pid 4006] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4007] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4006] <... futex resumed>) = 0 [pid 4013] <... ioctl resumed>) = 0 [pid 4006] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4013] close(3) = 0 [pid 373] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4013] mkdir("./bus", 0777) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4013] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] lstat("./113/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4021] <... write resumed>) = 1048576 [pid 4021] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4021] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4017] <... mount resumed>) = 0 [pid 4017] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4016] <... ioctl resumed>) = 0 [pid 4017] <... openat resumed>) = 3 [pid 4017] chdir("./bus") = 0 [pid 4017] ioctl(4, LOOP_CLR_FD) = 0 [pid 4017] close(4 [pid 4016] close(3 [pid 4017] <... close resumed>) = 0 [pid 4017] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4016] <... close resumed>) = 0 [pid 4016] mkdir("./bus", 0777 [pid 4017] <... futex resumed>) = 1 [pid 4010] <... futex resumed>) = 0 [pid 4017] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4016] <... mkdir resumed>) = 0 [pid 4010] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4016] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4010] <... futex resumed>) = 1 [pid 4010] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4021] <... openat resumed>) = 4 [pid 373] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4017] <... futex resumed>) = 0 [pid 4017] chdir("./file0") = 0 [pid 4017] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4017] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4010] <... futex resumed>) = 0 [pid 4010] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4010] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4021] ioctl(4, LOOP_SET_FD, 3 [pid 373] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, [pid 4017] <... futex resumed>) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4017] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4021] <... ioctl resumed>) = 0 [pid 373] getdents64(4, [pid 4007] <... write resumed>) = 1048576 [pid 4007] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4007] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4006] <... futex resumed>) = 0 [pid 4006] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 81.966393][ T4017] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/113/bus supports timestamps until 2038 (0x7fffffff) [ 82.002776][ T4016] ext4 filesystem being mounted at /root/syzkaller.43WzWH/113/bus supports timestamps until 2038 (0x7fffffff) [pid 4006] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4016] <... mount resumed>) = 0 [pid 4016] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4016] chdir("./bus") = 0 [pid 4016] ioctl(4, LOOP_CLR_FD) = 0 [pid 4016] close(4) = 0 [pid 4016] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4016] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4021] close(3) = 0 [pid 4021] mkdir("./bus", 0777) = 0 [pid 4021] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4012] <... futex resumed>) = 0 [pid 4012] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4012] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./113/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./113") = 0 [pid 373] mkdir("./114", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4030 ./strace-static-x86_64: Process 4030 attached [pid 4030] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4030] chdir("./114") = 0 [pid 4030] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4030] setpgid(0, 0) = 0 [pid 4030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4030] write(3, "1000", 4) = 4 [pid 4030] close(3) = 0 [pid 4030] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4030] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4030] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4030] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4030] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4031], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4031 [pid 4030] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4030] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4031 attached [pid 4031] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4031] memfd_create("syzkaller", 0) = 3 [pid 4031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4031] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4010] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4010] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4010] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4010] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4031] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4013] <... mount resumed>) = 0 [pid 4007] <... futex resumed>) = 0 [pid 4010] <... clone resumed>, parent_tid=[4032], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4032 [pid 4031] <... openat resumed>) = 4 [pid 4010] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4007] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4010] <... futex resumed>) = 0 ./strace-static-x86_64: Process 4032 attached [pid 4031] ioctl(4, LOOP_SET_FD, 3 [pid 4017] <... open resumed>) = 4 [pid 4016] <... futex resumed>) = 0 [pid 4013] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4010] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4017] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4017] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4016] chdir("./file0") = 0 [pid 4016] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4012] <... futex resumed>) = 0 [pid 4012] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4012] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4016] <... futex resumed>) = 1 [pid 4016] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4006] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4006] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 4006] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4006] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4006] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4034], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4034 [pid 4006] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 82.016085][ T4013] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/112/bus supports timestamps until 2038 (0x7fffffff) [ 82.050368][ T4007] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4006] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4013] <... openat resumed>) = 3 [pid 4013] chdir("./bus") = 0 [pid 4013] ioctl(4, LOOP_CLR_FD [pid 4032] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4032] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4032] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4010] <... futex resumed>) = 0 [pid 4010] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4017] <... futex resumed>) = 0 [pid 4010] <... futex resumed>) = 1 [pid 4010] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4017] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651./strace-static-x86_64: Process 4034 attached [pid 4032] <... futex resumed>) = 1 [pid 4017] <... write resumed>) = 196608 [pid 4016] <... open resumed>) = 4 [pid 4007] <... openat resumed>) = 7 [pid 4031] <... ioctl resumed>) = 0 [pid 4007] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4031] close(3 [pid 4016] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4007] <... futex resumed>) = 0 [pid 4031] <... close resumed>) = 0 [pid 4007] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4034] set_robust_list(0x7f64f6d439e0, 24 [pid 4032] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4034] <... set_robust_list resumed>) = 0 [pid 4034] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4034] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4006] <... futex resumed>) = 0 [pid 4031] mkdir("./bus", 0777 [pid 4006] exit_group(0 [pid 4034] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4013] <... ioctl resumed>) = 0 [pid 4031] <... mkdir resumed>) = 0 [pid 4013] close(4) = 0 [pid 4031] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4013] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4007] <... futex resumed>) = ? [pid 4006] <... exit_group resumed>) = ? [pid 4013] <... futex resumed>) = 1 [pid 4009] <... futex resumed>) = 0 [pid 4007] +++ exited with 0 +++ [pid 4013] chdir("./file0" [pid 4009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4013] <... chdir resumed>) = 0 [pid 4009] <... futex resumed>) = 0 [pid 4016] <... futex resumed>) = 1 [pid 4013] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4012] <... futex resumed>) = 0 [pid 4009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4016] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4013] <... futex resumed>) = 0 [pid 4012] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4017] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4013] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4012] <... futex resumed>) = 0 [pid 4009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4016] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4013] <... open resumed>) = 4 [pid 4012] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4010] <... futex resumed>) = 0 [pid 4009] <... futex resumed>) = 0 [pid 4016] <... openat resumed>) = 5 [pid 4013] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4010] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4017] <... futex resumed>) = 1 [pid 4016] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4013] <... futex resumed>) = 0 [pid 4010] <... futex resumed>) = 0 [pid 4009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4017] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4016] <... futex resumed>) = 1 [pid 4013] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4012] <... futex resumed>) = 0 [pid 4010] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4017] <... mount resumed>) = 0 [pid 4016] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4013] <... openat resumed>) = 5 [pid 4012] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4009] <... futex resumed>) = 0 [pid 4013] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4012] <... futex resumed>) = 0 [pid 4009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4013] <... futex resumed>) = 0 [pid 4012] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4017] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4013] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4017] <... futex resumed>) = 1 [pid 4013] <... write resumed>) = 196608 [pid 4010] <... futex resumed>) = 0 [pid 4009] <... futex resumed>) = 0 [pid 4010] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4034] <... futex resumed>) = ? [pid 4017] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4016] <... write resumed>) = 196608 [pid 4013] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4010] <... futex resumed>) = 0 [pid 4034] +++ exited with 0 +++ [pid 4021] <... mount resumed>) = 0 [pid 4017] <... open resumed>) = 6 [pid 4013] <... futex resumed>) = 1 [pid 4009] <... futex resumed>) = 0 [pid 4006] +++ exited with 0 +++ [pid 4021] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4013] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4021] <... openat resumed>) = 3 [pid 4013] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4009] <... futex resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4006, si_uid=0, si_status=0, si_utime=1, si_stime=5} --- [pid 4021] chdir("./bus" [pid 4013] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 4021] <... chdir resumed>) = 0 [pid 4013] <... mount resumed>) = 0 [pid 376] <... restart_syscall resumed>) = 0 [pid 4021] ioctl(4, LOOP_CLR_FD [pid 4013] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4021] <... ioctl resumed>) = 0 [pid 4013] <... futex resumed>) = 1 [pid 4009] <... futex resumed>) = 0 [pid 4021] close(4 [pid 4013] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4021] <... close resumed>) = 0 [pid 4013] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4009] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4013] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4021] <... futex resumed>) = 1 [pid 4019] <... futex resumed>) = 0 [pid 4013] <... open resumed>) = 6 [pid 376] <... openat resumed>) = 3 [pid 4021] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4019] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4017] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4016] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4013] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4010] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] fstat(3, [pid 4021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4019] <... futex resumed>) = 0 [pid 4017] <... futex resumed>) = 0 [pid 4016] <... futex resumed>) = 1 [pid 4013] <... futex resumed>) = 1 [pid 4012] <... futex resumed>) = 0 [pid 4010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4009] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4021] chdir("./file0" [pid 4019] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4017] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4016] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4013] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4012] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4010] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 4021] <... chdir resumed>) = 0 [pid 4017] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4013] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4012] <... futex resumed>) = 0 [pid 4010] <... futex resumed>) = 0 [pid 4009] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4017] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4016] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4013] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4012] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4010] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4031] <... mount resumed>) = 0 [pid 4021] <... futex resumed>) = 1 [pid 4019] <... futex resumed>) = 0 [pid 4016] <... mount resumed>) = 0 [pid 4031] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4031] chdir("./bus") = 0 [pid 4031] ioctl(4, LOOP_CLR_FD) = 0 [pid 4031] close(4) = 0 [pid 4031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4031] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4030] <... futex resumed>) = 0 [pid 4021] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4019] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4016] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4030] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4019] <... futex resumed>) = 0 [pid 4016] <... futex resumed>) = 1 [pid 4012] <... futex resumed>) = 0 [pid 376] lstat("./115/binderfs", [pid 4030] <... futex resumed>) = 1 [pid 4021] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4019] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4016] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4012] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4030] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4031] <... futex resumed>) = 0 [pid 4021] <... open resumed>) = 4 [pid 4016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4012] <... futex resumed>) = 0 [pid 376] unlink("./115/binderfs" [pid 4031] chdir("./file0" [pid 4021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4017] <... write resumed>) = 1048576 [pid 4016] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4012] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4031] <... chdir resumed>) = 0 [pid 4021] <... futex resumed>) = 1 [pid 4019] <... futex resumed>) = 0 [pid 4017] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4016] <... open resumed>) = 6 [pid 376] <... unlink resumed>) = 0 [pid 4031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4021] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4019] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4017] <... futex resumed>) = 1 [pid 4016] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4010] <... futex resumed>) = 0 [pid 376] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4031] <... futex resumed>) = 1 [pid 4030] <... futex resumed>) = 0 [pid 4021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4019] <... futex resumed>) = 0 [pid 4016] <... futex resumed>) = 1 [pid 4012] <... futex resumed>) = 0 [pid 4010] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4031] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4030] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4021] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4019] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4017] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4016] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4030] <... futex resumed>) = 0 [pid 4012] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4010] <... futex resumed>) = 0 [ 82.064451][ T4007] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 82.090263][ T4031] ext4 filesystem being mounted at /root/syzkaller.k3ECep/114/bus supports timestamps until 2038 (0x7fffffff) [ 82.090271][ T4021] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/113/bus supports timestamps until 2038 (0x7fffffff) [pid 4030] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4021] <... openat resumed>) = 5 [pid 4016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4012] <... futex resumed>) = 0 [pid 4010] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4031] <... open resumed>) = 4 [pid 4021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4016] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4012] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4021] <... futex resumed>) = 1 [pid 4019] <... futex resumed>) = 0 [pid 4031] <... futex resumed>) = 1 [pid 4030] <... futex resumed>) = 0 [pid 4021] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4019] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4031] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4030] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4017] <... openat resumed>) = 7 [pid 4017] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4017] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4019] <... futex resumed>) = 0 [pid 4010] <... futex resumed>) = 0 [pid 4030] <... futex resumed>) = 0 [pid 4019] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4010] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4030] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4017] <... futex resumed>) = 0 [pid 4010] <... futex resumed>) = 1 [pid 4017] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4010] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4017] <... openat resumed>) = 8 [pid 4017] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4010] <... futex resumed>) = 0 [pid 4017] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4010] exit_group(0 [pid 4021] <... write resumed>) = 196608 [pid 4010] <... exit_group resumed>) = ? [pid 4032] <... futex resumed>) = ? [pid 4021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4017] <... futex resumed>) = ? [pid 4032] +++ exited with 0 +++ [pid 4031] <... openat resumed>) = 5 [pid 4031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4031] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4030] <... futex resumed>) = 0 [pid 4021] <... futex resumed>) = 1 [pid 4019] <... futex resumed>) = 0 [pid 4016] <... write resumed>) = 1048576 [pid 4013] <... write resumed>) = 1048576 [pid 4030] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4021] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4019] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4030] <... futex resumed>) = 0 [pid 4021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4019] <... futex resumed>) = 0 [pid 4016] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4013] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4009] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4030] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4021] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4019] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4016] <... futex resumed>) = 1 [pid 4013] <... futex resumed>) = 0 [pid 4012] <... futex resumed>) = 0 [pid 4009] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4009] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4012] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4021] <... mount resumed>) = 0 [pid 4031] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4016] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4013] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4012] <... futex resumed>) = 0 [pid 4021] <... futex resumed>) = 1 [pid 4019] <... futex resumed>) = 0 [pid 4012] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4019] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4021] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4019] <... futex resumed>) = 0 [pid 4019] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4031] <... write resumed>) = 196608 [pid 4031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 82.137479][ T4017] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 82.153096][ T4017] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 82.173274][ T4016] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4031] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4030] <... futex resumed>) = 0 [pid 4030] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4031] <... futex resumed>) = 0 [pid 4030] <... futex resumed>) = 1 [pid 4031] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4030] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4031] <... mount resumed>) = 0 [pid 4031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4030] <... futex resumed>) = 0 [pid 4031] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4030] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4030] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4031] <... open resumed>) = 6 [pid 376] <... umount2 resumed>) = 0 [pid 4031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4030] <... futex resumed>) = 0 [pid 4031] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4030] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4021] <... open resumed>) = 6 [pid 4017] +++ exited with 0 +++ [pid 4016] <... openat resumed>) = 7 [pid 4010] +++ exited with 0 +++ [pid 376] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4019] <... futex resumed>) = 0 [pid 4021] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4019] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4030] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4019] <... futex resumed>) = 0 [pid 4019] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./115/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4012] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4012] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] fstat(4, [pid 4012] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4012] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 376] getdents64(4, [pid 4012] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4012] <... clone resumed>, parent_tid=[4039], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4039 [pid 4012] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 4012] <... futex resumed>) = 0 [pid 4012] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./115/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./115") = 0 [pid 376] mkdir("./116", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4040 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4010, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 4009] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4016] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4016] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4009] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 4039 attached ./strace-static-x86_64: Process 4040 attached [pid 4031] <... write resumed>) = 1048576 [pid 4009] <... mmap resumed>) = 0x7f64f6d23000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 82.175928][ T4013] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 82.187786][ T4016] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 82.219917][ T4013] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 4039] set_robust_list(0x7f64f6d439e0, 24 [pid 4040] set_robust_list(0x55555713c5e0, 24 [pid 4039] <... set_robust_list resumed>) = 0 [pid 4031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4009] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 374] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4040] <... set_robust_list resumed>) = 0 [pid 4039] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4031] <... futex resumed>) = 1 [pid 4030] <... futex resumed>) = 0 [pid 4009] <... mprotect resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 4039] <... openat resumed>) = 8 [pid 4031] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4030] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4009] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] fstat(3, [pid 4040] chdir("./116" [pid 4039] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4021] <... write resumed>) = 1048576 [pid 4021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4019] <... futex resumed>) = 0 [pid 4019] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4019] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4021] <... futex resumed>) = 1 [pid 4021] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000./strace-static-x86_64: Process 4041 attached [pid 4040] <... chdir resumed>) = 0 [pid 4039] <... futex resumed>) = 1 [pid 4030] <... futex resumed>) = 0 [pid 4013] <... openat resumed>) = 7 [pid 4012] <... futex resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4041] set_robust_list(0x7f64f6d439e0, 24 [pid 4040] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4039] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4030] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4013] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4012] exit_group(0 [pid 4009] <... clone resumed>, parent_tid=[4041], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4041 [pid 374] getdents64(3, [pid 4041] <... set_robust_list resumed>) = 0 [pid 4040] <... prctl resumed>) = 0 [pid 4039] <... futex resumed>) = ? [pid 4016] <... futex resumed>) = ? [pid 4013] <... futex resumed>) = 0 [pid 4012] <... exit_group resumed>) = ? [pid 4009] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4041] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4040] setpgid(0, 0 [pid 4039] +++ exited with 0 +++ [pid 4016] +++ exited with 0 +++ [pid 4013] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4012] +++ exited with 0 +++ [pid 4009] <... futex resumed>) = 0 [pid 374] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4041] <... openat resumed>) = 8 [pid 4040] <... setpgid resumed>) = 0 [pid 4009] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4012, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4041] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] lstat("./113/binderfs", [pid 4041] <... futex resumed>) = 1 [pid 4040] <... openat resumed>) = 3 [pid 4009] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4041] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4040] write(3, "1000", 4 [pid 4009] exit_group(0 [pid 377] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] unlink("./113/binderfs" [pid 4041] <... futex resumed>) = ? [pid 4040] <... write resumed>) = 4 [pid 4013] <... futex resumed>) = ? [pid 4009] <... exit_group resumed>) = ? [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... unlink resumed>) = 0 [pid 4041] +++ exited with 0 +++ [pid 4040] close(3 [pid 4013] +++ exited with 0 +++ [pid 4009] +++ exited with 0 +++ [pid 377] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4040] <... close resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4009, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 4040] symlink("/dev/binderfs", "./binderfs" [pid 377] fstat(3, [pid 4040] <... symlink resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4040] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(3, [pid 372] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4040] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4040] <... mmap resumed>) = 0x7f64ff044000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... openat resumed>) = 3 [pid 4040] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 377] lstat("./113/binderfs", [pid 372] fstat(3, [pid 4040] <... mprotect resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4040] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] unlink("./113/binderfs" [pid 372] getdents64(3, [pid 377] <... unlink resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 4042 attached [pid 4040] <... clone resumed>, parent_tid=[4042], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4042 [pid 4031] <... openat resumed>) = 7 [pid 4021] <... openat resumed>) = 7 [pid 4021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4019] <... futex resumed>) = 0 [pid 4021] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4019] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4019] <... futex resumed>) = 0 [pid 4021] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4019] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4021] <... openat resumed>) = 8 [pid 4021] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4019] <... futex resumed>) = 0 [pid 4021] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4019] exit_group(0 [pid 4021] <... futex resumed>) = ? [pid 4019] <... exit_group resumed>) = ? [pid 4021] +++ exited with 0 +++ [pid 4019] +++ exited with 0 +++ [pid 4031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4030] <... futex resumed>) = 0 [pid 4031] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4030] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4031] <... openat resumed>) = 8 [pid 4030] <... futex resumed>) = 0 [pid 4031] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4030] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4031] <... futex resumed>) = 0 [pid 4030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4030] exit_group(0 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4019, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 4030] <... exit_group resumed>) = ? [pid 375] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4031] +++ exited with 0 +++ [pid 4030] +++ exited with 0 +++ [pid 377] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4040] <... futex resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4030, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... openat resumed>) = 3 [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 4042] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4042] memfd_create("syzkaller", 0) = 3 [pid 4042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 372] lstat("./112/binderfs", [pid 375] fstat(3, [pid 373] <... restart_syscall resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] getdents64(3, [pid 4042] <... mmap resumed>) = 0x7f64f6c44000 [pid 4040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] unlink("./112/binderfs" [pid 4042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4042] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4042] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4042] ioctl(4, LOOP_SET_FD, 3 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... unlink resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] lstat("./113/binderfs", [pid 372] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] <... openat resumed>) = 3 [pid 375] unlink("./113/binderfs" [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... unlink resumed>) = 0 [pid 373] getdents64(3, [pid 375] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4042] <... ioctl resumed>) = 0 [pid 373] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./114/binderfs") = 0 [pid 373] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4042] close(3) = 0 [pid 4042] mkdir("./bus", 0777) = 0 [ 82.235674][ T4031] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 82.241833][ T4021] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 82.263896][ T4021] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 82.273048][ T4031] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 4042] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue") = 0 [pid 4042] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4042] chdir("./bus") = 0 [pid 4042] ioctl(4, LOOP_CLR_FD [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./113/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./113/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./113") = 0 [pid 374] mkdir("./114", 0777) = 0 [ 82.308413][ T4042] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/116/bus supports timestamps until 2038 (0x7fffffff) [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4042] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./114/bus", [pid 4042] close(4 [pid 377] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... close resumed>) = 0 [pid 373] rmdir("./114/bus" [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./113/bus", [pid 373] <... rmdir resumed>) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 377] lstat("./113/bus", [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] rmdir("./114" [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... rmdir resumed>) = 0 [pid 373] mkdir("./115", 0777 [pid 377] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... mkdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... openat resumed>) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, [pid 375] <... openat resumed>) = 4 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4 [pid 375] fstat(4, [pid 377] <... close resumed>) = 0 [pid 377] rmdir("./113/bus" [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 377] getdents64(3, [pid 375] getdents64(4, [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3 [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] <... close resumed>) = 0 [pid 377] rmdir("./113" [pid 375] getdents64(4, [pid 377] <... rmdir resumed>) = 0 [pid 377] mkdir("./114", 0777 [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 375] close(4) = 0 [pid 375] rmdir("./113/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./113") = 0 [pid 375] mkdir("./114", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./112/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./112/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./112") = 0 [pid 372] mkdir("./113", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4042] <... close resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 374] close(3 [pid 373] <... openat resumed>) = 3 [pid 4042] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] ioctl(3, LOOP_CLR_FD [pid 374] <... close resumed>) = 0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 4042] <... futex resumed>) = 1 [pid 4040] <... futex resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4042] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 373] close(3 [pid 4042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4040] <... futex resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4046 [pid 373] <... close resumed>) = 0 [pid 4040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4047 ./strace-static-x86_64: Process 4047 attached [pid 4047] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4047] chdir("./115") = 0 [pid 4047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4047] setpgid(0, 0) = 0 [pid 4047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] <... close resumed>) = 0 [pid 4042] chdir("./file0" [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4047] <... openat resumed>) = 3 [pid 4042] <... chdir resumed>) = 0 [pid 4042] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4047] write(3, "1000", 4 [pid 4042] <... futex resumed>) = 1 [pid 4040] <... futex resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4048 [pid 4042] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4040] <... futex resumed>) = 0 [pid 4042] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... openat resumed>) = 3 [pid 4047] <... write resumed>) = 4 [pid 4047] close(3) = 0 [pid 4047] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4047] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4047] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 ./strace-static-x86_64: Process 4046 attached [pid 4047] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4046] set_robust_list(0x55555713c5e0, 24 [pid 4047] <... mprotect resumed>) = 0 [pid 4047] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4046] <... set_robust_list resumed>) = 0 [pid 4046] chdir("./114") = 0 [pid 4046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4046] setpgid(0, 0 [pid 4047] <... clone resumed>, parent_tid=[4049], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4049 [pid 4047] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4046] <... setpgid resumed>) = 0 [pid 4042] <... open resumed>) = 4 [pid 4047] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4046] write(3, "1000", 4) = 4 [pid 4046] close(3) = 0 [pid 4046] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4042] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] ioctl(3, LOOP_CLR_FD [pid 4046] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4046] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4046] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4050], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4050 [pid 4046] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4046] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4050 attached [pid 4050] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4042] <... futex resumed>) = 1 [pid 4040] <... futex resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4042] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 372] <... openat resumed>) = 3 [pid 4042] <... openat resumed>) = 5 [pid 4040] <... futex resumed>) = 0 [pid 4042] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 372] ioctl(3, LOOP_CLR_FD [pid 4042] <... futex resumed>) = 0 [pid 4040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4042] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4040] <... futex resumed>) = 0 [pid 4042] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4050] memfd_create("syzkaller", 0) = 3 [pid 4050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4042] <... write resumed>) = 196608 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4042] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4051 [pid 372] close(3 [pid 4042] <... futex resumed>) = 1 [pid 4040] <... futex resumed>) = 0 [pid 4040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 4040] <... futex resumed>) = 0 [pid 4042] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4042] <... mount resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4052 [pid 4042] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4040] <... futex resumed>) = 0 [pid 4040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4042] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4040] <... futex resumed>) = 0 [pid 4040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4042] <... open resumed>) = 6 [pid 4042] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4040] <... futex resumed>) = 0 [pid 4040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4042] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4040] <... futex resumed>) = 0 [pid 4040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 4051 attached [pid 4051] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4051] chdir("./114") = 0 [pid 4051] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4051] setpgid(0, 0) = 0 [pid 4051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4051] write(3, "1000", 4) = 4 [pid 4051] close(3) = 0 [pid 4051] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4051] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4051] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4051] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4053], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4053 [pid 4051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4052 attached ./strace-static-x86_64: Process 4048 attached [pid 4052] set_robust_list(0x55555713c5e0, 24 [pid 4048] set_robust_list(0x55555713c5e0, 24 [pid 4052] <... set_robust_list resumed>) = 0 [pid 4048] <... set_robust_list resumed>) = 0 [pid 4052] chdir("./113" [pid 4048] chdir("./114" [pid 4052] <... chdir resumed>) = 0 [pid 4048] <... chdir resumed>) = 0 [pid 4048] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4048] <... prctl resumed>) = 0 [pid 4052] setpgid(0, 0 [pid 4048] setpgid(0, 0 [pid 4050] <... write resumed>) = 1048576 [pid 4050] munmap(0x7f64f6c44000, 1048576 [pid 4052] <... setpgid resumed>) = 0 [pid 4048] <... setpgid resumed>) = 0 [pid 4050] <... munmap resumed>) = 0 [pid 4050] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 4052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4050] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 4053 attached [pid 4053] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4053] memfd_create("syzkaller", 0 [pid 4052] <... openat resumed>) = 3 [pid 4052] write(3, "1000", 4 [pid 4048] <... openat resumed>) = 3 [pid 4053] <... memfd_create resumed>) = 3 [pid 4053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4052] <... write resumed>) = 4 [pid 4052] close(3 [pid 4048] write(3, "1000", 4 [pid 4052] <... close resumed>) = 0 [pid 4048] <... write resumed>) = 4 [pid 4052] symlink("/dev/binderfs", "./binderfs" [pid 4048] close(3) = 0 [pid 4052] <... symlink resumed>) = 0 [pid 4048] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4052] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4048] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4052] <... futex resumed>) = 0 [pid 4048] <... futex resumed>) = 0 [pid 4052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4052] <... mmap resumed>) = 0x7f64ff044000 [pid 4048] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4052] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4048] <... mprotect resumed>) = 0 [pid 4052] <... mprotect resumed>) = 0 [pid 4052] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4048] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4055], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4055 [pid 4052] <... clone resumed>, parent_tid=[4056], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4056 [pid 4048] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4052] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4048] <... futex resumed>) = 0 [pid 4052] <... futex resumed>) = 0 [pid 4048] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4052] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4050] <... ioctl resumed>) = 0 [pid 4050] close(3) = 0 [pid 4050] mkdir("./bus", 0777) = 0 [pid 4050] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue"./strace-static-x86_64: Process 4056 attached [pid 4056] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4056] memfd_create("syzkaller", 0) = 3 [pid 4056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 4049 attached [pid 4049] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4049] memfd_create("syzkaller", 0) = 3 [pid 4049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 4055 attached [pid 4055] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4055] memfd_create("syzkaller", 0) = 3 [pid 4055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4040] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4040] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4040] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4040] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4059], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4059 [pid 4040] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4040] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4053] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 4059 attached [pid 4059] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4059] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4056] <... write resumed>) = 1048576 [pid 4055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4053] munmap(0x7f64f6c44000, 1048576 [pid 4042] <... write resumed>) = 1048576 [pid 4056] munmap(0x7f64f6c44000, 1048576 [pid 4053] <... munmap resumed>) = 0 [pid 4042] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4056] <... munmap resumed>) = 0 [pid 4053] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4042] <... futex resumed>) = 0 [pid 4053] <... openat resumed>) = 4 [pid 4042] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4053] ioctl(4, LOOP_SET_FD, 3 [pid 4056] <... openat resumed>) = 4 [pid 4053] <... ioctl resumed>) = 0 [pid 4056] ioctl(4, LOOP_SET_FD, 3 [pid 4053] close(3) = 0 [pid 4053] mkdir("./bus", 0777 [pid 4055] <... write resumed>) = 1048576 [pid 4053] <... mkdir resumed>) = 0 [pid 4050] <... mount resumed>) = 0 [pid 4049] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4056] <... ioctl resumed>) = 0 [pid 4055] munmap(0x7f64f6c44000, 1048576 [pid 4053] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4050] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4056] close(3) = 0 [pid 4050] <... openat resumed>) = 3 [pid 4056] mkdir("./bus", 0777 [pid 4055] <... munmap resumed>) = 0 [pid 4050] chdir("./bus" [pid 4056] <... mkdir resumed>) = 0 [pid 4050] <... chdir resumed>) = 0 [pid 4055] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4056] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4055] <... openat resumed>) = 4 [pid 4050] ioctl(4, LOOP_CLR_FD) = 0 [pid 4055] ioctl(4, LOOP_SET_FD, 3 [pid 4050] close(4 [pid 4049] <... write resumed>) = 1048576 [pid 4055] <... ioctl resumed>) = 0 [pid 4050] <... close resumed>) = 0 [pid 4055] close(3 [pid 4049] munmap(0x7f64f6c44000, 1048576 [pid 4050] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4055] <... close resumed>) = 0 [pid 4050] <... futex resumed>) = 1 [pid 4046] <... futex resumed>) = 0 [pid 4050] chdir("./file0" [pid 4046] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4050] <... chdir resumed>) = 0 [pid 4046] <... futex resumed>) = 0 [pid 4050] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4046] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4050] <... futex resumed>) = 0 [pid 4046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4050] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4046] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4046] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4055] mkdir("./bus", 0777 [pid 4050] <... open resumed>) = 4 [pid 4055] <... mkdir resumed>) = 0 [pid 4050] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4046] <... futex resumed>) = 0 [ 82.576195][ T4050] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/114/bus supports timestamps until 2038 (0x7fffffff) [ 82.593113][ T4059] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4055] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4050] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4046] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4049] <... munmap resumed>) = 0 [pid 4050] <... openat resumed>) = 5 [pid 4046] <... futex resumed>) = 0 [pid 4050] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4046] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4050] <... futex resumed>) = 0 [pid 4046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4050] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4046] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4059] <... openat resumed>) = 7 [pid 4049] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4046] <... futex resumed>) = 0 [pid 4040] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4059] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4049] <... openat resumed>) = 4 [pid 4046] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4040] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4059] <... futex resumed>) = 0 [pid 4049] ioctl(4, LOOP_SET_FD, 3 [pid 4042] <... futex resumed>) = 0 [pid 4040] <... futex resumed>) = 1 [pid 4059] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4042] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4040] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4042] <... openat resumed>) = 8 [pid 4042] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4040] <... futex resumed>) = 0 [pid 4042] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4040] exit_group(0 [pid 4059] <... futex resumed>) = ? [pid 4050] <... write resumed>) = 196608 [pid 4042] <... futex resumed>) = ? [pid 4040] <... exit_group resumed>) = ? [pid 4059] +++ exited with 0 +++ [pid 4050] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4042] +++ exited with 0 +++ [pid 4050] <... futex resumed>) = 1 [pid 4046] <... futex resumed>) = 0 [pid 4050] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4046] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4050] <... mount resumed>) = 0 [pid 4046] <... futex resumed>) = 0 [pid 4050] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4046] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4050] <... futex resumed>) = 0 [pid 4046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4050] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4046] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4046] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4053] <... mount resumed>) = 0 [pid 4049] <... ioctl resumed>) = 0 [pid 4049] close(3) = 0 [pid 4049] mkdir("./bus", 0777) = 0 [pid 4049] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4053] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4053] chdir("./bus") = 0 [pid 4053] ioctl(4, LOOP_CLR_FD) = 0 [pid 4053] close(4) = 0 [pid 4053] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4053] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4051] <... futex resumed>) = 0 [pid 4040] +++ exited with 0 +++ [pid 4050] <... open resumed>) = 6 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4040, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 376] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./116/binderfs") = 0 [pid 376] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4050] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4051] <... futex resumed>) = 1 [pid 4056] <... mount resumed>) = 0 [pid 4051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4050] <... futex resumed>) = 1 [pid 4046] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 4056] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4050] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4046] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4046] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4050] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4046] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4056] <... openat resumed>) = 3 [pid 376] lstat("./116/bus", [pid 4053] <... futex resumed>) = 0 [pid 4053] chdir("./file0") = 0 [pid 4053] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4051] <... futex resumed>) = 0 [pid 4051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4050] <... write resumed>) = 1048576 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4050] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4046] <... futex resumed>) = 0 [pid 4046] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4046] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4056] chdir("./bus" [pid 4053] <... futex resumed>) = 1 [pid 4050] <... futex resumed>) = 1 [pid 376] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4056] <... chdir resumed>) = 0 [pid 4053] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 82.628415][ T4059] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 82.645923][ T4053] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/114/bus supports timestamps until 2038 (0x7fffffff) [ 82.646663][ T4056] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/113/bus supports timestamps until 2038 (0x7fffffff) [pid 4056] ioctl(4, LOOP_CLR_FD [pid 4053] <... open resumed>) = 4 [pid 376] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4053] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 4 [pid 4053] <... futex resumed>) = 1 [pid 376] fstat(4, [pid 4053] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./116/bus") = 0 [pid 376] getdents64(3, [pid 4050] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4055] <... mount resumed>) = 0 [pid 4051] <... futex resumed>) = 0 [pid 376] close(3 [pid 4051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4053] <... futex resumed>) = 0 [pid 4051] <... futex resumed>) = 1 [pid 4053] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4053] <... openat resumed>) = 5 [pid 4053] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4051] <... futex resumed>) = 0 [pid 4053] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4053] <... write resumed>) = 196608 [pid 4051] <... futex resumed>) = 0 [pid 4051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4053] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4051] <... futex resumed>) = 0 [pid 4051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4053] <... futex resumed>) = 1 [pid 4053] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4053] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4051] <... futex resumed>) = 0 [pid 4051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4053] <... futex resumed>) = 1 [pid 4053] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4055] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4055] chdir("./bus") = 0 [pid 4055] ioctl(4, LOOP_CLR_FD [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./116") = 0 [pid 376] mkdir("./117", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4049] <... mount resumed>) = 0 [pid 4049] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4049] chdir("./bus") = 0 [pid 4049] ioctl(4, LOOP_CLR_FD [pid 4053] <... open resumed>) = 6 [pid 376] <... openat resumed>) = 3 [pid 4053] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] ioctl(3, LOOP_CLR_FD [pid 4053] <... futex resumed>) = 1 [pid 4051] <... futex resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4053] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 4056] <... ioctl resumed>) = 0 [pid 4055] <... ioctl resumed>) = 0 [pid 4051] <... futex resumed>) = 0 [pid 4050] <... openat resumed>) = 7 [pid 4049] <... ioctl resumed>) = 0 [pid 4046] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 376] <... close resumed>) = 0 [pid 4051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4046] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4056] close(4 [pid 4055] close(4 [pid 4056] <... close resumed>) = 0 [pid 4055] <... close resumed>) = 0 [pid 4056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4055] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4056] <... futex resumed>) = 1 [pid 4055] <... futex resumed>) = 1 [pid 4052] <... futex resumed>) = 0 [pid 4048] <... futex resumed>) = 0 [pid 4056] chdir("./file0" [pid 4055] chdir("./file0" [pid 4052] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4048] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4056] <... chdir resumed>) = 0 [pid 4055] <... chdir resumed>) = 0 [pid 4052] <... futex resumed>) = 0 [pid 4048] <... futex resumed>) = 0 [pid 4046] <... futex resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4055] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4052] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4048] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4056] <... futex resumed>) = 0 [pid 4055] <... futex resumed>) = 0 [pid 4052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4055] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4052] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4048] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4052] <... futex resumed>) = 0 [pid 4048] <... futex resumed>) = 0 [pid 4056] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4055] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4052] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4048] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4049] close(4) = 0 [pid 4049] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4047] <... futex resumed>) = 0 [pid 4047] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4047] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4049] <... futex resumed>) = 1 [pid 4049] chdir("./file0") = 0 [pid 4049] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4047] <... futex resumed>) = 0 [pid 4047] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4047] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4049] <... futex resumed>) = 1 [pid 4049] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4050] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4050] <... futex resumed>) = 0 [pid 4046] <... mmap resumed>) = 0x7f64f6d23000 [pid 4056] <... open resumed>) = 4 [pid 4055] <... open resumed>) = 4 [pid 4046] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4072 [pid 4056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4055] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4056] <... futex resumed>) = 1 [pid 4055] <... futex resumed>) = 1 [pid 4052] <... futex resumed>) = 0 [pid 4048] <... futex resumed>) = 0 [pid 4056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4055] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4052] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4048] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4052] <... futex resumed>) = 0 [pid 4048] <... futex resumed>) = 0 [pid 4056] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4055] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4052] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4048] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4056] <... openat resumed>) = 5 [pid 4055] <... openat resumed>) = 5 [pid 4046] <... mprotect resumed>) = 0 [pid 4056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4055] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4056] <... futex resumed>) = 1 [pid 4055] <... futex resumed>) = 1 [pid 4052] <... futex resumed>) = 0 [pid 4048] <... futex resumed>) = 0 [pid 4046] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4055] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4052] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4048] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4052] <... futex resumed>) = 0 [pid 4049] <... open resumed>) = 4 [pid 4048] <... futex resumed>) = 0 [pid 4056] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4055] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4052] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4049] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4048] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4046] <... clone resumed>, parent_tid=[4073], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4073 [pid 4056] <... write resumed>) = 196608 [pid 4055] <... write resumed>) = 196608 [pid 4049] <... futex resumed>) = 1 [pid 4047] <... futex resumed>) = 0 [pid 4046] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4047] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4046] <... futex resumed>) = 0 [pid 4056] <... futex resumed>) = 1 [pid 4055] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4052] <... futex resumed>) = 0 [pid 4049] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4047] <... futex resumed>) = 0 [pid 4046] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4055] <... futex resumed>) = 1 [pid 4052] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4049] <... openat resumed>) = 5 [pid 4048] <... futex resumed>) = 0 [pid 4047] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4055] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4052] <... futex resumed>) = 0 [pid 4049] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4048] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4056] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4052] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4050] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4049] <... futex resumed>) = 0 [pid 4048] <... futex resumed>) = 0 [pid 4047] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4056] <... mount resumed>) = 0 [pid 4055] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4049] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4048] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4047] <... futex resumed>) = 0 ./strace-static-x86_64: Process 4073 attached ./strace-static-x86_64: Process 4072 attached [pid 4056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4055] <... mount resumed>) = 0 [pid 4073] set_robust_list(0x7f64f6d439e0, 24 [pid 4072] set_robust_list(0x55555713c5e0, 24 [pid 4047] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4073] <... set_robust_list resumed>) = 0 [pid 4072] <... set_robust_list resumed>) = 0 [pid 4056] <... futex resumed>) = 1 [pid 4055] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4053] <... write resumed>) = 1048576 [pid 4052] <... futex resumed>) = 0 [pid 4073] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4072] chdir("./117" [pid 4056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4055] <... futex resumed>) = 1 [pid 4053] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4052] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4048] <... futex resumed>) = 0 [pid 4072] <... chdir resumed>) = 0 [pid 4056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4055] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4053] <... futex resumed>) = 1 [pid 4052] <... futex resumed>) = 0 [pid 4051] <... futex resumed>) = 0 [pid 4049] <... write resumed>) = 196608 [pid 4048] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4073] <... openat resumed>) = 8 [pid 4072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4073] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4072] <... prctl resumed>) = 0 [pid 4056] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4055] <... open resumed>) = 6 [ 82.690362][ T4055] ext4 filesystem being mounted at /root/syzkaller.43WzWH/114/bus supports timestamps until 2038 (0x7fffffff) [ 82.694098][ T4050] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 82.708121][ T4049] ext4 filesystem being mounted at /root/syzkaller.k3ECep/115/bus supports timestamps until 2038 (0x7fffffff) [ 82.716193][ T4050] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 4053] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4052] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4049] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4048] <... futex resumed>) = 0 [pid 4073] <... futex resumed>) = 1 [pid 4072] setpgid(0, 0 [pid 4056] <... open resumed>) = 6 [pid 4055] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4046] <... futex resumed>) = 0 [pid 4073] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4072] <... setpgid resumed>) = 0 [pid 4046] exit_group(0 [pid 4073] <... futex resumed>) = ? [pid 4072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4046] <... exit_group resumed>) = ? [pid 4073] +++ exited with 0 +++ [pid 4072] <... openat resumed>) = 3 [pid 4072] write(3, "1000", 4) = 4 [pid 4072] close(3) = 0 [pid 4072] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4072] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4072] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4072] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4072] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4074], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4074 [pid 4072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4051] <... futex resumed>) = 0 [pid 4051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4049] <... futex resumed>) = 1 [pid 4049] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4048] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4047] <... futex resumed>) = 0 ./strace-static-x86_64: Process 4074 attached [pid 4056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4055] <... futex resumed>) = 0 [pid 4050] <... futex resumed>) = ? [pid 4049] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4047] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4074] set_robust_list(0x7f64ff0649e0, 24 [pid 4056] <... futex resumed>) = 1 [pid 4055] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4050] +++ exited with 0 +++ [pid 4049] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4052] <... futex resumed>) = 0 [pid 4048] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4047] <... futex resumed>) = 0 [pid 4046] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4046, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 4074] <... set_robust_list resumed>) = 0 [pid 4074] memfd_create("syzkaller", 0) = 3 [pid 374] <... restart_syscall resumed>) = 0 [pid 4074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4056] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4055] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4052] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4049] <... mount resumed>) = 0 [pid 4048] <... futex resumed>) = 0 [pid 4047] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4055] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4052] <... futex resumed>) = 0 [pid 4049] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4048] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4052] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4049] <... futex resumed>) = 0 [pid 4047] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4049] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4047] <... futex resumed>) = 0 [pid 4049] <... open resumed>) = 6 [pid 4047] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4049] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4049] <... futex resumed>) = 0 [pid 4047] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4049] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4047] <... futex resumed>) = 0 [pid 4074] <... write resumed>) = 1048576 [pid 4047] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4056] <... write resumed>) = 1048576 [pid 374] getdents64(3, [pid 4056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4052] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4056] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4052] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4074] munmap(0x7f64f6c44000, 1048576 [pid 4055] <... write resumed>) = 1048576 [pid 4052] <... futex resumed>) = 0 [pid 4049] <... write resumed>) = 1048576 [pid 374] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4074] <... munmap resumed>) = 0 [pid 4055] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4049] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4074] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4055] <... futex resumed>) = 1 [ 82.771636][ T4053] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 82.794101][ T4053] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 4049] <... futex resumed>) = 1 [pid 374] lstat("./114/binderfs", [pid 4074] <... openat resumed>) = 4 [pid 4055] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4049] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4074] ioctl(4, LOOP_SET_FD, 3 [pid 374] unlink("./114/binderfs") = 0 [pid 374] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4053] <... openat resumed>) = 7 [pid 4053] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4051] <... futex resumed>) = 0 [pid 4053] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4051] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4051] <... futex resumed>) = 0 [pid 4053] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4051] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4053] <... openat resumed>) = 8 [pid 4053] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4051] <... futex resumed>) = 0 [pid 4053] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4051] exit_group(0 [pid 4053] <... futex resumed>) = ? [pid 4051] <... exit_group resumed>) = ? [pid 4053] +++ exited with 0 +++ [pid 4052] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4048] <... futex resumed>) = 0 [pid 4048] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4055] <... futex resumed>) = 0 [pid 4048] <... futex resumed>) = 1 [pid 4055] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4048] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4047] <... futex resumed>) = 0 [pid 4047] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4047] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4074] <... ioctl resumed>) = 0 [pid 4051] +++ exited with 0 +++ [pid 4049] <... futex resumed>) = 0 [pid 4074] close(3 [pid 4056] <... openat resumed>) = 7 [pid 4049] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4074] <... close resumed>) = 0 [pid 4056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4055] <... openat resumed>) = 7 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4051, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 375] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./114/binderfs") = 0 [pid 375] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4055] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4056] <... futex resumed>) = 1 [pid 4055] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4056] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4074] mkdir("./bus", 0777) = 0 [ 82.818891][ T4056] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 82.834260][ T4055] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 82.840507][ T4056] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 82.852089][ T4055] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 4074] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4052] <... futex resumed>) = 0 [pid 4048] <... futex resumed>) = 0 [pid 4047] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4047] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4047] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4047] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4047] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4076], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4076 [pid 4047] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4047] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4052] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4048] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4052] <... futex resumed>) = 1 [pid 4048] <... futex resumed>) = 1 [pid 4052] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4048] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4055] <... futex resumed>) = 0 [pid 4055] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4056] <... futex resumed>) = 0 [pid 4055] <... openat resumed>) = 8 [pid 4056] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4056] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4052] <... futex resumed>) = 0 [pid 4052] exit_group(0) = ? [pid 4055] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4048] <... futex resumed>) = 0 [pid 4048] exit_group(0) = ? [pid 4056] <... futex resumed>) = ? [pid 4049] <... openat resumed>) = 7 [pid 4049] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4049] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4055] <... futex resumed>) = ? ./strace-static-x86_64: Process 4076 attached [pid 4076] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4076] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4076] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4047] <... futex resumed>) = 0 [pid 4047] exit_group(0 [pid 4049] <... futex resumed>) = ? [pid 4047] <... exit_group resumed>) = ? [pid 4049] +++ exited with 0 +++ [pid 4076] <... futex resumed>) = ? [pid 4074] <... mount resumed>) = 0 [pid 4074] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4074] chdir("./bus") = 0 [pid 4074] ioctl(4, LOOP_CLR_FD [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./114/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./114/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./114") = 0 [pid 374] mkdir("./115", 0777) = 0 [ 82.859056][ T4049] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 82.880333][ T4049] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 82.893271][ T4074] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/117/bus supports timestamps until 2038 (0x7fffffff) [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4076] +++ exited with 0 +++ [pid 4074] <... ioctl resumed>) = 0 [pid 4056] +++ exited with 0 +++ [pid 4055] +++ exited with 0 +++ [pid 4052] +++ exited with 0 +++ [pid 4048] +++ exited with 0 +++ [pid 4047] +++ exited with 0 +++ [pid 375] <... umount2 resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4048, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4047, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4052, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 377] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 377] fstat(3, [pid 373] fstat(3, [pid 372] fstat(3, [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, [pid 373] getdents64(3, [pid 372] getdents64(3, [pid 4074] close(4 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./114/binderfs", [pid 373] lstat("./115/binderfs", [pid 372] lstat("./113/binderfs", [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./114/binderfs" [pid 373] unlink("./115/binderfs" [pid 372] unlink("./113/binderfs" [pid 4074] <... close resumed>) = 0 [pid 377] <... unlink resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... unlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 377] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4074] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./114/bus", [pid 374] close(3 [pid 4074] <... futex resumed>) = 1 [pid 4072] <... futex resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... close resumed>) = 0 [pid 4074] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4072] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4074] chdir("./file0" [pid 4072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4079 [pid 4074] <... chdir resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 4074] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fstat(4, [pid 4074] <... futex resumed>) = 1 [pid 4072] <... futex resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4074] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(4, [pid 4074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4072] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4074] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(4, [pid 4074] <... open resumed>) = 4 [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4074] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(4 [pid 4074] <... futex resumed>) = 1 [pid 4072] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 4074] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./114/bus" [pid 4074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4072] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 4074] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(3, [pid 4074] <... openat resumed>) = 5 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4074] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 4074] <... futex resumed>) = 1 [pid 4072] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 4074] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./114" [pid 4074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4072] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 4074] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] mkdir("./115", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 4079 attached [pid 4079] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4079] chdir("./115") = 0 [pid 4079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4079] setpgid(0, 0 [pid 4074] <... write resumed>) = 196608 [pid 4074] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4072] <... futex resumed>) = 0 [pid 4074] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4072] <... futex resumed>) = 0 [pid 4074] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4074] <... mount resumed>) = 0 [pid 4079] <... setpgid resumed>) = 0 [pid 4074] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4074] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4072] <... futex resumed>) = 0 [pid 4072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4079] <... openat resumed>) = 3 [pid 4074] <... futex resumed>) = 0 [pid 4072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4079] write(3, "1000", 4) = 4 [pid 4079] close(3) = 0 [pid 4079] symlink("/dev/binderfs", "./binderfs" [pid 4074] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4079] <... symlink resumed>) = 0 [pid 4079] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4074] <... open resumed>) = 6 [pid 375] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 4074] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] ioctl(3, LOOP_CLR_FD [pid 4074] <... futex resumed>) = 1 [pid 4072] <... futex resumed>) = 0 [pid 373] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4074] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4079] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4072] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = 0 [pid 4072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] lstat("./115/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 4079] <... mprotect resumed>) = 0 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./115/bus") = 0 [pid 372] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4079] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./115") = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] mkdir("./116", 0777 [pid 4079] <... clone resumed>, parent_tid=[4080], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4080 [pid 373] <... mkdir resumed>) = 0 [pid 372] lstat("./113/bus", [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4079] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 4080 attached [pid 4080] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4080] memfd_create("syzkaller", 0) = 3 [pid 4080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4079] <... futex resumed>) = 0 [pid 372] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4074] <... write resumed>) = 1048576 [pid 4074] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4072] <... futex resumed>) = 0 [pid 4072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4074] <... futex resumed>) = 1 [pid 4074] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4079] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 372] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 372] fstat(4, [pid 4080] <... write resumed>) = 1048576 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./113/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./113") = 0 [pid 372] mkdir("./114", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4080] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4074] <... openat resumed>) = 7 [pid 4074] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4074] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4072] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4072] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] close(3 [pid 4072] <... futex resumed>) = 1 [pid 4072] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4074] <... futex resumed>) = 0 [pid 4074] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4074] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4074] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4072] <... futex resumed>) = 0 [pid 377] lstat("./114/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4072] exit_group(0) = ? [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, [pid 4074] <... futex resumed>) = ? [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./114/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./114") = 0 [pid 377] mkdir("./115", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 372] <... openat resumed>) = 3 [pid 375] <... close resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4081 [pid 372] close(3./strace-static-x86_64: Process 4081 attached ) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] <... openat resumed>) = 3 [pid 4081] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4081] chdir("./115" [pid 377] ioctl(3, LOOP_CLR_FD [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4082 [pid 4081] <... chdir resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4081] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 377] close(3 [pid 4081] <... prctl resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 4081] setpgid(0, 0) = 0 [pid 4081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4080] <... openat resumed>) = 4 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4081] <... openat resumed>) = 3 [pid 4081] write(3, "1000", 4) = 4 [pid 4081] close(3) = 0 [pid 4081] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4081] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4081] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4081] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4083], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4083 [pid 4081] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4081] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4082 attached [pid 4082] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4082] chdir("./114") = 0 [pid 4082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4082] setpgid(0, 0) = 0 [pid 4082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4082] <... openat resumed>) = 3 [pid 4082] write(3, "1000", 4) = 4 [pid 4082] close(3) = 0 [pid 4082] symlink("/dev/binderfs", "./binderfs" [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4084 [pid 4082] <... symlink resumed>) = 0 [pid 4082] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4085 [pid 4082] <... futex resumed>) = 0 [pid 4082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4082] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [ 83.028672][ T4074] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 83.042957][ T4074] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 4082] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4080] ioctl(4, LOOP_SET_FD, 3 [pid 4082] <... clone resumed>, parent_tid=[4086], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4086 [pid 4082] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4082] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4084 attached [pid 4084] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4084] chdir("./116") = 0 [pid 4084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4084] setpgid(0, 0) = 0 [pid 4084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4084] write(3, "1000", 4) = 4 [pid 4084] close(3) = 0 [pid 4084] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4084] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4084] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4084] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4084] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4087], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4087 [pid 4084] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4084] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4087 attached [pid 4087] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4087] memfd_create("syzkaller", 0) = 3 [pid 4087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4074] +++ exited with 0 +++ [pid 4072] +++ exited with 0 +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4072, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./117/binderfs") = 0 [pid 376] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4087] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 4086 attached ./strace-static-x86_64: Process 4085 attached [pid 4080] <... ioctl resumed>) = 0 [pid 4080] close(3) = 0 ./strace-static-x86_64: Process 4083 attached [pid 4086] set_robust_list(0x7f64ff0649e0, 24 [pid 4085] set_robust_list(0x55555713c5e0, 24 [pid 4080] mkdir("./bus", 0777 [pid 4087] munmap(0x7f64f6c44000, 1048576 [pid 4080] <... mkdir resumed>) = 0 [pid 4085] <... set_robust_list resumed>) = 0 [pid 4086] <... set_robust_list resumed>) = 0 [pid 4080] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4085] chdir("./115" [pid 4087] <... munmap resumed>) = 0 [pid 4087] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4086] memfd_create("syzkaller", 0 [pid 4085] <... chdir resumed>) = 0 [pid 4086] <... memfd_create resumed>) = 3 [pid 4085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4083] set_robust_list(0x7f64ff0649e0, 24 [pid 4086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4085] <... prctl resumed>) = 0 [pid 4083] <... set_robust_list resumed>) = 0 [pid 4086] <... mmap resumed>) = 0x7f64f6c44000 [pid 4085] setpgid(0, 0) = 0 [pid 4085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4085] write(3, "1000", 4) = 4 [pid 4085] close(3) = 0 [pid 4085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4085] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4083] memfd_create("syzkaller", 0 [pid 4085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4083] <... memfd_create resumed>) = 3 [pid 4085] <... mmap resumed>) = 0x7f64ff044000 [pid 4083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4085] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4083] <... mmap resumed>) = 0x7f64f6c44000 [pid 4085] <... mprotect resumed>) = 0 [pid 4085] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4089 attached [pid 4089] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4089] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4085] <... clone resumed>, parent_tid=[4089], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4089 [pid 4085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4089] <... futex resumed>) = 0 [pid 4089] memfd_create("syzkaller", 0) = 3 [pid 4089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4089] <... write resumed>) = 1048576 [pid 4089] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4089] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4086] <... write resumed>) = 1048576 [pid 4086] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4086] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4083] <... write resumed>) = 1048576 [pid 4083] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4083] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4087] <... openat resumed>) = 4 [pid 376] <... umount2 resumed>) = 0 [pid 4087] ioctl(4, LOOP_SET_FD, 3 [pid 376] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./117/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./117/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./117") = 0 [pid 376] mkdir("./118", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4089] <... openat resumed>) = 4 [pid 4087] <... ioctl resumed>) = 0 [pid 4089] ioctl(4, LOOP_SET_FD, 3 [pid 4087] close(3 [pid 4086] <... openat resumed>) = 4 [pid 376] <... openat resumed>) = 3 [pid 4087] <... close resumed>) = 0 [pid 4087] mkdir("./bus", 0777) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 4087] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4086] ioctl(4, LOOP_SET_FD, 3 [pid 4089] <... ioctl resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4089] close(3 [pid 4086] <... ioctl resumed>) = 0 [pid 376] close(3 [pid 4089] <... close resumed>) = 0 [pid 4086] close(3 [pid 376] <... close resumed>) = 0 [pid 4089] mkdir("./bus", 0777 [pid 4086] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4095 attached [pid 4089] <... mkdir resumed>) = 0 [pid 4086] mkdir("./bus", 0777 [pid 4095] set_robust_list(0x55555713c5e0, 24 [pid 4089] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4086] <... mkdir resumed>) = 0 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4095 [pid 4095] <... set_robust_list resumed>) = 0 [pid 4086] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4095] chdir("./118") = 0 [pid 4095] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4083] <... openat resumed>) = 4 [pid 4089] <... mount resumed>) = 0 [pid 4089] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4089] chdir("./bus") = 0 [pid 4089] ioctl(4, LOOP_CLR_FD) = 0 [pid 4089] close(4) = 0 [pid 4095] <... prctl resumed>) = 0 [pid 4095] setpgid(0, 0) = 0 [pid 4089] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4083] ioctl(4, LOOP_SET_FD, 3 [pid 4080] <... mount resumed>) = 0 [pid 4095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4095] write(3, "1000", 4) = 4 [pid 4095] close(3) = 0 [pid 4095] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4095] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4095] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4095] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4100], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4100 [pid 4095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4080] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4085] <... futex resumed>) = 0 [pid 4085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4080] <... openat resumed>) = 3 [pid 4089] <... futex resumed>) = 1 [pid 4089] chdir("./file0" [pid 4080] chdir("./bus") = 0 [pid 4080] ioctl(4, LOOP_CLR_FD [pid 4089] <... chdir resumed>) = 0 [pid 4089] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4085] <... futex resumed>) = 0 [pid 4085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4089] <... futex resumed>) = 1 [pid 4089] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 4089] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4085] <... futex resumed>) = 0 [pid 4085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4089] <... futex resumed>) = 1 [pid 4089] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4089] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4085] <... futex resumed>) = 0 [pid 4085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4089] <... futex resumed>) = 1 [pid 4089] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4086] <... mount resumed>) = 0 [pid 4086] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4086] chdir("./bus") = 0 [pid 4086] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 4100 attached [ 83.165978][ T4089] ext4 filesystem being mounted at /root/syzkaller.43WzWH/115/bus supports timestamps until 2038 (0x7fffffff) [ 83.175334][ T4080] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/115/bus supports timestamps until 2038 (0x7fffffff) [ 83.190299][ T4086] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/114/bus supports timestamps until 2038 (0x7fffffff) [pid 4100] set_robust_list(0x7f64ff0649e0, 24 [pid 4089] <... write resumed>) = 196608 [pid 4083] <... ioctl resumed>) = 0 [pid 4080] <... ioctl resumed>) = 0 [pid 4083] close(3 [pid 4080] close(4 [pid 4083] <... close resumed>) = 0 [pid 4080] <... close resumed>) = 0 [pid 4083] mkdir("./bus", 0777 [pid 4080] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4083] <... mkdir resumed>) = 0 [pid 4080] <... futex resumed>) = 1 [pid 4079] <... futex resumed>) = 0 [pid 4083] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4080] chdir("./file0" [pid 4079] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4080] <... chdir resumed>) = 0 [pid 4079] <... futex resumed>) = 0 [pid 4100] <... set_robust_list resumed>) = 0 [pid 4089] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4087] <... mount resumed>) = 0 [pid 4086] <... ioctl resumed>) = 0 [pid 4080] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4079] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4080] <... futex resumed>) = 0 [pid 4079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4080] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4079] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4100] memfd_create("syzkaller", 0 [pid 4089] <... futex resumed>) = 1 [pid 4087] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4086] close(4 [pid 4085] <... futex resumed>) = 0 [pid 4079] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4100] <... memfd_create resumed>) = 3 [pid 4089] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4087] <... openat resumed>) = 3 [pid 4086] <... close resumed>) = 0 [pid 4085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4080] <... open resumed>) = 4 [pid 4100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4085] <... futex resumed>) = 0 [pid 4100] <... mmap resumed>) = 0x7f64f6c44000 [pid 4089] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4087] chdir("./bus" [pid 4086] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4080] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4089] <... mount resumed>) = 0 [pid 4087] <... chdir resumed>) = 0 [pid 4086] <... futex resumed>) = 1 [pid 4085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4082] <... futex resumed>) = 0 [pid 4080] <... futex resumed>) = 1 [pid 4079] <... futex resumed>) = 0 [pid 4089] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4087] ioctl(4, LOOP_CLR_FD [pid 4086] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4082] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4080] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4079] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4089] <... futex resumed>) = 0 [pid 4087] <... ioctl resumed>) = 0 [pid 4086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4082] <... futex resumed>) = 0 [pid 4080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4079] <... futex resumed>) = 0 [pid 4089] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4087] close(4 [pid 4086] chdir("./file0" [pid 4085] <... futex resumed>) = 0 [pid 4082] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4080] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4079] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4089] <... open resumed>) = 6 [pid 4087] <... close resumed>) = 0 [pid 4086] <... chdir resumed>) = 0 [pid 4085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4080] <... openat resumed>) = 5 [pid 4089] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4086] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4080] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4089] <... futex resumed>) = 0 [pid 4087] <... futex resumed>) = 1 [pid 4086] <... futex resumed>) = 1 [pid 4085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4084] <... futex resumed>) = 0 [pid 4082] <... futex resumed>) = 0 [pid 4080] <... futex resumed>) = 1 [pid 4079] <... futex resumed>) = 0 [pid 4089] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4087] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4086] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4085] <... futex resumed>) = 0 [pid 4084] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4082] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4080] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4079] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4084] <... futex resumed>) = 0 [pid 4082] <... futex resumed>) = 0 [pid 4080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4079] <... futex resumed>) = 0 [pid 4100] <... write resumed>) = 1048576 [pid 4089] <... write resumed>) = 1048576 [pid 4087] chdir("./file0" [pid 4086] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4084] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4082] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4080] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4079] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4086] <... open resumed>) = 4 [pid 4080] <... write resumed>) = 196608 [pid 4086] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4080] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4086] <... futex resumed>) = 1 [pid 4082] <... futex resumed>) = 0 [pid 4080] <... futex resumed>) = 1 [pid 4079] <... futex resumed>) = 0 [pid 4086] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4082] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4080] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4079] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4082] <... futex resumed>) = 0 [pid 4080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4079] <... futex resumed>) = 0 [pid 4086] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4082] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4080] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4079] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4086] <... openat resumed>) = 5 [pid 4080] <... mount resumed>) = 0 [pid 4086] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4080] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4086] <... futex resumed>) = 1 [pid 4082] <... futex resumed>) = 0 [pid 4080] <... futex resumed>) = 1 [pid 4079] <... futex resumed>) = 0 [pid 4086] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4082] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4080] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4079] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4082] <... futex resumed>) = 0 [pid 4080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4079] <... futex resumed>) = 0 [pid 4086] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4082] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4080] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4079] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4100] munmap(0x7f64f6c44000, 1048576 [pid 4089] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4087] <... chdir resumed>) = 0 [pid 4086] <... write resumed>) = 196608 [pid 4083] <... mount resumed>) = 0 [pid 4080] <... open resumed>) = 6 [pid 4086] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4080] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4100] <... munmap resumed>) = 0 [pid 4089] <... futex resumed>) = 1 [pid 4087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4086] <... futex resumed>) = 1 [pid 4085] <... futex resumed>) = 0 [pid 4083] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4082] <... futex resumed>) = 0 [pid 4080] <... futex resumed>) = 1 [pid 4079] <... futex resumed>) = 0 [pid 4100] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4089] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4087] <... futex resumed>) = 1 [pid 4086] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4084] <... futex resumed>) = 0 [pid 4083] <... openat resumed>) = 3 [pid 4082] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4080] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4079] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4100] <... openat resumed>) = 4 [pid 4089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4087] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4085] <... futex resumed>) = 0 [pid 4084] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4083] chdir("./bus" [pid 4082] <... futex resumed>) = 0 [ 83.210602][ T4087] ext4 filesystem being mounted at /root/syzkaller.k3ECep/116/bus supports timestamps until 2038 (0x7fffffff) [ 83.250111][ T4083] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/115/bus supports timestamps until 2038 (0x7fffffff) [pid 4080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4079] <... futex resumed>) = 0 [pid 4100] ioctl(4, LOOP_SET_FD, 3 [pid 4089] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4086] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4084] <... futex resumed>) = 0 [pid 4082] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4080] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4079] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4086] <... mount resumed>) = 0 [pid 4086] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4082] <... futex resumed>) = 0 [pid 4086] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4082] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4082] <... futex resumed>) = 0 [pid 4086] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4082] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4087] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4084] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4087] <... open resumed>) = 4 [pid 4087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4083] <... chdir resumed>) = 0 [pid 4087] <... futex resumed>) = 1 [pid 4084] <... futex resumed>) = 0 [pid 4083] ioctl(4, LOOP_CLR_FD [pid 4080] <... write resumed>) = 1048576 [pid 4080] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4079] <... futex resumed>) = 0 [pid 4079] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4079] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4080] <... futex resumed>) = 1 [pid 4080] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4100] <... ioctl resumed>) = 0 [pid 4089] <... openat resumed>) = 7 [pid 4087] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4086] <... open resumed>) = 6 [pid 4084] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4083] <... ioctl resumed>) = 0 [pid 4100] close(3) = 0 [pid 4100] mkdir("./bus", 0777) = 0 [pid 4100] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4089] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4086] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4084] <... futex resumed>) = 0 [pid 4083] close(4 [pid 4080] <... openat resumed>) = 7 [pid 4089] <... futex resumed>) = 1 [pid 4085] <... futex resumed>) = 0 [pid 4087] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4089] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4087] <... openat resumed>) = 5 [pid 4086] <... futex resumed>) = 1 [pid 4085] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4084] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4083] <... close resumed>) = 0 [pid 4082] <... futex resumed>) = 0 [pid 4080] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4089] <... openat resumed>) = 8 [pid 4086] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4085] <... futex resumed>) = 0 [pid 4083] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4082] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4080] <... futex resumed>) = 1 [pid 4079] <... futex resumed>) = 0 [pid 4089] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4085] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4083] <... futex resumed>) = 1 [pid 4082] <... futex resumed>) = 0 [pid 4081] <... futex resumed>) = 0 [pid 4080] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4079] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4089] <... futex resumed>) = 0 [pid 4087] <... futex resumed>) = 1 [ 83.265767][ T4089] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 83.281058][ T4089] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 83.288691][ T4080] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 83.304079][ T4080] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 4086] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4084] <... futex resumed>) = 0 [pid 4083] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4082] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4081] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4079] <... futex resumed>) = 0 [pid 4089] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4087] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4085] exit_group(0 [pid 4084] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4081] <... futex resumed>) = 0 [pid 4080] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4079] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4089] <... futex resumed>) = ? [pid 4085] <... exit_group resumed>) = ? [pid 4084] <... futex resumed>) = 1 [pid 4083] chdir("./file0" [pid 4081] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4089] +++ exited with 0 +++ [pid 4085] +++ exited with 0 +++ [pid 4084] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4083] <... chdir resumed>) = 0 [pid 4083] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4081] <... futex resumed>) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4085, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 4083] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4081] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 4083] <... open resumed>) = 4 [pid 4081] <... futex resumed>) = 0 [pid 4083] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4081] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4083] <... futex resumed>) = 0 [pid 4081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4083] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4081] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4083] <... openat resumed>) = 5 [pid 4081] <... futex resumed>) = 0 [pid 377] <... restart_syscall resumed>) = 0 [pid 4083] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4081] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4083] <... futex resumed>) = 0 [pid 4081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4083] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4081] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4083] <... write resumed>) = 196608 [pid 4081] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4081] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./115/binderfs") = 0 [pid 377] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4083] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4081] <... futex resumed>) = 0 [pid 4081] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4081] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4083] <... futex resumed>) = 1 [pid 4083] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4083] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4081] <... futex resumed>) = 0 [pid 4087] <... futex resumed>) = 0 [pid 4081] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4087] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4083] <... futex resumed>) = 1 [pid 4100] <... mount resumed>) = 0 [pid 4086] <... write resumed>) = 1048576 [pid 4081] <... futex resumed>) = 0 [pid 4080] <... openat resumed>) = 8 [pid 4087] <... write resumed>) = 196608 [pid 4086] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4083] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4081] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4086] <... futex resumed>) = 1 [pid 4083] <... open resumed>) = 6 [pid 4082] <... futex resumed>) = 0 [pid 4087] <... futex resumed>) = 1 [pid 4084] <... futex resumed>) = 0 [pid 4083] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4087] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4084] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4087] <... mount resumed>) = 0 [pid 4084] <... futex resumed>) = 0 [pid 4083] <... futex resumed>) = 1 [pid 4081] <... futex resumed>) = 0 [pid 4087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4084] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4083] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4081] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4087] <... futex resumed>) = 0 [pid 4084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4081] <... futex resumed>) = 0 [pid 4087] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4084] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4082] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4081] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4086] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4087] <... open resumed>) = 6 [pid 4084] <... futex resumed>) = 0 [pid 4082] <... futex resumed>) = 0 [pid 4087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4084] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4087] <... futex resumed>) = 0 [pid 4084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4087] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4084] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4084] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4082] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4080] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4100] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4080] <... futex resumed>) = 1 [pid 4079] <... futex resumed>) = 0 [pid 4079] exit_group(0) = ? [pid 4100] <... openat resumed>) = 3 [pid 4100] chdir("./bus") = 0 [pid 4100] ioctl(4, LOOP_CLR_FD [pid 4083] <... write resumed>) = 1048576 [pid 4083] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4081] <... futex resumed>) = 0 [pid 4081] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4081] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 83.322936][ T4100] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/118/bus supports timestamps until 2038 (0x7fffffff) [ 83.348077][ T4086] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4083] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4087] <... write resumed>) = 1048576 [pid 4087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4084] <... futex resumed>) = 0 [pid 4084] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4084] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4087] <... futex resumed>) = 1 [pid 4087] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4086] <... openat resumed>) = 7 [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4082] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./115/bus", [pid 4082] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4082] <... mmap resumed>) = 0x7f64f6d23000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4082] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 377] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4082] <... mprotect resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 4082] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4082] <... clone resumed>, parent_tid=[4109], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4109 [pid 377] getdents64(4, [pid 4082] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4082] <... futex resumed>) = 0 [pid 377] getdents64(4, [pid 4082] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./115/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./115") = 0 [pid 377] mkdir("./116", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4110 [pid 4086] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4086] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4100] <... ioctl resumed>) = 0 [pid 4080] +++ exited with 0 +++ [pid 4079] +++ exited with 0 +++ [pid 4100] close(4 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4079, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4100] <... close resumed>) = 0 [pid 374] restart_syscall(<... resuming interrupted clone ...> [ 83.372787][ T4086] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 83.373753][ T4083] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 83.374912][ T4087] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 83.396858][ T4087] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 4100] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... restart_syscall resumed>) = 0 [pid 4100] <... futex resumed>) = 1 [pid 4100] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./115/binderfs") = 0 [pid 374] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4095] <... futex resumed>) = 0 [pid 4084] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4081] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 4109 attached [pid 4109] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4109] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4109] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4082] <... futex resumed>) = 0 [pid 4082] exit_group(0 [pid 4086] <... futex resumed>) = ? [pid 4082] <... exit_group resumed>) = ? [pid 4086] +++ exited with 0 +++ [pid 4109] <... futex resumed>) = ? [pid 4109] +++ exited with 0 +++ [pid 4082] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4082, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 4083] <... openat resumed>) = 7 [pid 4083] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... restart_syscall resumed>) = 0 [pid 372] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./114/binderfs") = 0 [pid 372] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4087] <... openat resumed>) = 7 [pid 4084] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4081] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4087] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4087] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4083] <... futex resumed>) = 0 [pid 4083] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4083] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4083] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 4110 attached [pid 4100] <... futex resumed>) = 0 [pid 4095] <... futex resumed>) = 1 [pid 4084] <... futex resumed>) = 0 [pid 4100] chdir("./file0" [pid 4081] <... futex resumed>) = 1 [pid 4095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4084] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4100] <... chdir resumed>) = 0 [pid 4084] <... mmap resumed>) = 0x7f64f6d23000 [pid 4081] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4100] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4084] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4100] <... futex resumed>) = 1 [pid 4095] <... futex resumed>) = 0 [pid 4084] <... mprotect resumed>) = 0 [pid 4081] exit_group(0 [pid 4100] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4084] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4081] <... exit_group resumed>) = ? [pid 4095] <... futex resumed>) = 0 [pid 4095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4084] <... clone resumed>, parent_tid=[4111], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4111 [pid 4083] <... futex resumed>) = ? [pid 4084] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4083] +++ exited with 0 +++ [pid 4081] +++ exited with 0 +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4081, si_uid=0, si_status=0, si_utime=1, si_stime=6} --- [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./115/binderfs") = 0 [pid 375] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4110] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4110] chdir("./116") = 0 [pid 4110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4110] setpgid(0, 0) = 0 [pid 4084] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4100] <... open resumed>) = 4 [pid 4110] <... openat resumed>) = 3 [pid 4100] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4110] write(3, "1000", 4) = 4 [pid 4110] close(3 [pid 4100] <... futex resumed>) = 1 [pid 4095] <... futex resumed>) = 0 [pid 4110] <... close resumed>) = 0 [pid 4110] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4110] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4110] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4110] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4110] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4112], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4112 [pid 4110] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4110] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4112 attached [pid 4112] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4112] memfd_create("syzkaller", 0) = 3 [pid 4112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4100] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4100] <... openat resumed>) = 5 [pid 4100] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4095] <... futex resumed>) = 0 [pid 4100] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4100] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4095] <... futex resumed>) = 0 [pid 4100] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4100] <... write resumed>) = 196608 [pid 4100] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4095] <... futex resumed>) = 0 [pid 4095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4100] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4095] <... futex resumed>) = 0 [pid 4095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4100] <... mount resumed>) = 0 [pid 4100] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4095] <... futex resumed>) = 0 [pid 4100] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 4111 attached [pid 4111] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4111] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4111] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4084] <... futex resumed>) = 0 [pid 4084] exit_group(0) = ? [pid 4087] <... futex resumed>) = ? [pid 4087] +++ exited with 0 +++ [pid 4112] <... write resumed>) = 1048576 [pid 4111] <... futex resumed>) = ? [pid 4112] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4112] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./115/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./115/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./115") = 0 [pid 374] mkdir("./116", 0777) = 0 [ 83.419026][ T4083] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4100] <... open resumed>) = 6 [pid 4100] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4095] <... futex resumed>) = 0 [pid 4100] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4100] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4095] <... futex resumed>) = 0 [pid 4100] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4100] <... write resumed>) = 1048576 [pid 4100] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4095] <... futex resumed>) = 0 [pid 4095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4100] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4112] <... openat resumed>) = 4 [pid 4111] +++ exited with 0 +++ [pid 4084] +++ exited with 0 +++ [pid 375] <... umount2 resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4084, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 4112] ioctl(4, LOOP_SET_FD, 3 [pid 375] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] close(3 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./116/binderfs", [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] unlink("./116/binderfs" [pid 375] lstat("./115/bus", [pid 373] <... unlink resumed>) = 0 [pid 372] lstat("./114/bus", [pid 373] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4112] <... ioctl resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 4112] close(3 [pid 374] <... close resumed>) = 0 [pid 4112] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4112] mkdir("./bus", 0777 [pid 372] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 4112] <... mkdir resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4114 [pid 372] <... openat resumed>) = 4 [pid 4112] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 372] fstat(4, [pid 375] rmdir("./115/bus"./strace-static-x86_64: Process 4114 attached [pid 4100] <... openat resumed>) = 7 [pid 375] <... rmdir resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, [pid 4100] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(4, [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./115" [pid 4114] set_robust_list(0x55555713c5e0, 24 [pid 4100] <... futex resumed>) = 1 [pid 4095] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] mkdir("./116", 0777 [pid 4095] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4114] <... set_robust_list resumed>) = 0 [pid 4100] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4095] <... futex resumed>) = 0 [pid 372] getdents64(4, [pid 4100] <... openat resumed>) = 8 [pid 4095] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4114] chdir("./116" [pid 4100] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... mkdir resumed>) = 0 [pid 372] close(4 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4114] <... chdir resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 372] rmdir("./114/bus" [pid 4100] <... futex resumed>) = 1 [pid 4095] <... futex resumed>) = 0 [pid 4114] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4114] setpgid(0, 0 [pid 372] <... rmdir resumed>) = 0 [pid 4095] exit_group(0) = ? [pid 372] getdents64(3, [pid 4114] <... setpgid resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 372] close(3) = 0 [pid 372] rmdir("./114" [pid 4114] <... openat resumed>) = 3 [pid 4114] write(3, "1000", 4) = 4 [pid 4114] close(3 [pid 372] <... rmdir resumed>) = 0 [pid 4114] <... close resumed>) = 0 [pid 4114] symlink("/dev/binderfs", "./binderfs" [pid 372] mkdir("./115", 0777 [pid 4114] <... symlink resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 4114] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4114] <... futex resumed>) = 0 [pid 4114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4114] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4114] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4115], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4115 [pid 4114] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4114] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4115 attached [pid 4115] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4115] memfd_create("syzkaller", 0) = 3 [pid 4115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4115] munmap(0x7f64f6c44000, 1048576) = 0 [ 83.507000][ T4100] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 83.521458][ T4100] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 4115] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4100] +++ exited with 0 +++ [pid 4095] +++ exited with 0 +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4095, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 376] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./118/binderfs") = 0 [pid 376] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4115] <... openat resumed>) = 4 [pid 375] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] ioctl(3, LOOP_CLR_FD [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./116/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./116/bus" [pid 4115] ioctl(4, LOOP_SET_FD, 3 [pid 373] <... rmdir resumed>) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./116") = 0 [pid 373] mkdir("./117", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4112] <... mount resumed>) = 0 [pid 4112] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4112] chdir("./bus") = 0 [pid 4112] ioctl(4, LOOP_CLR_FD [pid 376] <... umount2 resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 375] close(3 [pid 4115] <... ioctl resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 372] <... close resumed>) = 0 [pid 376] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./118/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./118/bus") = 0 [pid 376] getdents64(3, [pid 4115] close(3 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] ioctl(3, LOOP_CLR_FD [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4115] <... close resumed>) = 0 [pid 376] close(3 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4115] mkdir("./bus", 0777 [pid 376] <... close resumed>) = 0 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4119 [pid 373] close(3 [pid 4115] <... mkdir resumed>) = 0 [pid 376] rmdir("./118") = 0 [pid 376] mkdir("./119", 0777 [pid 4115] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 376] <... mkdir resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4120 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4121 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4122 [pid 4112] <... ioctl resumed>) = 0 [pid 4112] close(4) = 0 [pid 4112] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4119 attached [pid 4119] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4112] <... futex resumed>) = 1 [pid 4110] <... futex resumed>) = 0 [pid 4110] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4110] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4119] chdir("./116") = 0 [pid 4112] chdir("./file0" [pid 4119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4112] <... chdir resumed>) = 0 [pid 4112] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4121 attached ./strace-static-x86_64: Process 4120 attached ) = 1 [pid 4110] <... futex resumed>) = 0 [pid 4121] set_robust_list(0x55555713c5e0, 24 [pid 4120] set_robust_list(0x55555713c5e0, 24 [pid 4119] <... prctl resumed>) = 0 [pid 4112] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4110] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4121] <... set_robust_list resumed>) = 0 [pid 4120] <... set_robust_list resumed>) = 0 [pid 4119] setpgid(0, 0 [pid 4110] <... futex resumed>) = 0 [pid 4121] chdir("./117" [pid 4119] <... setpgid resumed>) = 0 [pid 4110] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4112] <... open resumed>) = 4 [pid 4112] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4120] chdir("./115" [pid 4112] <... futex resumed>) = 1 [pid 4110] <... futex resumed>) = 0 [pid 4121] <... chdir resumed>) = 0 [pid 4120] <... chdir resumed>) = 0 [pid 4110] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4112] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4110] <... futex resumed>) = 0 [pid 4121] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4110] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4120] <... prctl resumed>) = 0 [pid 4112] <... openat resumed>) = 5 [pid 4121] <... prctl resumed>) = 0 [pid 4120] setpgid(0, 0 [pid 4119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4112] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4121] setpgid(0, 0./strace-static-x86_64: Process 4122 attached ) = 0 [pid 4120] <... setpgid resumed>) = 0 [pid 4119] <... openat resumed>) = 3 [pid 4112] <... futex resumed>) = 1 [pid 4110] <... futex resumed>) = 0 [pid 4122] set_robust_list(0x55555713c5e0, 24 [pid 4121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4119] write(3, "1000", 4 [pid 4112] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4110] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4122] <... set_robust_list resumed>) = 0 [pid 4121] <... openat resumed>) = 3 [pid 4120] <... openat resumed>) = 3 [pid 4119] <... write resumed>) = 4 [pid 4112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4110] <... futex resumed>) = 0 [pid 4122] chdir("./119" [pid 4121] write(3, "1000", 4 [pid 4120] write(3, "1000", 4 [pid 4119] close(3 [pid 4112] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4110] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4122] <... chdir resumed>) = 0 [pid 4121] <... write resumed>) = 4 [pid 4120] <... write resumed>) = 4 [pid 4119] <... close resumed>) = 0 [pid 4119] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4119] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4120] close(3 [pid 4121] close(3 [pid 4119] <... futex resumed>) = 0 [pid 4121] <... close resumed>) = 0 [pid 4120] <... close resumed>) = 0 [pid 4119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4121] symlink("/dev/binderfs", "./binderfs" [pid 4120] symlink("/dev/binderfs", "./binderfs" [pid 4119] <... mmap resumed>) = 0x7f64ff044000 [pid 4119] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4112] <... write resumed>) = 196608 [pid 4122] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4121] <... symlink resumed>) = 0 [pid 4120] <... symlink resumed>) = 0 [pid 4119] <... mprotect resumed>) = 0 [pid 4122] <... prctl resumed>) = 0 [pid 4121] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 83.585690][ T4112] ext4 filesystem being mounted at /root/syzkaller.43WzWH/116/bus supports timestamps until 2038 (0x7fffffff) [pid 4119] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4112] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4119] <... clone resumed>, parent_tid=[4125], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4125 [pid 4119] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4119] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4125 attached [pid 4125] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4125] memfd_create("syzkaller", 0) = 3 [pid 4125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4121] <... futex resumed>) = 0 [pid 4120] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4122] setpgid(0, 0 [pid 4121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4110] <... futex resumed>) = 0 [pid 4120] <... futex resumed>) = 0 [pid 4122] <... setpgid resumed>) = 0 [pid 4121] <... mmap resumed>) = 0x7f64ff044000 [pid 4112] <... futex resumed>) = 1 [pid 4120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4110] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4121] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4120] <... mmap resumed>) = 0x7f64ff044000 [pid 4112] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4110] <... futex resumed>) = 0 [pid 4110] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4120] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4121] <... mprotect resumed>) = 0 [pid 4122] <... openat resumed>) = 3 [pid 4121] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4120] <... mprotect resumed>) = 0 [pid 4112] <... mount resumed>) = 0 [pid 4122] write(3, "1000", 4 [pid 4121] <... clone resumed>, parent_tid=[4126], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4126 [pid 4120] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4112] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4122] <... write resumed>) = 4 [pid 4121] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4122] close(3 [pid 4121] <... futex resumed>) = 0 [pid 4112] <... futex resumed>) = 1 [pid 4110] <... futex resumed>) = 0 [pid 4110] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4122] <... close resumed>) = 0 [pid 4121] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4120] <... clone resumed>, parent_tid=[4127], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4127 [pid 4112] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4110] <... futex resumed>) = 0 [pid 4122] symlink("/dev/binderfs", "./binderfs" [pid 4120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4110] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4112] <... open resumed>) = 6 [pid 4125] <... write resumed>) = 1048576 [pid 4125] munmap(0x7f64f6c44000, 1048576 [pid 4120] <... futex resumed>) = 0 [pid 4112] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4122] <... symlink resumed>) = 0 [pid 4120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4122] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4112] <... futex resumed>) = 1 [pid 4110] <... futex resumed>) = 0 [pid 4110] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4110] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4122] <... futex resumed>) = 0 [pid 4112] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651./strace-static-x86_64: Process 4127 attached [pid 4122] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4125] <... munmap resumed>) = 0 [pid 4122] <... mmap resumed>) = 0x7f64ff044000 [pid 4122] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4125] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4122] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4125] <... openat resumed>) = 4 [pid 4122] <... clone resumed>, parent_tid=[4128], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4128 [pid 4122] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4122] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4125] ioctl(4, LOOP_SET_FD, 3 [pid 4115] <... mount resumed>) = 0 [pid 4115] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4115] chdir("./bus") = 0 [pid 4115] ioctl(4, LOOP_CLR_FD [pid 4125] <... ioctl resumed>) = 0 [pid 4125] close(3) = 0 [pid 4125] mkdir("./bus", 0777) = 0 [pid 4125] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4115] <... ioctl resumed>) = 0 [pid 4115] close(4) = 0 [pid 4115] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4114] <... futex resumed>) = 0 [pid 4115] <... futex resumed>) = 1 [pid 4114] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4115] chdir("./file0" [pid 4114] <... futex resumed>) = 0 [pid 4114] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4115] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 4126 attached [pid 4126] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4115] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4126] memfd_create("syzkaller", 0) = 3 [pid 4126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4114] <... futex resumed>) = 0 [pid 4114] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4114] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4126] <... mmap resumed>) = 0x7f64f6c44000 [pid 4115] <... futex resumed>) = 1 [pid 4115] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 4115] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4114] <... futex resumed>) = 0 [pid 4114] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4114] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4115] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4115] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4114] <... futex resumed>) = 0 [pid 4115] <... futex resumed>) = 1 [pid 4114] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4114] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4115] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4127] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4127] memfd_create("syzkaller", 0) = 3 [pid 4127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [ 83.646184][ T4115] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/116/bus supports timestamps until 2038 (0x7fffffff) [pid 4126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 4128 attached [pid 4127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4115] <... write resumed>) = 196608 [pid 4115] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4114] <... futex resumed>) = 0 [pid 4114] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4114] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4115] <... futex resumed>) = 1 [pid 4115] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4115] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4114] <... futex resumed>) = 0 [pid 4114] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4114] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4125] <... mount resumed>) = 0 [pid 4125] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4115] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4128] set_robust_list(0x7f64ff0649e0, 24 [pid 4125] <... openat resumed>) = 3 [pid 4115] <... open resumed>) = 6 [pid 4125] chdir("./bus" [pid 4128] <... set_robust_list resumed>) = 0 [pid 4115] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4128] memfd_create("syzkaller", 0 [pid 4125] <... chdir resumed>) = 0 [pid 4115] <... futex resumed>) = 1 [pid 4114] <... futex resumed>) = 0 [pid 4128] <... memfd_create resumed>) = 3 [pid 4126] <... write resumed>) = 1048576 [pid 4125] ioctl(4, LOOP_CLR_FD [pid 4115] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4114] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4127] <... write resumed>) = 1048576 [pid 4126] munmap(0x7f64f6c44000, 1048576 [pid 4125] <... ioctl resumed>) = 0 [pid 4114] <... futex resumed>) = 0 [pid 4128] <... mmap resumed>) = 0x7f64f6c44000 [pid 4125] close(4 [pid 4114] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4127] munmap(0x7f64f6c44000, 1048576 [pid 4126] <... munmap resumed>) = 0 [pid 4125] <... close resumed>) = 0 [pid 4112] <... write resumed>) = 1048576 [pid 4110] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4127] <... munmap resumed>) = 0 [pid 4126] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4125] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4112] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4110] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4127] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4126] <... openat resumed>) = 4 [pid 4125] <... futex resumed>) = 1 [pid 4119] <... futex resumed>) = 0 [pid 4112] <... futex resumed>) = 0 [pid 4110] <... futex resumed>) = 0 [pid 4127] <... openat resumed>) = 4 [pid 4126] ioctl(4, LOOP_SET_FD, 3 [pid 4125] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4119] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4112] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4110] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4127] ioctl(4, LOOP_SET_FD, 3 [pid 4125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4119] <... futex resumed>) = 0 [pid 4125] chdir("./file0" [pid 4119] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4125] <... chdir resumed>) = 0 [pid 4128] <... write resumed>) = 1048576 [pid 4128] munmap(0x7f64f6c44000, 1048576 [pid 4126] <... ioctl resumed>) = 0 [pid 4125] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4126] close(3 [pid 4125] <... futex resumed>) = 1 [pid 4119] <... futex resumed>) = 0 [pid 4126] <... close resumed>) = 0 [pid 4125] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4119] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4126] mkdir("./bus", 0777 [pid 4125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4119] <... futex resumed>) = 0 [pid 4126] <... mkdir resumed>) = 0 [pid 4125] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4119] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4126] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4128] <... munmap resumed>) = 0 [ 83.692128][ T4125] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/116/bus supports timestamps until 2038 (0x7fffffff) [ 83.727952][ T4112] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4128] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4127] <... ioctl resumed>) = 0 [pid 4125] <... open resumed>) = 4 [pid 4115] <... write resumed>) = 1048576 [pid 4112] <... openat resumed>) = 7 [pid 4112] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4112] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4115] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4114] <... futex resumed>) = 0 [pid 4110] <... futex resumed>) = 0 [pid 4127] close(3 [pid 4125] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4114] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4110] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4127] <... close resumed>) = 0 [pid 4125] <... futex resumed>) = 1 [pid 4119] <... futex resumed>) = 0 [pid 4115] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4127] mkdir("./bus", 0777 [pid 4125] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4119] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4114] <... futex resumed>) = 0 [pid 4110] <... futex resumed>) = 1 [pid 4112] <... futex resumed>) = 0 [pid 4112] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4112] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4112] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4128] <... openat resumed>) = 4 [pid 4127] <... mkdir resumed>) = 0 [pid 4125] <... openat resumed>) = 5 [pid 4119] <... futex resumed>) = 0 [pid 4115] <... openat resumed>) = 7 [pid 4114] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4110] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4115] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4128] ioctl(4, LOOP_SET_FD, 3 [pid 4127] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4125] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4119] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4115] <... futex resumed>) = 0 [pid 4114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4115] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4125] <... futex resumed>) = 0 [pid 4119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4125] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4114] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4110] exit_group(0 [pid 4119] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4115] <... futex resumed>) = 0 [pid 4114] <... futex resumed>) = 1 [pid 4112] <... futex resumed>) = ? [pid 4110] <... exit_group resumed>) = ? [pid 4128] <... ioctl resumed>) = 0 [pid 4112] +++ exited with 0 +++ [pid 4119] <... futex resumed>) = 1 [pid 4114] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4128] close(3 [pid 4125] <... futex resumed>) = 0 [pid 4119] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4115] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4110] +++ exited with 0 +++ [pid 4128] <... close resumed>) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4110, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 4125] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4128] mkdir("./bus", 0777 [pid 4115] <... openat resumed>) = 8 [pid 4128] <... mkdir resumed>) = 0 [pid 4125] <... write resumed>) = 196608 [pid 4115] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 83.744608][ T4112] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 83.758908][ T4115] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 83.773031][ T4115] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 4128] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4125] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4115] <... futex resumed>) = 1 [pid 4114] <... futex resumed>) = 0 [pid 377] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4125] <... futex resumed>) = 1 [pid 4119] <... futex resumed>) = 0 [pid 4115] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4114] exit_group(0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4125] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4119] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4115] <... futex resumed>) = ? [pid 4114] <... exit_group resumed>) = ? [pid 377] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4119] <... futex resumed>) = 0 [pid 4115] +++ exited with 0 +++ [pid 4114] +++ exited with 0 +++ [pid 377] <... openat resumed>) = 3 [pid 4125] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4119] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] fstat(3, [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4114, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4125] <... mount resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4125] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(3, [pid 4125] <... futex resumed>) = 1 [pid 4119] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4125] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4119] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4119] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4125] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4119] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] lstat("./116/binderfs", [pid 374] <... openat resumed>) = 3 [pid 4125] <... open resumed>) = 6 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] fstat(3, [pid 4125] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] unlink("./116/binderfs" [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4125] <... futex resumed>) = 1 [pid 4119] <... futex resumed>) = 0 [pid 377] <... unlink resumed>) = 0 [pid 374] getdents64(3, [pid 4125] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4119] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4119] <... futex resumed>) = 0 [pid 374] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4125] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4119] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./116/binderfs") = 0 [pid 374] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4126] <... mount resumed>) = 0 [pid 4126] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4126] chdir("./bus") = 0 [pid 4126] ioctl(4, LOOP_CLR_FD) = 0 [pid 4126] close(4) = 0 [pid 4126] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4127] <... mount resumed>) = 0 [pid 4126] <... futex resumed>) = 1 [pid 4125] <... write resumed>) = 1048576 [pid 4121] <... futex resumed>) = 0 [pid 4127] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4126] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4125] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4121] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4127] <... openat resumed>) = 3 [pid 4126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4125] <... futex resumed>) = 1 [pid 4121] <... futex resumed>) = 0 [pid 4119] <... futex resumed>) = 0 [pid 4127] chdir("./bus" [pid 4126] chdir("./file0" [pid 4125] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4121] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4119] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4127] <... chdir resumed>) = 0 [pid 4119] <... futex resumed>) = 0 [pid 4125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4119] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4126] <... chdir resumed>) = 0 [pid 4127] ioctl(4, LOOP_CLR_FD [pid 4126] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4125] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4128] <... mount resumed>) = 0 [pid 4126] <... futex resumed>) = 1 [ 83.797560][ T4126] ext4 filesystem being mounted at /root/syzkaller.k3ECep/117/bus supports timestamps until 2038 (0x7fffffff) [ 83.810443][ T4127] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/115/bus supports timestamps until 2038 (0x7fffffff) [ 83.836132][ T4128] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/119/bus supports timestamps until 2038 (0x7fffffff) [pid 4121] <... futex resumed>) = 0 [pid 4128] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4126] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4121] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4128] <... openat resumed>) = 3 [pid 4126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4121] <... futex resumed>) = 0 [pid 4128] chdir("./bus" [pid 4126] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4121] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4128] <... chdir resumed>) = 0 [pid 4128] ioctl(4, LOOP_CLR_FD [pid 4126] <... open resumed>) = 4 [pid 4126] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4121] <... futex resumed>) = 0 [pid 4126] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4121] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4121] <... futex resumed>) = 0 [pid 4126] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4121] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4126] <... openat resumed>) = 5 [pid 4126] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4121] <... futex resumed>) = 0 [pid 4126] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4121] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4121] <... futex resumed>) = 0 [pid 4126] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4121] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4126] <... write resumed>) = 196608 [pid 4126] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4121] <... futex resumed>) = 0 [pid 4126] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4121] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4121] <... futex resumed>) = 0 [pid 4126] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4121] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4126] <... mount resumed>) = 0 [pid 4126] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4121] <... futex resumed>) = 0 [pid 4126] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4121] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4121] <... futex resumed>) = 0 [pid 4126] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4121] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./116/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./116/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./116") = 0 [pid 377] mkdir("./117", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4125] <... openat resumed>) = 7 [pid 4125] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4119] <... futex resumed>) = 0 [pid 4119] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4119] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4125] <... futex resumed>) = 1 [pid 4125] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4125] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4119] <... futex resumed>) = 0 [pid 4119] exit_group(0) = ? [pid 4125] <... futex resumed>) = ? [pid 4127] <... ioctl resumed>) = 0 [pid 4128] <... ioctl resumed>) = 0 [pid 4126] <... open resumed>) = 6 [pid 4128] close(4 [pid 4127] close(4 [pid 4126] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 3 [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./116/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./116/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./116") = 0 [pid 374] mkdir("./117", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4141 [pid 4125] +++ exited with 0 +++ [pid 4119] +++ exited with 0 +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4119, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 4126] <... futex resumed>) = 1 [pid 4121] <... futex resumed>) = 0 [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 4128] <... close resumed>) = 0 [pid 4127] <... close resumed>) = 0 [pid 4126] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4121] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4128] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... restart_syscall resumed>) = 0 [pid 375] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4121] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./116/binderfs") = 0 [pid 375] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4128] <... futex resumed>) = 1 [pid 4127] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4122] <... futex resumed>) = 0 [pid 4121] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4128] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4127] <... futex resumed>) = 1 [pid 4122] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4120] <... futex resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 4128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4127] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4122] <... futex resumed>) = 0 [pid 4120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4128] chdir("./file0" [pid 4127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4122] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4120] <... futex resumed>) = 0 [pid 4128] <... chdir resumed>) = 0 [pid 4127] chdir("./file0" [pid 4120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4128] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4127] <... chdir resumed>) = 0 [pid 4122] <... futex resumed>) = 0 [pid 4128] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4127] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4122] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4127] <... futex resumed>) = 1 [pid 4122] <... futex resumed>) = 0 [pid 4120] <... futex resumed>) = 0 [pid 4128] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4127] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4122] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4120] <... futex resumed>) = 0 ./strace-static-x86_64: Process 4141 attached [pid 4128] <... open resumed>) = 4 [pid 4127] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4141] set_robust_list(0x55555713c5e0, 24 [pid 4128] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4127] <... open resumed>) = 4 [pid 4141] <... set_robust_list resumed>) = 0 [pid 4128] <... futex resumed>) = 1 [pid 4127] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4126] <... write resumed>) = 1048576 [pid 4122] <... futex resumed>) = 0 [pid 4141] chdir("./117" [pid 4128] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4127] <... futex resumed>) = 1 [pid 4126] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4122] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4120] <... futex resumed>) = 0 [pid 4141] <... chdir resumed>) = 0 [pid 4128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4127] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4126] <... futex resumed>) = 1 [pid 4122] <... futex resumed>) = 0 [pid 4121] <... futex resumed>) = 0 [pid 4120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4128] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4126] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4122] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4121] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4120] <... futex resumed>) = 0 [pid 4141] <... prctl resumed>) = 0 [pid 4128] <... openat resumed>) = 5 [pid 4127] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4121] <... futex resumed>) = 0 [pid 4120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4141] setpgid(0, 0 [pid 4128] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4127] <... openat resumed>) = 5 [ 83.836280][ T4125] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 83.863124][ T4125] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 4126] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4121] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4141] <... setpgid resumed>) = 0 [pid 4128] <... futex resumed>) = 1 [pid 4127] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4122] <... futex resumed>) = 0 [pid 4141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4141] write(3, "1000", 4) = 4 [pid 4141] close(3) = 0 [pid 4141] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4141] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4141] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4141] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4142], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4142 [pid 4141] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4141] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4128] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4127] <... futex resumed>) = 1 [pid 4127] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4122] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4128] <... futex resumed>) = 0 [pid 4122] <... futex resumed>) = 1 [pid 4128] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4122] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4128] <... write resumed>) = 196608 [pid 4128] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4122] <... futex resumed>) = 0 [pid 4128] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4122] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4122] <... futex resumed>) = 0 [pid 4128] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4122] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4128] <... mount resumed>) = 0 [pid 4128] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4122] <... futex resumed>) = 0 [pid 4128] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4122] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4122] <... futex resumed>) = 0 [pid 4128] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4122] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4120] <... futex resumed>) = 0 [pid 4120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4127] <... futex resumed>) = 0 [pid 4120] <... futex resumed>) = 1 [pid 4127] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4142 attached [pid 4127] <... write resumed>) = 196608 [pid 4127] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4120] <... futex resumed>) = 0 [pid 4127] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4127] <... mount resumed>) = 0 [pid 4120] <... futex resumed>) = 0 [pid 4127] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4127] <... futex resumed>) = 0 [pid 4120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4127] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4142] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4142] memfd_create("syzkaller", 0) = 3 [pid 4142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4128] <... open resumed>) = 6 [pid 4127] <... open resumed>) = 6 [pid 4126] <... openat resumed>) = 7 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... umount2 resumed>) = 0 [pid 4128] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4127] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 4128] <... futex resumed>) = 1 [pid 4127] <... futex resumed>) = 1 [pid 4126] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4122] <... futex resumed>) = 0 [pid 4120] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 375] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4128] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4126] <... futex resumed>) = 1 [pid 4122] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4121] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4126] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4122] <... futex resumed>) = 0 [pid 4121] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./116/bus", [pid 4128] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4122] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4121] <... futex resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4127] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4121] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4126] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4120] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, [pid 4126] <... openat resumed>) = 8 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4126] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4121] <... futex resumed>) = 0 [pid 4120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4143 [pid 375] getdents64(4, [pid 4126] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4121] exit_group(0 [pid 4126] <... futex resumed>) = ? [pid 4121] <... exit_group resumed>) = ? [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./116/bus" [pid 4126] +++ exited with 0 +++ [pid 4121] +++ exited with 0 +++ [pid 375] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 4143 attached [pid 375] getdents64(3, [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4121, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./116" [pid 373] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] <... rmdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] mkdir("./117", 0777 [pid 373] <... openat resumed>) = 3 [pid 375] <... mkdir resumed>) = 0 [pid 373] fstat(3, [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... openat resumed>) = 3 [pid 373] getdents64(3, [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] close(3 [pid 373] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... close resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./117/binderfs" [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4144 [pid 373] <... unlink resumed>) = 0 [pid 4127] <... write resumed>) = 1048576 [pid 373] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4127] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4120] <... futex resumed>) = 0 [pid 4120] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4127] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4120] <... futex resumed>) = 0 [ 83.901892][ T4126] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 83.916400][ T4126] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 4120] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4142] <... write resumed>) = 1048576 [pid 4142] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4142] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 4142] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 4144 attached [pid 4144] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4144] chdir("./117") = 0 [pid 4144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4144] setpgid(0, 0) = 0 [pid 4144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4144] write(3, "1000", 4) = 4 [pid 4144] close(3) = 0 [pid 4144] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4144] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4144] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4144] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4144] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4145], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4145 [pid 4144] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4144] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4145 attached [pid 4145] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4145] memfd_create("syzkaller", 0) = 3 [pid 4145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4143] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4145] <... write resumed>) = 1048576 [pid 4143] chdir("./117" [pid 4142] <... ioctl resumed>) = 0 [pid 4128] <... write resumed>) = 1048576 [pid 373] <... umount2 resumed>) = 0 [pid 4143] <... chdir resumed>) = 0 [pid 4128] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4128] <... futex resumed>) = 1 [pid 4122] <... futex resumed>) = 0 [pid 4143] <... prctl resumed>) = 0 [pid 4128] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4122] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4143] setpgid(0, 0 [pid 4142] close(3 [pid 4122] <... futex resumed>) = 0 [pid 4143] <... setpgid resumed>) = 0 [pid 4122] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4143] write(3, "1000", 4) = 4 [pid 4143] close(3) = 0 [pid 4143] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4143] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4143] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4143] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4147], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4147 [pid 4143] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4143] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 373] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./117/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./117/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./117") = 0 [pid 373] mkdir("./118", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = 0 [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4148 [pid 4145] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4145] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 4145] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 4148 attached ./strace-static-x86_64: Process 4147 attached [pid 4142] <... close resumed>) = 0 [pid 4127] <... openat resumed>) = 7 [pid 4148] set_robust_list(0x55555713c5e0, 24 [pid 4147] set_robust_list(0x7f64ff0649e0, 24 [pid 4142] mkdir("./bus", 0777 [pid 4148] <... set_robust_list resumed>) = 0 [pid 4147] <... set_robust_list resumed>) = 0 [pid 4142] <... mkdir resumed>) = 0 [ 83.956277][ T4127] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 83.978711][ T4128] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 83.980661][ T4127] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 4148] chdir("./118" [pid 4147] memfd_create("syzkaller", 0 [pid 4145] <... ioctl resumed>) = 0 [pid 4142] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4120] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4148] <... chdir resumed>) = 0 [pid 4147] <... memfd_create resumed>) = 3 [pid 4145] close(3 [pid 4120] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4148] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4145] <... close resumed>) = 0 [pid 4120] <... futex resumed>) = 0 [pid 4148] <... prctl resumed>) = 0 [pid 4147] <... mmap resumed>) = 0x7f64f6c44000 [pid 4145] mkdir("./bus", 0777 [pid 4120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4148] setpgid(0, 0 [pid 4145] <... mkdir resumed>) = 0 [pid 4128] <... openat resumed>) = 7 [pid 4127] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4120] <... mmap resumed>) = 0x7f64f6d23000 [pid 4148] <... setpgid resumed>) = 0 [pid 4145] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4120] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4120] <... mprotect resumed>) = 0 [pid 4120] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4148] <... openat resumed>) = 3 [pid 4148] write(3, "1000", 4) = 4 [pid 4120] <... clone resumed>, parent_tid=[4151], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4151 [pid 4148] close(3 [pid 4120] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4148] <... close resumed>) = 0 [pid 4120] <... futex resumed>) = 0 [pid 4148] symlink("/dev/binderfs", "./binderfs" [pid 4120] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4128] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4148] <... symlink resumed>) = 0 [pid 4148] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4148] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4148] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4122] <... futex resumed>) = 0 [pid 4148] <... clone resumed>, parent_tid=[4152], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4152 [pid 4122] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4122] <... futex resumed>) = 0 [pid 4148] <... futex resumed>) = 0 [pid 4122] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4127] <... futex resumed>) = 0 [pid 4128] <... futex resumed>) = 1 [pid 4127] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4128] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4128] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4122] <... futex resumed>) = 0 [pid 4122] exit_group(0./strace-static-x86_64: Process 4152 attached ./strace-static-x86_64: Process 4151 attached [pid 4147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4128] <... futex resumed>) = ? [pid 4122] <... exit_group resumed>) = ? [pid 4151] set_robust_list(0x7f64f6d439e0, 24 [pid 4147] <... write resumed>) = 1048576 [pid 4151] <... set_robust_list resumed>) = 0 [pid 4147] munmap(0x7f64f6c44000, 1048576 [pid 4151] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4147] <... munmap resumed>) = 0 [pid 4151] <... openat resumed>) = 8 [pid 4147] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4151] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4120] <... futex resumed>) = 0 [pid 4151] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4120] exit_group(0 [pid 4151] <... futex resumed>) = ? [pid 4120] <... exit_group resumed>) = ? [pid 4151] +++ exited with 0 +++ [pid 4152] set_robust_list(0x7f64ff0649e0, 24 [pid 4128] +++ exited with 0 +++ [pid 4152] <... set_robust_list resumed>) = 0 [pid 4152] memfd_create("syzkaller", 0) = 3 [pid 4152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4127] <... futex resumed>) = ? [pid 4142] <... mount resumed>) = 0 [pid 4142] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4142] chdir("./bus") = 0 [pid 4142] ioctl(4, LOOP_CLR_FD [pid 4152] <... write resumed>) = 1048576 [pid 4152] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4152] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4147] <... openat resumed>) = 4 [pid 4127] +++ exited with 0 +++ [pid 4122] +++ exited with 0 +++ [pid 4120] +++ exited with 0 +++ [pid 4147] ioctl(4, LOOP_SET_FD, 3 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4122, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4120, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 376] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4152] <... openat resumed>) = 4 [pid 4147] <... ioctl resumed>) = 0 [pid 4142] <... ioctl resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4152] ioctl(4, LOOP_SET_FD, 3 [pid 4147] close(3 [pid 4142] close(4 [pid 4147] <... close resumed>) = 0 [pid 4147] mkdir("./bus", 0777 [pid 376] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4147] <... mkdir resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [ 84.000162][ T4128] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 84.021446][ T4142] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/117/bus supports timestamps until 2038 (0x7fffffff) [pid 376] fstat(3, [pid 372] fstat(3, [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, [pid 372] getdents64(3, [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./119/binderfs", [pid 372] lstat("./115/binderfs", [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./119/binderfs" [pid 372] unlink("./115/binderfs" [pid 376] <... unlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 376] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4147] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4152] <... ioctl resumed>) = 0 [pid 4152] close(3) = 0 [pid 4152] mkdir("./bus", 0777) = 0 [pid 4152] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4142] <... close resumed>) = 0 [pid 4145] <... mount resumed>) = 0 [pid 4142] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4141] <... futex resumed>) = 0 [pid 4142] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4141] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4141] <... futex resumed>) = 0 [pid 4142] chdir("./file0" [pid 4141] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4142] <... chdir resumed>) = 0 [pid 4145] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4142] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4145] chdir("./bus" [pid 4142] <... futex resumed>) = 1 [pid 4141] <... futex resumed>) = 0 [pid 4142] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4141] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4141] <... futex resumed>) = 0 [pid 4142] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4141] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4145] <... chdir resumed>) = 0 [pid 4142] <... open resumed>) = 4 [pid 4142] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4141] <... futex resumed>) = 0 [pid 4142] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4141] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4141] <... futex resumed>) = 0 [pid 4142] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4141] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4142] <... openat resumed>) = 5 [pid 4142] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4141] <... futex resumed>) = 0 [pid 4142] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4141] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4141] <... futex resumed>) = 0 [pid 4142] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4141] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4142] <... write resumed>) = 196608 [pid 4142] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4141] <... futex resumed>) = 0 [pid 4142] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4141] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4141] <... futex resumed>) = 0 [pid 4142] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4141] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4142] <... mount resumed>) = 0 [pid 4142] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4141] <... futex resumed>) = 0 [pid 4142] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4141] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4141] <... futex resumed>) = 0 [pid 4142] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4141] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4145] ioctl(4, LOOP_CLR_FD [pid 4147] <... mount resumed>) = 0 [pid 4147] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4147] chdir("./bus") = 0 [pid 4147] ioctl(4, LOOP_CLR_FD [pid 4152] <... mount resumed>) = 0 [pid 4152] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4152] chdir("./bus") = 0 [pid 4152] ioctl(4, LOOP_CLR_FD [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./119/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./119/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./119") = 0 [pid 376] mkdir("./120", 0777) = 0 [ 84.068035][ T4145] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/117/bus supports timestamps until 2038 (0x7fffffff) [ 84.091611][ T4147] ext4 filesystem being mounted at /root/syzkaller.43WzWH/117/bus supports timestamps until 2038 (0x7fffffff) [ 84.097224][ T4152] ext4 filesystem being mounted at /root/syzkaller.k3ECep/118/bus supports timestamps until 2038 (0x7fffffff) [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4145] <... ioctl resumed>) = 0 [pid 4141] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4141] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4145] close(4) = 0 [pid 4141] <... futex resumed>) = 0 [pid 4152] <... ioctl resumed>) = 0 [pid 4147] <... ioctl resumed>) = 0 [pid 4152] close(4 [pid 4147] close(4 [pid 4152] <... close resumed>) = 0 [pid 4147] <... close resumed>) = 0 [pid 4152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4147] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4152] <... futex resumed>) = 1 [pid 4147] <... futex resumed>) = 1 [pid 4143] <... futex resumed>) = 0 [pid 4152] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4147] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4143] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4147] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4143] <... futex resumed>) = 0 [pid 4147] chdir("./file0" [pid 4143] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4147] <... chdir resumed>) = 0 [pid 4147] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4143] <... futex resumed>) = 0 [pid 4147] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4143] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4147] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4143] <... futex resumed>) = 0 [pid 4147] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4143] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4147] <... open resumed>) = 4 [pid 4147] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4143] <... futex resumed>) = 0 [pid 4147] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4143] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4147] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4143] <... futex resumed>) = 0 [pid 4147] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4143] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4147] <... openat resumed>) = 5 [pid 4147] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4143] <... futex resumed>) = 0 [pid 4147] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4143] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4147] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4143] <... futex resumed>) = 0 [pid 4147] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4143] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4147] <... write resumed>) = 196608 [pid 4147] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4143] <... futex resumed>) = 0 [pid 4147] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4143] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4147] <... mount resumed>) = 0 [pid 4143] <... futex resumed>) = 0 [pid 4147] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4143] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4147] <... futex resumed>) = 0 [pid 4143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4147] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4143] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4147] <... open resumed>) = 6 [pid 4143] <... futex resumed>) = 0 [pid 4147] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4143] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4147] <... futex resumed>) = 0 [pid 4143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4147] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4143] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4148] <... futex resumed>) = 0 [pid 4145] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4143] <... futex resumed>) = 0 [pid 4142] <... open resumed>) = 6 [pid 4141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 4143] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] ioctl(3, LOOP_CLR_FD [pid 4145] <... futex resumed>) = 1 [pid 4144] <... futex resumed>) = 0 [pid 4148] <... futex resumed>) = 1 [pid 4142] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4152] <... futex resumed>) = 0 [pid 4141] <... mmap resumed>) = 0x7f64f6d23000 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4152] chdir("./file0" [pid 4148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4145] chdir("./file0" [pid 4144] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4142] <... futex resumed>) = 0 [pid 4141] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 376] close(3 [pid 4152] <... chdir resumed>) = 0 [pid 4145] <... chdir resumed>) = 0 [pid 4144] <... futex resumed>) = 0 [pid 4142] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4141] <... mprotect resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 372] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4145] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4144] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4141] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4152] <... futex resumed>) = 1 [pid 4148] <... futex resumed>) = 0 [pid 4145] <... futex resumed>) = 0 [pid 4144] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4152] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4145] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4144] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4141] <... clone resumed>, parent_tid=[4162], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4162 [pid 372] lstat("./115/bus", [pid 4148] <... futex resumed>) = 0 [pid 4144] <... futex resumed>) = 0 [pid 4141] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4144] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4141] <... futex resumed>) = 0 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4163 [pid 4141] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4152] <... open resumed>) = 4 [pid 4145] <... open resumed>) = 4 [pid 4152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4145] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4152] <... futex resumed>) = 1 [pid 4148] <... futex resumed>) = 0 [pid 4145] <... futex resumed>) = 1 [pid 4144] <... futex resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4152] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4145] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4144] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4148] <... futex resumed>) = 0 [pid 4145] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4144] <... futex resumed>) = 0 [pid 372] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4152] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4145] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4144] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4152] <... openat resumed>) = 5 [pid 4152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4145] <... openat resumed>) = 5 [pid 4152] <... futex resumed>) = 1 [pid 4148] <... futex resumed>) = 0 [pid 4145] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4152] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4145] <... futex resumed>) = 1 [pid 4144] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4148] <... futex resumed>) = 0 [pid 4145] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4144] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 4 [pid 4152] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4145] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4144] <... futex resumed>) = 0 [pid 4147] <... write resumed>) = 1048576 [pid 372] fstat(4, ./strace-static-x86_64: Process 4163 attached ./strace-static-x86_64: Process 4162 attached [pid 4152] <... write resumed>) = 196608 [pid 4145] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4144] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4147] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4152] <... futex resumed>) = 1 [pid 4148] <... futex resumed>) = 0 [pid 4147] <... futex resumed>) = 1 [pid 4145] <... write resumed>) = 196608 [pid 4143] <... futex resumed>) = 0 [pid 372] getdents64(4, [pid 4163] set_robust_list(0x55555713c5e0, 24 [pid 4162] set_robust_list(0x7f64f6d439e0, 24 [pid 4152] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4147] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4145] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4143] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4163] <... set_robust_list resumed>) = 0 [pid 4162] <... set_robust_list resumed>) = 0 [pid 4152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4148] <... futex resumed>) = 0 [pid 4147] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4145] <... futex resumed>) = 1 [pid 4144] <... futex resumed>) = 0 [pid 4143] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4152] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4147] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4145] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4144] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4143] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] getdents64(4, [pid 4163] chdir("./120" [pid 4162] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4152] <... mount resumed>) = 0 [pid 4145] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4144] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4145] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4144] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] close(4 [pid 4152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4148] <... futex resumed>) = 0 [pid 4145] <... mount resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 4152] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4163] <... chdir resumed>) = 0 [pid 4163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4163] setpgid(0, 0) = 0 [pid 4163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4163] write(3, "1000", 4) = 4 [pid 4163] close(3) = 0 [pid 4163] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4163] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4163] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4163] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4164], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4164 [pid 4163] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4163] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4164 attached [pid 4164] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4164] memfd_create("syzkaller", 0) = 3 [pid 4164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4148] <... futex resumed>) = 0 [pid 4145] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] rmdir("./115/bus" [pid 4152] <... open resumed>) = 6 [pid 4145] <... futex resumed>) = 1 [pid 4144] <... futex resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 4145] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4144] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 4152] <... futex resumed>) = 1 [pid 4148] <... futex resumed>) = 0 [pid 4145] <... open resumed>) = 6 [pid 4144] <... futex resumed>) = 0 [pid 4152] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4145] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4144] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4148] <... futex resumed>) = 0 [pid 4145] <... futex resumed>) = 0 [pid 4144] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] close(3 [pid 4152] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4145] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4144] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4145] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4144] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 4145] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4144] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] rmdir("./115") = 0 [pid 372] mkdir("./116", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4165 [pid 4164] <... write resumed>) = 1048576 [pid 4164] munmap(0x7f64f6c44000, 1048576./strace-static-x86_64: Process 4165 attached [pid 4165] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4165] chdir("./116") = 0 [pid 4165] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4165] setpgid(0, 0) = 0 [pid 4165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4165] write(3, "1000", 4) = 4 [pid 4165] close(3) = 0 [pid 4165] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4165] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4165] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4165] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4165] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4166], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4166 [pid 4165] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4165] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4166 attached [pid 4166] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4166] memfd_create("syzkaller", 0) = 3 [pid 4166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4164] <... munmap resumed>) = 0 [pid 4164] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4164] ioctl(4, LOOP_SET_FD, 3 [pid 4141] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4141] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 4141] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 4141] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4142] <... futex resumed>) = 0 [pid 4141] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4142] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4166] munmap(0x7f64f6c44000, 1048576) = 0 [ 84.177363][ T4147] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 84.204765][ T4147] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 4166] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4143] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4147] <... openat resumed>) = 7 [pid 4143] <... mmap resumed>) = 0x7f64f6d23000 [pid 4143] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4147] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4143] <... mprotect resumed>) = 0 [pid 4166] <... openat resumed>) = 4 [pid 4166] ioctl(4, LOOP_SET_FD, 3 [pid 4164] <... ioctl resumed>) = 0 [pid 4147] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4143] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4168], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4168 [pid 4164] close(3 [pid 4143] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4164] <... close resumed>) = 0 [pid 4164] mkdir("./bus", 0777 [pid 4143] <... futex resumed>) = 0 [pid 4143] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4164] <... mkdir resumed>) = 0 [pid 4148] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4144] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4148] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4168 attached [pid 4166] <... ioctl resumed>) = 0 [pid 4164] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4152] <... write resumed>) = 1048576 [pid 4148] <... futex resumed>) = 0 [pid 4145] <... write resumed>) = 1048576 [pid 4144] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4166] close(3 [pid 4148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4145] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4144] <... futex resumed>) = 0 [pid 4166] <... close resumed>) = 0 [pid 4166] mkdir("./bus", 0777 [pid 4148] <... mmap resumed>) = 0x7f64f6d23000 [pid 4145] <... futex resumed>) = 0 [pid 4144] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4166] <... mkdir resumed>) = 0 [pid 4148] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4145] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4144] <... mmap resumed>) = 0x7f64f6d23000 [pid 4162] <... write resumed>) = 1048576 [pid 4144] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4148] <... mprotect resumed>) = 0 [pid 4166] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4148] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4144] <... mprotect resumed>) = 0 [pid 4162] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4144] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4162] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 4170 attached [pid 4170] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4148] <... clone resumed>, parent_tid=[4170], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4170 [pid 4170] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 4171 attached [pid 4171] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4171] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4148] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4144] <... clone resumed>, parent_tid=[4171], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4171 [pid 4148] <... futex resumed>) = 1 [pid 4170] <... futex resumed>) = 0 [pid 4170] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4144] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4148] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4144] <... futex resumed>) = 0 [pid 4144] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4141] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4141] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4162] <... futex resumed>) = 0 [pid 4141] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4162] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4168] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4168] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4171] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4168] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4152] <... futex resumed>) = 0 [pid 4168] <... futex resumed>) = 1 [pid 4143] <... futex resumed>) = 0 [pid 4168] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [ 84.220285][ T4142] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 84.245650][ T4142] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 84.262406][ T4170] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4152] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4143] exit_group(0 [pid 4170] <... openat resumed>) = 7 [pid 4170] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4148] <... futex resumed>) = 0 [pid 4148] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4148] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4170] <... futex resumed>) = 1 [pid 4170] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4144] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4144] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4145] <... futex resumed>) = 0 [pid 4144] <... futex resumed>) = 1 [pid 4145] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4144] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4145] <... openat resumed>) = 8 [pid 4145] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4144] <... futex resumed>) = 0 [pid 4145] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4171] <... openat resumed>) = 7 [pid 4171] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4171] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4142] <... openat resumed>) = 7 [pid 4144] exit_group(0 [pid 4145] <... futex resumed>) = ? [pid 4144] <... exit_group resumed>) = ? [pid 4145] +++ exited with 0 +++ [pid 4142] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4171] <... futex resumed>) = ? [pid 4142] <... futex resumed>) = 0 [pid 4142] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4171] +++ exited with 0 +++ [pid 4144] +++ exited with 0 +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4144, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./117/binderfs") = 0 [pid 375] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4141] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4147] <... futex resumed>) = ? [pid 4143] <... exit_group resumed>) = ? [pid 4147] +++ exited with 0 +++ [pid 4152] <... futex resumed>) = 0 [pid 4152] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [ 84.278887][ T4171] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 84.286362][ T4170] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 84.292890][ T4162] ================================================================== [ 84.304434][ T4171] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 84.309432][ T4162] BUG: KASAN: use-after-free in ext4_ext_rm_leaf+0x153c/0x18c0 [pid 4152] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4148] <... futex resumed>) = 0 [pid 4152] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4148] exit_group(0 [pid 4170] <... futex resumed>) = ? [pid 4152] <... futex resumed>) = ? [pid 4148] <... exit_group resumed>) = ? [pid 4170] +++ exited with 0 +++ [pid 4152] +++ exited with 0 +++ [pid 4148] +++ exited with 0 +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4148, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./118/binderfs") = 0 [pid 373] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4168] <... futex resumed>) = ? [pid 4168] +++ exited with 0 +++ [pid 4143] +++ exited with 0 +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4143, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [ 84.309441][ T4162] Read of size 4 at addr ffff88811f789ff4 by task syz-executor399/4162 [ 84.309443][ T4162] [ 84.309455][ T4162] CPU: 0 PID: 4162 Comm: syz-executor399 Not tainted 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 84.309460][ T4162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 84.309464][ T4162] Call Trace: [ 84.309476][ T4162] dump_stack_lvl+0x1e2/0x24b [ 84.309484][ T4162] ? bfq_pos_tree_add_move+0x43e/0x43e [ 84.309499][ T4162] ? panic+0x7d7/0x7d7 [pid 377] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 84.353850][ T4164] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/120/bus supports timestamps until 2038 (0x7fffffff) [ 84.356536][ T4162] print_address_description+0x81/0x3c0 [ 84.356545][ T4162] kasan_report+0x1a4/0x1f0 [ 84.356556][ T4162] ? ext4_ext_rm_leaf+0x153c/0x18c0 [ 84.356564][ T4162] ? ext4_ext_rm_leaf+0x153c/0x18c0 [ 84.356574][ T4162] __asan_report_load4_noabort+0x14/0x20 [ 84.356592][ T4162] ext4_ext_rm_leaf+0x153c/0x18c0 [ 84.371149][ T4166] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/116/bus supports timestamps until 2038 (0x7fffffff) [ 84.373990][ T4162] ? __kasan_check_read+0x11/0x20 [ 84.374008][ T4162] ? __read_extent_tree_block+0x1d8/0x7b0 [ 84.433195][ T4164] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 84.433368][ T4162] ext4_ext_remove_space+0xf25/0x22a0 [ 84.433385][ T4162] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 84.439565][ T4164] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 84.452849][ T4162] ? ext4_es_remove_extent+0x1a4/0x360 [ 84.452859][ T4162] ? ext4_es_lookup_extent+0x9d0/0x9d0 [ 84.452867][ T4162] ? __down_write+0x119/0x320 [ 84.452877][ T4162] ext4_ext_truncate+0x18a/0x210 [ 84.452890][ T4162] ext4_truncate+0xba0/0x1270 [ 84.452906][ T4162] ? __ext4_mark_inode_dirty+0x780/0x780 [ 84.503483][ T4162] ? selinux_inode_permission+0x670/0x670 [ 84.509178][ T4162] ? setattr_prepare+0x20d/0x9f0 [ 84.514091][ T4162] ext4_setattr+0xf7b/0x17f0 [ 84.518662][ T4162] ? ext4_write_inode+0x730/0x730 [ 84.523658][ T4162] notify_change+0xb76/0xe10 [ 84.528222][ T4162] do_truncate+0x1ea/0x2d0 [ 84.532612][ T4162] ? asan.module_dtor+0x20/0x20 [ 84.537439][ T4162] ? __kasan_check_read+0x11/0x20 [ 84.542437][ T4162] path_openat+0x294e/0x2fd0 [ 84.547092][ T4162] ? do_filp_open+0x440/0x440 [ 84.551744][ T4162] do_filp_open+0x200/0x440 [ 84.556218][ T4162] ? vfs_tmpfile+0x280/0x280 [ 84.560787][ T4162] ? get_unused_fd_flags+0x95/0xa0 [ 84.565872][ T4162] do_sys_openat2+0x13b/0x470 [ 84.570527][ T4162] ? ptrace_stop+0x6ff/0x9f0 [ 84.575090][ T4162] ? do_sys_open+0x220/0x220 [ 84.579658][ T4162] ? _raw_spin_unlock_irq+0x4e/0x70 [ 84.584849][ T4162] ? ptrace_notify+0x248/0x340 [ 84.589585][ T4162] __x64_sys_openat+0x243/0x290 [ 84.594443][ T4162] ? __ia32_sys_open+0x270/0x270 [ 84.599442][ T4162] ? syscall_enter_from_user_mode+0x58/0x1b0 [ 84.605395][ T4162] do_syscall_64+0x34/0x70 [ 84.609804][ T4162] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 84.615677][ T4162] RIP: 0033:0x7f64ff0b87f9 [ 84.620069][ T4162] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.639647][ T4162] RSP: 002b:00007f64f6d432f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 84.648033][ T4162] RAX: ffffffffffffffda RBX: 00007f64ff13d7b0 RCX: 00007f64ff0b87f9 [ 84.655996][ T4162] RDX: 000000000000275a RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 84.663967][ T4162] RBP: 00007f64ff10a814 R08: 0000000000000000 R09: 0000000000000000 [ 84.672086][ T4162] R10: 0000000000000000 R11: 0000000000000246 R12: be734677a9d9a8be [ 84.680034][ T4162] R13: 0030656c69662f2e R14: 6f6f6c2f7665642f R15: 00007f64ff13d7b8 [ 84.687981][ T4162] [ 84.690299][ T4162] The buggy address belongs to the page: [ 84.695926][ T4162] page:ffffea00047de240 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11f789 [ 84.706131][ T4162] flags: 0x8000000000000000() [ 84.710783][ T4162] raw: 8000000000000000 ffffea00047de248 ffffea00047de248 0000000000000000 [ 84.719340][ T4162] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 84.727978][ T4162] page dumped because: kasan: bad access detected [ 84.734357][ T4162] page_owner info is not present (never set?) [ 84.740390][ T4162] [ 84.742691][ T4162] Memory state around the buggy address: [ 84.748298][ T4162] ffff88811f789e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.756348][ T4162] ffff88811f789f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.764415][ T4162] >ffff88811f789f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.772447][ T4162] ^ [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./117/binderfs") = 0 [pid 377] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4164] <... mount resumed>) = 0 [pid 4164] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4164] chdir("./bus") = 0 [pid 4164] ioctl(4, LOOP_CLR_FD) = 0 [pid 4164] close(4) = 0 [pid 4164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4164] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4166] <... mount resumed>) = 0 [pid 4166] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4166] chdir("./bus") = 0 [pid 4166] ioctl(4, LOOP_CLR_FD) = 0 [pid 4166] close(4) = 0 [pid 4166] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4166] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4163] <... futex resumed>) = 0 [pid 4163] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4164] <... futex resumed>) = 0 [pid 4163] <... futex resumed>) = 1 [pid 4164] chdir("./file0" [pid 4163] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4164] <... chdir resumed>) = 0 [pid 4164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4163] <... futex resumed>) = 0 [pid 4164] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4163] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4164] <... open resumed>) = 4 [pid 4163] <... futex resumed>) = 0 [pid 4164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4163] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4164] <... futex resumed>) = 0 [pid 4163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4164] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4163] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4164] <... openat resumed>) = 5 [pid 4163] <... futex resumed>) = 0 [pid 4164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4163] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4164] <... futex resumed>) = 0 [pid 4163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4164] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4163] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4164] <... write resumed>) = 196608 [pid 4163] <... futex resumed>) = 0 [pid 4163] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4163] <... futex resumed>) = 0 [pid 4163] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4163] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4164] <... futex resumed>) = 1 [pid 4164] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4163] <... futex resumed>) = 0 [pid 4163] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4163] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4164] <... futex resumed>) = 1 [pid 4164] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4163] <... futex resumed>) = 0 [pid 4164] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4163] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4163] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4164] <... write resumed>) = 1048576 [pid 4164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4163] <... futex resumed>) = 0 [pid 4163] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4163] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4164] <... futex resumed>) = 1 [pid 4164] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 [pid 4164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4163] <... futex resumed>) = 0 [pid 4163] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4163] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4164] <... futex resumed>) = 1 [pid 4164] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4164] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4163] <... futex resumed>) = 0 [pid 4163] exit_group(0) = ? [pid 4164] <... futex resumed>) = ? [pid 4165] <... futex resumed>) = 0 [pid 4165] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4165] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4166] <... futex resumed>) = 0 [pid 4166] chdir("./file0" [pid 4164] +++ exited with 0 +++ [pid 4163] +++ exited with 0 +++ [pid 4166] <... chdir resumed>) = 0 [pid 4162] <... openat resumed>) = 8 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4163, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4166] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 4162] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4166] <... futex resumed>) = 1 [pid 4166] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4165] <... futex resumed>) = 0 [pid 4165] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4165] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4162] <... futex resumed>) = 0 [pid 4166] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... restart_syscall resumed>) = 0 [pid 4162] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4166] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4141] exit_group(0 [pid 4142] <... futex resumed>) = -1 (errno 18446744073709551555) [pid 4141] <... exit_group resumed>) = ? [pid 4142] +++ exited with 0 +++ [pid 4162] <... futex resumed>) = ? [pid 4166] <... open resumed>) = 4 [pid 4162] +++ exited with 0 +++ [pid 4141] +++ exited with 0 +++ [pid 376] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4166] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4141, si_uid=0, si_status=0, si_utime=1, si_stime=5} --- [pid 4166] <... futex resumed>) = 1 [pid 4165] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4165] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4165] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4166] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 376] <... openat resumed>) = 3 [pid 4166] <... openat resumed>) = 5 [pid 376] fstat(3, [pid 374] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4166] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4166] <... futex resumed>) = 1 [pid 376] getdents64(3, [pid 374] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4166] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] <... openat resumed>) = 3 [pid 376] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] fstat(3, [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] lstat("./120/binderfs", [pid 374] getdents64(3, [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] unlink("./120/binderfs" [pid 374] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... unlink resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./117/binderfs") = 0 [pid 374] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4165] <... futex resumed>) = 0 [pid 4165] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4166] <... futex resumed>) = 0 [pid 4165] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4166] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 4166] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4165] <... futex resumed>) = 0 [pid 4165] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4165] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4166] <... futex resumed>) = 1 [pid 4166] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4166] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4165] <... futex resumed>) = 0 [pid 4165] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4165] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4166] <... futex resumed>) = 1 [pid 4166] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 375] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 375] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./117/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./117/bus", [pid 375] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... openat resumed>) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./117/bus" [pid 374] <... openat resumed>) = 4 [pid 375] <... rmdir resumed>) = 0 [pid 374] fstat(4, [pid 375] getdents64(3, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] getdents64(4, [pid 375] close(3) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] rmdir("./117" [pid 374] getdents64(4, [pid 375] <... rmdir resumed>) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] mkdir("./118", 0777 [pid 374] close(4 [pid 375] <... mkdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 374] rmdir("./117/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./117") = 0 [pid 374] mkdir("./118", 0777) = 0 [ 84.780145][ T4162] ffff88811f78a000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.788287][ T4162] ffff88811f78a080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.796318][ T4162] ================================================================== [ 84.804469][ T4162] Disabling lock debugging due to kernel taint [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4165] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4165] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4165] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4165] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4165] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4176 attached [pid 4176] set_robust_list(0x7f64f6d439e0, 24 [pid 4165] <... clone resumed>, parent_tid=[4176], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4176 [pid 4176] <... set_robust_list resumed>) = 0 [pid 4165] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4176] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4165] <... futex resumed>) = 0 [pid 4176] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 4165] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4176] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4176] <... futex resumed>) = 0 [pid 4165] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4176] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4165] <... futex resumed>) = 0 [pid 4165] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4176] <... openat resumed>) = 7 [pid 4176] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4165] <... futex resumed>) = 0 [pid 4165] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4165] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4176] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4176] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4165] <... futex resumed>) = 0 [pid 4176] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4166] <... open resumed>) = 6 [pid 4166] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4166] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4165] exit_group(0 [pid 4166] <... futex resumed>) = ? [pid 4165] <... exit_group resumed>) = ? [pid 4166] +++ exited with 0 +++ [pid 4176] <... futex resumed>) = ? [pid 375] <... openat resumed>) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4177 ./strace-static-x86_64: Process 4177 attached [pid 4177] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4177] chdir("./118") = 0 [pid 4177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4177] setpgid(0, 0) = 0 [pid 4177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4177] write(3, "1000", 4) = 4 [pid 4177] close(3) = 0 [pid 4177] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4177] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4177] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4177] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4178], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4178 [pid 4177] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4177] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4178 attached [pid 4178] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4178] memfd_create("syzkaller", 0) = 3 [pid 4178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 377] <... umount2 resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 4178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4176] +++ exited with 0 +++ [pid 4165] +++ exited with 0 +++ [pid 377] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = 0 [pid 374] close(3 [pid 373] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4179 [pid 376] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./117/bus", [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./118/bus", [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] lstat("./120/bus", [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4178] <... write resumed>) = 1048576 [pid 4178] munmap(0x7f64f6c44000, 1048576 [pid 377] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... openat resumed>) = 4 [pid 377] fstat(4, [pid 376] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... openat resumed>) = 4 ./strace-static-x86_64: Process 4179 attached [pid 4179] set_robust_list(0x55555713c5e0, 24 [pid 4178] <... munmap resumed>) = 0 [pid 4179] <... set_robust_list resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] fstat(4, [pid 4179] chdir("./118") = 0 [pid 4179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 377] getdents64(4, [pid 376] fstat(4, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4178] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, [pid 4179] <... prctl resumed>) = 0 [pid 4179] setpgid(0, 0 [pid 4178] ioctl(4, LOOP_SET_FD, 3 [pid 4179] <... setpgid resumed>) = 0 [pid 376] getdents64(4, [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, [pid 373] getdents64(4, [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] close(4 [pid 376] close(4 [pid 373] close(4 [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 377] rmdir("./117/bus" [pid 4179] <... openat resumed>) = 3 [pid 376] rmdir("./120/bus" [pid 373] rmdir("./118/bus" [pid 4179] write(3, "1000", 4 [pid 377] <... rmdir resumed>) = 0 [pid 4179] <... write resumed>) = 4 [pid 4179] close(3) = 0 [pid 4179] symlink("/dev/binderfs", "./binderfs" [pid 376] <... rmdir resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 377] getdents64(3, [pid 376] getdents64(3, [pid 373] getdents64(3, [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3 [pid 373] close(3 [pid 377] close(3 [pid 376] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] rmdir("./120" [pid 4179] <... symlink resumed>) = 0 [pid 4179] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 377] rmdir("./117" [pid 373] rmdir("./118" [pid 4179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 373] <... rmdir resumed>) = 0 [pid 4179] <... mmap resumed>) = 0x7f64ff044000 [pid 4179] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 377] mkdir("./118", 0777 [pid 376] mkdir("./121", 0777 [pid 373] mkdir("./119", 0777 [pid 4179] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4181], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4181 [pid 4179] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 4179] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 373] <... mkdir resumed>) = 0 [pid 4178] <... ioctl resumed>) = 0 [pid 4178] close(3 [pid 377] <... mkdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4178] <... close resumed>) = 0 [pid 4178] mkdir("./bus", 0777 [pid 373] <... openat resumed>) = 3 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 376] <... openat resumed>) = 3 [pid 377] <... openat resumed>) = 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 373] ioctl(3, LOOP_CLR_FD [pid 4178] <... mkdir resumed>) = 0 [pid 4178] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] close(3 [pid 376] close(3 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... close resumed>) = 0 ./strace-static-x86_64: Process 4181 attached [pid 377] close(3 [pid 376] <... close resumed>) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4165, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 377] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4184 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4185 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4186 [pid 372] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4178] <... mount resumed>) = 0 [pid 4178] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4178] chdir("./bus") = 0 [pid 4178] ioctl(4, LOOP_CLR_FD) = 0 [pid 4178] close(4) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./116/binderfs") = 0 [pid 372] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4177] <... futex resumed>) = 0 [pid 4177] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4177] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4178] chdir("./file0") = 0 ./strace-static-x86_64: Process 4186 attached ./strace-static-x86_64: Process 4185 attached ./strace-static-x86_64: Process 4184 attached [pid 4181] set_robust_list(0x7f64ff0649e0, 24 [pid 4178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4177] <... futex resumed>) = 0 [pid 4181] <... set_robust_list resumed>) = 0 [pid 4177] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4181] memfd_create("syzkaller", 0 [pid 4177] <... futex resumed>) = 0 [pid 4186] set_robust_list(0x55555713c5e0, 24 [pid 4177] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4186] <... set_robust_list resumed>) = 0 [pid 4186] chdir("./118" [pid 4178] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4181] <... memfd_create resumed>) = 3 [pid 4186] <... chdir resumed>) = 0 [pid 4186] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4186] setpgid(0, 0) = 0 [pid 4186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4186] write(3, "1000", 4) = 4 [pid 4186] close(3) = 0 [pid 4186] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4186] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4186] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4186] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4186] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4186] <... clone resumed>, parent_tid=[4187], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4187 [pid 4186] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4178] <... open resumed>) = 4 [pid 4186] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4187 attached [pid 4187] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4187] memfd_create("syzkaller", 0) = 3 [pid 4187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4184] set_robust_list(0x55555713c5e0, 24 [pid 4178] <... futex resumed>) = 1 [pid 4177] <... futex resumed>) = 0 [pid 4177] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4178] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4184] <... set_robust_list resumed>) = 0 [pid 4177] <... futex resumed>) = 0 [pid 4178] <... openat resumed>) = 5 [pid 4177] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4177] <... futex resumed>) = 0 [pid 4178] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4177] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4178] <... write resumed>) = 196608 [pid 4177] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4184] chdir("./119") = 0 [pid 4187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4184] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4185] set_robust_list(0x55555713c5e0, 24 [pid 4184] <... prctl resumed>) = 0 [pid 4177] <... futex resumed>) = 0 [pid 4177] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4177] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4184] setpgid(0, 0) = 0 [pid 4184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4178] <... futex resumed>) = 1 [pid 4185] <... set_robust_list resumed>) = 0 [pid 4184] write(3, "1000", 4) = 4 [pid 4184] close(3) = 0 [pid 4178] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4185] chdir("./121" [pid 4184] symlink("/dev/binderfs", "./binderfs" [pid 4178] <... mount resumed>) = 0 [pid 4178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4177] <... futex resumed>) = 0 [pid 4177] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4185] <... chdir resumed>) = 0 [pid 4184] <... symlink resumed>) = 0 [pid 4178] <... futex resumed>) = 1 [pid 4184] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4184] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4177] <... futex resumed>) = 0 [pid 4177] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4178] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4185] setpgid(0, 0) = 0 [pid 4185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4185] write(3, "1000", 4) = 4 [pid 4185] close(3) = 0 [pid 4185] symlink("/dev/binderfs", "./binderfs" [pid 4184] <... mmap resumed>) = 0x7f64ff044000 [pid 4184] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4185] <... symlink resumed>) = 0 [pid 4185] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4184] <... mprotect resumed>) = 0 [pid 4185] <... mmap resumed>) = 0x7f64ff044000 [pid 4185] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4185] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4188], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4188 [pid 4185] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4185] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4184] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4189], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4189 [pid 4184] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4184] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4187] <... write resumed>) = 1048576 [pid 4181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4187] munmap(0x7f64f6c44000, 1048576) = 0 ./strace-static-x86_64: Process 4188 attached ./strace-static-x86_64: Process 4189 attached [pid 4187] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4181] <... write resumed>) = 1048576 [pid 4189] set_robust_list(0x7f64ff0649e0, 24 [pid 4188] set_robust_list(0x7f64ff0649e0, 24 [pid 4181] munmap(0x7f64f6c44000, 1048576 [pid 4189] <... set_robust_list resumed>) = 0 [pid 4188] <... set_robust_list resumed>) = 0 [pid 4181] <... munmap resumed>) = 0 [pid 4181] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4188] memfd_create("syzkaller", 0 [pid 4189] memfd_create("syzkaller", 0 [pid 4188] <... memfd_create resumed>) = 3 [pid 4189] <... memfd_create resumed>) = 3 [ 85.035920][ T4178] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/118/bus supports timestamps until 2038 (0x7fffffff) [pid 4188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4188] <... mmap resumed>) = 0x7f64f6c44000 [pid 372] <... umount2 resumed>) = 0 [pid 4178] <... open resumed>) = 6 [pid 4178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4177] <... futex resumed>) = 0 [pid 372] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4187] <... openat resumed>) = 4 [pid 4181] <... openat resumed>) = 4 [pid 4178] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4177] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4187] ioctl(4, LOOP_SET_FD, 3 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4181] ioctl(4, LOOP_SET_FD, 3 [pid 4178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4177] <... futex resumed>) = 0 [pid 4178] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4177] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] lstat("./116/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4187] <... ioctl resumed>) = 0 [pid 372] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4187] close(3 [pid 372] <... openat resumed>) = 4 [pid 4189] <... mmap resumed>) = 0x7f64f6c44000 [pid 4187] <... close resumed>) = 0 [pid 372] fstat(4, [pid 4187] mkdir("./bus", 0777 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4187] <... mkdir resumed>) = 0 [pid 372] getdents64(4, [pid 4187] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./116/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./116") = 0 [pid 372] mkdir("./117", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4181] <... ioctl resumed>) = 0 [pid 372] close(3 [pid 4181] close(3 [pid 372] <... close resumed>) = 0 [pid 4181] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4181] mkdir("./bus", 0777 [pid 4188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4193 ./strace-static-x86_64: Process 4193 attached [pid 4181] <... mkdir resumed>) = 0 [pid 4181] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4178] <... write resumed>) = 1048576 [pid 4178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4177] <... futex resumed>) = 0 [pid 4177] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4178] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4177] <... futex resumed>) = 0 [pid 4177] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4193] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4193] chdir("./117") = 0 [pid 4193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4193] setpgid(0, 0) = 0 [pid 4193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4193] write(3, "1000", 4) = 4 [pid 4193] close(3) = 0 [pid 4193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4193] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4193] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4193] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4195], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4195 [pid 4193] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4193] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4188] <... write resumed>) = 1048576 [pid 4188] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4188] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4188] ioctl(4, LOOP_SET_FD, 3 [pid 4189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4189] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4189] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 4195 attached [pid 4195] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4195] memfd_create("syzkaller", 0) = 3 [pid 4195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4189] <... openat resumed>) = 4 [pid 4188] <... ioctl resumed>) = 0 [pid 4189] ioctl(4, LOOP_SET_FD, 3 [pid 4188] close(3) = 0 [pid 4188] mkdir("./bus", 0777) = 0 [pid 4188] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4195] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4195] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4189] <... ioctl resumed>) = 0 [pid 4189] close(3) = 0 [pid 4189] mkdir("./bus", 0777) = 0 [pid 4189] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4195] <... openat resumed>) = 4 [ 85.122275][ T4178] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 85.137355][ T4187] ext4 filesystem being mounted at /root/syzkaller.43WzWH/118/bus supports timestamps until 2038 (0x7fffffff) [ 85.153279][ T4181] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/118/bus supports timestamps until 2038 (0x7fffffff) [pid 4195] ioctl(4, LOOP_SET_FD, 3 [pid 4187] <... mount resumed>) = 0 [pid 4181] <... mount resumed>) = 0 [pid 4177] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4177] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4177] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4177] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4201], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4201 [pid 4177] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4177] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4187] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4187] chdir("./bus") = 0 [pid 4187] ioctl(4, LOOP_CLR_FD [pid 4181] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 4201 attached [pid 4195] <... ioctl resumed>) = 0 [pid 4187] <... ioctl resumed>) = 0 [pid 4181] <... openat resumed>) = 3 [pid 4195] close(3) = 0 [pid 4195] mkdir("./bus", 0777) = 0 [pid 4195] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4187] close(4) = 0 [pid 4187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4187] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4201] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4201] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4186] <... futex resumed>) = 0 [pid 4181] chdir("./bus") = 0 [pid 4181] ioctl(4, LOOP_CLR_FD) = 0 [pid 4181] close(4) = 0 [pid 4181] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4179] <... futex resumed>) = 0 [pid 4179] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4179] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4181] <... futex resumed>) = 1 [pid 4181] chdir("./file0" [pid 4186] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4181] <... chdir resumed>) = 0 [pid 4181] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4179] <... futex resumed>) = 0 [pid 4179] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4179] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4181] <... futex resumed>) = 1 [pid 4181] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4186] <... futex resumed>) = 1 [pid 4186] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4201] <... openat resumed>) = 8 [pid 4181] <... open resumed>) = 4 [pid 4201] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4181] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4201] <... futex resumed>) = 1 [pid 4181] <... futex resumed>) = 1 [pid 4179] <... futex resumed>) = 0 [pid 4177] <... futex resumed>) = 0 [pid 4179] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4181] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4201] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4179] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4181] <... openat resumed>) = 5 [pid 4181] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4179] <... futex resumed>) = 0 [pid 4181] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4179] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4178] <... openat resumed>) = 7 [pid 4178] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4178] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4181] <... write resumed>) = 196608 [pid 4179] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4177] exit_group(0 [pid 4201] <... futex resumed>) = ? [pid 4177] <... exit_group resumed>) = ? [pid 4201] +++ exited with 0 +++ [pid 4187] <... futex resumed>) = 0 [pid 4181] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4178] <... futex resumed>) = ? [ 85.154370][ T4178] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 4187] chdir("./file0" [pid 4181] <... futex resumed>) = 1 [pid 4179] <... futex resumed>) = 0 [pid 4178] +++ exited with 0 +++ [pid 4177] +++ exited with 0 +++ [pid 4189] <... mount resumed>) = 0 [pid 4189] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4189] chdir("./bus") = 0 [pid 4189] ioctl(4, LOOP_CLR_FD) = 0 [pid 4189] close(4 [pid 4187] <... chdir resumed>) = 0 [pid 4181] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4179] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4189] <... close resumed>) = 0 [pid 4189] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4179] <... futex resumed>) = 0 [pid 4187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4181] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4179] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4177, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 4195] <... mount resumed>) = 0 [pid 4188] <... mount resumed>) = 0 [pid 4187] <... futex resumed>) = 1 [pid 4186] <... futex resumed>) = 0 [pid 4181] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 375] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4184] <... futex resumed>) = 0 [pid 4189] <... futex resumed>) = 1 [pid 4195] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4195] chdir("./bus") = 0 [pid 4188] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4187] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4186] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4188] <... openat resumed>) = 3 [pid 4187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4184] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4181] <... mount resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4195] ioctl(4, LOOP_CLR_FD) = 0 [pid 4195] close(4) = 0 [pid 4189] chdir("./file0" [pid 4188] chdir("./bus" [pid 4187] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4186] <... futex resumed>) = 0 [pid 4184] <... futex resumed>) = 0 [pid 4181] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4188] <... chdir resumed>) = 0 [pid 4186] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4184] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4181] <... futex resumed>) = 1 [pid 4179] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 4188] ioctl(4, LOOP_CLR_FD [pid 4187] <... open resumed>) = 4 [pid 4181] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4179] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fstat(3, [pid 4187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4188] <... ioctl resumed>) = 0 [pid 4187] <... futex resumed>) = 1 [pid 4181] <... open resumed>) = 6 [pid 4179] <... futex resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4188] close(4 [pid 4187] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4186] <... futex resumed>) = 0 [pid 4181] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4179] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(3, [pid 4188] <... close resumed>) = 0 [pid 4186] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4181] <... futex resumed>) = 0 [pid 4179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4188] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4187] <... futex resumed>) = 0 [pid 4186] <... futex resumed>) = 1 [pid 4181] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4179] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4188] <... futex resumed>) = 1 [pid 4187] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4186] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4185] <... futex resumed>) = 0 [pid 4181] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4179] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4188] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4185] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4181] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4179] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] lstat("./118/binderfs", [pid 4188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4187] <... openat resumed>) = 5 [pid 4185] <... futex resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4188] chdir("./file0" [pid 4187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4185] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] unlink("./118/binderfs" [pid 4188] <... chdir resumed>) = 0 [pid 4187] <... futex resumed>) = 1 [pid 4186] <... futex resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 4188] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4187] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4186] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4188] <... futex resumed>) = 1 [pid 4187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4186] <... futex resumed>) = 0 [pid 4185] <... futex resumed>) = 0 [pid 4188] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4187] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4186] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4185] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4185] <... futex resumed>) = 0 [pid 4188] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4185] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4188] <... open resumed>) = 4 [pid 4188] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4185] <... futex resumed>) = 0 [pid 4187] <... write resumed>) = 196608 [pid 4185] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4188] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4185] <... futex resumed>) = 0 [pid 4188] <... openat resumed>) = 5 [pid 4187] <... futex resumed>) = 1 [pid 4186] <... futex resumed>) = 0 [pid 4185] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4195] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4189] <... chdir resumed>) = 0 [pid 4188] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4187] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4186] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4188] <... futex resumed>) = 0 [pid 4187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4186] <... futex resumed>) = 0 [pid 4185] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4188] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4187] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4186] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4185] <... futex resumed>) = 0 [pid 4195] <... futex resumed>) = 1 [pid 4193] <... futex resumed>) = 0 [pid 4189] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4188] <... write resumed>) = 196608 [pid 4187] <... mount resumed>) = 0 [pid 4185] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4195] chdir("./file0" [pid 4193] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4189] <... futex resumed>) = 1 [pid 4188] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4184] <... futex resumed>) = 0 [pid 4193] <... futex resumed>) = 0 [pid 4188] <... futex resumed>) = 0 [pid 4187] <... futex resumed>) = 1 [pid 4186] <... futex resumed>) = 0 [pid 4185] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4184] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4195] <... chdir resumed>) = 0 [pid 4193] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4189] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4188] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4187] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4186] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4185] <... futex resumed>) = 0 [pid 4184] <... futex resumed>) = 0 [pid 4195] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4188] <... mount resumed>) = 0 [pid 4187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4186] <... futex resumed>) = 0 [pid 4185] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4184] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4195] <... futex resumed>) = 0 [pid 4193] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4188] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4187] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4186] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4195] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4193] <... futex resumed>) = 0 [pid 4188] <... futex resumed>) = 0 [pid 4185] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4193] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4189] <... open resumed>) = 4 [pid 4188] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4185] <... futex resumed>) = 0 [pid 4185] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4195] <... open resumed>) = 4 [pid 4189] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4195] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4189] <... futex resumed>) = 1 [pid 4184] <... futex resumed>) = 0 [pid 4195] <... futex resumed>) = 1 [pid 4193] <... futex resumed>) = 0 [pid 4189] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4184] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4195] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4193] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4193] <... futex resumed>) = 0 [pid 4184] <... futex resumed>) = 0 [pid 4189] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4195] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4193] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4184] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4195] <... openat resumed>) = 5 [pid 4189] <... openat resumed>) = 5 [pid 4195] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4189] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4195] <... futex resumed>) = 1 [pid 4193] <... futex resumed>) = 0 [pid 4184] <... futex resumed>) = 0 [pid 4189] <... futex resumed>) = 1 [pid 4195] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4193] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4189] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4184] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4193] <... futex resumed>) = 0 [pid 4184] <... futex resumed>) = 0 [pid 4193] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4184] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4195] <... write resumed>) = 196608 [pid 4195] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4189] <... write resumed>) = 196608 [pid 4181] <... write resumed>) = 1048576 [pid 4189] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4181] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4189] <... futex resumed>) = 1 [pid 4184] <... futex resumed>) = 0 [pid 4181] <... futex resumed>) = 1 [pid 4179] <... futex resumed>) = 0 [pid 4189] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4184] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4181] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4179] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4195] <... futex resumed>) = 1 [pid 4193] <... futex resumed>) = 0 [pid 4189] <... mount resumed>) = 0 [pid 4184] <... futex resumed>) = 0 [pid 4179] <... futex resumed>) = 0 [pid 4195] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4193] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4184] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4179] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4195] <... mount resumed>) = 0 [pid 4193] <... futex resumed>) = 0 [pid 4195] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4193] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4195] <... futex resumed>) = 0 [pid 4193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 85.193785][ T4188] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/121/bus supports timestamps until 2038 (0x7fffffff) [ 85.196442][ T4189] ext4 filesystem being mounted at /root/syzkaller.k3ECep/119/bus supports timestamps until 2038 (0x7fffffff) [ 85.210317][ T4195] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/117/bus supports timestamps until 2038 (0x7fffffff) [pid 4195] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4193] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4193] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4189] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4189] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4184] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4189] <... futex resumed>) = 0 [pid 4184] <... futex resumed>) = 1 [pid 4189] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4184] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4195] <... open resumed>) = 6 [pid 4189] <... open resumed>) = 6 [pid 4188] <... open resumed>) = 6 [pid 4187] <... open resumed>) = 6 [pid 375] <... umount2 resumed>) = 0 [pid 4195] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4189] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4188] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4195] <... futex resumed>) = 1 [pid 4193] <... futex resumed>) = 0 [pid 4189] <... futex resumed>) = 1 [pid 4188] <... futex resumed>) = 1 [pid 4187] <... futex resumed>) = 1 [pid 4186] <... futex resumed>) = 0 [pid 4185] <... futex resumed>) = 0 [pid 4184] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4195] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4193] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4189] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4188] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4187] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4186] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4185] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4184] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./118/bus", [pid 4195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4193] <... futex resumed>) = 0 [pid 4189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4186] <... futex resumed>) = 0 [pid 4185] <... futex resumed>) = 0 [pid 4184] <... futex resumed>) = 0 [pid 4181] <... openat resumed>) = 7 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4195] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4193] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4189] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4188] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4187] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4186] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4185] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4184] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4181] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4181] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4179] <... futex resumed>) = 0 [pid 4179] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4195] <... write resumed>) = 1048576 [pid 4195] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4193] <... futex resumed>) = 0 [pid 4193] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4193] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4195] <... futex resumed>) = 1 [pid 4195] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4179] <... futex resumed>) = 1 [pid 4179] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4181] <... futex resumed>) = 0 [pid 4181] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4181] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4181] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4189] <... write resumed>) = 1048576 [pid 4189] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 85.268683][ T4181] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 85.283063][ T4181] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 4189] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4184] <... futex resumed>) = 0 [pid 4179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4184] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4179] exit_group(0 [pid 4184] <... futex resumed>) = 1 [pid 4179] <... exit_group resumed>) = ? [pid 4184] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4181] <... futex resumed>) = ? [pid 375] <... openat resumed>) = 4 [pid 4181] +++ exited with 0 +++ [pid 4179] +++ exited with 0 +++ [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4179, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, [pid 374] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] close(4 [pid 374] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... close resumed>) = 0 [pid 375] rmdir("./118/bus" [pid 374] <... openat resumed>) = 3 [pid 4189] <... futex resumed>) = 0 [pid 4189] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 375] <... rmdir resumed>) = 0 [pid 374] fstat(3, [pid 375] getdents64(3, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] getdents64(3, [pid 375] close(3 [pid 4188] <... write resumed>) = 1048576 [pid 4187] <... write resumed>) = 1048576 [pid 375] <... close resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4188] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./118" [pid 374] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4188] <... futex resumed>) = 1 [pid 4187] <... futex resumed>) = 1 [pid 4186] <... futex resumed>) = 0 [pid 4185] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4188] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4187] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4186] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4185] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] mkdir("./119", 0777 [pid 374] lstat("./118/binderfs", [pid 4188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4186] <... futex resumed>) = 0 [pid 4185] <... futex resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 85.311895][ T4195] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 85.336233][ T4189] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4188] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4187] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4186] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4185] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 374] unlink("./118/binderfs" [pid 4193] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4193] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4193] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4193] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4208], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4208 [pid 4193] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4193] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4208 attached [pid 4208] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4208] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4208] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4193] <... futex resumed>) = 0 [pid 4208] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4195] <... openat resumed>) = 7 [pid 4195] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4195] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] <... openat resumed>) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 4193] exit_group(0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4208] <... futex resumed>) = ? [pid 4193] <... exit_group resumed>) = ? [pid 4208] +++ exited with 0 +++ [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4209 [pid 4195] <... futex resumed>) = ? ./strace-static-x86_64: Process 4209 attached [pid 4195] +++ exited with 0 +++ [pid 4193] +++ exited with 0 +++ [pid 4187] <... openat resumed>) = 7 [pid 4184] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 374] <... unlink resumed>) = 0 [pid 4184] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4184] <... futex resumed>) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4193, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 4184] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 85.347141][ T4188] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 85.350400][ T4195] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 85.364933][ T4187] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 85.387350][ T4189] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 85.387458][ T4187] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 372] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4184] <... mmap resumed>) = 0x7f64f6d23000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4184] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 372] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4184] <... mprotect resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 4184] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4184] <... clone resumed>, parent_tid=[4210], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4210 [pid 372] getdents64(3, [pid 4184] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4184] <... futex resumed>) = 0 [pid 372] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4184] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./117/binderfs") = 0 [pid 372] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4187] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4209] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4209] chdir("./119") = 0 [pid 4209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4209] setpgid(0, 0) = 0 [pid 4209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4209] write(3, "1000", 4) = 4 [pid 4209] close(3) = 0 [pid 4209] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4209] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4209] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4209] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4211], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4211 [pid 4209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4211 attached [pid 4211] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4211] memfd_create("syzkaller", 0) = 3 [pid 4211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4186] <... futex resumed>) = 0 [pid 4186] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4187] <... futex resumed>) = 0 [pid 4186] <... futex resumed>) = 1 [pid 4187] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4186] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4187] <... openat resumed>) = 8 [pid 4187] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4186] <... futex resumed>) = 0 [pid 4211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4187] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4186] exit_group(0) = ? [pid 4187] <... futex resumed>) = ? [pid 4187] +++ exited with 0 +++ [pid 4186] +++ exited with 0 +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4186, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./118/binderfs") = 0 [pid 377] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4211] <... write resumed>) = 1048576 [pid 4211] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4211] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 4210 attached [pid 4189] <... openat resumed>) = 7 [pid 4189] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4189] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4188] <... openat resumed>) = 7 [pid 4188] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4188] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4210] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4210] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4210] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4184] <... futex resumed>) = 0 [pid 4184] exit_group(0 [pid 4189] <... futex resumed>) = ? [pid 4184] <... exit_group resumed>) = ? [pid 4189] +++ exited with 0 +++ [pid 4185] <... futex resumed>) = 0 [pid 4210] <... futex resumed>) = ? [pid 4185] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4185] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4188] <... futex resumed>) = 0 [pid 4188] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4188] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4188] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4185] <... futex resumed>) = 0 [pid 4185] exit_group(0) = ? [pid 4188] <... futex resumed>) = ? [pid 4188] +++ exited with 0 +++ [ 85.407563][ T4188] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./117/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./117/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./117") = 0 [pid 372] mkdir("./118", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4211] <... openat resumed>) = 4 [pid 4210] +++ exited with 0 +++ [pid 4185] +++ exited with 0 +++ [pid 4184] +++ exited with 0 +++ [pid 4211] ioctl(4, LOOP_SET_FD, 3 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4185, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4184, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 376] <... restart_syscall resumed>) = 0 [pid 373] <... restart_syscall resumed>) = 0 [pid 376] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] fstat(3, [pid 373] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... openat resumed>) = 3 [pid 376] getdents64(3, [pid 373] fstat(3, [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] getdents64(3, [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] lstat("./121/binderfs", [pid 373] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] unlink("./121/binderfs" [pid 373] lstat("./119/binderfs", [pid 376] <... unlink resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] unlink("./119/binderfs" [pid 4211] <... ioctl resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 4211] close(3 [pid 373] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4211] <... close resumed>) = 0 [pid 374] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] ioctl(3, LOOP_CLR_FD [pid 4211] mkdir("./bus", 0777 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4211] <... mkdir resumed>) = 0 [pid 374] lstat("./118/bus", [pid 4211] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./118/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./118") = 0 [pid 374] mkdir("./119", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./119/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./119/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./119") = 0 [pid 373] mkdir("./120", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 4211] <... mount resumed>) = 0 [pid 4211] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4211] chdir("./bus") = 0 [pid 4211] ioctl(4, LOOP_CLR_FD [pid 374] <... openat resumed>) = 3 [pid 377] <... umount2 resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4215 ./strace-static-x86_64: Process 4215 attached [pid 4215] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4215] chdir("./120") = 0 [pid 4215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4215] setpgid(0, 0) = 0 [pid 4215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4215] write(3, "1000", 4 [pid 377] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] <... close resumed>) = 0 [pid 4215] <... write resumed>) = 4 [pid 4215] close(3) = 0 [pid 4215] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4215] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] lstat("./118/bus", [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] close(3 [pid 4215] <... futex resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] lstat("./121/bus", [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4216 [pid 377] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4217 [pid 377] <... openat resumed>) = 4 [pid 376] openat(AT_FDCWD, "./121/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... openat resumed>) = 4 [pid 377] getdents64(4, [pid 376] fstat(4, [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, [pid 376] getdents64(4, [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] close(4 [pid 376] getdents64(4, [pid 377] <... close resumed>) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] rmdir("./118/bus" [pid 376] close(4 [pid 4215] <... mmap resumed>) = 0x7f64ff044000 [pid 377] <... rmdir resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 4215] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4215] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4218], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4218 [pid 377] getdents64(3, [pid 376] rmdir("./121/bus" [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4215] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 376] <... rmdir resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 4211] <... ioctl resumed>) = 0 [pid 376] getdents64(3, [pid 377] rmdir("./118" [pid 4211] close(4 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4215] <... futex resumed>) = 0 [pid 4211] <... close resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 376] close(3 [pid 4211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] mkdir("./119", 0777 [pid 376] <... close resumed>) = 0 [pid 4215] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 377] <... mkdir resumed>) = 0 [pid 376] rmdir("./121" [pid 4211] <... futex resumed>) = 1 [pid 4209] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 3 [pid 4211] chdir("./file0" [pid 376] <... rmdir resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] mkdir("./122", 0777 [pid 4211] <... chdir resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... mkdir resumed>) = 0 [pid 4211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 4217 attached [pid 4211] <... futex resumed>) = 1 [pid 4209] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 4217] set_robust_list(0x55555713c5e0, 24 [pid 4211] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 4216 attached [pid 4216] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4216] chdir("./118") = 0 [pid 4216] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4216] setpgid(0, 0) = 0 [pid 4216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4216] write(3, "1000", 4) = 4 [pid 4216] close(3) = 0 [pid 4216] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4216] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4216] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4216] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4216] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4209] <... futex resumed>) = 0 [pid 4209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4216] <... clone resumed>, parent_tid=[4219], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4219 [pid 4216] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4216] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4220 [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4220 attached [pid 4220] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4220] chdir("./119") = 0 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4221 [pid 4220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4220] setpgid(0, 0) = 0 [pid 4220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4211] <... open resumed>) = 4 [pid 4220] write(3, "1000", 4) = 4 [pid 4220] close(3) = 0 [pid 4220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4217] <... set_robust_list resumed>) = 0 [pid 4211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4220] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4217] chdir("./119" [pid 4211] <... futex resumed>) = 1 [pid 4209] <... futex resumed>) = 0 [pid 4220] <... futex resumed>) = 0 [pid 4209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4211] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4220] <... mmap resumed>) = 0x7f64ff044000 [pid 4220] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4211] <... openat resumed>) = 5 [pid 4220] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4217] <... chdir resumed>) = 0 [pid 4211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4209] <... futex resumed>) = 0 [pid 4211] <... futex resumed>) = 1 [pid 4209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4211] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4209] <... futex resumed>) = 0 [pid 4209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4220] <... clone resumed>, parent_tid=[4222], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4222 [pid 4220] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4220] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4221 attached [pid 4221] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4221] chdir("./122") = 0 [pid 4221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4221] setpgid(0, 0) = 0 [pid 4221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4221] write(3, "1000", 4) = 4 [pid 4221] close(3) = 0 [pid 4221] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4221] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4221] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4221] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4221] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4211] <... write resumed>) = 196608 [pid 4217] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4221] <... clone resumed>, parent_tid=[4223], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4223 [pid 4221] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 85.585633][ T4211] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/119/bus supports timestamps until 2038 (0x7fffffff) [pid 4221] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4217] <... prctl resumed>) = 0 [pid 4211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4218 attached [pid 4217] setpgid(0, 0 [pid 4211] <... futex resumed>) = 1 [pid 4209] <... futex resumed>) = 0 [pid 4209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4217] <... setpgid resumed>) = 0 [pid 4211] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4218] set_robust_list(0x7f64ff0649e0, 24 [pid 4211] <... mount resumed>) = 0 [pid 4217] <... openat resumed>) = 3 [pid 4218] <... set_robust_list resumed>) = 0 [pid 4211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4217] write(3, "1000", 4) = 4 [pid 4211] <... futex resumed>) = 1 [pid 4209] <... futex resumed>) = 0 [pid 4218] memfd_create("syzkaller", 0 [pid 4217] close(3 [pid 4209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4218] <... memfd_create resumed>) = 3 [pid 4217] <... close resumed>) = 0 [pid 4211] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4217] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4211] <... open resumed>) = 6 [pid 4217] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] <... mmap resumed>) = 0x7f64f6c44000 [pid 4211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4217] <... futex resumed>) = 0 [pid 4217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4211] <... futex resumed>) = 1 [pid 4209] <... futex resumed>) = 0 [pid 4209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4217] <... mmap resumed>) = 0x7f64ff044000 [pid 4217] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4217] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4211] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651./strace-static-x86_64: Process 4224 attached [pid 4224] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4224] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4217] <... clone resumed>, parent_tid=[4224], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4224 [pid 4217] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4224] <... futex resumed>) = 0 [pid 4217] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4224] memfd_create("syzkaller", 0) = 3 [pid 4224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 4219 attached ./strace-static-x86_64: Process 4222 attached ./strace-static-x86_64: Process 4223 attached [pid 4223] set_robust_list(0x7f64ff0649e0, 24 [pid 4222] set_robust_list(0x7f64ff0649e0, 24 [pid 4219] set_robust_list(0x7f64ff0649e0, 24 [pid 4218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4223] <... set_robust_list resumed>) = 0 [pid 4222] <... set_robust_list resumed>) = 0 [pid 4219] <... set_robust_list resumed>) = 0 [pid 4218] <... write resumed>) = 1048576 [pid 4223] memfd_create("syzkaller", 0 [pid 4222] memfd_create("syzkaller", 0 [pid 4219] memfd_create("syzkaller", 0 [pid 4218] munmap(0x7f64f6c44000, 1048576 [pid 4223] <... memfd_create resumed>) = 3 [pid 4222] <... memfd_create resumed>) = 3 [pid 4219] <... memfd_create resumed>) = 3 [pid 4218] <... munmap resumed>) = 0 [pid 4223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4218] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4223] <... mmap resumed>) = 0x7f64f6c44000 [pid 4222] <... mmap resumed>) = 0x7f64f6c44000 [pid 4219] <... mmap resumed>) = 0x7f64f6c44000 [pid 4218] <... openat resumed>) = 4 [pid 4224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4218] ioctl(4, LOOP_SET_FD, 3 [pid 4211] <... write resumed>) = 1048576 [pid 4224] <... write resumed>) = 1048576 [pid 4222] <... write resumed>) = 1048576 [pid 4219] <... write resumed>) = 1048576 [pid 4222] munmap(0x7f64f6c44000, 1048576 [pid 4219] munmap(0x7f64f6c44000, 1048576 [pid 4224] munmap(0x7f64f6c44000, 1048576 [pid 4222] <... munmap resumed>) = 0 [pid 4219] <... munmap resumed>) = 0 [pid 4211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4222] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4219] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4224] <... munmap resumed>) = 0 [pid 4222] <... openat resumed>) = 4 [pid 4219] <... openat resumed>) = 4 [pid 4218] <... ioctl resumed>) = 0 [pid 4211] <... futex resumed>) = 1 [pid 4209] <... futex resumed>) = 0 [pid 4222] ioctl(4, LOOP_SET_FD, 3 [pid 4219] ioctl(4, LOOP_SET_FD, 3 [pid 4218] close(3) = 0 [pid 4218] mkdir("./bus", 0777) = 0 [pid 4209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4211] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4224] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4209] <... futex resumed>) = 0 [pid 4219] <... ioctl resumed>) = 0 [pid 4219] close(3) = 0 [pid 4219] mkdir("./bus", 0777) = 0 [pid 4219] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4223] <... write resumed>) = 1048576 [pid 4223] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4223] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4222] <... ioctl resumed>) = 0 [pid 4222] close(3) = 0 [pid 4222] mkdir("./bus", 0777) = 0 [pid 4222] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4223] <... openat resumed>) = 4 [pid 4224] <... openat resumed>) = 4 [pid 4223] ioctl(4, LOOP_SET_FD, 3 [pid 4224] ioctl(4, LOOP_SET_FD, 3 [pid 4223] <... ioctl resumed>) = 0 [pid 4223] close(3) = 0 [pid 4223] mkdir("./bus", 0777) = 0 [pid 4223] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4224] <... ioctl resumed>) = 0 [pid 4224] close(3) = 0 [pid 4224] mkdir("./bus", 0777) = 0 [pid 4224] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4211] <... openat resumed>) = 7 [pid 4211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4209] <... futex resumed>) = 0 [pid 4209] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4209] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4211] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4211] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4209] <... futex resumed>) = 0 [pid 4209] exit_group(0 [pid 4211] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 4209] <... exit_group resumed>) = ? [pid 4211] +++ exited with 0 +++ [pid 4209] +++ exited with 0 +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4209, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 375] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./119/binderfs") = 0 [pid 375] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4222] <... mount resumed>) = 0 [pid 4222] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4222] chdir("./bus") = 0 [pid 4222] ioctl(4, LOOP_CLR_FD) = 0 [ 85.700569][ T4211] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 85.717331][ T4211] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 85.734305][ T4222] ext4 filesystem being mounted at /root/syzkaller.43WzWH/119/bus supports timestamps until 2038 (0x7fffffff) [pid 4219] <... mount resumed>) = 0 [pid 4219] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4222] close(4) = 0 [pid 4219] <... openat resumed>) = 3 [pid 4219] chdir("./bus") = 0 [pid 4219] ioctl(4, LOOP_CLR_FD) = 0 [pid 4219] close(4) = 0 [pid 4219] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4216] <... futex resumed>) = 0 [pid 4216] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4216] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4219] <... futex resumed>) = 1 [pid 4219] chdir("./file0") = 0 [pid 4219] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4216] <... futex resumed>) = 0 [pid 4216] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4216] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4219] <... futex resumed>) = 1 [pid 4219] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4223] <... mount resumed>) = 0 [pid 4223] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4223] chdir("./bus") = 0 [pid 4219] <... open resumed>) = 4 [pid 4219] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4216] <... futex resumed>) = 0 [pid 4219] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4216] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4219] <... openat resumed>) = 5 [pid 4216] <... futex resumed>) = 0 [pid 4219] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4216] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4219] <... futex resumed>) = 0 [pid 4216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4219] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4216] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4222] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4219] <... write resumed>) = 196608 [pid 4216] <... futex resumed>) = 0 [pid 4222] <... futex resumed>) = 1 [pid 4220] <... futex resumed>) = 0 [pid 4216] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4222] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4220] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4222] chdir("./file0" [pid 4220] <... futex resumed>) = 0 [pid 4222] <... chdir resumed>) = 0 [pid 4220] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4222] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4220] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4222] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 4220] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4222] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4220] <... futex resumed>) = 0 [pid 4220] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4219] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4216] <... futex resumed>) = 0 [pid 4216] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4222] <... open resumed>) = 4 [pid 4216] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4222] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4220] <... futex resumed>) = 0 [pid 4222] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4220] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4220] <... futex resumed>) = 0 [pid 4222] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4220] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4222] <... openat resumed>) = 5 [pid 4219] <... futex resumed>) = 1 [pid 4222] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4220] <... futex resumed>) = 0 [pid 4219] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4222] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4220] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4222] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4220] <... futex resumed>) = 0 [pid 4219] <... mount resumed>) = 0 [pid 4219] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4216] <... futex resumed>) = 0 [pid 4216] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4216] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4219] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4219] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4216] <... futex resumed>) = 0 [pid 4216] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4216] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4219] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4222] <... write resumed>) = 196608 [pid 4220] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4222] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4220] <... futex resumed>) = 0 [pid 4222] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4220] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4220] <... futex resumed>) = 0 [pid 4222] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4220] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4222] <... mount resumed>) = 0 [pid 4222] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4220] <... futex resumed>) = 0 [pid 4222] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4220] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4220] <... futex resumed>) = 0 [pid 4222] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4220] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4222] <... open resumed>) = 6 [ 85.750330][ T4219] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/118/bus supports timestamps until 2038 (0x7fffffff) [ 85.753126][ T4218] ext4 filesystem being mounted at /root/syzkaller.k3ECep/120/bus supports timestamps until 2038 (0x7fffffff) [ 85.763216][ T4223] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/122/bus supports timestamps until 2038 (0x7fffffff) [pid 4222] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4220] <... futex resumed>) = 0 [pid 4223] ioctl(4, LOOP_CLR_FD [pid 4222] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4220] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4223] <... ioctl resumed>) = 0 [pid 4222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4220] <... futex resumed>) = 0 [pid 4219] <... write resumed>) = 1048576 [pid 4218] <... mount resumed>) = 0 [pid 4223] close(4 [pid 4222] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4220] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4218] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4224] <... mount resumed>) = 0 [pid 4219] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4224] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4216] <... futex resumed>) = 0 [pid 4224] chdir("./bus" [pid 4219] <... futex resumed>) = 1 [pid 4216] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4224] <... chdir resumed>) = 0 [pid 4219] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4216] <... futex resumed>) = 0 [pid 4224] ioctl(4, LOOP_CLR_FD [pid 4222] <... write resumed>) = 1048576 [pid 4218] <... openat resumed>) = 3 [pid 4222] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] chdir("./bus" [pid 4222] <... futex resumed>) = 1 [pid 4220] <... futex resumed>) = 0 [pid 4218] <... chdir resumed>) = 0 [pid 4222] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4220] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] ioctl(4, LOOP_CLR_FD [pid 4220] <... futex resumed>) = 0 [pid 4216] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 85.807811][ T4224] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/119/bus supports timestamps until 2038 (0x7fffffff) [ 85.823599][ T4219] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 85.836344][ T4222] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4220] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4222] <... openat resumed>) = 7 [pid 4222] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4220] <... futex resumed>) = 0 [pid 4222] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4219] <... openat resumed>) = 7 [pid 4220] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4220] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4219] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4222] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4219] <... futex resumed>) = 1 [pid 4216] <... futex resumed>) = 0 [pid 4222] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4220] <... futex resumed>) = 0 [pid 4222] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4220] exit_group(0 [pid 4219] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4216] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4222] <... futex resumed>) = ? [pid 4220] <... exit_group resumed>) = ? [pid 4219] <... openat resumed>) = 8 [pid 4216] <... futex resumed>) = 0 [pid 4216] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4219] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4216] <... futex resumed>) = 0 [pid 4219] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4216] exit_group(0 [pid 4219] <... futex resumed>) = ? [pid 4216] <... exit_group resumed>) = ? [pid 4224] <... ioctl resumed>) = 0 [pid 4223] <... close resumed>) = 0 [pid 4222] +++ exited with 0 +++ [pid 4220] +++ exited with 0 +++ [pid 4219] +++ exited with 0 +++ [pid 4218] <... ioctl resumed>) = 0 [pid 4216] +++ exited with 0 +++ [pid 375] <... umount2 resumed>) = 0 [pid 4224] close(4 [pid 4223] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] close(4 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4220, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4224] <... close resumed>) = 0 [pid 4223] <... futex resumed>) = 1 [pid 4221] <... futex resumed>) = 0 [pid 4218] <... close resumed>) = 0 [pid 4224] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4223] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4221] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4224] <... futex resumed>) = 1 [pid 4223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4221] <... futex resumed>) = 0 [pid 4218] <... futex resumed>) = 1 [pid 4217] <... futex resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 377] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4224] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4223] chdir("./file0" [pid 4221] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4218] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4217] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4215] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4223] <... chdir resumed>) = 0 [pid 4218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4217] <... futex resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4224] chdir("./file0" [pid 4223] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] chdir("./file0" [pid 4217] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4215] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 3 [pid 4224] <... chdir resumed>) = 0 [pid 4223] <... futex resumed>) = 1 [pid 4221] <... futex resumed>) = 0 [pid 4218] <... chdir resumed>) = 0 [pid 377] fstat(3, [pid 4224] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4223] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4221] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4224] <... futex resumed>) = 1 [pid 4223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4221] <... futex resumed>) = 0 [pid 4218] <... futex resumed>) = 1 [pid 4217] <... futex resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 4224] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4223] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4221] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4218] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4217] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4215] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4217] <... futex resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 377] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4224] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4218] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4217] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4215] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4224] <... open resumed>) = 4 [pid 4223] <... open resumed>) = 4 [pid 4218] <... open resumed>) = 4 [pid 377] lstat("./119/binderfs", [pid 375] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4224] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4223] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4216, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4224] <... futex resumed>) = 1 [pid 4223] <... futex resumed>) = 1 [pid 4221] <... futex resumed>) = 0 [pid 4218] <... futex resumed>) = 1 [pid 4217] <... futex resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 377] unlink("./119/binderfs" [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4224] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4223] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4221] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4217] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4215] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... unlink resumed>) = 0 [pid 4224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4221] <... futex resumed>) = 0 [pid 4218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4217] <... futex resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 377] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4224] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4223] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4221] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4218] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4217] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4215] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] lstat("./119/bus", [pid 4224] <... openat resumed>) = 5 [pid 4223] <... openat resumed>) = 5 [pid 4218] <... openat resumed>) = 5 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4224] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4223] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4224] <... futex resumed>) = 1 [pid 4223] <... futex resumed>) = 1 [pid 4221] <... futex resumed>) = 0 [pid 4218] <... futex resumed>) = 1 [pid 4217] <... futex resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 375] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4224] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4223] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4221] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4217] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4215] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4221] <... futex resumed>) = 0 [pid 4218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4217] <... futex resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4224] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4223] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4221] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4218] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4217] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4215] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... openat resumed>) = 3 [pid 4224] <... write resumed>) = 196608 [pid 4223] <... write resumed>) = 196608 [pid 4218] <... write resumed>) = 196608 [pid 375] <... openat resumed>) = 4 [pid 372] fstat(3, [pid 4224] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4223] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fstat(4, [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4224] <... futex resumed>) = 1 [pid 4223] <... futex resumed>) = 1 [pid 4221] <... futex resumed>) = 0 [pid 4218] <... futex resumed>) = 1 [pid 4217] <... futex resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, [pid 4224] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4223] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4221] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4217] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4215] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(4, [pid 4224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4221] <... futex resumed>) = 0 [pid 4218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4217] <... futex resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4224] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4223] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4221] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4218] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4217] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4215] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4224] <... mount resumed>) = 0 [pid 4223] <... mount resumed>) = 0 [pid 4218] <... mount resumed>) = 0 [pid 375] getdents64(4, [pid 372] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4224] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4223] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4224] <... futex resumed>) = 1 [pid 4223] <... futex resumed>) = 1 [pid 4221] <... futex resumed>) = 0 [pid 4218] <... futex resumed>) = 1 [pid 4217] <... futex resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 375] close(4 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4224] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4223] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4221] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4217] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4215] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4221] <... futex resumed>) = 0 [pid 4218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4217] <... futex resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 372] lstat("./118/binderfs", [pid 4224] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4223] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4221] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4218] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4217] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4215] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] rmdir("./119/bus" [pid 4224] <... open resumed>) = 6 [pid 4223] <... open resumed>) = 6 [pid 4218] <... open resumed>) = 6 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4224] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4223] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4224] <... futex resumed>) = 1 [pid 4223] <... futex resumed>) = 1 [pid 4221] <... futex resumed>) = 0 [pid 4218] <... futex resumed>) = 1 [pid 4217] <... futex resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 4224] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4223] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4221] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4217] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4215] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 372] unlink("./118/binderfs" [pid 4224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4221] <... futex resumed>) = 0 [pid 4218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4217] <... futex resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 4224] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4223] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4221] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 85.839314][ T4219] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 85.852214][ T4222] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 4218] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4217] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4215] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(3, [pid 372] <... unlink resumed>) = 0 [pid 4224] <... write resumed>) = 1048576 [pid 4223] <... write resumed>) = 1048576 [pid 377] <... umount2 resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4224] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4223] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 4224] <... futex resumed>) = 1 [pid 4223] <... futex resumed>) = 1 [pid 4221] <... futex resumed>) = 0 [pid 4217] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 4224] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4223] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] rmdir("./119") = 0 [pid 375] mkdir("./120", 0777 [pid 4221] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4217] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... mkdir resumed>) = 0 [pid 4221] <... futex resumed>) = 1 [pid 4217] <... futex resumed>) = 1 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4221] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4217] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... openat resumed>) = 3 [pid 4224] <... futex resumed>) = 0 [pid 4223] <... futex resumed>) = 0 [pid 4218] <... write resumed>) = 1048576 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] ioctl(3, LOOP_CLR_FD [pid 4224] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4223] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4218] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./119/bus", [pid 4218] <... futex resumed>) = 1 [pid 4215] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4218] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4215] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4215] <... futex resumed>) = 0 [pid 377] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4218] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4215] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4224] <... openat resumed>) = 7 [pid 4223] <... openat resumed>) = 7 [pid 377] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./119/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./119") = 0 [pid 377] mkdir("./120", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4223] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4223] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4224] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 85.939750][ T4224] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 85.940863][ T4223] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 85.968285][ T4224] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 85.968540][ T4223] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 4224] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4221] <... futex resumed>) = 0 [pid 4221] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4221] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4223] <... futex resumed>) = 0 [pid 4223] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4223] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4221] <... futex resumed>) = 0 [pid 4221] exit_group(0) = ? [pid 4223] <... futex resumed>) = ? [pid 4217] <... futex resumed>) = 0 [pid 4217] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4217] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4224] <... futex resumed>) = 0 [pid 4224] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4224] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4217] <... futex resumed>) = 0 [pid 4217] exit_group(0) = ? [pid 4224] <... futex resumed>) = ? [pid 377] <... openat resumed>) = 3 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... umount2 resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4240 ./strace-static-x86_64: Process 4240 attached [pid 4224] +++ exited with 0 +++ [pid 4223] +++ exited with 0 +++ [pid 4221] +++ exited with 0 +++ [pid 4217] +++ exited with 0 +++ [pid 375] close(3 [pid 372] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] lstat("./118/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4241 [pid 372] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, ./strace-static-x86_64: Process 4241 attached [pid 4218] <... openat resumed>) = 7 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4221, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4217, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4 [pid 376] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] rmdir("./118/bus" [pid 376] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... rmdir resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 3 [pid 372] getdents64(3, [pid 4241] set_robust_list(0x55555713c5e0, 24 [pid 4240] set_robust_list(0x55555713c5e0, 24 [pid 4218] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(3, [pid 374] fstat(3, [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] close(3 [pid 4218] <... futex resumed>) = 1 [pid 4215] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 374] getdents64(3, [pid 4218] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4215] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 4215] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4240] <... set_robust_list resumed>) = 0 [pid 4240] chdir("./120" [pid 4218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4215] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] rmdir("./118" [pid 4218] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4240] <... chdir resumed>) = 0 [pid 4240] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4240] setpgid(0, 0 [pid 372] <... rmdir resumed>) = 0 [pid 376] lstat("./122/binderfs", [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] lstat("./119/binderfs", [pid 372] mkdir("./119", 0777 [pid 4218] <... openat resumed>) = 8 [pid 376] unlink("./122/binderfs" [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4240] <... setpgid resumed>) = 0 [pid 4240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4241] <... set_robust_list resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 374] unlink("./119/binderfs" [pid 4241] chdir("./120" [pid 376] <... unlink resumed>) = 0 [pid 4240] <... openat resumed>) = 3 [pid 4218] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... unlink resumed>) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4215] <... futex resumed>) = 0 [pid 4241] <... chdir resumed>) = 0 [pid 4215] exit_group(0 [pid 374] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4215] <... exit_group resumed>) = ? [pid 372] <... openat resumed>) = 3 [pid 4241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4241] setpgid(0, 0 [pid 4240] write(3, "1000", 4) = 4 [pid 4240] close(3 [pid 4218] <... futex resumed>) = ? [pid 372] ioctl(3, LOOP_CLR_FD [pid 4241] <... setpgid resumed>) = 0 [pid 4240] <... close resumed>) = 0 [pid 4218] +++ exited with 0 +++ [pid 4215] +++ exited with 0 +++ [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4215, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 372] <... close resumed>) = 0 [pid 373] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4242 [pid 373] <... openat resumed>) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./120/binderfs"./strace-static-x86_64: Process 4242 attached [pid 4241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4240] symlink("/dev/binderfs", "./binderfs" [pid 373] <... unlink resumed>) = 0 [pid 4242] set_robust_list(0x55555713c5e0, 24 [pid 4241] <... openat resumed>) = 3 [pid 4240] <... symlink resumed>) = 0 [pid 373] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4242] <... set_robust_list resumed>) = 0 [pid 4241] write(3, "1000", 4 [pid 4240] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4242] chdir("./119" [pid 4241] <... write resumed>) = 4 [pid 4240] <... futex resumed>) = 0 [pid 4242] <... chdir resumed>) = 0 [pid 4241] close(3 [pid 4240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4241] <... close resumed>) = 0 [pid 4240] <... mmap resumed>) = 0x7f64ff044000 [pid 4242] <... prctl resumed>) = 0 [pid 4241] symlink("/dev/binderfs", "./binderfs" [pid 4240] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4242] setpgid(0, 0 [pid 4241] <... symlink resumed>) = 0 [pid 4240] <... mprotect resumed>) = 0 [pid 4242] <... setpgid resumed>) = 0 [pid 4241] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4240] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4241] <... futex resumed>) = 0 [pid 4242] <... openat resumed>) = 3 [pid 4241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4240] <... clone resumed>, parent_tid=[4243], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4243 [pid 4242] write(3, "1000", 4 [pid 4241] <... mmap resumed>) = 0x7f64ff044000 [pid 4240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4242] <... write resumed>) = 4 [pid 4241] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4240] <... futex resumed>) = 0 [pid 4242] close(3 [pid 4241] <... mprotect resumed>) = 0 [pid 4240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4242] <... close resumed>) = 0 [pid 4241] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4242] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4241] <... clone resumed>, parent_tid=[4244], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4244 [pid 4242] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4241] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4242] <... futex resumed>) = 0 [pid 4241] <... futex resumed>) = 0 [pid 4242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4241] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4242] <... mmap resumed>) = 0x7f64ff044000 [pid 4242] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4242] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4245], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4245 [pid 4242] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4242] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4244 attached [pid 4244] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4244] memfd_create("syzkaller", 0./strace-static-x86_64: Process 4243 attached ) = 3 [pid 4244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4243] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4243] memfd_create("syzkaller", 0) = 3 [pid 4243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 4245 attached [pid 4245] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4245] memfd_create("syzkaller", 0) = 3 [pid 4245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4243] <... write resumed>) = 1048576 [ 85.978803][ T4218] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 86.002419][ T4218] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 4243] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4243] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4244] <... write resumed>) = 1048576 [pid 4244] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4244] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4245] <... write resumed>) = 1048576 [pid 4245] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4245] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./119/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./119/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./119") = 0 [pid 374] mkdir("./120", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4243] <... openat resumed>) = 4 [pid 4243] ioctl(4, LOOP_SET_FD, 3 [pid 4245] <... openat resumed>) = 4 [pid 4244] <... openat resumed>) = 4 [pid 374] <... openat resumed>) = 3 [pid 376] <... umount2 resumed>) = 0 [pid 4245] ioctl(4, LOOP_SET_FD, 3 [pid 374] ioctl(3, LOOP_CLR_FD [pid 4244] ioctl(4, LOOP_SET_FD, 3 [pid 376] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4243] <... ioctl resumed>) = 0 [pid 376] lstat("./122/bus", [pid 4243] close(3) = 0 [pid 4243] mkdir("./bus", 0777) = 0 [pid 4243] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] <... umount2 resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4245] <... ioctl resumed>) = 0 [pid 376] openat(AT_FDCWD, "./122/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] lstat("./120/bus", [pid 4245] close(3 [pid 4244] <... ioctl resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 374] close(3 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4243] <... mount resumed>) = 0 [pid 4243] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4243] chdir("./bus") = 0 [pid 4243] ioctl(4, LOOP_CLR_FD) = 0 [pid 4243] close(4) = 0 [pid 4243] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4240] <... futex resumed>) = 0 [pid 4240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4243] <... futex resumed>) = 1 [pid 4243] chdir("./file0") = 0 [pid 4243] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4240] <... futex resumed>) = 0 [pid 4240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4245] <... close resumed>) = 0 [pid 376] fstat(4, [pid 4244] close(3 [pid 374] <... close resumed>) = 0 [pid 373] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4245] mkdir("./bus", 0777 [pid 4244] <... close resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4243] <... futex resumed>) = 1 [pid 4243] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4245] <... mkdir resumed>) = 0 [pid 376] getdents64(4, [pid 4243] <... open resumed>) = 4 [pid 4243] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4240] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4245] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4244] mkdir("./bus", 0777 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4251 [pid 373] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(4, [pid 373] <... openat resumed>) = 4 [pid 4243] <... futex resumed>) = 1 [pid 4243] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4244] <... mkdir resumed>) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] fstat(4, [pid 4243] <... openat resumed>) = 5 [pid 4243] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4240] <... futex resumed>) = 0 [pid 4240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] close(4 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4243] <... futex resumed>) = 1 [pid 4243] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 373] getdents64(4, [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./122/bus" [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] <... rmdir resumed>) = 0 [pid 373] getdents64(4, [pid 4244] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 376] getdents64(3, [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] <... close resumed>) = 0 [pid 373] rmdir("./120/bus" [pid 376] close(3 [pid 373] <... rmdir resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./122" [pid 373] getdents64(3, ./strace-static-x86_64: Process 4251 attached [pid 376] <... rmdir resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4251] set_robust_list(0x55555713c5e0, 24 [pid 373] close(3 [pid 376] mkdir("./123", 0777 [pid 4251] <... set_robust_list resumed>) = 0 [pid 373] <... close resumed>) = 0 [ 86.156581][ T4243] ext4 filesystem being mounted at /root/syzkaller.43WzWH/120/bus supports timestamps until 2038 (0x7fffffff) [ 86.186018][ T4245] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/119/bus supports timestamps until 2038 (0x7fffffff) [pid 4251] chdir("./120") = 0 [pid 376] <... mkdir resumed>) = 0 [pid 373] rmdir("./120" [pid 4244] <... mount resumed>) = 0 [pid 4243] <... write resumed>) = 196608 [pid 4251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4251] setpgid(0, 0) = 0 [pid 4251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4251] write(3, "1000", 4) = 4 [pid 4251] close(3 [pid 4244] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4251] <... close resumed>) = 0 [pid 4244] <... openat resumed>) = 3 [pid 4251] symlink("/dev/binderfs", "./binderfs" [pid 4244] chdir("./bus" [pid 4251] <... symlink resumed>) = 0 [pid 4244] <... chdir resumed>) = 0 [pid 4251] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4244] ioctl(4, LOOP_CLR_FD [pid 4251] <... futex resumed>) = 0 [pid 4244] <... ioctl resumed>) = 0 [pid 4251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4244] close(4 [pid 4251] <... mmap resumed>) = 0x7f64ff044000 [pid 4244] <... close resumed>) = 0 [pid 4251] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4244] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4251] <... mprotect resumed>) = 0 [pid 4244] <... futex resumed>) = 1 [pid 4241] <... futex resumed>) = 0 [pid 4251] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4244] chdir("./file0" [pid 4241] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4244] <... chdir resumed>) = 0 [pid 4241] <... futex resumed>) = 0 [pid 4251] <... clone resumed>, parent_tid=[4256], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4256 [pid 4244] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4241] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4251] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4244] <... futex resumed>) = 0 [pid 4241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4251] <... futex resumed>) = 0 [pid 4244] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4241] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4251] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4241] <... futex resumed>) = 0 [pid 4241] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4256 attached [pid 4256] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4256] memfd_create("syzkaller", 0) = 3 [pid 4256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 373] <... rmdir resumed>) = 0 [pid 4245] <... mount resumed>) = 0 [pid 4244] <... open resumed>) = 4 [pid 4243] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 3 [pid 373] mkdir("./121", 0777 [pid 4244] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4241] <... futex resumed>) = 0 [pid 4244] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4241] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4244] <... openat resumed>) = 5 [pid 4243] <... futex resumed>) = 1 [pid 4241] <... futex resumed>) = 0 [pid 4240] <... futex resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 4243] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] <... mkdir resumed>) = 0 [pid 4244] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4241] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4245] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4244] <... futex resumed>) = 0 [pid 4243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4240] <... futex resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4244] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4241] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4256] <... write resumed>) = 1048576 [pid 4245] <... openat resumed>) = 3 [pid 4243] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4241] <... futex resumed>) = 0 [pid 376] close(3 [pid 373] <... openat resumed>) = 3 [pid 4243] <... mount resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 4243] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 4257 attached [pid 4244] <... write resumed>) = 196608 [pid 4243] <... futex resumed>) = 1 [pid 4241] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4240] <... futex resumed>) = 0 [pid 373] close(3 [pid 4243] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4243] <... open resumed>) = 6 [pid 4240] <... futex resumed>) = 0 [pid 4243] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4243] <... futex resumed>) = 0 [pid 4240] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4257 [pid 373] <... close resumed>) = 0 [pid 4243] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4257] set_robust_list(0x55555713c5e0, 24 [pid 4256] munmap(0x7f64f6c44000, 1048576 [pid 4245] chdir("./bus" [pid 4244] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4244] <... futex resumed>) = 1 [pid 4243] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4241] <... futex resumed>) = 0 [pid 4240] <... futex resumed>) = 0 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4258 [pid 4244] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4241] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4244] <... mount resumed>) = 0 [pid 4241] <... futex resumed>) = 0 [pid 4244] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4241] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4244] <... futex resumed>) = 0 [pid 4241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4244] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4241] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4244] <... open resumed>) = 6 [pid 4241] <... futex resumed>) = 0 [pid 4244] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4241] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4244] <... futex resumed>) = 0 [pid 4241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4244] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4241] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4241] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4245] <... chdir resumed>) = 0 [pid 4245] ioctl(4, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 4258 attached [pid 4257] <... set_robust_list resumed>) = 0 [pid 4256] <... munmap resumed>) = 0 [pid 4245] close(4 [pid 4243] <... write resumed>) = 1048576 [pid 4258] set_robust_list(0x55555713c5e0, 24 [pid 4257] chdir("./123" [pid 4256] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4244] <... write resumed>) = 1048576 [pid 4258] <... set_robust_list resumed>) = 0 [pid 4257] <... chdir resumed>) = 0 [pid 4243] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4256] <... openat resumed>) = 4 [pid 4243] <... futex resumed>) = 1 [pid 4240] <... futex resumed>) = 0 [pid 4244] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4241] <... futex resumed>) = 0 [pid 4241] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4241] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4244] <... futex resumed>) = 1 [ 86.186026][ T4244] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/120/bus supports timestamps until 2038 (0x7fffffff) [pid 4244] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4258] chdir("./121" [pid 4257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4256] ioctl(4, LOOP_SET_FD, 3 [pid 4243] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4258] <... chdir resumed>) = 0 [pid 4257] <... prctl resumed>) = 0 [pid 4240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4258] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4257] setpgid(0, 0) = 0 [pid 4257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4257] write(3, "1000", 4) = 4 [pid 4257] close(3) = 0 [pid 4257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4257] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4257] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4257] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4260], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4260 [pid 4257] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4257] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4244] <... openat resumed>) = 7 [pid 4244] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4241] <... futex resumed>) = 0 [pid 4241] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4241] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4244] <... futex resumed>) = 1 [pid 4244] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4244] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4241] <... futex resumed>) = 0 [pid 4241] exit_group(0) = ? [pid 4244] <... futex resumed>) = ? [pid 4256] <... ioctl resumed>) = 0 [pid 4245] <... close resumed>) = 0 [pid 4258] <... prctl resumed>) = 0 [pid 4245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4256] close(3 [pid 4245] <... futex resumed>) = 1 [pid 4242] <... futex resumed>) = 0 ./strace-static-x86_64: Process 4260 attached [pid 4256] <... close resumed>) = 0 [pid 4245] chdir("./file0" [pid 4244] +++ exited with 0 +++ [pid 4242] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4241] +++ exited with 0 +++ [pid 4258] setpgid(0, 0 [pid 4260] set_robust_list(0x7f64ff0649e0, 24 [pid 4258] <... setpgid resumed>) = 0 [pid 4243] <... openat resumed>) = 7 [pid 4260] <... set_robust_list resumed>) = 0 [pid 4256] mkdir("./bus", 0777 [pid 4245] <... chdir resumed>) = 0 [pid 4243] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4242] <... futex resumed>) = 0 [pid 4260] memfd_create("syzkaller", 0 [pid 4256] <... mkdir resumed>) = 0 [pid 4245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4243] <... futex resumed>) = 1 [pid 4242] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4240] <... futex resumed>) = 0 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4241, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 4258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4256] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4245] <... futex resumed>) = 0 [pid 4242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 4240] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4260] <... memfd_create resumed>) = 3 [pid 4258] <... openat resumed>) = 3 [pid 4245] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4243] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4242] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4240] <... futex resumed>) = 0 [pid 375] <... restart_syscall resumed>) = 0 [pid 4260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4258] write(3, "1000", 4 [pid 4245] <... open resumed>) = 4 [pid 4243] <... openat resumed>) = 8 [pid 4242] <... futex resumed>) = 0 [pid 4240] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4242] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4245] <... futex resumed>) = 0 [pid 4242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4245] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4242] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4245] <... openat resumed>) = 5 [pid 4242] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4242] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... openat resumed>) = 3 [pid 4245] <... futex resumed>) = 0 [pid 4242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4245] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4242] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fstat(3, [pid 4260] <... mmap resumed>) = 0x7f64f6c44000 [pid 4258] <... write resumed>) = 4 [pid 4245] <... write resumed>) = 196608 [pid 4243] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4242] <... futex resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4242] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(3, [pid 4245] <... futex resumed>) = 0 [pid 4242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4245] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4242] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4245] <... mount resumed>) = 0 [pid 4243] <... futex resumed>) = 1 [pid 4242] <... futex resumed>) = 0 [pid 4240] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4242] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4240] exit_group(0 [pid 375] lstat("./120/binderfs", [pid 4245] <... futex resumed>) = 0 [pid 4242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4240] <... exit_group resumed>) = ? [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4245] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4242] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] unlink("./120/binderfs" [pid 4245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4242] <... futex resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 4245] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4242] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4245] <... open resumed>) = 6 [pid 4245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4242] <... futex resumed>) = 0 [pid 4245] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4242] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4243] +++ exited with 0 +++ [pid 4242] <... futex resumed>) = 0 [pid 4240] +++ exited with 0 +++ [pid 4242] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4258] close(3 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4240, si_uid=0, si_status=0, si_utime=1, si_stime=2} --- [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 4260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4258] <... close resumed>) = 0 [pid 377] <... restart_syscall resumed>) = 0 [pid 4258] symlink("/dev/binderfs", "./binderfs" [pid 377] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./120/binderfs") = 0 [pid 377] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4260] <... write resumed>) = 1048576 [pid 4258] <... symlink resumed>) = 0 [pid 4260] munmap(0x7f64f6c44000, 1048576 [pid 4258] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4260] <... munmap resumed>) = 0 [pid 4258] <... futex resumed>) = 0 [pid 4258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4260] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4258] <... mmap resumed>) = 0x7f64ff044000 [ 86.238008][ T4244] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 86.245197][ T4243] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 86.252699][ T4244] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 86.275139][ T4243] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 4258] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4258] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4263], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4263 [pid 4258] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4258] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4263 attached [pid 4263] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4263] memfd_create("syzkaller", 0) = 3 [pid 4263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4263] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4263] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4245] <... write resumed>) = 1048576 [pid 4256] <... mount resumed>) = 0 [pid 4256] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4256] <... openat resumed>) = 3 [pid 4245] <... futex resumed>) = 1 [pid 4242] <... futex resumed>) = 0 [pid 4256] chdir("./bus" [pid 4245] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4242] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4256] <... chdir resumed>) = 0 [pid 4256] ioctl(4, LOOP_CLR_FD [pid 4242] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = 0 [pid 375] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./120/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./120/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./120") = 0 [pid 375] mkdir("./121", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4245] <... openat resumed>) = 7 [pid 4245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4242] <... futex resumed>) = 0 [pid 4245] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4242] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4242] <... futex resumed>) = 0 [pid 4245] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4242] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4245] <... openat resumed>) = 8 [pid 4245] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4242] <... futex resumed>) = 0 [pid 4245] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4242] exit_group(0 [pid 4245] <... futex resumed>) = ? [pid 4242] <... exit_group resumed>) = ? [pid 4263] <... openat resumed>) = 4 [pid 4260] <... openat resumed>) = 4 [pid 4256] <... ioctl resumed>) = 0 [pid 4245] +++ exited with 0 +++ [pid 4242] +++ exited with 0 +++ [pid 4263] ioctl(4, LOOP_SET_FD, 3 [pid 377] <... umount2 resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 4263] <... ioctl resumed>) = 0 [pid 4260] ioctl(4, LOOP_SET_FD, 3 [pid 4256] close(4 [pid 377] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4263] close(3 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] ioctl(3, LOOP_CLR_FD [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4242, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 4263] <... close resumed>) = 0 [pid 377] lstat("./120/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4263] mkdir("./bus", 0777 [pid 377] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4260] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4263] <... mkdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4263] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4260] close(3 [pid 4256] <... close resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... openat resumed>) = 3 [pid 377] fstat(4, [pid 375] close(3 [pid 372] fstat(3, [pid 4260] <... close resumed>) = 0 [pid 4256] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, [pid 372] getdents64(3, [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4266 [pid 4260] mkdir("./bus", 0777 [pid 4256] <... futex resumed>) = 1 [pid 4251] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4266 attached [pid 4266] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4260] <... mkdir resumed>) = 0 [pid 4251] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(4 [pid 4251] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4256] chdir("./file0" [pid 4260] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4251] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 372] lstat("./119/binderfs", [pid 4256] <... chdir resumed>) = 0 [pid 377] rmdir("./120/bus" [pid 4256] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4266] chdir("./121") = 0 [pid 4266] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 377] <... rmdir resumed>) = 0 [pid 372] unlink("./119/binderfs" [pid 4256] <... futex resumed>) = 1 [pid 4251] <... futex resumed>) = 0 [pid 4266] <... prctl resumed>) = 0 [pid 4251] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4256] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4251] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 372] <... unlink resumed>) = 0 [pid 4251] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4266] setpgid(0, 0) = 0 [pid 4266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] close(3) = 0 [pid 377] rmdir("./120" [pid 4266] <... openat resumed>) = 3 [pid 4266] write(3, "1000", 4) = 4 [pid 4266] close(3) = 0 [pid 4266] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4266] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 4266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] mkdir("./121", 0777 [pid 4266] <... mmap resumed>) = 0x7f64ff044000 [pid 4266] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD [pid 4266] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4266] <... clone resumed>, parent_tid=[4268], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4268 [pid 4256] <... open resumed>) = 4 [pid 377] close(3 [pid 4256] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4251] <... futex resumed>) = 0 [pid 4256] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4251] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4251] <... futex resumed>) = 0 [pid 4256] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4251] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4256] <... openat resumed>) = 5 [pid 4256] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4251] <... futex resumed>) = 0 [pid 4256] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4251] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4251] <... futex resumed>) = 0 [ 86.320988][ T4256] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/120/bus supports timestamps until 2038 (0x7fffffff) [ 86.334720][ T4245] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 86.348993][ T4245] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 4256] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4251] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4256] <... write resumed>) = 196608 [pid 4256] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4251] <... futex resumed>) = 0 [pid 4251] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4256] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4251] <... futex resumed>) = 0 [pid 4251] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4256] <... mount resumed>) = 0 ./strace-static-x86_64: Process 4268 attached [pid 4268] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4268] memfd_create("syzkaller", 0) = 3 [pid 4256] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4251] <... futex resumed>) = 0 [pid 4251] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4256] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4251] <... futex resumed>) = 0 [pid 4268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4251] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4268] <... mmap resumed>) = 0x7f64f6c44000 [pid 4260] <... mount resumed>) = 0 [pid 4268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4268] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4268] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 4263] <... mount resumed>) = 0 [pid 4260] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4256] <... open resumed>) = 6 [pid 377] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 4268] ioctl(4, LOOP_SET_FD, 3 [pid 4260] <... openat resumed>) = 3 [pid 4256] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4272 attached [pid 4260] chdir("./bus" [pid 4256] <... futex resumed>) = 1 [pid 4251] <... futex resumed>) = 0 [pid 372] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4272] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4268] <... ioctl resumed>) = 0 [pid 4260] <... chdir resumed>) = 0 [pid 4256] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4251] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4272 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4272] chdir("./121" [pid 4268] close(3 [pid 4260] ioctl(4, LOOP_CLR_FD [pid 4251] <... futex resumed>) = 0 [pid 372] lstat("./119/bus", [pid 4263] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4268] <... close resumed>) = 0 [pid 4260] <... ioctl resumed>) = 0 [pid 4251] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... openat resumed>) = 4 [pid 4260] close(4 [pid 4268] mkdir("./bus", 0777 [pid 4260] <... close resumed>) = 0 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4268] <... mkdir resumed>) = 0 [pid 372] getdents64(4, [pid 4260] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4272] <... chdir resumed>) = 0 [pid 372] getdents64(4, [pid 4272] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4272] <... prctl resumed>) = 0 [pid 372] close(4 [pid 4272] setpgid(0, 0 [pid 372] <... close resumed>) = 0 [pid 4272] <... setpgid resumed>) = 0 [pid 372] rmdir("./119/bus" [pid 4272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 372] <... rmdir resumed>) = 0 [pid 4272] <... openat resumed>) = 3 [pid 372] getdents64(3, [pid 4272] write(3, "1000", 4 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4272] <... write resumed>) = 4 [pid 372] close(3 [pid 4272] close(3 [pid 372] <... close resumed>) = 0 [pid 4272] <... close resumed>) = 0 [pid 372] rmdir("./119" [pid 4272] symlink("/dev/binderfs", "./binderfs" [pid 4268] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4263] <... openat resumed>) = 3 [pid 4260] <... futex resumed>) = 1 [pid 4257] <... futex resumed>) = 0 [pid 4256] <... write resumed>) = 1048576 [pid 372] <... rmdir resumed>) = 0 [pid 4272] <... symlink resumed>) = 0 [pid 4260] chdir("./file0" [pid 4257] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] mkdir("./120", 0777 [pid 4272] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4260] <... chdir resumed>) = 0 [pid 4257] <... futex resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 4272] <... futex resumed>) = 0 [pid 4260] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4257] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4260] <... futex resumed>) = 0 [pid 4257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4256] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 3 [pid 4272] <... mmap resumed>) = 0x7f64ff044000 [pid 4260] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4257] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4256] <... futex resumed>) = 1 [pid 4251] <... futex resumed>) = 0 [pid 372] ioctl(3, LOOP_CLR_FD [pid 4263] chdir("./bus" [pid 4272] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4257] <... futex resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4272] <... mprotect resumed>) = 0 [pid 4263] <... chdir resumed>) = 0 [pid 4260] <... open resumed>) = 4 [pid 4257] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4256] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4251] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 4272] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4260] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4251] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 4260] <... futex resumed>) = 0 [pid 4257] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4251] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4272] <... clone resumed>, parent_tid=[4274], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4274 [pid 4260] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4257] <... futex resumed>) = 0 [pid 4272] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4260] <... openat resumed>) = 5 [pid 4257] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4275 [pid 4272] <... futex resumed>) = 0 [pid 4260] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4272] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4260] <... futex resumed>) = 0 [pid 4257] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4260] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4257] <... futex resumed>) = 0 [pid 4260] <... write resumed>) = 196608 [pid 4257] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4260] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4260] <... futex resumed>) = 0 [pid 4260] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4257] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4260] <... mount resumed>) = 0 [pid 4257] <... futex resumed>) = 0 [pid 4260] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4257] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4260] <... futex resumed>) = 0 [pid 4260] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4257] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4275 attached [pid 4260] <... futex resumed>) = 0 [pid 4257] <... futex resumed>) = 1 [pid 4260] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4257] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4260] <... open resumed>) = 6 [pid 4260] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4257] <... futex resumed>) = 0 [pid 4260] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4257] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4257] <... futex resumed>) = 0 [ 86.401903][ T4260] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/123/bus supports timestamps until 2038 (0x7fffffff) [ 86.417324][ T4263] ext4 filesystem being mounted at /root/syzkaller.k3ECep/121/bus supports timestamps until 2038 (0x7fffffff) [pid 4260] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4257] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4275] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4275] chdir("./120") = 0 [pid 4275] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4275] setpgid(0, 0) = 0 [pid 4275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4275] write(3, "1000", 4) = 4 [pid 4275] close(3) = 0 [pid 4275] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4275] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4275] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4275] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4276], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4276 [pid 4275] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4275] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4274 attached [pid 4274] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4274] memfd_create("syzkaller", 0) = 3 [pid 4274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4263] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 4276 attached [pid 4276] set_robust_list(0x7f64ff0649e0, 24 [pid 4263] <... ioctl resumed>) = 0 [pid 4263] close(4) = 0 [pid 4263] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4258] <... futex resumed>) = 0 [pid 4258] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4258] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4263] <... futex resumed>) = 1 [pid 4263] chdir("./file0" [pid 4260] <... write resumed>) = 1048576 [pid 4260] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4257] <... futex resumed>) = 0 [pid 4257] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4257] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4260] <... futex resumed>) = 1 [pid 4260] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 [pid 4260] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4257] <... futex resumed>) = 0 [pid 4257] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4257] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4260] <... futex resumed>) = 1 [pid 4260] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4260] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4257] <... futex resumed>) = 0 [pid 4257] exit_group(0) = ? [pid 4260] <... futex resumed>) = ? [pid 4260] +++ exited with 0 +++ [pid 4257] +++ exited with 0 +++ [pid 4274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4274] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4274] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 4274] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4274] close(3) = 0 [pid 4274] mkdir("./bus", 0777) = 0 [pid 4274] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4276] <... set_robust_list resumed>) = 0 [pid 4276] memfd_create("syzkaller", 0) = 3 [pid 4276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4276] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4276] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4276] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4276] close(3) = 0 [pid 4276] mkdir("./bus", 0777) = 0 [pid 4276] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4263] <... chdir resumed>) = 0 [pid 4263] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4258] <... futex resumed>) = 0 [pid 4263] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4258] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4263] <... open resumed>) = 4 [pid 4258] <... futex resumed>) = 0 [pid 4263] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4258] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4263] <... futex resumed>) = 0 [pid 4258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4251] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4263] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4258] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4263] <... openat resumed>) = 5 [pid 4258] <... futex resumed>) = 0 [pid 4251] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4257, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 4263] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4258] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4251] <... futex resumed>) = 0 [pid 4263] <... futex resumed>) = 0 [pid 4258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4263] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4258] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4263] <... write resumed>) = 196608 [pid 4258] <... futex resumed>) = 0 [pid 4251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4258] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4251] <... mmap resumed>) = 0x7f64f6d23000 [pid 4263] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4258] <... futex resumed>) = 0 [pid 4258] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4258] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4263] <... futex resumed>) = 1 [pid 4263] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4263] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4258] <... futex resumed>) = 0 [pid 4258] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4258] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4263] <... futex resumed>) = 1 [pid 4263] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4263] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4258] <... futex resumed>) = 0 [pid 4258] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4258] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4263] <... futex resumed>) = 1 [pid 4263] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4251] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 376] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4251] <... mprotect resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4251] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4251] <... clone resumed>, parent_tid=[4282], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4282 [pid 376] fstat(3, [pid 4251] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4251] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 4251] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./123/binderfs") = 0 [pid 376] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 86.460173][ T4256] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 86.475224][ T4256] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 86.484204][ T4260] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 86.484338][ T4260] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 376] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4282 attached ) = -1 EINVAL (Invalid argument) [pid 4282] set_robust_list(0x7f64f6d439e0, 24 [pid 4268] <... mount resumed>) = 0 [pid 376] lstat("./123/bus", [pid 4282] <... set_robust_list resumed>) = 0 [pid 4268] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4282] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4268] <... openat resumed>) = 3 [pid 4263] <... write resumed>) = 1048576 [pid 4256] <... openat resumed>) = 7 [pid 376] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4282] <... openat resumed>) = 8 [pid 4268] chdir("./bus" [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4282] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] <... chdir resumed>) = 0 [pid 4263] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4256] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "./123/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4282] <... futex resumed>) = 1 [pid 4274] <... mount resumed>) = 0 [pid 4268] ioctl(4, LOOP_CLR_FD [pid 4251] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 4274] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4274] chdir("./bus") = 0 [pid 4274] ioctl(4, LOOP_CLR_FD [pid 4256] <... futex resumed>) = 0 [pid 4256] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4258] <... futex resumed>) = 0 [pid 4258] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4258] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4263] <... futex resumed>) = 1 [pid 4263] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4282] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4276] <... mount resumed>) = 0 [pid 4251] exit_group(0 [pid 376] fstat(4, [pid 4282] <... futex resumed>) = ? [pid 4251] <... exit_group resumed>) = ? [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4282] +++ exited with 0 +++ [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./123/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./123") = 0 [pid 376] mkdir("./124", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4276] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4276] chdir("./bus") = 0 [pid 4276] ioctl(4, LOOP_CLR_FD [pid 4256] <... futex resumed>) = ? [pid 376] <... openat resumed>) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 86.532758][ T4268] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/121/bus supports timestamps until 2038 (0x7fffffff) [ 86.546630][ T4274] ext4 filesystem being mounted at /root/syzkaller.43WzWH/121/bus supports timestamps until 2038 (0x7fffffff) [ 86.546805][ T4276] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/120/bus supports timestamps until 2038 (0x7fffffff) [pid 376] close(3 [pid 4274] <... ioctl resumed>) = 0 [pid 4268] <... ioctl resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 4256] +++ exited with 0 +++ [pid 4251] +++ exited with 0 +++ [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4276] <... ioctl resumed>) = 0 [pid 4274] close(4 [pid 4268] close(4 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4251, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 4274] <... close resumed>) = 0 [pid 4268] <... close resumed>) = 0 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4286 [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 4274] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... restart_syscall resumed>) = 0 [pid 4274] <... futex resumed>) = 1 [pid 4268] <... futex resumed>) = 1 [pid 4274] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4268] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4272] <... futex resumed>) = 0 [pid 4266] <... futex resumed>) = 0 [pid 374] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./120/binderfs") = 0 [pid 4272] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4274] <... futex resumed>) = 0 [pid 4272] <... futex resumed>) = 1 [pid 4268] <... futex resumed>) = 0 [pid 4266] <... futex resumed>) = 1 [pid 4276] close(4) = 0 [pid 4276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4275] <... futex resumed>) = 0 [pid 4266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4275] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4274] chdir("./file0" [pid 4272] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4268] chdir("./file0" [pid 4275] <... futex resumed>) = 0 [pid 4274] <... chdir resumed>) = 0 [pid 4268] <... chdir resumed>) = 0 [pid 4275] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4274] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4274] <... futex resumed>) = 1 [pid 4272] <... futex resumed>) = 0 [pid 4268] <... futex resumed>) = 1 [pid 4266] <... futex resumed>) = 0 [pid 4274] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4272] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4276] chdir("./file0" [pid 4274] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4272] <... futex resumed>) = 0 [pid 4268] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4266] <... futex resumed>) = 0 [pid 4274] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4272] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4268] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4276] <... chdir resumed>) = 0 [pid 4276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4274] <... open resumed>) = 4 [pid 4276] <... futex resumed>) = 1 [pid 4275] <... futex resumed>) = 0 [pid 4274] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] <... open resumed>) = 4 [pid 4276] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4275] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4274] <... futex resumed>) = 1 [pid 4272] <... futex resumed>) = 0 [pid 4268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4286 attached [pid 4286] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4286] chdir("./124") = 0 [pid 4286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4286] setpgid(0, 0) = 0 [pid 4286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4286] write(3, "1000", 4) = 4 [pid 4286] close(3) = 0 [pid 4286] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4286] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4286] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4286] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4275] <... futex resumed>) = 0 [pid 4272] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4275] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4274] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4268] <... futex resumed>) = 1 [pid 4266] <... futex resumed>) = 0 [pid 4272] <... futex resumed>) = 0 [pid 4272] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4274] <... openat resumed>) = 5 [pid 4268] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4266] <... futex resumed>) = 0 [pid 4276] <... open resumed>) = 4 [pid 4266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4274] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] <... openat resumed>) = 5 [pid 4276] <... futex resumed>) = 1 [pid 4275] <... futex resumed>) = 0 [pid 4274] <... futex resumed>) = 1 [pid 4272] <... futex resumed>) = 0 [pid 4268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4287 attached [pid 4276] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4275] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4274] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4272] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] <... futex resumed>) = 1 [pid 4266] <... futex resumed>) = 0 [pid 4263] <... openat resumed>) = 7 [pid 4286] <... clone resumed>, parent_tid=[4287], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4287 [pid 4276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4275] <... futex resumed>) = 0 [pid 4274] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4272] <... futex resumed>) = 0 [pid 4268] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4263] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4286] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4276] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4275] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4274] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4272] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4268] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4266] <... futex resumed>) = 0 [pid 4263] <... futex resumed>) = 1 [pid 4258] <... futex resumed>) = 0 [pid 4287] set_robust_list(0x7f64ff0649e0, 24 [pid 4286] <... futex resumed>) = 0 [pid 4276] <... openat resumed>) = 5 [pid 4287] <... set_robust_list resumed>) = 0 [pid 4287] memfd_create("syzkaller", 0) = 3 [pid 4287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4286] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4274] <... write resumed>) = 196608 [pid 4268] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4263] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4258] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4276] <... futex resumed>) = 1 [pid 4275] <... futex resumed>) = 0 [pid 4274] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] <... write resumed>) = 196608 [pid 4263] <... openat resumed>) = 8 [pid 4258] <... futex resumed>) = 0 [pid 4276] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4275] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4274] <... futex resumed>) = 1 [pid 4272] <... futex resumed>) = 0 [pid 4268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4263] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4258] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4275] <... futex resumed>) = 0 [pid 4274] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4272] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] <... futex resumed>) = 1 [pid 4266] <... futex resumed>) = 0 [pid 4263] <... futex resumed>) = 0 [pid 4258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4276] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4275] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4274] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4272] <... futex resumed>) = 0 [pid 4268] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4263] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4258] exit_group(0 [pid 4276] <... write resumed>) = 196608 [pid 4274] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4272] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4268] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4266] <... futex resumed>) = 0 [pid 4263] <... futex resumed>) = ? [pid 4258] <... exit_group resumed>) = ? [pid 4276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4274] <... mount resumed>) = 0 [pid 4268] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4263] +++ exited with 0 +++ [pid 4287] <... write resumed>) = 1048576 [pid 4276] <... futex resumed>) = 1 [pid 4275] <... futex resumed>) = 0 [pid 4274] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] <... mount resumed>) = 0 [pid 4276] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4275] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4274] <... futex resumed>) = 1 [pid 4272] <... futex resumed>) = 0 [pid 4268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4275] <... futex resumed>) = 0 [pid 4274] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4272] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] <... futex resumed>) = 1 [pid 4266] <... futex resumed>) = 0 [pid 4276] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4275] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4274] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4272] <... futex resumed>) = 0 [pid 4268] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4276] <... mount resumed>) = 0 [pid 4274] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4272] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4268] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4266] <... futex resumed>) = 0 [pid 4276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4276] <... futex resumed>) = 1 [pid 4275] <... futex resumed>) = 0 [pid 4276] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4275] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4275] <... futex resumed>) = 0 [pid 4276] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4275] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4287] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4287] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4276] <... open resumed>) = 6 [pid 4274] <... open resumed>) = 6 [pid 4268] <... open resumed>) = 6 [pid 4258] +++ exited with 0 +++ [pid 374] <... umount2 resumed>) = 0 [pid 4276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4274] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4258, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 4287] <... openat resumed>) = 4 [pid 4276] <... futex resumed>) = 1 [pid 4275] <... futex resumed>) = 0 [pid 4274] <... futex resumed>) = 1 [pid 4272] <... futex resumed>) = 0 [pid 4268] <... futex resumed>) = 1 [pid 4266] <... futex resumed>) = 0 [ 86.560496][ T4263] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 86.598578][ T4263] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./120/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 4 [pid 373] fstat(3, [pid 4276] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4275] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4274] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4272] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] fstat(4, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, [pid 374] getdents64(4, [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] getdents64(4, [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] lstat("./121/binderfs", [pid 374] close(4 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] <... close resumed>) = 0 [pid 373] unlink("./121/binderfs" [pid 374] rmdir("./120/bus" [pid 373] <... unlink resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 373] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4275] <... futex resumed>) = 0 [pid 4272] <... futex resumed>) = 0 [pid 4266] <... futex resumed>) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./120") = 0 [pid 374] mkdir("./121", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD [pid 4287] ioctl(4, LOOP_SET_FD, 3 [pid 4275] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4272] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] close(3 [pid 4276] <... write resumed>) = 1048576 [pid 4276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4275] <... futex resumed>) = 0 [pid 4276] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4275] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4275] <... futex resumed>) = 0 [pid 4276] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4275] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4268] <... write resumed>) = 1048576 [pid 4268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4268] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4287] <... ioctl resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 4287] close(3 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4287] <... close resumed>) = 0 [pid 4287] mkdir("./bus", 0777 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4289 [pid 4287] <... mkdir resumed>) = 0 [pid 4266] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 4287] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4268] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4268] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 373] lstat("./121/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 86.673202][ T4276] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 86.693510][ T4268] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 86.693717][ T4276] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem ./strace-static-x86_64: Process 4289 attached [pid 373] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4274] <... write resumed>) = 1048576 [pid 4272] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4274] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4272] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4274] <... futex resumed>) = 0 [pid 4272] <... futex resumed>) = 0 [pid 373] openat(AT_FDCWD, "./121/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4274] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4272] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... openat resumed>) = 4 [pid 4289] set_robust_list(0x55555713c5e0, 24 [pid 4268] <... openat resumed>) = 7 [pid 4289] <... set_robust_list resumed>) = 0 [pid 4268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4289] chdir("./121" [pid 4268] <... futex resumed>) = 1 [pid 4289] <... chdir resumed>) = 0 [pid 4268] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4289] setpgid(0, 0) = 0 [pid 4289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4289] write(3, "1000", 4) = 4 [pid 4289] close(3) = 0 [pid 4289] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4289] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4289] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4289] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4290], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4290 [pid 4289] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4289] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4275] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4275] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4275] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4275] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4291], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4291 [pid 4275] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4275] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4276] <... openat resumed>) = 7 [pid 4276] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4276] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] fstat(4, [pid 4266] <... futex resumed>) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 4291 attached ./strace-static-x86_64: Process 4290 attached [pid 373] getdents64(4, [pid 4266] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4291] set_robust_list(0x7f64f6d439e0, 24 [pid 4290] set_robust_list(0x7f64ff0649e0, 24 [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4 [pid 4291] <... set_robust_list resumed>) = 0 [pid 4290] <... set_robust_list resumed>) = 0 [pid 4268] <... futex resumed>) = 0 [pid 4266] <... futex resumed>) = 1 [pid 373] <... close resumed>) = 0 [pid 373] rmdir("./121/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./121") = 0 [pid 373] mkdir("./122", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3 [pid 4291] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4290] memfd_create("syzkaller", 0 [pid 4274] <... openat resumed>) = 7 [pid 4268] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4266] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4291] <... openat resumed>) = 8 [pid 4290] <... memfd_create resumed>) = 3 [pid 4274] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] <... openat resumed>) = 8 [pid 4291] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4274] <... futex resumed>) = 1 [pid 4272] <... futex resumed>) = 0 [pid 4268] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4291] <... futex resumed>) = 1 [pid 4290] <... mmap resumed>) = 0x7f64f6c44000 [pid 4275] <... futex resumed>) = 0 [pid 4274] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4272] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4268] <... futex resumed>) = 1 [pid 4266] <... futex resumed>) = 0 [pid 4291] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4275] exit_group(0 [pid 4272] <... futex resumed>) = 0 [pid 4268] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4266] exit_group(0 [pid 373] <... close resumed>) = 0 [pid 4291] <... futex resumed>) = ? [pid 4276] <... futex resumed>) = ? [pid 4275] <... exit_group resumed>) = ? [pid 4272] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4268] <... futex resumed>) = ? [pid 4266] <... exit_group resumed>) = ? [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4291] +++ exited with 0 +++ [pid 4276] +++ exited with 0 +++ [pid 4268] +++ exited with 0 +++ [pid 4274] <... openat resumed>) = 8 [pid 4274] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4274] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4275] +++ exited with 0 +++ [pid 4272] <... futex resumed>) = 0 [pid 4266] +++ exited with 0 +++ [pid 4272] exit_group(0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4275, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 4290] <... write resumed>) = 1048576 [pid 4290] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4290] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 4290] ioctl(4, LOOP_SET_FD, 3 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4294 ./strace-static-x86_64: Process 4294 attached [pid 4294] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4294] chdir("./122") = 0 [pid 4294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4294] setpgid(0, 0) = 0 [pid 4294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4294] write(3, "1000", 4) = 4 [pid 4294] close(3) = 0 [pid 4294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4294] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4294] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4294] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4295], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4295 [pid 4294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4295 attached [pid 4295] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4295] memfd_create("syzkaller", 0) = 3 [pid 4295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4266, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 4272] <... exit_group resumed>) = ? [pid 4274] <... futex resumed>) = ? [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 375] <... restart_syscall resumed>) = 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 375] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] getdents64(3, [pid 372] <... openat resumed>) = 3 [pid 4287] <... mount resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] fstat(3, [pid 4287] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 375] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] getdents64(3, [pid 375] lstat("./121/binderfs", [pid 4287] <... openat resumed>) = 3 [pid 4290] <... ioctl resumed>) = 0 [pid 4287] chdir("./bus" [pid 4274] +++ exited with 0 +++ [pid 4272] +++ exited with 0 +++ [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4290] close(3) = 0 [pid 4290] mkdir("./bus", 0777) = 0 [pid 4290] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] unlink("./121/binderfs" [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4272, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 372] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... unlink resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] lstat("./120/binderfs", [pid 377] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] unlink("./120/binderfs") = 0 [pid 377] <... openat resumed>) = 3 [pid 372] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, [pid 4295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./121/binderfs") = 0 [pid 377] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4287] <... chdir resumed>) = 0 [pid 4287] ioctl(4, LOOP_CLR_FD [pid 4295] <... write resumed>) = 1048576 [pid 4295] munmap(0x7f64f6c44000, 1048576) = 0 [ 86.707920][ T4268] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 86.718449][ T4274] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 86.743166][ T4274] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 86.761369][ T4287] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/124/bus supports timestamps until 2038 (0x7fffffff) [pid 4295] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4290] <... mount resumed>) = 0 [pid 4290] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4290] chdir("./bus") = 0 [pid 4290] ioctl(4, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./120/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./120/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./120") = 0 [pid 372] mkdir("./121", 0777) = 0 [ 86.795813][ T4290] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/121/bus supports timestamps until 2038 (0x7fffffff) [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4287] <... ioctl resumed>) = 0 [pid 4287] close(4 [pid 4295] <... openat resumed>) = 4 [pid 4290] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4287] <... close resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 377] lstat("./121/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./121/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./121/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./121") = 0 [pid 377] mkdir("./122", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 375] <... umount2 resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4290] close(4 [pid 372] ioctl(3, LOOP_CLR_FD [pid 4295] ioctl(4, LOOP_SET_FD, 3 [pid 4287] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4299 ./strace-static-x86_64: Process 4299 attached [pid 4299] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4299] chdir("./122") = 0 [pid 4299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4299] setpgid(0, 0) = 0 [pid 4299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4299] write(3, "1000", 4) = 4 [pid 4299] close(3) = 0 [pid 4290] <... close resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4287] <... futex resumed>) = 1 [pid 4290] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4286] <... futex resumed>) = 0 [pid 375] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4290] <... futex resumed>) = 1 [pid 4289] <... futex resumed>) = 0 [pid 4287] chdir("./file0" [pid 4286] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 4290] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4289] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] <... chdir resumed>) = 0 [pid 4286] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4295] <... ioctl resumed>) = 0 [pid 4290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4289] <... futex resumed>) = 0 [pid 4287] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4299] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4299] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4299] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4286] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... close resumed>) = 0 [pid 4299] <... mprotect resumed>) = 0 [pid 4299] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4301], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4301 [pid 4299] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4295] close(3 [pid 4290] chdir("./file0" [pid 4289] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4287] <... futex resumed>) = 0 [pid 4286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] lstat("./121/bus", [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4295] <... close resumed>) = 0 [pid 4290] <... chdir resumed>) = 0 [pid 4287] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4286] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4295] mkdir("./bus", 0777 [pid 4290] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4286] <... futex resumed>) = 0 [pid 375] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4302 [pid 4295] <... mkdir resumed>) = 0 [pid 4290] <... futex resumed>) = 1 [pid 4289] <... futex resumed>) = 0 [pid 4287] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4286] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4295] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4290] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4289] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] <... open resumed>) = 4 [pid 375] openat(AT_FDCWD, "./121/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4289] <... futex resumed>) = 0 [pid 4287] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 4 [pid 4290] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4289] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4287] <... futex resumed>) = 1 [pid 4286] <... futex resumed>) = 0 [pid 375] fstat(4, [pid 4290] <... open resumed>) = 4 [pid 4287] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4286] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4299] <... futex resumed>) = 0 [pid 4290] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4286] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 4299] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4290] <... futex resumed>) = 1 [pid 4289] <... futex resumed>) = 0 [pid 4287] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4286] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4290] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4289] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] <... openat resumed>) = 5 [pid 375] getdents64(4, [pid 4290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4289] <... futex resumed>) = 0 [pid 4287] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4290] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4289] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4287] <... futex resumed>) = 1 [pid 4286] <... futex resumed>) = 0 [pid 375] close(4 [pid 4290] <... openat resumed>) = 5 [pid 4287] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4286] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 4290] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4286] <... futex resumed>) = 0 [pid 375] rmdir("./121/bus" [pid 4290] <... futex resumed>) = 1 [pid 4289] <... futex resumed>) = 0 [pid 4287] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4286] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... rmdir resumed>) = 0 [pid 4290] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4289] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] <... write resumed>) = 196608 [pid 375] getdents64(3, [pid 4290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4289] <... futex resumed>) = 0 [pid 4287] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 4302 attached [pid 4290] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4289] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4287] <... futex resumed>) = 1 [pid 4286] <... futex resumed>) = 0 [pid 375] close(3 [pid 4302] set_robust_list(0x55555713c5e0, 24 [pid 4290] <... write resumed>) = 196608 [pid 4287] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4286] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 4302] <... set_robust_list resumed>) = 0 [pid 4290] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4286] <... futex resumed>) = 0 [pid 375] rmdir("./121" [pid 4302] chdir("./121" [pid 4290] <... futex resumed>) = 1 [pid 4289] <... futex resumed>) = 0 [pid 4287] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4286] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... rmdir resumed>) = 0 [pid 4302] <... chdir resumed>) = 0 [pid 4290] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4289] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] <... mount resumed>) = 0 [pid 375] mkdir("./122", 0777 [pid 4302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4289] <... futex resumed>) = 0 [pid 4287] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... mkdir resumed>) = 0 [pid 4302] <... prctl resumed>) = 0 [pid 4290] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4289] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4287] <... futex resumed>) = 1 [pid 4286] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4302] setpgid(0, 0 [pid 4290] <... mount resumed>) = 0 [pid 4287] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4286] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 3 [pid 4302] <... setpgid resumed>) = 0 [pid 4290] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4286] <... futex resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 4302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4290] <... futex resumed>) = 1 [pid 4289] <... futex resumed>) = 0 [pid 4287] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4286] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4302] <... openat resumed>) = 3 [pid 4290] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4289] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] <... open resumed>) = 6 [pid 375] close(3 [pid 4302] write(3, "1000", 4 [pid 4290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4289] <... futex resumed>) = 0 [pid 4287] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 4302] <... write resumed>) = 4 [pid 4290] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4289] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4287] <... futex resumed>) = 1 [pid 4286] <... futex resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4303 attached ./strace-static-x86_64: Process 4301 attached [pid 4302] close(3 [pid 4290] <... open resumed>) = 6 [pid 4287] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4286] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4302] <... close resumed>) = 0 [pid 4290] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4286] <... futex resumed>) = 0 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4303 [pid 4302] symlink("/dev/binderfs", "./binderfs" [pid 4290] <... futex resumed>) = 1 [pid 4289] <... futex resumed>) = 0 [pid 4287] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4286] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4303] set_robust_list(0x55555713c5e0, 24 [pid 4302] <... symlink resumed>) = 0 [pid 4301] set_robust_list(0x7f64ff0649e0, 24 [pid 4290] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4289] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4303] <... set_robust_list resumed>) = 0 [pid 4302] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4289] <... futex resumed>) = 0 [pid 4303] chdir("./122" [pid 4302] <... futex resumed>) = 0 [pid 4290] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4289] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4303] <... chdir resumed>) = 0 [pid 4302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4301] <... set_robust_list resumed>) = 0 [pid 4301] memfd_create("syzkaller", 0) = 3 [pid 4301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4302] <... mmap resumed>) = 0x7f64ff044000 [pid 4301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4302] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4303] <... prctl resumed>) = 0 [pid 4301] <... write resumed>) = 1048576 [pid 4287] <... write resumed>) = 1048576 [pid 4302] <... mprotect resumed>) = 0 [pid 4303] setpgid(0, 0 [pid 4287] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4303] <... setpgid resumed>) = 0 [pid 4302] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4287] <... futex resumed>) = 1 [pid 4286] <... futex resumed>) = 0 [pid 4303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4287] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4286] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4306 attached [pid 4303] <... openat resumed>) = 3 [pid 4302] <... clone resumed>, parent_tid=[4306], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4306 [pid 4287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4286] <... futex resumed>) = 0 [pid 4301] munmap(0x7f64f6c44000, 1048576 [pid 4290] <... write resumed>) = 1048576 [pid 4306] set_robust_list(0x7f64ff0649e0, 24 [pid 4303] write(3, "1000", 4 [pid 4302] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4301] <... munmap resumed>) = 0 [pid 4290] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4286] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4306] <... set_robust_list resumed>) = 0 [pid 4303] <... write resumed>) = 4 [pid 4302] <... futex resumed>) = 0 [pid 4301] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4290] <... futex resumed>) = 1 [pid 4289] <... futex resumed>) = 0 [pid 4295] <... mount resumed>) = 0 [pid 4295] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4295] chdir("./bus") = 0 [pid 4295] ioctl(4, LOOP_CLR_FD) = 0 [pid 4295] close(4) = 0 [pid 4295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4294] <... futex resumed>) = 0 [pid 4294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4295] <... futex resumed>) = 1 [pid 4295] chdir("./file0") = 0 [pid 4295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4294] <... futex resumed>) = 0 [pid 4294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4295] <... futex resumed>) = 1 [pid 4295] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 4295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4294] <... futex resumed>) = 0 [pid 4294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4303] close(3 [pid 4302] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4290] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4289] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4295] <... futex resumed>) = 1 [pid 4303] <... close resumed>) = 0 [pid 4290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4289] <... futex resumed>) = 0 [pid 4306] memfd_create("syzkaller", 0 [pid 4290] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4289] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4303] symlink("/dev/binderfs", "./binderfs" [pid 4301] <... openat resumed>) = 4 [pid 4295] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4294] <... futex resumed>) = 0 [pid 4294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4295] <... futex resumed>) = 1 [pid 4295] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 4295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4294] <... futex resumed>) = 0 [pid 4294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4295] <... futex resumed>) = 1 [pid 4295] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4294] <... futex resumed>) = 0 [pid 4294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4295] <... futex resumed>) = 1 [pid 4295] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4294] <... futex resumed>) = 0 [pid 4294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4295] <... futex resumed>) = 1 [pid 4295] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4303] <... symlink resumed>) = 0 [pid 4303] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4303] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4303] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4307], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4307 [pid 4303] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4303] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4306] <... memfd_create resumed>) = 3 [pid 4306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4301] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 4307 attached [pid 4307] set_robust_list(0x7f64ff0649e0, 24 [pid 4290] <... openat resumed>) = 7 [pid 4307] <... set_robust_list resumed>) = 0 [pid 4290] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4307] memfd_create("syzkaller", 0 [pid 4290] <... futex resumed>) = 1 [pid 4307] <... memfd_create resumed>) = 3 [pid 4290] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4289] <... futex resumed>) = 0 [pid 4307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4289] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4290] <... futex resumed>) = 0 [pid 4289] <... futex resumed>) = 1 [pid 4290] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4289] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4290] <... openat resumed>) = 8 [pid 4290] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4289] <... futex resumed>) = 0 [pid 4290] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 86.977261][ T4295] ext4 filesystem being mounted at /root/syzkaller.k3ECep/122/bus supports timestamps until 2038 (0x7fffffff) [ 86.980232][ T4287] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 87.004359][ T4290] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 87.018410][ T4290] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 4289] exit_group(0 [pid 4290] <... futex resumed>) = ? [pid 4289] <... exit_group resumed>) = ? [pid 4307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4306] <... write resumed>) = 1048576 [pid 4307] <... write resumed>) = 1048576 [pid 4307] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4307] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4306] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4306] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4301] <... ioctl resumed>) = 0 [pid 4290] +++ exited with 0 +++ [pid 4289] +++ exited with 0 +++ [pid 4306] <... openat resumed>) = 4 [pid 4306] ioctl(4, LOOP_SET_FD, 3 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4289, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 4301] close(3) = 0 [pid 374] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4301] mkdir("./bus", 0777 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4307] <... openat resumed>) = 4 [pid 4307] ioctl(4, LOOP_SET_FD, 3 [pid 4301] <... mkdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4301] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 374] <... openat resumed>) = 3 [pid 4306] <... ioctl resumed>) = 0 [pid 4287] <... openat resumed>) = 7 [pid 4306] close(3) = 0 [pid 4306] mkdir("./bus", 0777) = 0 [pid 4306] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4287] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4307] <... ioctl resumed>) = 0 [pid 4286] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4286] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4286] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4307] close(3 [pid 4295] <... write resumed>) = 1048576 [pid 4287] <... futex resumed>) = 1 [pid 4286] <... futex resumed>) = 0 [pid 374] lstat("./121/binderfs", [pid 4307] <... close resumed>) = 0 [pid 4295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4286] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=49000000} [pid 4307] mkdir("./bus", 0777 [pid 4295] <... futex resumed>) = 1 [pid 4294] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4294] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4287] <... openat resumed>) = 8 [pid 374] unlink("./121/binderfs" [pid 4294] <... futex resumed>) = 0 [pid 4287] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4294] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4287] <... futex resumed>) = 1 [pid 4286] <... futex resumed>) = 0 [pid 374] <... unlink resumed>) = 0 [pid 4307] <... mkdir resumed>) = 0 [pid 4295] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4287] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4286] exit_group(0 [pid 374] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4286] <... exit_group resumed>) = ? [pid 4307] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4287] <... futex resumed>) = ? [pid 4287] +++ exited with 0 +++ [pid 4286] +++ exited with 0 +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4286, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4306] <... mount resumed>) = 0 [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 4306] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4306] chdir("./bus") = 0 [pid 4306] ioctl(4, LOOP_CLR_FD) = 0 [pid 4306] close(4) = 0 [pid 4306] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4302] <... futex resumed>) = 0 [pid 4302] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4302] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4306] chdir("./file0") = 0 [pid 4306] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4302] <... futex resumed>) = 0 [pid 4306] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4302] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4302] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4306] <... open resumed>) = 4 [pid 4306] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4302] <... futex resumed>) = 0 [pid 4302] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4302] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4306] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4306] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4302] <... futex resumed>) = 0 [ 87.031823][ T4287] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 87.059018][ T4295] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4302] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4306] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4302] <... futex resumed>) = 0 [pid 4306] <... write resumed>) = 196608 [pid 4302] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4306] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4302] <... futex resumed>) = 0 [pid 4302] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4302] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4306] <... futex resumed>) = 1 [pid 4306] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4306] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4302] <... futex resumed>) = 0 [pid 4302] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4302] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4306] <... futex resumed>) = 1 [pid 4306] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4306] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4302] <... futex resumed>) = 0 [pid 4302] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4302] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4306] <... futex resumed>) = 1 [pid 4306] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4301] <... mount resumed>) = 0 [pid 376] <... restart_syscall resumed>) = 0 [pid 376] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4301] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 376] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4301] chdir("./bus" [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./124/binderfs", [pid 4301] <... chdir resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4301] ioctl(4, LOOP_CLR_FD [pid 376] unlink("./124/binderfs") = 0 [pid 376] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4306] <... write resumed>) = 1048576 [pid 4306] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4302] <... futex resumed>) = 0 [pid 4302] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4302] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4306] <... futex resumed>) = 1 [pid 4306] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4294] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4294] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4294] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4294] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4317], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4317 [pid 4294] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4294] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4317 attached [pid 4317] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4317] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4317] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4294] <... futex resumed>) = 0 [pid 4317] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4295] <... openat resumed>) = 7 [pid 4295] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 87.074029][ T4301] ext4 filesystem being mounted at /root/syzkaller.43WzWH/122/bus supports timestamps until 2038 (0x7fffffff) [ 87.074037][ T4306] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/121/bus supports timestamps until 2038 (0x7fffffff) [ 87.105687][ T4295] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 87.108716][ T4306] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4295] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4307] <... mount resumed>) = 0 [pid 4307] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4307] chdir("./bus") = 0 [pid 4307] ioctl(4, LOOP_CLR_FD [pid 4294] exit_group(0 [pid 4317] <... futex resumed>) = ? [pid 4295] <... futex resumed>) = ? [pid 4294] <... exit_group resumed>) = ? [pid 4317] +++ exited with 0 +++ [pid 4295] +++ exited with 0 +++ [pid 4306] <... openat resumed>) = 7 [pid 4301] <... ioctl resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 4301] close(4) = 0 [pid 4306] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4301] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4299] <... futex resumed>) = 0 [pid 4302] <... futex resumed>) = 0 [pid 4306] <... futex resumed>) = 1 [pid 4302] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4301] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4299] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4301] chdir("./file0" [pid 4302] <... futex resumed>) = 0 [pid 4299] <... futex resumed>) = 0 [pid 4302] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4301] <... chdir resumed>) = 0 [pid 374] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4299] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./121/bus", [pid 4306] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4301] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4306] <... openat resumed>) = 8 [pid 4301] <... futex resumed>) = 1 [pid 4299] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./121/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4306] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4301] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4299] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4294] +++ exited with 0 +++ [pid 374] <... openat resumed>) = 4 [pid 374] fstat(4, [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4294, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./121/bus") = 0 [pid 373] <... restart_syscall resumed>) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3 [pid 373] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... close resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] rmdir("./121" [pid 373] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... rmdir resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 374] mkdir("./122", 0777 [pid 373] fstat(3, [pid 374] <... mkdir resumed>) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 373] getdents64(3, [pid 374] <... openat resumed>) = 3 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] close(3 [pid 373] lstat("./122/binderfs", [pid 374] <... close resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] unlink("./122/binderfs") = 0 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4318 [pid 373] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4307] <... ioctl resumed>) = 0 [pid 4307] close(4 [pid 4299] <... futex resumed>) = 0 [pid 4301] <... open resumed>) = 4 [pid 4299] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4306] <... futex resumed>) = 1 [pid 4306] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 4318 attached [pid 4318] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4318] chdir("./122") = 0 [pid 4302] <... futex resumed>) = 0 [pid 4302] exit_group(0 [pid 4301] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4306] <... futex resumed>) = -1 (errno 18446744073709551555) [pid 4302] <... exit_group resumed>) = ? [pid 4301] <... futex resumed>) = 1 [pid 4318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4299] <... futex resumed>) = 0 [pid 4299] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4301] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4318] <... prctl resumed>) = 0 [pid 4318] setpgid(0, 0) = 0 [pid 4318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4318] write(3, "1000", 4 [pid 4299] <... futex resumed>) = 0 [pid 4318] <... write resumed>) = 4 [pid 4318] close(3) = 0 [pid 4301] <... openat resumed>) = 5 [pid 4299] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4301] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4318] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4301] <... futex resumed>) = 1 [pid 4299] <... futex resumed>) = 0 [pid 4299] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4301] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4299] <... futex resumed>) = 0 [pid 4318] <... futex resumed>) = 0 [pid 4318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4318] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4318] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4319], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4319 [pid 4318] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4318] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4319 attached [pid 4319] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4319] memfd_create("syzkaller", 0) = 3 [pid 4319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4301] <... write resumed>) = 196608 [pid 4299] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4301] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4299] <... futex resumed>) = 0 [pid 4299] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4301] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4299] <... futex resumed>) = 0 [pid 4299] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4301] <... mount resumed>) = 0 [pid 4301] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4299] <... futex resumed>) = 0 [pid 4301] <... futex resumed>) = 1 [pid 4299] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4299] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4301] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4319] munmap(0x7f64f6c44000, 1048576) = 0 [ 87.118288][ T4307] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/122/bus supports timestamps until 2038 (0x7fffffff) [ 87.129012][ T4306] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 4319] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4307] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./124/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./124/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./124/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./124") = 0 [pid 376] mkdir("./125", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4320 ./strace-static-x86_64: Process 4320 attached [pid 4320] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4320] chdir("./125") = 0 [pid 4320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4320] setpgid(0, 0) = 0 [pid 4307] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4303] <... futex resumed>) = 0 [pid 4307] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4320] write(3, "1000", 4) = 4 [pid 4320] close(3) = 0 [pid 4320] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4320] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4320] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4320] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4321], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4321 [pid 4320] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4320] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4321 attached [pid 4321] set_robust_list(0x7f64ff0649e0, 24 [pid 4307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4303] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4307] chdir("./file0" [pid 4306] +++ exited with 0 +++ [pid 4303] <... futex resumed>) = 0 [pid 4302] +++ exited with 0 +++ [pid 4303] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4302, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 4307] <... chdir resumed>) = 0 [pid 372] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4307] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4303] <... futex resumed>) = 0 [pid 4307] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4303] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4303] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4307] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4303] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4301] <... open resumed>) = 6 [pid 372] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4301] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] fstat(3, [pid 4321] <... set_robust_list resumed>) = 0 [pid 4321] memfd_create("syzkaller", 0 [pid 4307] <... open resumed>) = 4 [pid 4301] <... futex resumed>) = 1 [pid 4299] <... futex resumed>) = 0 [pid 4307] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4307] <... futex resumed>) = 1 [pid 4303] <... futex resumed>) = 0 [pid 4301] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4299] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4307] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4303] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 4299] <... futex resumed>) = 0 [pid 4321] <... memfd_create resumed>) = 3 [pid 4307] <... openat resumed>) = 5 [pid 4303] <... futex resumed>) = 0 [pid 4299] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4303] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4307] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4307] <... futex resumed>) = 0 [pid 4303] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4307] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4303] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4307] <... write resumed>) = 196608 [pid 4303] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] lstat("./121/binderfs", [pid 4307] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4307] <... futex resumed>) = 0 [pid 4303] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4303] <... futex resumed>) = 0 [pid 4307] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 372] unlink("./121/binderfs" [pid 4303] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... unlink resumed>) = 0 [pid 4307] <... mount resumed>) = 0 [pid 372] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4307] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4303] <... futex resumed>) = 0 [pid 4303] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4303] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4307] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4307] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4303] <... futex resumed>) = 0 [pid 4307] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4303] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4303] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4321] <... write resumed>) = 1048576 [pid 4321] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4321] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4301] <... write resumed>) = 1048576 [pid 4301] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4299] <... futex resumed>) = 0 [pid 4299] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4299] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4301] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4307] <... write resumed>) = 1048576 [pid 4307] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4307] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4303] <... futex resumed>) = 0 [pid 4303] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4303] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4307] <... futex resumed>) = 0 [pid 4307] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 373] <... umount2 resumed>) = 0 [pid 4321] <... openat resumed>) = 4 [pid 4319] <... openat resumed>) = 4 [pid 4321] ioctl(4, LOOP_SET_FD, 3 [pid 4319] ioctl(4, LOOP_SET_FD, 3 [pid 373] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./122/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./122/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./122/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./122") = 0 [pid 373] mkdir("./123", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4301] <... openat resumed>) = 7 [pid 4301] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4299] <... futex resumed>) = 0 [pid 4299] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4299] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4301] <... futex resumed>) = 1 [pid 4301] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4301] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4299] <... futex resumed>) = 0 [pid 4299] exit_group(0) = ? [pid 4301] <... futex resumed>) = ? [pid 4307] <... openat resumed>) = 7 [pid 4307] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4303] <... futex resumed>) = 0 [pid 4303] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4307] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4303] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4307] <... openat resumed>) = 8 [pid 4307] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4303] <... futex resumed>) = 0 [pid 4303] exit_group(0) = ? [pid 4307] <... futex resumed>) = ? [pid 4307] +++ exited with 0 +++ [pid 4303] +++ exited with 0 +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4303, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./121/bus", [pid 375] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... openat resumed>) = 3 [pid 372] openat(AT_FDCWD, "./121/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] fstat(3, [pid 372] <... openat resumed>) = 4 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] fstat(4, [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./122/binderfs") = 0 [pid 372] getdents64(4, [pid 375] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, [pid 4319] <... ioctl resumed>) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4319] close(3) = 0 [pid 4319] mkdir("./bus", 0777 [pid 4321] <... ioctl resumed>) = 0 [pid 4319] <... mkdir resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 372] close(4 [pid 4321] close(3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4321] <... close resumed>) = 0 [pid 4319] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4321] mkdir("./bus", 0777 [pid 373] close(3) = 0 [pid 4321] <... mkdir resumed>) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4301] +++ exited with 0 +++ [pid 4299] +++ exited with 0 +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4299, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 372] <... close resumed>) = 0 [pid 372] rmdir("./121/bus") = 0 [pid 377] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] getdents64(3, [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] close(3 [pid 377] <... openat resumed>) = 3 [pid 372] <... close resumed>) = 0 [pid 377] fstat(3, [pid 372] rmdir("./121" [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 377] getdents64(3, [pid 372] mkdir("./122", 0777 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... mkdir resumed>) = 0 [pid 377] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... openat resumed>) = 3 [pid 377] lstat("./122/binderfs", [pid 372] ioctl(3, LOOP_CLR_FD [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] unlink("./122/binderfs" [pid 372] close(3 [pid 377] <... unlink resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 377] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4321] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4325 ./strace-static-x86_64: Process 4324 attached [pid 4324] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4324] chdir("./123") = 0 [pid 4324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4324] setpgid(0, 0) = 0 [pid 4324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4324] write(3, "1000", 4) = 4 [pid 4324] close(3) = 0 [pid 4324] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4324] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4324] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4324] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4326], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4326 [pid 4324] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4324] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4326 attached [pid 4326] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4326] memfd_create("syzkaller", 0) = 3 [pid 4326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4324 [pid 4326] <... mmap resumed>) = 0x7f64f6c44000 [pid 4326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 375] <... umount2 resumed>) = 0 [pid 375] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./122/bus", [pid 4326] <... write resumed>) = 1048576 [pid 4326] munmap(0x7f64f6c44000, 1048576 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4326] <... munmap resumed>) = 0 [pid 4326] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 375] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4326] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 4325 attached [pid 375] openat(AT_FDCWD, "./122/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4325] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4325] chdir("./122" [pid 375] <... openat resumed>) = 4 [pid 4325] <... chdir resumed>) = 0 [pid 4325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4325] setpgid(0, 0) = 0 [ 87.228052][ T4301] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 87.240146][ T4307] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 87.242098][ T4301] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 87.255834][ T4307] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4325] write(3, "1000", 4) = 4 [pid 4325] close(3) = 0 [pid 4325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4325] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4325] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4325] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4331], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4331 [pid 4325] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4325] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./122/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./122") = 0 [pid 375] mkdir("./123", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 4331 attached [pid 4331] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4331] memfd_create("syzkaller", 0) = 3 [pid 4331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4321] <... mount resumed>) = 0 [pid 4331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4331] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4331] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4321] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4321] chdir("./bus") = 0 [pid 4321] ioctl(4, LOOP_CLR_FD [pid 4319] <... mount resumed>) = 0 [pid 4319] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4319] chdir("./bus") = 0 [pid 4319] ioctl(4, LOOP_CLR_FD) = 0 [pid 4319] close(4) = 0 [pid 4319] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4318] <... futex resumed>) = 0 [pid 4318] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4318] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = 0 [pid 4326] <... ioctl resumed>) = 0 [pid 377] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4326] close(3 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4326] <... close resumed>) = 0 [pid 377] lstat("./122/bus", [pid 4326] mkdir("./bus", 0777 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4319] <... futex resumed>) = 1 [pid 4326] <... mkdir resumed>) = 0 [pid 377] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4326] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4319] chdir("./file0" [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./122/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4319] <... chdir resumed>) = 0 [pid 377] fstat(4, [pid 4319] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4319] <... futex resumed>) = 1 [pid 4318] <... futex resumed>) = 0 [pid 4319] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4318] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 4318] <... futex resumed>) = 0 [pid 4318] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./122/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./122" [pid 4319] <... open resumed>) = 4 [pid 377] <... rmdir resumed>) = 0 [pid 4319] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4318] <... futex resumed>) = 0 [pid 4318] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4318] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4319] <... futex resumed>) = 1 [pid 4319] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 377] mkdir("./123", 0777 [pid 4319] <... openat resumed>) = 5 [pid 4319] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4318] <... futex resumed>) = 0 [pid 4318] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 4318] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4319] <... futex resumed>) = 1 [pid 4319] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 4319] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4318] <... futex resumed>) = 0 [pid 4319] <... futex resumed>) = 1 [pid 4318] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4318] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4319] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4319] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4318] <... futex resumed>) = 0 [pid 4318] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4318] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4319] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4331] <... openat resumed>) = 4 [pid 4331] ioctl(4, LOOP_SET_FD, 3 [pid 4321] <... ioctl resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 4319] <... open resumed>) = 6 [pid 4319] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4319] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4321] close(4 [pid 4318] <... futex resumed>) = 0 [ 87.303724][ T4321] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/125/bus supports timestamps until 2038 (0x7fffffff) [ 87.316278][ T4319] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/122/bus supports timestamps until 2038 (0x7fffffff) [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] <... openat resumed>) = 3 [pid 4331] <... ioctl resumed>) = 0 [pid 4321] <... close resumed>) = 0 [pid 4318] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4331] close(3 [pid 4321] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4318] <... futex resumed>) = 1 [pid 377] close(3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] <... close resumed>) = 0 [pid 4318] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4337 [pid 4321] <... futex resumed>) = 1 [pid 4320] <... futex resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4336 [pid 4331] <... close resumed>) = 0 [pid 4321] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4320] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4331] mkdir("./bus", 0777 [pid 4321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4320] <... futex resumed>) = 0 [pid 4331] <... mkdir resumed>) = 0 [pid 4320] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4321] chdir("./file0") = 0 [pid 4321] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4320] <... futex resumed>) = 0 [pid 4320] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4321] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4320] <... futex resumed>) = 0 [pid 4320] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4336 attached [pid 4336] set_robust_list(0x55555713c5e0, 24 [pid 4321] <... open resumed>) = 4 [pid 4336] <... set_robust_list resumed>) = 0 [pid 4331] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4336] chdir("./123") = 0 [pid 4336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4336] setpgid(0, 0) = 0 [pid 4321] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4321] <... futex resumed>) = 1 [pid 4320] <... futex resumed>) = 0 [pid 4321] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 4320] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4320] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4321] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4336] write(3, "1000", 4) = 4 [pid 4336] close(3) = 0 [pid 4336] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4336] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4336] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4336] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4321] <... openat resumed>) = 5 [pid 4321] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4336] <... clone resumed>, parent_tid=[4338], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4338 [pid 4321] <... futex resumed>) = 1 [pid 4320] <... futex resumed>) = 0 [pid 4336] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4336] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4320] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4321] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4320] <... futex resumed>) = 0 [pid 4320] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4321] <... write resumed>) = 196608 [pid 4319] <... futex resumed>) = 0 ./strace-static-x86_64: Process 4338 attached ./strace-static-x86_64: Process 4337 attached [pid 4326] <... mount resumed>) = 0 [pid 4321] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 87.365529][ T4326] ext4 filesystem being mounted at /root/syzkaller.k3ECep/123/bus supports timestamps until 2038 (0x7fffffff) [pid 4319] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4338] set_robust_list(0x7f64ff0649e0, 24 [pid 4337] set_robust_list(0x55555713c5e0, 24 [pid 4326] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4321] <... futex resumed>) = 1 [pid 4320] <... futex resumed>) = 0 [pid 4338] <... set_robust_list resumed>) = 0 [pid 4337] <... set_robust_list resumed>) = 0 [pid 4326] <... openat resumed>) = 3 [pid 4338] memfd_create("syzkaller", 0 [pid 4337] chdir("./123" [pid 4326] chdir("./bus" [pid 4338] <... memfd_create resumed>) = 3 [pid 4337] <... chdir resumed>) = 0 [pid 4326] <... chdir resumed>) = 0 [pid 4338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4326] ioctl(4, LOOP_CLR_FD [pid 4338] <... mmap resumed>) = 0x7f64f6c44000 [pid 4337] <... prctl resumed>) = 0 [pid 4326] <... ioctl resumed>) = 0 [pid 4338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4337] setpgid(0, 0 [pid 4326] close(4 [pid 4338] <... write resumed>) = 1048576 [pid 4337] <... setpgid resumed>) = 0 [pid 4326] <... close resumed>) = 0 [pid 4337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4326] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4337] <... openat resumed>) = 3 [pid 4326] <... futex resumed>) = 1 [pid 4324] <... futex resumed>) = 0 [pid 4337] write(3, "1000", 4 [pid 4326] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4324] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4337] <... write resumed>) = 4 [pid 4326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4324] <... futex resumed>) = 0 [pid 4337] close(3 [pid 4326] chdir("./file0" [pid 4324] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4337] <... close resumed>) = 0 [pid 4326] <... chdir resumed>) = 0 [pid 4337] symlink("/dev/binderfs", "./binderfs" [pid 4326] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4337] <... symlink resumed>) = 0 [pid 4326] <... futex resumed>) = 1 [pid 4324] <... futex resumed>) = 0 [pid 4337] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4326] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4324] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4337] <... futex resumed>) = 0 [pid 4326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4324] <... futex resumed>) = 0 [pid 4337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4326] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4324] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4337] <... mmap resumed>) = 0x7f64ff044000 [pid 4337] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4337] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4341], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4341 [pid 4337] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4337] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4338] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4338] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 4338] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 4341 attached [pid 4331] <... mount resumed>) = 0 [pid 4326] <... open resumed>) = 4 [pid 4321] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4320] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4341] set_robust_list(0x7f64ff0649e0, 24 [pid 4326] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4321] <... mount resumed>) = 0 [pid 4320] <... futex resumed>) = 0 [pid 4341] <... set_robust_list resumed>) = 0 [pid 4326] <... futex resumed>) = 1 [pid 4324] <... futex resumed>) = 0 [pid 4321] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4320] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4341] memfd_create("syzkaller", 0 [pid 4338] <... ioctl resumed>) = 0 [pid 4331] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4326] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4324] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4321] <... futex resumed>) = 0 [pid 4320] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4318] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4341] <... memfd_create resumed>) = 3 [pid 4338] close(3 [pid 4331] <... openat resumed>) = 3 [pid 4326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4324] <... futex resumed>) = 0 [pid 4321] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4320] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4318] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4338] <... close resumed>) = 0 [pid 4331] chdir("./bus" [pid 4326] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4324] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4320] <... futex resumed>) = 0 [pid 4318] <... futex resumed>) = 0 [pid 4341] <... mmap resumed>) = 0x7f64f6c44000 [pid 4338] mkdir("./bus", 0777 [pid 4331] <... chdir resumed>) = 0 [pid 4326] <... openat resumed>) = 5 [pid 4321] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4320] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4319] <... write resumed>) = 1048576 [pid 4318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4319] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4319] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4338] <... mkdir resumed>) = 0 [pid 4338] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4331] ioctl(4, LOOP_CLR_FD) = 0 [pid 4331] close(4) = 0 [pid 4331] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4325] <... futex resumed>) = 0 [pid 4331] chdir("./file0" [pid 4325] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4331] <... chdir resumed>) = 0 [pid 4325] <... futex resumed>) = 0 [pid 4331] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4325] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4331] <... futex resumed>) = 0 [pid 4325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4331] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4325] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4331] <... open resumed>) = 4 [pid 4325] <... futex resumed>) = 0 [pid 4331] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4325] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4331] <... futex resumed>) = 0 [pid 4325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4331] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4326] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4325] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4321] <... open resumed>) = 6 [pid 4318] <... mmap resumed>) = 0x7f64f6d23000 [pid 4331] <... openat resumed>) = 5 [pid 4326] <... futex resumed>) = 1 [pid 4325] <... futex resumed>) = 0 [pid 4324] <... futex resumed>) = 0 [pid 4321] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4318] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4331] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4326] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4325] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4324] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4321] <... futex resumed>) = 1 [pid 4320] <... futex resumed>) = 0 [pid 4318] <... mprotect resumed>) = 0 [pid 4331] <... futex resumed>) = 0 [pid 4326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4324] <... futex resumed>) = 0 [pid 4321] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4320] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4318] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4331] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4326] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4325] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4324] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4320] <... futex resumed>) = 0 [pid 4331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4325] <... futex resumed>) = 0 [pid 4331] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4325] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4343 attached [pid 4341] <... write resumed>) = 1048576 [pid 4331] <... write resumed>) = 196608 [pid 4326] <... write resumed>) = 196608 [pid 4321] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4320] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4318] <... clone resumed>, parent_tid=[4343], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4343 [pid 4343] set_robust_list(0x7f64f6d439e0, 24 [pid 4341] munmap(0x7f64f6c44000, 1048576 [pid 4331] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4326] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4343] <... set_robust_list resumed>) = 0 [pid 4341] <... munmap resumed>) = 0 [pid 4331] <... futex resumed>) = 1 [pid 4325] <... futex resumed>) = 0 [pid 4343] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4341] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4331] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4325] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4341] <... openat resumed>) = 4 [pid 4331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4325] <... futex resumed>) = 0 [pid 4341] ioctl(4, LOOP_SET_FD, 3 [pid 4331] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4325] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4331] <... mount resumed>) = 0 [pid 4331] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4325] <... futex resumed>) = 0 [pid 4331] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4325] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4325] <... futex resumed>) = 0 [pid 4331] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4325] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4318] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4343] <... futex resumed>) = 0 [pid 4318] <... futex resumed>) = 1 [ 87.410055][ T4331] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/122/bus supports timestamps until 2038 (0x7fffffff) [pid 4343] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4341] <... ioctl resumed>) = 0 [pid 4331] <... open resumed>) = 6 [pid 4326] <... futex resumed>) = 1 [pid 4324] <... futex resumed>) = 0 [pid 4321] <... write resumed>) = 1048576 [pid 4318] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4341] close(3 [pid 4331] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4326] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4324] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4321] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4324] <... futex resumed>) = 0 [pid 4321] <... futex resumed>) = 1 [pid 4326] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4324] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4321] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4326] <... mount resumed>) = 0 [pid 4326] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4324] <... futex resumed>) = 0 [pid 4326] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4324] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4324] <... futex resumed>) = 0 [pid 4326] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4324] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4326] <... open resumed>) = 6 [pid 4326] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4324] <... futex resumed>) = 0 [pid 4326] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4324] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4324] <... futex resumed>) = 0 [pid 4326] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4324] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4341] <... close resumed>) = 0 [pid 4331] <... futex resumed>) = 1 [pid 4325] <... futex resumed>) = 0 [pid 4320] <... futex resumed>) = 0 [pid 4326] <... write resumed>) = 1048576 [pid 4341] mkdir("./bus", 0777 [pid 4331] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4325] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4320] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4326] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4324] <... futex resumed>) = 0 [pid 4324] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4326] <... futex resumed>) = 1 [pid 4324] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4326] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4325] <... futex resumed>) = 0 [pid 4321] <... futex resumed>) = 0 [pid 4341] <... mkdir resumed>) = 0 [pid 4320] <... futex resumed>) = 1 [pid 4331] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4341] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4325] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4321] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 87.470148][ T4343] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 87.484715][ T4343] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 87.496013][ T4326] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 87.510479][ T4326] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 4320] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4326] <... openat resumed>) = 7 [pid 4326] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4324] <... futex resumed>) = 0 [pid 4324] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4324] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4326] <... futex resumed>) = 1 [pid 4326] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4326] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4324] <... futex resumed>) = 0 [pid 4324] exit_group(0) = ? [pid 4326] <... futex resumed>) = ? [pid 4326] +++ exited with 0 +++ [pid 4324] +++ exited with 0 +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4324, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 4343] <... openat resumed>) = 7 [pid 4343] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4343] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] <... restart_syscall resumed>) = 0 [pid 373] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./123/binderfs") = 0 [pid 373] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4318] <... futex resumed>) = 0 [pid 4318] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4318] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4319] <... futex resumed>) = 0 [pid 4331] <... write resumed>) = 1048576 [pid 4319] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4338] <... mount resumed>) = 0 [pid 4338] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4338] chdir("./bus") = 0 [pid 4338] ioctl(4, LOOP_CLR_FD) = 0 [pid 4338] close(4) = 0 [pid 4338] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4338] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4331] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4331] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4319] <... openat resumed>) = 8 [pid 4319] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4336] <... futex resumed>) = 0 [pid 4319] <... futex resumed>) = 1 [pid 4318] <... futex resumed>) = 0 [pid 4325] <... futex resumed>) = 0 [pid 4319] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4318] exit_group(0 [pid 4343] <... futex resumed>) = ? [pid 4319] <... futex resumed>) = ? [pid 4318] <... exit_group resumed>) = ? [pid 4343] +++ exited with 0 +++ [pid 4336] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4325] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4319] +++ exited with 0 +++ [pid 4318] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4318, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 4336] <... futex resumed>) = 1 [pid 4325] <... futex resumed>) = 1 [pid 4336] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4325] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4331] <... futex resumed>) = 0 [pid 374] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./122/binderfs" [pid 4331] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 374] <... unlink resumed>) = 0 [pid 374] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4338] <... futex resumed>) = 0 [pid 4338] chdir("./file0") = 0 [pid 4338] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4338] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4321] <... openat resumed>) = 7 [pid 4321] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4320] <... futex resumed>) = 0 [pid 4320] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4320] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4321] <... futex resumed>) = 1 [pid 4321] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4321] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4320] <... futex resumed>) = 0 [pid 4320] exit_group(0) = ? [pid 4321] <... futex resumed>) = ? [pid 4336] <... futex resumed>) = 0 [pid 4336] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4336] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4338] <... futex resumed>) = 0 [pid 4338] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 4338] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4336] <... futex resumed>) = 0 [pid 4336] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4336] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4338] <... futex resumed>) = 1 [pid 4338] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4338] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4336] <... futex resumed>) = 0 [pid 4336] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4336] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4338] <... futex resumed>) = 1 [ 87.510500][ T4321] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 87.536498][ T4338] ext4 filesystem being mounted at /root/syzkaller.43WzWH/123/bus supports timestamps until 2038 (0x7fffffff) [ 87.545948][ T4321] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 4338] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 4338] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4336] <... futex resumed>) = 0 [pid 4336] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4336] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4338] <... futex resumed>) = 1 [pid 4338] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4338] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4336] <... futex resumed>) = 0 [pid 4336] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4336] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4338] <... futex resumed>) = 1 [pid 4338] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4331] <... openat resumed>) = 7 [pid 4331] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4325] <... futex resumed>) = 0 [pid 4325] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4325] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4331] <... futex resumed>) = 1 [pid 4331] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4331] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4325] <... futex resumed>) = 0 [pid 4325] exit_group(0) = ? [pid 4331] <... futex resumed>) = ? [pid 4341] <... mount resumed>) = 0 [pid 4341] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4341] chdir("./bus") = 0 [pid 4341] ioctl(4, LOOP_CLR_FD [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./123/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./123/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./123/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./123") = 0 [pid 373] mkdir("./124", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4336] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4336] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4336] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4336] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4349 attached [pid 4349] set_robust_list(0x7f64f6d439e0, 24 [pid 4336] <... clone resumed>, parent_tid=[4349], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4349 [pid 4349] <... set_robust_list resumed>) = 0 [pid 4336] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4349] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4336] <... futex resumed>) = 0 [pid 4349] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 4336] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4349] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4349] <... futex resumed>) = 0 [pid 4336] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4349] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4336] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4349] <... openat resumed>) = 7 [pid 4349] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4336] <... futex resumed>) = 0 [pid 4349] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4336] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4336] <... futex resumed>) = 0 [pid 4349] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4336] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4349] <... openat resumed>) = 8 [pid 4349] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4336] <... futex resumed>) = 0 [ 87.560901][ T4331] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 87.576070][ T4331] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 87.586061][ T4341] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/123/bus supports timestamps until 2038 (0x7fffffff) [pid 4349] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4331] +++ exited with 0 +++ [pid 4325] +++ exited with 0 +++ [pid 4321] +++ exited with 0 +++ [pid 4320] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4325, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4320, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 372] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... openat resumed>) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./122/binderfs") = 0 [pid 372] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4341] <... ioctl resumed>) = 0 [pid 4341] close(4) = 0 [pid 4338] <... open resumed>) = 6 [pid 4341] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4337] <... futex resumed>) = 0 [pid 4341] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4337] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4337] <... futex resumed>) = 0 [pid 4341] chdir("./file0" [pid 4337] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4350 [pid 376] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4341] <... chdir resumed>) = 0 [pid 4338] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(3, [pid 4341] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4338] <... futex resumed>) = 0 [pid 4336] exit_group(0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 4341] <... futex resumed>) = 1 [pid 4337] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 4341] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4337] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4337] <... futex resumed>) = 0 [pid 376] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4341] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4337] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4338] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4338] <... futex resumed>) = ? [pid 4336] <... exit_group resumed>) = ? [pid 376] unlink("./125/binderfs" [pid 4338] +++ exited with 0 +++ [pid 376] <... unlink resumed>) = 0 [pid 376] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4341] <... open resumed>) = 4 [pid 374] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4341] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4350 attached [pid 4350] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4350] chdir("./124") = 0 [pid 4350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4341] <... futex resumed>) = 1 [pid 4337] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4341] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4337] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4337] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4350] <... prctl resumed>) = 0 [pid 4350] setpgid(0, 0) = 0 [pid 4350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4341] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4341] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] lstat("./122/bus", [pid 4350] <... openat resumed>) = 3 [pid 4350] write(3, "1000", 4) = 4 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4341] <... futex resumed>) = 1 [pid 4337] <... futex resumed>) = 0 [pid 4349] <... futex resumed>) = ? [pid 4341] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4337] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4337] <... futex resumed>) = 0 [pid 4337] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4350] close(3) = 0 [pid 4350] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4350] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4350] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4350] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] openat(AT_FDCWD, "./122/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4350] <... clone resumed>, parent_tid=[4351], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4351 [pid 374] <... openat resumed>) = 4 [pid 374] fstat(4, [pid 4341] <... write resumed>) = 196608 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4350] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4341] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(4, [pid 4341] <... futex resumed>) = 1 [pid 4337] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4341] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4337] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(4, [pid 4337] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4337] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] close(4 [pid 4341] <... mount resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 4341] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] rmdir("./122/bus" [pid 4350] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4351 attached [pid 4351] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 4341] <... futex resumed>) = 1 [pid 4337] <... futex resumed>) = 0 [pid 374] getdents64(3, [pid 4341] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4337] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4337] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] close(3) = 0 [pid 374] rmdir("./122" [pid 4351] memfd_create("syzkaller", 0 [pid 374] <... rmdir resumed>) = 0 [pid 374] mkdir("./123", 0777 [pid 4351] <... memfd_create resumed>) = 3 [pid 374] <... mkdir resumed>) = 0 [pid 4351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4351] <... mmap resumed>) = 0x7f64f6c44000 [pid 4351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4351] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4351] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4349] +++ exited with 0 +++ [pid 4336] +++ exited with 0 +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4336, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 372] <... umount2 resumed>) = 0 [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 372] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./122/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... restart_syscall resumed>) = 0 [pid 372] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./122/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] <... openat resumed>) = 4 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] fstat(4, [pid 377] getdents64(3, [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] getdents64(4, [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./123/binderfs", [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./123/binderfs" [pid 372] getdents64(4, [pid 377] <... unlink resumed>) = 0 [pid 377] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./122/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./122") = 0 [pid 372] mkdir("./123", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4337] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4337] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 4337] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 4337] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4337] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4337] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4352], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4352 [pid 4337] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 4352 attached [pid 4337] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4352] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4352] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 4352] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4337] <... futex resumed>) = 0 [pid 4337] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4352] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4337] <... futex resumed>) = 0 [pid 4337] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4352] <... openat resumed>) = 7 [pid 4352] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4337] <... futex resumed>) = 0 [pid 4352] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4337] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4337] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4352] <... openat resumed>) = 8 [pid 4352] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4337] <... futex resumed>) = 0 [pid 4352] <... futex resumed>) = 1 [pid 4352] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4351] <... openat resumed>) = 4 [pid 4341] <... open resumed>) = 6 [pid 374] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 4351] ioctl(4, LOOP_SET_FD, 3 [pid 4341] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] ioctl(3, LOOP_CLR_FD [pid 4341] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4337] exit_group(0 [pid 4352] <... futex resumed>) = ? [pid 4341] <... futex resumed>) = ? [pid 4337] <... exit_group resumed>) = ? [pid 4352] +++ exited with 0 +++ [pid 4341] +++ exited with 0 +++ [pid 376] <... umount2 resumed>) = 0 [pid 4351] <... ioctl resumed>) = 0 [pid 4337] +++ exited with 0 +++ [pid 377] <... umount2 resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4337, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 4351] close(3 [pid 377] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] close(3 [pid 372] close(3 [pid 4351] <... close resumed>) = 0 [pid 4351] mkdir("./bus", 0777 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4351] <... mkdir resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./123/binderfs" [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4354 [pid 4351] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 377] lstat("./123/bus", [pid 376] lstat("./125/bus", [pid 375] <... unlink resumed>) = 0 [pid 375] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4355 attached [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4355 [pid 377] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4355] set_robust_list(0x55555713c5e0, 24 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4354 attached [pid 4355] <... set_robust_list resumed>) = 0 [pid 377] openat(AT_FDCWD, "./123/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./125/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... openat resumed>) = 4 [pid 376] <... openat resumed>) = 4 [pid 4355] chdir("./123" [pid 4354] set_robust_list(0x55555713c5e0, 24 [pid 377] fstat(4, [pid 376] fstat(4, [pid 4355] <... chdir resumed>) = 0 [pid 4355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4355] setpgid(0, 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4355] <... setpgid resumed>) = 0 [pid 376] getdents64(4, [pid 377] getdents64(4, [pid 4355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, [pid 376] getdents64(4, [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 376] close(4 [pid 377] rmdir("./123/bus" [pid 376] <... close resumed>) = 0 [pid 4355] <... openat resumed>) = 3 [pid 4355] write(3, "1000", 4) = 4 [pid 377] <... rmdir resumed>) = 0 [pid 376] rmdir("./125/bus" [pid 4355] close(3) = 0 [pid 4355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 377] getdents64(3, [pid 376] <... rmdir resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3 [pid 376] getdents64(3, [pid 377] <... close resumed>) = 0 [pid 377] rmdir("./123" [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4355] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4355] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 377] <... rmdir resumed>) = 0 [pid 376] close(3 [pid 4355] <... mprotect resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 377] mkdir("./124", 0777 [pid 4355] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4354] <... set_robust_list resumed>) = 0 [pid 376] rmdir("./125" [pid 4355] <... clone resumed>, parent_tid=[4356], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4356 [pid 4355] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 4355] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4356 attached [pid 4354] chdir("./123" [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 376] <... rmdir resumed>) = 0 [pid 4356] set_robust_list(0x7f64ff0649e0, 24 [pid 4354] <... chdir resumed>) = 0 [pid 376] mkdir("./126", 0777 [pid 4356] <... set_robust_list resumed>) = 0 [pid 4354] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 376] <... mkdir resumed>) = 0 [pid 4354] <... prctl resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4354] setpgid(0, 0 [pid 4356] memfd_create("syzkaller", 0 [pid 4354] <... setpgid resumed>) = 0 [pid 4356] <... memfd_create resumed>) = 3 [pid 4356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4356] <... mmap resumed>) = 0x7f64f6c44000 [pid 4354] <... openat resumed>) = 3 [pid 4354] write(3, "1000", 4) = 4 [pid 4354] close(3) = 0 [pid 4354] symlink("/dev/binderfs", "./binderfs" [pid 4356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4354] <... symlink resumed>) = 0 [pid 4354] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4354] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4354] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4359], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4359 [pid 4354] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4354] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4356] <... write resumed>) = 1048576 [pid 4356] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4356] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 4359 attached [pid 4359] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4359] memfd_create("syzkaller", 0) = 3 [pid 4359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4351] <... mount resumed>) = 0 [pid 4351] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4351] chdir("./bus" [pid 4359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4351] <... chdir resumed>) = 0 [pid 4351] ioctl(4, LOOP_CLR_FD [pid 4356] <... openat resumed>) = 4 [pid 377] <... openat resumed>) = 3 [pid 376] <... openat resumed>) = 3 [pid 375] <... umount2 resumed>) = 0 [pid 4356] ioctl(4, LOOP_SET_FD, 3 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3 [pid 375] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./123/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./123/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./123/bus" [pid 4359] <... write resumed>) = 1048576 [pid 4356] <... ioctl resumed>) = 0 [pid 4351] <... ioctl resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... close resumed>) = 0 [pid 4356] close(3 [pid 377] close(3 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4356] <... close resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 4356] mkdir("./bus", 0777 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4361 [pid 4356] <... mkdir resumed>) = 0 [pid 4356] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4362 [pid 375] <... rmdir resumed>) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./123") = 0 [pid 375] mkdir("./124", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4363 [pid 4351] close(4) = 0 [pid 4351] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4350] <... futex resumed>) = 0 [pid 4350] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4350] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4351] <... futex resumed>) = 1 [pid 4351] chdir("./file0" [pid 4359] munmap(0x7f64f6c44000, 1048576 [pid 4351] <... chdir resumed>) = 0 [pid 4351] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4350] <... futex resumed>) = 0 [pid 4350] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4350] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4351] <... futex resumed>) = 1 [pid 4351] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 4351] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4350] <... futex resumed>) = 0 [pid 4350] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4350] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4351] <... futex resumed>) = 1 [pid 4351] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4359] <... munmap resumed>) = 0 [pid 4351] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4350] <... futex resumed>) = 0 [pid 4350] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4350] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4351] <... futex resumed>) = 1 [pid 4359] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4351] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4359] <... openat resumed>) = 4 [pid 4359] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 4361 attached [pid 4361] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4361] chdir("./126") = 0 [pid 4361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4361] setpgid(0, 0) = 0 [pid 4361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 4363 attached ./strace-static-x86_64: Process 4362 attached [pid 4361] write(3, "1000", 4 [pid 4362] set_robust_list(0x55555713c5e0, 24 [pid 4363] set_robust_list(0x55555713c5e0, 24 [pid 4361] <... write resumed>) = 4 [pid 4363] <... set_robust_list resumed>) = 0 [ 87.827821][ T4351] ext4 filesystem being mounted at /root/syzkaller.k3ECep/124/bus supports timestamps until 2038 (0x7fffffff) [pid 4362] <... set_robust_list resumed>) = 0 [pid 4363] chdir("./124" [pid 4362] chdir("./124" [pid 4361] close(3 [pid 4363] <... chdir resumed>) = 0 [pid 4362] <... chdir resumed>) = 0 [pid 4361] <... close resumed>) = 0 [pid 4359] <... ioctl resumed>) = 0 [pid 4363] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4362] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4361] symlink("/dev/binderfs", "./binderfs" [pid 4363] <... prctl resumed>) = 0 [pid 4362] <... prctl resumed>) = 0 [pid 4361] <... symlink resumed>) = 0 [pid 4359] close(3 [pid 4356] <... mount resumed>) = 0 [pid 4363] setpgid(0, 0 [pid 4362] setpgid(0, 0 [pid 4361] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4359] <... close resumed>) = 0 [pid 4351] <... write resumed>) = 196608 [pid 4363] <... setpgid resumed>) = 0 [pid 4362] <... setpgid resumed>) = 0 [pid 4361] <... futex resumed>) = 0 [pid 4359] mkdir("./bus", 0777 [pid 4356] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4351] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4359] <... mkdir resumed>) = 0 [pid 4356] <... openat resumed>) = 3 [pid 4351] <... futex resumed>) = 1 [pid 4350] <... futex resumed>) = 0 [pid 4363] <... openat resumed>) = 3 [pid 4362] <... openat resumed>) = 3 [pid 4361] <... mmap resumed>) = 0x7f64ff044000 [pid 4359] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4356] chdir("./bus" [pid 4351] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4350] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4363] write(3, "1000", 4 [pid 4362] write(3, "1000", 4 [pid 4361] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4356] <... chdir resumed>) = 0 [pid 4351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4350] <... futex resumed>) = 0 [pid 4363] <... write resumed>) = 4 [pid 4361] <... mprotect resumed>) = 0 [pid 4350] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4363] close(3 [pid 4362] <... write resumed>) = 4 [pid 4361] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4356] ioctl(4, LOOP_CLR_FD [pid 4351] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL./strace-static-x86_64: Process 4367 attached [pid 4363] <... close resumed>) = 0 [pid 4362] close(3 [pid 4363] symlink("/dev/binderfs", "./binderfs" [pid 4361] <... clone resumed>, parent_tid=[4367], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4367 [pid 4351] <... mount resumed>) = 0 [pid 4367] set_robust_list(0x7f64ff0649e0, 24 [pid 4363] <... symlink resumed>) = 0 [pid 4362] <... close resumed>) = 0 [pid 4361] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4356] <... ioctl resumed>) = 0 [pid 4351] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4363] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4361] <... futex resumed>) = 0 [pid 4351] <... futex resumed>) = 1 [pid 4367] <... set_robust_list resumed>) = 0 [pid 4363] <... futex resumed>) = 0 [pid 4362] symlink("/dev/binderfs", "./binderfs" [pid 4361] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4356] close(4 [pid 4351] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4350] <... futex resumed>) = 0 [pid 4363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4350] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4363] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4362] <... symlink resumed>) = 0 [pid 4350] <... futex resumed>) = 1 [pid 4363] <... mprotect resumed>) = 0 [pid 4363] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4368], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4368 [pid 4363] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4363] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4367] memfd_create("syzkaller", 0) = 3 [pid 4367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4350] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4362] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4368 attached ) = 0 [pid 4356] <... close resumed>) = 0 [pid 4351] <... futex resumed>) = 0 [pid 4368] set_robust_list(0x7f64ff0649e0, 24 [pid 4362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4356] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4367] <... write resumed>) = 1048576 [pid 4367] munmap(0x7f64f6c44000, 1048576 [pid 4351] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4356] <... futex resumed>) = 1 [pid 4355] <... futex resumed>) = 0 [pid 4362] <... mmap resumed>) = 0x7f64ff044000 [pid 4362] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4356] chdir("./file0" [pid 4355] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4351] <... open resumed>) = 6 [pid 4368] <... set_robust_list resumed>) = 0 [pid 4362] <... mprotect resumed>) = 0 [pid 4356] <... chdir resumed>) = 0 [pid 4362] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4355] <... futex resumed>) = 0 [pid 4351] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4368] memfd_create("syzkaller", 0 [pid 4356] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4355] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4351] <... futex resumed>) = 1 [pid 4350] <... futex resumed>) = 0 [pid 4355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 4370 attached [pid 4368] <... memfd_create resumed>) = 3 [pid 4362] <... clone resumed>, parent_tid=[4370], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4370 [pid 4356] <... futex resumed>) = 0 [pid 4355] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4351] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4350] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4370] set_robust_list(0x7f64ff0649e0, 24 [pid 4368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4362] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4356] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4355] <... futex resumed>) = 0 [pid 4351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4350] <... futex resumed>) = 0 [pid 4370] <... set_robust_list resumed>) = 0 [pid 4368] <... mmap resumed>) = 0x7f64f6c44000 [pid 4362] <... futex resumed>) = 0 [pid 4362] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4355] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4351] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4350] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4356] <... open resumed>) = 4 [pid 4367] <... munmap resumed>) = 0 [pid 4367] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4367] ioctl(4, LOOP_SET_FD, 3 [pid 4370] memfd_create("syzkaller", 0) = 3 [pid 4370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4356] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4355] <... futex resumed>) = 0 [pid 4356] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4355] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4355] <... futex resumed>) = 0 [pid 4356] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4355] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4356] <... openat resumed>) = 5 [pid 4356] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4356] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4355] <... futex resumed>) = 0 [pid 4355] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4356] <... futex resumed>) = 0 [pid 4355] <... futex resumed>) = 1 [pid 4356] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [ 87.867509][ T4356] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/123/bus supports timestamps until 2038 (0x7fffffff) [pid 4355] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4356] <... write resumed>) = 196608 [pid 4356] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4355] <... futex resumed>) = 0 [pid 4356] <... futex resumed>) = 1 [pid 4356] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4355] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4356] <... mount resumed>) = 0 [pid 4355] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4356] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4356] <... futex resumed>) = 0 [pid 4355] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4356] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4355] <... futex resumed>) = 0 [pid 4355] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4367] <... ioctl resumed>) = 0 [pid 4367] close(3) = 0 [pid 4367] mkdir("./bus", 0777) = 0 [pid 4356] <... open resumed>) = 6 [pid 4356] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4355] <... futex resumed>) = 0 [pid 4356] <... futex resumed>) = 1 [pid 4356] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4355] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4367] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4355] <... futex resumed>) = 0 [pid 4355] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4370] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4370] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 4370] ioctl(4, LOOP_SET_FD, 3 [pid 4351] <... write resumed>) = 1048576 [pid 4351] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4351] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4368] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4368] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4350] <... futex resumed>) = 0 [pid 4350] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4351] <... futex resumed>) = 0 [pid 4350] <... futex resumed>) = 1 [pid 4359] <... mount resumed>) = 0 [pid 4351] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4350] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4370] <... ioctl resumed>) = 0 [pid 4370] close(3) = 0 [pid 4370] mkdir("./bus", 0777) = 0 [pid 4370] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4368] <... openat resumed>) = 4 [pid 4368] ioctl(4, LOOP_SET_FD, 3 [pid 4359] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4359] chdir("./bus") = 0 [pid 4359] ioctl(4, LOOP_CLR_FD [pid 4368] <... ioctl resumed>) = 0 [pid 4368] close(3) = 0 [pid 4368] mkdir("./bus", 0777) = 0 [pid 4368] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4356] <... write resumed>) = 1048576 [pid 4356] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4356] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4355] <... futex resumed>) = 0 [pid 4351] <... openat resumed>) = 7 [pid 4351] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4355] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4351] <... futex resumed>) = 1 [ 87.928487][ T4359] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/123/bus supports timestamps until 2038 (0x7fffffff) [ 87.942960][ T4351] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 87.959277][ T4351] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 4351] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4359] <... ioctl resumed>) = 0 [pid 4350] <... futex resumed>) = 0 [pid 4356] <... futex resumed>) = 0 [pid 4355] <... futex resumed>) = 1 [pid 4359] close(4 [pid 4356] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4355] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4350] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4359] <... close resumed>) = 0 [pid 4359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4359] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4367] <... mount resumed>) = 0 [pid 4367] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4367] chdir("./bus") = 0 [pid 4367] ioctl(4, LOOP_CLR_FD) = 0 [pid 4367] close(4) = 0 [pid 4367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4361] <... futex resumed>) = 0 [pid 4361] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4361] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4367] <... futex resumed>) = 1 [pid 4367] chdir("./file0") = 0 [pid 4367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4361] <... futex resumed>) = 0 [pid 4361] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4361] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4367] <... futex resumed>) = 1 [pid 4367] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4354] <... futex resumed>) = 0 [pid 4351] <... futex resumed>) = 0 [pid 4350] <... futex resumed>) = 1 [pid 4354] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4351] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4351] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4351] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4359] <... futex resumed>) = 0 [pid 4354] <... futex resumed>) = 1 [pid 4359] chdir("./file0" [pid 4354] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4350] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4359] <... chdir resumed>) = 0 [pid 4350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4350] exit_group(0) = ? [pid 4359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4351] <... futex resumed>) = ? [pid 4359] <... futex resumed>) = 1 [pid 4354] <... futex resumed>) = 0 [pid 4359] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4354] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4354] <... futex resumed>) = 0 [pid 4359] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4354] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4351] +++ exited with 0 +++ [pid 4350] +++ exited with 0 +++ [pid 4359] <... open resumed>) = 4 [pid 4359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4350, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4359] <... futex resumed>) = 1 [pid 4354] <... futex resumed>) = 0 [pid 4359] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4354] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4354] <... futex resumed>) = 0 [pid 4359] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4354] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4359] <... openat resumed>) = 5 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4359] <... futex resumed>) = 1 [pid 4354] <... futex resumed>) = 0 [pid 4359] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4354] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... openat resumed>) = 3 [pid 4359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4354] <... futex resumed>) = 0 [pid 373] fstat(3, [pid 4359] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4354] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4367] <... open resumed>) = 4 [pid 4359] <... write resumed>) = 196608 [ 87.969921][ T4367] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/126/bus supports timestamps until 2038 (0x7fffffff) [ 87.983964][ T4356] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 88.008199][ T4356] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 373] getdents64(3, [pid 4367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4367] <... futex resumed>) = 1 [pid 4359] <... futex resumed>) = 1 [pid 4354] <... futex resumed>) = 0 [pid 373] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4367] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4359] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4354] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4359] <... mount resumed>) = 0 [pid 4354] <... futex resumed>) = 0 [pid 373] lstat("./124/binderfs", [pid 4359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4354] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4359] <... futex resumed>) = 0 [pid 4354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] unlink("./124/binderfs" [pid 4359] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4354] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... unlink resumed>) = 0 [pid 4359] <... open resumed>) = 6 [pid 4354] <... futex resumed>) = 0 [pid 373] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4354] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4359] <... futex resumed>) = 0 [pid 4354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4359] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4354] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4361] <... futex resumed>) = 0 [pid 4354] <... futex resumed>) = 0 [pid 4354] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4361] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4367] <... futex resumed>) = 0 [pid 4361] <... futex resumed>) = 1 [pid 4361] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4367] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4370] <... mount resumed>) = 0 [pid 4370] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4368] <... mount resumed>) = 0 [pid 4367] <... futex resumed>) = 1 [pid 4361] <... futex resumed>) = 0 [pid 4359] <... write resumed>) = 1048576 [pid 4356] <... openat resumed>) = 7 [pid 4361] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4370] <... openat resumed>) = 3 [pid 4367] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4361] <... futex resumed>) = 0 [pid 4359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4356] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4361] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4370] chdir("./bus" [pid 4368] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4359] <... futex resumed>) = 1 [pid 4356] <... futex resumed>) = 1 [pid 4355] <... futex resumed>) = 0 [pid 4354] <... futex resumed>) = 0 [pid 4370] <... chdir resumed>) = 0 [pid 4367] <... write resumed>) = 196608 [pid 4359] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4356] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4355] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4354] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4368] <... openat resumed>) = 3 [pid 4367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4370] ioctl(4, LOOP_CLR_FD) = 0 [pid 4370] close(4) = 0 [pid 4370] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4362] <... futex resumed>) = 0 [pid 4370] chdir("./file0" [pid 4362] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4370] <... chdir resumed>) = 0 [pid 4362] <... futex resumed>) = 0 [pid 4370] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4362] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4370] <... futex resumed>) = 0 [pid 4362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4370] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4362] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4370] <... open resumed>) = 4 [pid 4362] <... futex resumed>) = 0 [pid 4370] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4362] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4370] <... futex resumed>) = 0 [pid 4362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4370] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4362] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4370] <... openat resumed>) = 5 [pid 4362] <... futex resumed>) = 0 [pid 4370] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4362] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4370] <... futex resumed>) = 0 [pid 4362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4370] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4362] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4370] <... write resumed>) = 196608 [pid 4362] <... futex resumed>) = 0 [pid 4370] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4362] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4370] <... futex resumed>) = 0 [pid 4368] chdir("./bus" [pid 4367] <... futex resumed>) = 1 [pid 4362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4361] <... futex resumed>) = 0 [pid 4356] <... openat resumed>) = 8 [pid 4355] <... futex resumed>) = 0 [pid 4354] <... futex resumed>) = 0 [pid 4370] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4362] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4361] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4370] <... mount resumed>) = 0 [pid 4362] <... futex resumed>) = 0 [pid 4361] <... futex resumed>) = 0 [pid 4370] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4362] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4361] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4370] <... futex resumed>) = 0 [pid 4362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4370] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4362] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4362] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4368] <... chdir resumed>) = 0 [pid 4368] ioctl(4, LOOP_CLR_FD [pid 4367] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4361] <... futex resumed>) = 0 [pid 4367] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4361] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4361] <... futex resumed>) = 0 [pid 4367] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4361] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4356] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4356] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4355] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 4355] exit_group(0 [pid 4356] <... futex resumed>) = ? [pid 4355] <... exit_group resumed>) = ? [pid 4356] +++ exited with 0 +++ [pid 4354] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4359] <... openat resumed>) = 7 [pid 4359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4354] <... futex resumed>) = 0 [pid 4354] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4354] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4359] <... futex resumed>) = 1 [pid 4359] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4359] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4354] <... futex resumed>) = 0 [pid 4359] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4354] exit_group(0) = ? [pid 4359] <... futex resumed>) = ? [pid 4370] <... open resumed>) = 6 [pid 4368] <... ioctl resumed>) = 0 [pid 4367] <... open resumed>) = 6 [pid 4359] +++ exited with 0 +++ [pid 4355] +++ exited with 0 +++ [pid 4354] +++ exited with 0 +++ [pid 373] <... umount2 resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4354, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 373] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4355, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./124/bus", [pid 374] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4368] close(4 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4370] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4368] <... close resumed>) = 0 [pid 4367] <... futex resumed>) = 1 [pid 4361] <... futex resumed>) = 0 [ 88.018865][ T4370] ext4 filesystem being mounted at /root/syzkaller.43WzWH/124/bus supports timestamps until 2038 (0x7fffffff) [ 88.032863][ T4368] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/124/bus supports timestamps until 2038 (0x7fffffff) [ 88.049344][ T4359] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 88.063771][ T4359] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 374] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4370] <... futex resumed>) = 1 [pid 4368] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4367] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4362] <... futex resumed>) = 0 [pid 4361] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... openat resumed>) = 3 [pid 373] openat(AT_FDCWD, "./124/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... openat resumed>) = 3 [pid 4370] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4368] <... futex resumed>) = 1 [pid 4367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4363] <... futex resumed>) = 0 [pid 4362] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4361] <... futex resumed>) = 0 [pid 374] fstat(3, [pid 373] <... openat resumed>) = 4 [pid 372] fstat(3, [pid 4370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4368] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4367] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4363] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4362] <... futex resumed>) = 0 [pid 4361] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] fstat(4, [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4370] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] getdents64(3, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] getdents64(4, [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] getdents64(4, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./123/binderfs", [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] lstat("./123/binderfs", [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] close(4 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./123/binderfs" [pid 373] <... close resumed>) = 0 [pid 372] unlink("./123/binderfs" [pid 374] <... unlink resumed>) = 0 [pid 373] rmdir("./124/bus" [pid 372] <... unlink resumed>) = 0 [pid 374] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... rmdir resumed>) = 0 [pid 372] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4368] chdir("./file0" [pid 4363] <... futex resumed>) = 0 [pid 4362] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(3, [pid 4368] <... chdir resumed>) = 0 [pid 4363] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4368] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] close(3 [pid 4368] <... futex resumed>) = 0 [pid 4363] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... close resumed>) = 0 [pid 4368] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4363] <... futex resumed>) = 0 [pid 373] rmdir("./124" [pid 4363] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... rmdir resumed>) = 0 [pid 373] mkdir("./125", 0777 [pid 4368] <... open resumed>) = 4 [pid 373] <... mkdir resumed>) = 0 [pid 4368] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4368] <... futex resumed>) = 1 [pid 4363] <... futex resumed>) = 0 [pid 4368] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4363] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4363] <... futex resumed>) = 0 [pid 4368] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4363] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4367] <... write resumed>) = 1048576 [pid 4367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4368] <... openat resumed>) = 5 [pid 4361] <... futex resumed>) = 0 [pid 4368] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4361] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4368] <... futex resumed>) = 1 [pid 4363] <... futex resumed>) = 0 [pid 4361] <... futex resumed>) = 0 [pid 4368] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4363] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4361] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4363] <... futex resumed>) = 0 [pid 4367] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4363] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4368] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4370] <... write resumed>) = 1048576 [pid 4368] <... write resumed>) = 196608 [pid 4368] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4363] <... futex resumed>) = 0 [pid 4368] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4363] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4363] <... futex resumed>) = 0 [pid 4368] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4363] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4368] <... mount resumed>) = 0 [pid 4368] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4363] <... futex resumed>) = 0 [pid 4368] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4363] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4363] <... futex resumed>) = 0 [pid 4368] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4363] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4370] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4362] <... futex resumed>) = 0 [pid 4362] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4362] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4370] <... futex resumed>) = 1 [pid 4370] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4367] <... openat resumed>) = 7 [pid 4367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4367] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4361] <... futex resumed>) = 0 [pid 4361] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4361] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4367] <... futex resumed>) = 0 [pid 4367] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4367] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4361] <... futex resumed>) = 0 [pid 4361] exit_group(0) = ? [pid 4367] <... futex resumed>) = ? [pid 4370] <... openat resumed>) = 7 [pid 374] <... umount2 resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] ioctl(3, LOOP_CLR_FD [pid 4370] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./123/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./123/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./123/bus" [pid 4370] <... futex resumed>) = 1 [pid 4362] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... rmdir resumed>) = 0 [pid 4362] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] lstat("./123/bus", [pid 4362] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4362] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4370] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 372] getdents64(3, [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 374] openat(AT_FDCWD, "./123/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] rmdir("./123" [pid 374] <... openat resumed>) = 4 [pid 372] <... rmdir resumed>) = 0 [pid 372] mkdir("./124", 0777 [pid 4370] <... openat resumed>) = 8 [pid 374] fstat(4, [pid 372] <... mkdir resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4370] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(4, [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./123/bus" [pid 4370] <... futex resumed>) = 1 [pid 4362] <... futex resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 4362] exit_group(0 [pid 374] getdents64(3, [pid 4362] <... exit_group resumed>) = ? [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./123") = 0 [pid 374] mkdir("./124", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4363] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4363] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4363] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4363] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4381 attached , parent_tid=[4381], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4381 [pid 4381] set_robust_list(0x7f64f6d439e0, 24 [pid 4363] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4381] <... set_robust_list resumed>) = 0 [pid 4381] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 4381] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4381] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4363] <... futex resumed>) = 1 [pid 4363] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 4363] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4363] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4381] <... futex resumed>) = 0 [pid 4381] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7 [pid 4381] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4363] <... futex resumed>) = 0 [pid 4363] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4363] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4381] <... futex resumed>) = 1 [pid 4381] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4381] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4363] <... futex resumed>) = 0 [pid 4381] <... futex resumed>) = 1 [ 88.112268][ T4367] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 88.126355][ T4367] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 88.130728][ T4370] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 88.149604][ T4370] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 4381] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4367] +++ exited with 0 +++ [pid 4361] +++ exited with 0 +++ [pid 4368] <... open resumed>) = 6 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... openat resumed>) = 3 [pid 4368] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 4368] <... futex resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4363] exit_group(0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4361, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 373] <... close resumed>) = 0 [pid 372] close(3 [pid 4368] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4368] +++ exited with 0 +++ [pid 4363] <... exit_group resumed>) = ? [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... close resumed>) = 0 [pid 376] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] close(3 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... close resumed>) = 0 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4382 [pid 376] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... openat resumed>) = 3 ./strace-static-x86_64: Process 4382 attached [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4383 [pid 376] fstat(3, [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4384 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, [pid 4382] set_robust_list(0x55555713c5e0, 24 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4382] <... set_robust_list resumed>) = 0 [pid 376] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4382] chdir("./125" [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./126/binderfs", [pid 4382] <... chdir resumed>) = 0 [pid 4382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4382] setpgid(0, 0) = 0 [pid 4382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4382] write(3, "1000", 4) = 4 [pid 4382] close(3) = 0 [pid 4382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4382] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./126/binderfs") = 0 [pid 376] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4382] <... futex resumed>) = 0 [pid 4382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 ./strace-static-x86_64: Process 4384 attached ./strace-static-x86_64: Process 4383 attached [pid 4381] <... futex resumed>) = ? [pid 4370] +++ exited with 0 +++ [pid 4362] +++ exited with 0 +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4362, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 4382] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 377] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4382] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4384] set_robust_list(0x55555713c5e0, 24 [pid 4382] <... clone resumed>, parent_tid=[4385], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4385 [pid 4383] set_robust_list(0x55555713c5e0, 24 [pid 377] <... openat resumed>) = 3 [pid 4384] <... set_robust_list resumed>) = 0 [pid 4383] <... set_robust_list resumed>) = 0 [pid 4382] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(3, [pid 4382] <... futex resumed>) = 0 [pid 4384] chdir("./124" [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, [pid 4384] <... chdir resumed>) = 0 [pid 4383] chdir("./124" [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 377] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4384] <... prctl resumed>) = 0 [pid 4383] <... chdir resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4384] setpgid(0, 0 [pid 4383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4382] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 377] lstat("./124/binderfs", [pid 4384] <... setpgid resumed>) = 0 [pid 4383] <... prctl resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4383] setpgid(0, 0 [pid 377] unlink("./124/binderfs"./strace-static-x86_64: Process 4385 attached [pid 4385] set_robust_list(0x7f64ff0649e0, 24 [pid 377] <... unlink resumed>) = 0 [pid 377] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4384] <... openat resumed>) = 3 [pid 4383] <... setpgid resumed>) = 0 [pid 4385] <... set_robust_list resumed>) = 0 [pid 4385] memfd_create("syzkaller", 0) = 3 [pid 4385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4384] write(3, "1000", 4) = 4 [pid 4384] close(3 [pid 4385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4384] <... close resumed>) = 0 [pid 4384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4384] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4384] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4384] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4383] <... openat resumed>) = 3 [pid 4384] <... clone resumed>, parent_tid=[4386], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4386 [pid 4383] write(3, "1000", 4 [pid 4384] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4383] <... write resumed>) = 4 [pid 4384] <... futex resumed>) = 0 [pid 4383] close(3 [pid 4384] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4385] <... write resumed>) = 1048576 [pid 4385] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4385] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 4386 attached [pid 4386] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4386] memfd_create("syzkaller", 0) = 3 [pid 4386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4383] <... close resumed>) = 0 [pid 4383] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4383] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4383] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4383] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4387], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4387 [pid 4383] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4383] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4386] munmap(0x7f64f6c44000, 1048576./strace-static-x86_64: Process 4387 attached ) = 0 [pid 4387] set_robust_list(0x7f64ff0649e0, 24 [pid 4386] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4387] <... set_robust_list resumed>) = 0 [pid 4387] memfd_create("syzkaller", 0) = 3 [pid 4387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4387] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4387] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4386] <... openat resumed>) = 4 [pid 4385] <... openat resumed>) = 4 [pid 4381] +++ exited with 0 +++ [pid 4363] +++ exited with 0 +++ [pid 376] <... umount2 resumed>) = 0 [pid 4386] ioctl(4, LOOP_SET_FD, 3 [pid 4385] ioctl(4, LOOP_SET_FD, 3 [pid 376] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4363, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./126/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] openat(AT_FDCWD, "./126/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... openat resumed>) = 3 [pid 376] <... openat resumed>) = 4 [pid 375] fstat(3, [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, [pid 375] getdents64(3, [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] getdents64(4, [pid 375] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] close(4 [pid 375] lstat("./124/binderfs", [pid 376] <... close resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] rmdir("./126/bus" [pid 375] unlink("./124/binderfs") = 0 [pid 375] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... rmdir resumed>) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3 [pid 4387] ioctl(4, LOOP_SET_FD, 3 [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./126") = 0 [pid 376] mkdir("./127", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./124/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./124/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./124/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./124") = 0 [pid 377] mkdir("./125", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4386] <... ioctl resumed>) = 0 [pid 4386] close(3) = 0 [pid 4385] <... ioctl resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 375] <... umount2 resumed>) = 0 [pid 4385] close(3 [pid 4386] mkdir("./bus", 0777 [pid 376] ioctl(3, LOOP_CLR_FD [pid 375] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4387] <... ioctl resumed>) = 0 [pid 4385] <... close resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 4385] mkdir("./bus", 0777 [pid 377] ioctl(3, LOOP_CLR_FD [pid 4387] close(3 [pid 4386] <... mkdir resumed>) = 0 [pid 4385] <... mkdir resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4387] <... close resumed>) = 0 [pid 4386] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4385] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] lstat("./124/bus", [pid 4387] mkdir("./bus", 0777 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4387] <... mkdir resumed>) = 0 [pid 375] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4387] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./124/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./124/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./124") = 0 [pid 375] mkdir("./125", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 376] close(3 [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4391 attached [pid 4391] set_robust_list(0x55555713c5e0, 24 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4392 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4391 [pid 375] <... openat resumed>) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4391] <... set_robust_list resumed>) = 0 [pid 4391] chdir("./127") = 0 [pid 4391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4391] setpgid(0, 0) = 0 [pid 4391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4391] write(3, "1000", 4) = 4 [pid 4391] close(3) = 0 [pid 4391] symlink("/dev/binderfs", "./binderfs" [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4393 [pid 4391] <... symlink resumed>) = 0 [pid 4391] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4391] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4391] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4397], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4397 [pid 4391] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4391] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4392 attached [pid 4392] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4392] chdir("./125") = 0 [pid 4392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4392] setpgid(0, 0) = 0 [pid 4392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4392] write(3, "1000", 4) = 4 [pid 4392] close(3) = 0 [pid 4392] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 4393 attached ) = 0 [pid 4393] set_robust_list(0x55555713c5e0, 24 [pid 4392] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4393] <... set_robust_list resumed>) = 0 [pid 4392] <... futex resumed>) = 0 [pid 4393] chdir("./125" [pid 4392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4393] <... chdir resumed>) = 0 [pid 4392] <... mmap resumed>) = 0x7f64ff044000 [pid 4393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4392] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4392] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4401], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4401 [pid 4392] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4392] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4393] <... prctl resumed>) = 0 [pid 4393] setpgid(0, 0) = 0 [pid 4393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4393] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 4397 attached [pid 4393] close(3 [pid 4387] <... mount resumed>) = 0 [pid 4387] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4387] chdir("./bus") = 0 [pid 4387] ioctl(4, LOOP_CLR_FD) = 0 [pid 4387] close(4) = 0 [pid 4387] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4383] <... futex resumed>) = 0 [pid 4383] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4383] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4387] <... futex resumed>) = 1 [pid 4387] chdir("./file0") = 0 [pid 4387] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4383] <... futex resumed>) = 0 [pid 4383] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4383] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4387] <... futex resumed>) = 1 [pid 4387] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 4387] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4383] <... futex resumed>) = 0 [pid 4383] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4383] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4387] <... futex resumed>) = 1 [pid 4387] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4387] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4383] <... futex resumed>) = 0 [pid 4383] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4383] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4387] <... futex resumed>) = 1 [pid 4387] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 4387] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4383] <... futex resumed>) = 0 [pid 4383] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4383] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4387] <... futex resumed>) = 1 [pid 4387] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4387] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4383] <... futex resumed>) = 0 [pid 4383] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4383] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4387] <... futex resumed>) = 1 [pid 4387] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4387] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4383] <... futex resumed>) = 0 [pid 4383] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4383] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4387] <... futex resumed>) = 1 [pid 4387] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4393] <... close resumed>) = 0 [pid 4397] set_robust_list(0x7f64ff0649e0, 24 [pid 4393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4397] <... set_robust_list resumed>) = 0 [pid 4393] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4397] memfd_create("syzkaller", 0 [pid 4393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4393] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4393] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4397] <... memfd_create resumed>) = 3 [pid 4397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4393] <... clone resumed>, parent_tid=[4402], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4402 [pid 4393] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4393] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4397] <... mmap resumed>) = 0x7f64f6c44000 ./strace-static-x86_64: Process 4401 attached [pid 4397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4401] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4401] memfd_create("syzkaller", 0) = 3 [pid 4401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 4402 attached [pid 4402] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4402] memfd_create("syzkaller", 0 [pid 4386] <... mount resumed>) = 0 [pid 4386] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4402] <... memfd_create resumed>) = 3 [pid 4386] <... openat resumed>) = 3 [pid 4402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4386] chdir("./bus") = 0 [pid 4386] ioctl(4, LOOP_CLR_FD) = 0 [pid 4386] close(4 [pid 4401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4397] <... write resumed>) = 1048576 [pid 4401] <... write resumed>) = 1048576 [pid 4397] munmap(0x7f64f6c44000, 1048576 [pid 4401] munmap(0x7f64f6c44000, 1048576 [pid 4385] <... mount resumed>) = 0 [pid 4402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4401] <... munmap resumed>) = 0 [pid 4397] <... munmap resumed>) = 0 [pid 4385] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4386] <... close resumed>) = 0 [pid 4387] <... write resumed>) = 1048576 [pid 4401] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4397] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4385] <... openat resumed>) = 3 [pid 4401] <... openat resumed>) = 4 [pid 4397] <... openat resumed>) = 4 [pid 4387] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4386] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4385] chdir("./bus" [pid 4383] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4401] ioctl(4, LOOP_SET_FD, 3 [pid 4397] ioctl(4, LOOP_SET_FD, 3 [pid 4387] <... futex resumed>) = 0 [pid 4386] <... futex resumed>) = 1 [pid 4385] <... chdir resumed>) = 0 [pid 4384] <... futex resumed>) = 0 [pid 4383] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4387] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4386] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4385] ioctl(4, LOOP_CLR_FD [pid 4384] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4383] <... futex resumed>) = 0 [pid 4384] <... futex resumed>) = 0 [pid 4383] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4384] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4386] chdir("./file0") = 0 [pid 4401] <... ioctl resumed>) = 0 [pid 4386] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 88.382496][ T4387] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/124/bus supports timestamps until 2038 (0x7fffffff) [ 88.393786][ T4386] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/124/bus supports timestamps until 2038 (0x7fffffff) [ 88.411489][ T4385] ext4 filesystem being mounted at /root/syzkaller.k3ECep/125/bus supports timestamps until 2038 (0x7fffffff) [pid 4401] close(3 [pid 4402] <... write resumed>) = 1048576 [pid 4402] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4402] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4384] <... futex resumed>) = 0 [pid 4384] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4384] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4386] <... futex resumed>) = 1 [pid 4386] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4401] <... close resumed>) = 0 [pid 4401] mkdir("./bus", 0777) = 0 [pid 4401] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4397] <... ioctl resumed>) = 0 [pid 4397] close(3) = 0 [pid 4397] mkdir("./bus", 0777) = 0 [pid 4397] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4385] <... ioctl resumed>) = 0 [pid 4385] close(4) = 0 [pid 4385] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4382] <... futex resumed>) = 0 [pid 4385] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4382] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4385] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4382] <... futex resumed>) = 0 [pid 4387] <... openat resumed>) = 7 [pid 4385] chdir("./file0" [pid 4382] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4385] <... chdir resumed>) = 0 [pid 4385] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4382] <... futex resumed>) = 0 [pid 4402] <... openat resumed>) = 4 [pid 4385] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4382] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4385] <... open resumed>) = 4 [pid 4382] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4385] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4382] <... futex resumed>) = 0 [pid 4385] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4382] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4385] <... openat resumed>) = 5 [pid 4382] <... futex resumed>) = 0 [pid 4385] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4382] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4402] ioctl(4, LOOP_SET_FD, 3 [pid 4385] <... futex resumed>) = 0 [pid 4382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4385] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4382] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4402] <... ioctl resumed>) = 0 [pid 4387] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4386] <... open resumed>) = 4 [pid 4385] <... write resumed>) = 196608 [pid 4382] <... futex resumed>) = 0 [pid 4402] close(3 [pid 4387] <... futex resumed>) = 1 [pid 4386] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4383] <... futex resumed>) = 0 [pid 4402] <... close resumed>) = 0 [pid 4387] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4386] <... futex resumed>) = 1 [pid 4384] <... futex resumed>) = 0 [pid 4383] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4402] mkdir("./bus", 0777 [pid 4387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4386] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4384] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4383] <... futex resumed>) = 0 [pid 4382] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4385] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4382] <... futex resumed>) = 0 [pid 4382] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4382] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4385] <... futex resumed>) = 1 [pid 4385] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4385] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4382] <... futex resumed>) = 0 [pid 4382] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4385] <... futex resumed>) = 1 [pid 4382] <... futex resumed>) = 0 [pid 4385] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4382] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4385] <... open resumed>) = 6 [pid 4385] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4382] <... futex resumed>) = 0 [pid 4385] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4382] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4382] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4402] <... mkdir resumed>) = 0 [pid 4402] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4383] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4387] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4384] <... futex resumed>) = 0 [pid 4387] <... openat resumed>) = 8 [pid 4384] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4386] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4387] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4386] <... openat resumed>) = 5 [pid 4397] <... mount resumed>) = 0 [pid 4387] <... futex resumed>) = 1 [pid 4386] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4383] <... futex resumed>) = 0 [pid 4387] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4386] <... futex resumed>) = 1 [pid 4384] <... futex resumed>) = 0 [pid 4397] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4386] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4384] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4383] exit_group(0 [pid 4386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4384] <... futex resumed>) = 0 [pid 4387] <... futex resumed>) = 0 [pid 4383] <... exit_group resumed>) = ? [pid 4397] <... openat resumed>) = 3 [pid 4386] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4384] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4387] +++ exited with 0 +++ [pid 4397] chdir("./bus") = 0 [ 88.458538][ T4387] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 88.473186][ T4387] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 88.496613][ T4397] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/127/bus supports timestamps until 2038 (0x7fffffff) [pid 4386] <... write resumed>) = 196608 [pid 4383] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4383, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 4386] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4384] <... futex resumed>) = 0 [pid 4384] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... restart_syscall resumed>) = 0 [pid 4384] <... futex resumed>) = 0 [pid 4384] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4386] <... futex resumed>) = 1 [pid 372] lstat("./124/binderfs", [pid 4386] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4386] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] unlink("./124/binderfs" [pid 4386] <... futex resumed>) = 1 [pid 4384] <... futex resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 4386] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4384] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4386] <... open resumed>) = 6 [pid 4384] <... futex resumed>) = 0 [pid 372] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4386] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4384] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4386] <... futex resumed>) = 0 [pid 4384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4386] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4384] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4384] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4401] <... mount resumed>) = 0 [pid 4401] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4401] chdir("./bus") = 0 [pid 4401] ioctl(4, LOOP_CLR_FD [pid 4385] <... write resumed>) = 1048576 [pid 4385] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4382] <... futex resumed>) = 0 [pid 4382] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4382] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4385] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4397] ioctl(4, LOOP_CLR_FD [pid 4401] <... ioctl resumed>) = 0 [pid 4397] <... ioctl resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 4401] close(4 [pid 4397] close(4 [pid 4386] <... write resumed>) = 1048576 [pid 4385] <... openat resumed>) = 7 [pid 372] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4386] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4386] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./124/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 88.515450][ T4401] ext4 filesystem being mounted at /root/syzkaller.43WzWH/125/bus supports timestamps until 2038 (0x7fffffff) [ 88.537466][ T4385] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 88.555901][ T4385] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 372] openat(AT_FDCWD, "./124/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./124/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./124") = 0 [pid 372] mkdir("./125", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 4401] <... close resumed>) = 0 [pid 4397] <... close resumed>) = 0 [pid 4384] <... futex resumed>) = 0 [pid 4401] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4397] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4384] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4401] <... futex resumed>) = 1 [pid 4397] <... futex resumed>) = 1 [pid 4392] <... futex resumed>) = 0 [pid 4391] <... futex resumed>) = 0 [pid 4384] <... futex resumed>) = 1 [pid 4386] <... futex resumed>) = 0 [pid 4401] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4397] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4392] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4391] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4386] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4384] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4392] <... futex resumed>) = 0 [pid 4391] <... futex resumed>) = 0 [pid 4382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4392] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4391] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4382] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4397] chdir("./file0" [pid 4401] chdir("./file0" [pid 4382] <... futex resumed>) = 0 [pid 4401] <... chdir resumed>) = 0 [pid 4397] <... chdir resumed>) = 0 [pid 4382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4397] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4382] <... mmap resumed>) = 0x7f64f6d23000 [pid 4397] <... futex resumed>) = 1 [pid 4391] <... futex resumed>) = 0 [pid 4382] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4397] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4391] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4382] <... mprotect resumed>) = 0 [pid 4397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4391] <... futex resumed>) = 0 [pid 4397] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4391] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4382] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4401] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4385] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 4401] <... futex resumed>) = 1 [pid 4392] <... futex resumed>) = 0 [pid 4401] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4397] <... open resumed>) = 4 [pid 4392] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4385] <... futex resumed>) = 0 [pid 4382] <... clone resumed>, parent_tid=[4412], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4412 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4401] <... open resumed>) = 4 [pid 4397] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4392] <... futex resumed>) = 0 [pid 4401] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4397] <... futex resumed>) = 1 [pid 4392] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4391] <... futex resumed>) = 0 [pid 4401] <... futex resumed>) = 0 [pid 4397] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4391] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4401] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4397] <... openat resumed>) = 5 [pid 4392] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4391] <... futex resumed>) = 0 [pid 4401] <... openat resumed>) = 5 [pid 4397] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4392] <... futex resumed>) = 0 [pid 4391] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4401] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4397] <... futex resumed>) = 0 [pid 4392] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4401] <... futex resumed>) = 0 [pid 4397] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4391] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4413 attached ./strace-static-x86_64: Process 4412 attached [pid 4402] <... mount resumed>) = 0 [pid 4401] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4392] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4391] <... futex resumed>) = 0 [pid 4385] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4382] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4401] <... write resumed>) = 196608 [pid 4392] <... futex resumed>) = 0 [pid 4391] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4392] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4397] <... write resumed>) = 196608 [pid 4397] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4391] <... futex resumed>) = 0 [pid 4391] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4397] <... futex resumed>) = 1 [pid 4391] <... futex resumed>) = 0 [pid 4401] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4397] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4391] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4401] <... futex resumed>) = 1 [pid 4397] <... mount resumed>) = 0 [pid 4392] <... futex resumed>) = 0 [pid 4401] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4397] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4392] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4401] <... mount resumed>) = 0 [pid 4397] <... futex resumed>) = 1 [pid 4392] <... futex resumed>) = 0 [pid 4391] <... futex resumed>) = 0 [pid 4401] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4397] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4392] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4391] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4401] <... futex resumed>) = 0 [pid 4397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4391] <... futex resumed>) = 0 [pid 4401] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4397] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4392] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4391] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4401] <... open resumed>) = 6 [pid 4397] <... open resumed>) = 6 [pid 4392] <... futex resumed>) = 0 [pid 4413] set_robust_list(0x55555713c5e0, 24 [pid 4412] set_robust_list(0x7f64f6d439e0, 24 [pid 4401] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4397] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4392] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4382] <... futex resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4413 [pid 4401] <... futex resumed>) = 0 [pid 4397] <... futex resumed>) = 1 [pid 4392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4391] <... futex resumed>) = 0 [pid 4382] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4413] <... set_robust_list resumed>) = 0 [pid 4412] <... set_robust_list resumed>) = 0 [pid 4402] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4401] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4397] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4392] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4391] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4386] <... openat resumed>) = 7 [pid 4413] chdir("./125" [pid 4412] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4402] <... openat resumed>) = 3 [pid 4397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4392] <... futex resumed>) = 0 [pid 4391] <... futex resumed>) = 0 [pid 4412] <... openat resumed>) = 8 [pid 4397] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4392] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4391] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4402] chdir("./bus" [pid 4413] <... chdir resumed>) = 0 [pid 4412] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4402] <... chdir resumed>) = 0 [pid 4386] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4413] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4412] <... futex resumed>) = 1 [pid 4402] ioctl(4, LOOP_CLR_FD [pid 4386] <... futex resumed>) = 1 [pid 4384] <... futex resumed>) = 0 [pid 4382] <... futex resumed>) = 0 [pid 4413] <... prctl resumed>) = 0 [pid 4412] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4402] <... ioctl resumed>) = 0 [pid 4386] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4384] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4382] exit_group(0 [pid 4413] setpgid(0, 0 [pid 4412] <... futex resumed>) = ? [pid 4402] close(4 [pid 4386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4385] <... futex resumed>) = ? [pid 4384] <... futex resumed>) = 0 [pid 4382] <... exit_group resumed>) = ? [pid 4413] <... setpgid resumed>) = 0 [pid 4412] +++ exited with 0 +++ [pid 4402] <... close resumed>) = 0 [pid 4386] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4385] +++ exited with 0 +++ [pid 4384] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4382] +++ exited with 0 +++ [pid 4413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4402] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4401] <... write resumed>) = 1048576 [pid 4386] <... openat resumed>) = 8 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4382, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 4413] <... openat resumed>) = 3 [pid 4402] <... futex resumed>) = 1 [pid 4401] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4393] <... futex resumed>) = 0 [pid 4386] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4413] write(3, "1000", 4 [pid 4402] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4401] <... futex resumed>) = 1 [pid 4393] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4392] <... futex resumed>) = 0 [pid 4386] <... futex resumed>) = 1 [pid 4384] <... futex resumed>) = 0 [pid 4413] <... write resumed>) = 4 [pid 4402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 88.556141][ T4402] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/125/bus supports timestamps until 2038 (0x7fffffff) [ 88.582842][ T4386] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 88.603691][ T4386] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 4401] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4393] <... futex resumed>) = 0 [pid 4392] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4386] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4384] exit_group(0 [pid 4413] close(3 [pid 4402] chdir("./file0" [pid 4401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4397] <... write resumed>) = 1048576 [pid 4393] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4392] <... futex resumed>) = 0 [pid 4384] <... exit_group resumed>) = ? [pid 4386] <... futex resumed>) = ? [pid 4413] <... close resumed>) = 0 [pid 4402] <... chdir resumed>) = 0 [pid 4392] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4397] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4391] <... futex resumed>) = 0 [pid 4413] symlink("/dev/binderfs", "./binderfs" [pid 4397] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4391] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4413] <... symlink resumed>) = 0 [pid 4402] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4401] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4391] <... futex resumed>) = 0 [pid 4386] +++ exited with 0 +++ [pid 4384] +++ exited with 0 +++ [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4413] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4402] <... futex resumed>) = 1 [pid 4393] <... futex resumed>) = 0 [pid 4391] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4384, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 373] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4413] <... futex resumed>) = 0 [pid 4402] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4393] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... openat resumed>) = 3 [pid 4413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4393] <... futex resumed>) = 0 [pid 373] fstat(3, [pid 4413] <... mmap resumed>) = 0x7f64ff044000 [pid 4402] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4393] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4413] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] getdents64(3, [pid 4413] <... mprotect resumed>) = 0 [pid 374] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4413] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... openat resumed>) = 3 [pid 373] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] fstat(3, [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4413] <... clone resumed>, parent_tid=[4414], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4414 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] lstat("./125/binderfs", [pid 4413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(3, [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4413] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] unlink("./125/binderfs" [pid 4413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 374] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... unlink resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] lstat("./124/binderfs", [pid 4402] <... open resumed>) = 4 [pid 4397] <... openat resumed>) = 7 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4402] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] unlink("./124/binderfs" [pid 4402] <... futex resumed>) = 1 [pid 4393] <... futex resumed>) = 0 [pid 374] <... unlink resumed>) = 0 [pid 4402] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4393] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4393] <... futex resumed>) = 0 [pid 4402] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4393] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4402] <... openat resumed>) = 5 [pid 4402] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4393] <... futex resumed>) = 0 [pid 4402] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4393] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4393] <... futex resumed>) = 0 [pid 4402] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4393] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4402] <... write resumed>) = 196608 [pid 4402] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4393] <... futex resumed>) = 0 [pid 4402] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4393] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4414 attached [pid 4402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4393] <... futex resumed>) = 0 [pid 4414] set_robust_list(0x7f64ff0649e0, 24 [pid 4402] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4393] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4414] <... set_robust_list resumed>) = 0 [pid 4402] <... mount resumed>) = 0 [pid 4414] memfd_create("syzkaller", 0 [pid 4402] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4414] <... memfd_create resumed>) = 3 [pid 4402] <... futex resumed>) = 1 [pid 4393] <... futex resumed>) = 0 [pid 4414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4402] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4401] <... openat resumed>) = 7 [pid 4397] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4401] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4397] <... futex resumed>) = 1 [pid 4391] <... futex resumed>) = 0 [pid 4401] <... futex resumed>) = 1 [pid 4397] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4393] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4391] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4401] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4392] <... futex resumed>) = 0 [pid 4391] <... futex resumed>) = 0 [pid 4397] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4391] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4397] <... openat resumed>) = 8 [pid 4393] <... futex resumed>) = 0 [pid 4392] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4397] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4393] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4392] <... futex resumed>) = 1 [pid 4397] <... futex resumed>) = 1 [pid 4391] <... futex resumed>) = 0 [pid 4397] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4392] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4391] exit_group(0 [pid 4397] <... futex resumed>) = ? [pid 4391] <... exit_group resumed>) = ? [pid 4397] +++ exited with 0 +++ [pid 4391] +++ exited with 0 +++ [pid 4414] <... mmap resumed>) = 0x7f64f6c44000 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4391, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4402] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 376] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4402] <... open resumed>) = 6 [pid 376] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4402] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 3 [pid 4402] <... futex resumed>) = 1 [pid 4393] <... futex resumed>) = 0 [pid 376] fstat(3, [pid 4402] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4393] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4414] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4414] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4414] ioctl(4, LOOP_SET_FD, 3 [pid 4401] <... futex resumed>) = 0 [pid 4401] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4401] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4392] <... futex resumed>) = 0 [pid 4393] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 4393] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4392] exit_group(0) = ? [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./127/binderfs") = 0 [pid 376] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4414] <... ioctl resumed>) = 0 [pid 4414] close(3 [pid 4401] +++ exited with 0 +++ [pid 4392] +++ exited with 0 +++ [pid 4414] <... close resumed>) = 0 [pid 4414] mkdir("./bus", 0777) = 0 [pid 4414] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4392, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 377] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4402] <... write resumed>) = 1048576 [pid 377] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4402] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4393] <... futex resumed>) = 0 [pid 4402] <... futex resumed>) = 1 [pid 4393] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, [pid 4393] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4402] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 377] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4393] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./125/binderfs") = 0 [ 88.643244][ T4397] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 88.650699][ T4401] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 88.657626][ T4397] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 88.680223][ T4401] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 377] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4402] <... openat resumed>) = 7 [pid 4402] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4393] <... futex resumed>) = 0 [pid 4393] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4393] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4402] <... futex resumed>) = 1 [pid 4402] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4402] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4393] <... futex resumed>) = 0 [pid 4393] exit_group(0) = ? [pid 4402] <... futex resumed>) = ? [pid 376] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 376] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./127/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./127/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... openat resumed>) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] lstat("./125/bus", [pid 376] getdents64(4, [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./125/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./125/bus") = 0 [pid 376] close(4 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./125" [pid 376] <... close resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 373] mkdir("./126", 0777 [pid 376] rmdir("./127/bus" [pid 373] <... mkdir resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 376] getdents64(3, [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./127") = 0 [pid 376] mkdir("./128", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4414] <... mount resumed>) = 0 [pid 4414] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4414] chdir("./bus") = 0 [pid 4414] ioctl(4, LOOP_CLR_FD [pid 4402] +++ exited with 0 +++ [pid 4393] +++ exited with 0 +++ [pid 374] <... umount2 resumed>) = 0 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4393, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 375] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./125/binderfs") = 0 [pid 375] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./124/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./124/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./124/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./124") = 0 [pid 374] mkdir("./125", 0777) = 0 [ 88.717874][ T4402] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 88.732046][ T4402] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 88.755823][ T4414] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/125/bus supports timestamps until 2038 (0x7fffffff) [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 373] <... openat resumed>) = 3 [pid 376] <... openat resumed>) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4418 [pid 376] ioctl(3, LOOP_CLR_FD [pid 373] ioctl(3, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] close(3 [pid 373] close(3 [pid 376] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4419 attached [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4419 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4420 [pid 4419] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4419] chdir("./128") = 0 [pid 4419] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4419] setpgid(0, 0) = 0 [pid 4419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4419] <... openat resumed>) = 3 [pid 4419] write(3, "1000", 4) = 4 [pid 4419] close(3) = 0 [pid 377] lstat("./125/bus", [pid 4419] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4419] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./125/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4419] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4414] <... ioctl resumed>) = 0 [pid 377] getdents64(4, [pid 4419] <... mmap resumed>) = 0x7f64ff044000 [pid 4414] close(4 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4419] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 377] getdents64(4, [pid 4419] <... mprotect resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 4420 attached ./strace-static-x86_64: Process 4418 attached [pid 4419] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] close(4./strace-static-x86_64: Process 4421 attached [pid 4420] set_robust_list(0x55555713c5e0, 24 [pid 4418] set_robust_list(0x55555713c5e0, 24 [pid 377] <... close resumed>) = 0 [pid 4421] set_robust_list(0x7f64ff0649e0, 24 [pid 4420] <... set_robust_list resumed>) = 0 [pid 4419] <... clone resumed>, parent_tid=[4421], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4421 [pid 4418] <... set_robust_list resumed>) = 0 [pid 377] rmdir("./125/bus" [pid 4421] <... set_robust_list resumed>) = 0 [pid 4420] chdir("./126" [pid 4419] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4418] chdir("./125" [pid 4421] memfd_create("syzkaller", 0 [pid 4420] <... chdir resumed>) = 0 [pid 4419] <... futex resumed>) = 0 [pid 4418] <... chdir resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 4421] <... memfd_create resumed>) = 3 [pid 4420] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4418] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 377] getdents64(3, [pid 4420] <... prctl resumed>) = 0 [pid 4419] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4418] <... prctl resumed>) = 0 [pid 4421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4420] setpgid(0, 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4421] <... mmap resumed>) = 0x7f64f6c44000 [pid 4420] <... setpgid resumed>) = 0 [pid 4418] setpgid(0, 0 [pid 377] close(3 [pid 4421] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4418] <... setpgid resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 4420] <... openat resumed>) = 3 [pid 377] rmdir("./125" [pid 4420] write(3, "1000", 4) = 4 [pid 4418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] <... rmdir resumed>) = 0 [pid 4420] close(3 [pid 377] mkdir("./126", 0777 [pid 4420] <... close resumed>) = 0 [pid 4418] <... openat resumed>) = 3 [pid 377] <... mkdir resumed>) = 0 [pid 4420] symlink("/dev/binderfs", "./binderfs" [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4418] write(3, "1000", 4 [pid 4420] <... symlink resumed>) = 0 [pid 4420] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4418] <... write resumed>) = 4 [pid 4420] <... futex resumed>) = 0 [pid 4418] close(3 [pid 4420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4418] <... close resumed>) = 0 [pid 4420] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4418] symlink("/dev/binderfs", "./binderfs" [pid 4420] <... mprotect resumed>) = 0 [pid 4418] <... symlink resumed>) = 0 [pid 4420] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4418] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4420] <... clone resumed>, parent_tid=[4422], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4422 ./strace-static-x86_64: Process 4422 attached [pid 4420] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4420] <... futex resumed>) = 0 [pid 4418] <... mmap resumed>) = 0x7f64ff044000 [pid 4420] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4418] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4421] <... write resumed>) = 1048576 [pid 4418] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4421] munmap(0x7f64f6c44000, 1048576 [pid 4418] <... clone resumed>, parent_tid=[4423], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4423 [pid 4418] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4418] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4422] set_robust_list(0x7f64ff0649e0, 24 [pid 4421] <... munmap resumed>) = 0 [pid 4421] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 4423 attached [pid 4423] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4422] <... set_robust_list resumed>) = 0 [pid 4423] memfd_create("syzkaller", 0) = 3 [pid 4422] memfd_create("syzkaller", 0 [pid 4423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4422] <... memfd_create resumed>) = 3 [pid 4422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4422] <... write resumed>) = 1048576 [pid 4423] <... write resumed>) = 1048576 [pid 4423] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4423] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4422] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4422] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4423] <... openat resumed>) = 4 [pid 4423] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... umount2 resumed>) = 0 [pid 375] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./125/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./125/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4 [pid 4421] <... openat resumed>) = 4 [pid 4414] <... close resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 375] <... close resumed>) = 0 [pid 4421] ioctl(4, LOOP_SET_FD, 3 [pid 4414] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4413] <... futex resumed>) = 0 [pid 4414] chdir("./file0" [pid 4413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4414] <... chdir resumed>) = 0 [pid 4413] <... futex resumed>) = 0 [pid 4414] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] rmdir("./125/bus" [pid 4414] <... futex resumed>) = 0 [pid 4413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4414] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 4413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(3, [pid 4414] <... open resumed>) = 4 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4414] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4413] <... futex resumed>) = 0 [pid 4414] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4414] <... openat resumed>) = 5 [pid 4413] <... futex resumed>) = 0 [pid 4414] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4414] <... futex resumed>) = 0 [pid 4413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4414] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4414] <... write resumed>) = 196608 [pid 4413] <... futex resumed>) = 0 [pid 375] close(3 [pid 4414] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4414] <... futex resumed>) = 0 [pid 4413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... close resumed>) = 0 [pid 4414] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./125" [pid 4414] <... mount resumed>) = 0 [pid 4413] <... futex resumed>) = 0 [pid 4414] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4414] <... futex resumed>) = 0 [pid 4413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4414] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 4413] <... futex resumed>) = 0 [pid 375] mkdir("./126", 0777 [pid 4413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4423] <... ioctl resumed>) = 0 [pid 4423] close(3) = 0 [pid 4423] mkdir("./bus", 0777 [pid 375] <... mkdir resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4423] <... mkdir resumed>) = 0 [pid 4423] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4421] <... ioctl resumed>) = 0 [pid 4421] close(3) = 0 [pid 4421] mkdir("./bus", 0777) = 0 [pid 4421] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 4422] <... openat resumed>) = 4 [pid 4422] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4414] <... open resumed>) = 6 [pid 4414] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4413] <... futex resumed>) = 0 [pid 4414] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] <... close resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 4413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4422] close(3) = 0 [pid 4422] mkdir("./bus", 0777 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] ioctl(3, LOOP_CLR_FD [pid 4422] <... mkdir resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4427 [pid 375] close(3./strace-static-x86_64: Process 4427 attached ) = 0 [pid 4422] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4427] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4414] <... write resumed>) = 1048576 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4429 [pid 4414] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4427] chdir("./126") = 0 [pid 4427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4427] setpgid(0, 0) = 0 [pid 4427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4427] write(3, "1000", 4) = 4 [pid 4427] close(3) = 0 [pid 4427] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4427] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4427] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4427] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4433], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4433 [pid 4427] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4427] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4429 attached [pid 4429] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4429] chdir("./126") = 0 [pid 4429] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4429] setpgid(0, 0) = 0 [pid 4429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4429] write(3, "1000", 4) = 4 [pid 4429] close(3) = 0 [pid 4429] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4429] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4429] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4429] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4429] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4434], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4434 [pid 4429] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4429] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4434 attached [pid 4434] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4434] memfd_create("syzkaller", 0) = 3 [pid 4434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4414] <... futex resumed>) = 1 [pid 4413] <... futex resumed>) = 0 [pid 4413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4433 attached [pid 4423] <... mount resumed>) = 0 [pid 4414] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4413] <... futex resumed>) = 0 [ 88.896065][ T4423] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/125/bus supports timestamps until 2038 (0x7fffffff) [ 88.919449][ T4414] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 88.921891][ T4422] ext4 filesystem being mounted at /root/syzkaller.k3ECep/126/bus supports timestamps until 2038 (0x7fffffff) [pid 4434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4433] set_robust_list(0x7f64ff0649e0, 24 [pid 4423] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4414] <... openat resumed>) = 7 [pid 4413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4433] <... set_robust_list resumed>) = 0 [pid 4423] <... openat resumed>) = 3 [pid 4433] memfd_create("syzkaller", 0 [pid 4414] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4423] chdir("./bus" [pid 4433] <... memfd_create resumed>) = 3 [pid 4433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4423] <... chdir resumed>) = 0 [pid 4413] <... futex resumed>) = 0 [pid 4433] <... mmap resumed>) = 0x7f64f6c44000 [pid 4423] ioctl(4, LOOP_CLR_FD [pid 4414] <... futex resumed>) = 1 [pid 4413] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4434] <... write resumed>) = 1048576 [pid 4434] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4434] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 4434] ioctl(4, LOOP_SET_FD, 3 [pid 4413] <... futex resumed>) = 0 [pid 4413] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4414] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4421] <... mount resumed>) = 0 [pid 4421] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4421] chdir("./bus" [pid 4433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4414] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4434] <... ioctl resumed>) = 0 [pid 4423] <... ioctl resumed>) = 0 [pid 4414] <... futex resumed>) = 1 [pid 4413] <... futex resumed>) = 0 [pid 4434] close(3 [pid 4423] close(4 [pid 4434] <... close resumed>) = 0 [pid 4423] <... close resumed>) = 0 [pid 4434] mkdir("./bus", 0777 [pid 4423] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4434] <... mkdir resumed>) = 0 [pid 4423] <... futex resumed>) = 1 [pid 4418] <... futex resumed>) = 0 [pid 4434] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4423] chdir("./file0" [pid 4418] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4418] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4421] <... chdir resumed>) = 0 [pid 4421] ioctl(4, LOOP_CLR_FD) = 0 [pid 4421] close(4) = 0 [pid 4421] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4419] <... futex resumed>) = 0 [pid 4419] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4419] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4421] <... futex resumed>) = 1 [pid 4421] chdir("./file0" [pid 4423] <... chdir resumed>) = 0 [pid 4414] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4413] exit_group(0 [pid 4423] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4414] <... futex resumed>) = ? [pid 4413] <... exit_group resumed>) = ? [pid 4423] <... futex resumed>) = 1 [pid 4418] <... futex resumed>) = 0 [pid 4414] +++ exited with 0 +++ [pid 4413] +++ exited with 0 +++ [pid 4423] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4418] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4423] <... open resumed>) = 4 [pid 4418] <... futex resumed>) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4413, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 4423] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4418] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4423] <... futex resumed>) = 0 [pid 4418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4423] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4418] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4423] <... openat resumed>) = 5 [pid 4418] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4423] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4418] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4423] <... futex resumed>) = 0 [pid 4418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... openat resumed>) = 3 [pid 4423] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4418] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] fstat(3, [pid 4423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4418] <... futex resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4423] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4418] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] getdents64(3, [pid 4433] <... write resumed>) = 1048576 [pid 4423] <... write resumed>) = 196608 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4423] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4423] <... futex resumed>) = 1 [pid 4418] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4423] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4418] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] lstat("./125/binderfs", [pid 4423] <... mount resumed>) = 0 [pid 4418] <... futex resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4423] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4418] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] unlink("./125/binderfs" [pid 4423] <... futex resumed>) = 0 [pid 4418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... unlink resumed>) = 0 [pid 4423] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4418] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4423] <... open resumed>) = 6 [pid 4418] <... futex resumed>) = 0 [pid 4423] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4418] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4423] <... futex resumed>) = 0 [pid 4418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4423] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4418] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4418] <... futex resumed>) = 0 [pid 4423] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4418] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4433] munmap(0x7f64f6c44000, 1048576 [pid 4422] <... mount resumed>) = 0 [pid 4421] <... chdir resumed>) = 0 [pid 4422] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4422] chdir("./bus") = 0 [pid 4422] ioctl(4, LOOP_CLR_FD [pid 4433] <... munmap resumed>) = 0 [ 88.933705][ T4414] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 88.945731][ T4421] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/128/bus supports timestamps until 2038 (0x7fffffff) [pid 4433] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4421] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4419] <... futex resumed>) = 0 [pid 4423] <... write resumed>) = 1048576 [pid 4421] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4419] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4423] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4419] <... futex resumed>) = 0 [pid 4423] <... futex resumed>) = 1 [pid 4419] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4418] <... futex resumed>) = 0 [pid 4423] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4418] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4421] <... open resumed>) = 4 [pid 4418] <... futex resumed>) = 0 [pid 4421] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4418] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4421] <... futex resumed>) = 1 [pid 4419] <... futex resumed>) = 0 [pid 4421] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4419] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4421] <... openat resumed>) = 5 [pid 4419] <... futex resumed>) = 0 [pid 4421] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4419] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4421] <... futex resumed>) = 0 [pid 4419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4421] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4419] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4421] <... write resumed>) = 196608 [pid 4419] <... futex resumed>) = 0 [pid 4419] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4421] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4419] <... futex resumed>) = 0 [pid 4419] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4419] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4421] <... futex resumed>) = 1 [pid 4421] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4421] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4419] <... futex resumed>) = 0 [pid 4419] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4419] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4421] <... futex resumed>) = 1 [pid 4421] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4434] <... mount resumed>) = 0 [pid 4433] <... openat resumed>) = 4 [pid 4422] <... ioctl resumed>) = 0 [pid 4421] <... open resumed>) = 6 [pid 372] <... umount2 resumed>) = 0 [pid 4433] ioctl(4, LOOP_SET_FD, 3 [pid 4422] close(4 [pid 4421] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4422] <... close resumed>) = 0 [pid 4421] <... futex resumed>) = 1 [pid 4419] <... futex resumed>) = 0 [pid 4422] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4421] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4419] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4422] <... futex resumed>) = 1 [pid 4420] <... futex resumed>) = 0 [pid 4419] <... futex resumed>) = 0 [pid 4423] <... openat resumed>) = 7 [pid 4434] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 372] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4434] <... openat resumed>) = 3 [pid 4433] <... ioctl resumed>) = 0 [pid 4423] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4422] chdir("./file0" [pid 4420] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4419] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] lstat("./125/bus", [pid 4434] chdir("./bus" [pid 4423] <... futex resumed>) = 1 [pid 4423] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4434] <... chdir resumed>) = 0 [pid 372] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4434] ioctl(4, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4434] <... ioctl resumed>) = 0 [pid 4433] close(3 [pid 4422] <... chdir resumed>) = 0 [pid 4420] <... futex resumed>) = 0 [pid 4418] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "./125/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4434] close(4 [pid 372] <... openat resumed>) = 4 [pid 4434] <... close resumed>) = 0 [pid 372] fstat(4, [pid 4434] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4433] <... close resumed>) = 0 [pid 4422] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4420] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4418] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4434] <... futex resumed>) = 1 [pid 4433] mkdir("./bus", 0777 [pid 4429] <... futex resumed>) = 0 [pid 4422] <... futex resumed>) = 0 [pid 4420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4418] <... futex resumed>) = 1 [pid 372] getdents64(4, [pid 4434] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4433] <... mkdir resumed>) = 0 [pid 4429] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4422] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4420] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4418] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4433] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4429] <... futex resumed>) = 0 [pid 4423] <... futex resumed>) = 0 [pid 4422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4421] <... write resumed>) = 1048576 [pid 4420] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4434] chdir("./file0" [pid 4429] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4423] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4422] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4420] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] getdents64(4, [pid 4434] <... chdir resumed>) = 0 [pid 4423] <... openat resumed>) = 8 [pid 4422] <... open resumed>) = 4 [pid 4421] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4434] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4423] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4422] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(4 [pid 4434] <... futex resumed>) = 1 [pid 4423] <... futex resumed>) = 1 [pid 372] <... close resumed>) = 0 [pid 4434] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4429] <... futex resumed>) = 0 [pid 4423] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4422] <... futex resumed>) = 1 [pid 4420] <... futex resumed>) = 0 [pid 4418] <... futex resumed>) = 0 [pid 372] rmdir("./125/bus" [pid 4434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4429] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4422] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4420] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4418] exit_group(0 [pid 372] <... rmdir resumed>) = 0 [pid 4434] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4429] <... futex resumed>) = 0 [pid 372] getdents64(3, [pid 4429] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4422] <... openat resumed>) = 5 [pid 4420] <... futex resumed>) = 0 [pid 4418] <... exit_group resumed>) = ? [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4422] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4420] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] close(3 [pid 4434] <... open resumed>) = 4 [pid 4422] <... futex resumed>) = 0 [pid 4420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... close resumed>) = 0 [pid 4434] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4422] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4420] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] rmdir("./125" [pid 4434] <... futex resumed>) = 1 [pid 4429] <... futex resumed>) = 0 [pid 4422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4420] <... futex resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 4434] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4429] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4422] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4420] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] mkdir("./126", 0777 [pid 4429] <... futex resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 4434] <... openat resumed>) = 5 [pid 4429] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4423] <... futex resumed>) = ? [pid 4422] <... write resumed>) = 196608 [pid 4421] <... futex resumed>) = 1 [pid 4419] <... futex resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4434] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4423] +++ exited with 0 +++ [pid 4422] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4421] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4419] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4418] +++ exited with 0 +++ [ 89.012181][ T4423] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 89.022194][ T4434] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/126/bus supports timestamps until 2038 (0x7fffffff) [ 89.026847][ T4423] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem ./strace-static-x86_64: Process 4442 attached [pid 4434] <... futex resumed>) = 0 [pid 4429] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4422] <... futex resumed>) = 1 [pid 4420] <... futex resumed>) = 0 [pid 4419] <... futex resumed>) = 0 [pid 4442] set_robust_list(0x55555713c5e0, 24 [pid 4434] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4429] <... futex resumed>) = 0 [pid 4422] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4420] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4419] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4442] <... set_robust_list resumed>) = 0 [pid 4434] <... write resumed>) = 196608 [pid 4429] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4420] <... futex resumed>) = 0 [pid 4442] chdir("./126" [pid 4434] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4422] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4420] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4442] <... chdir resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4418, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4442 [pid 4442] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4434] <... futex resumed>) = 0 [pid 4429] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4422] <... mount resumed>) = 0 [pid 374] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./125/binderfs") = 0 [pid 374] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4421] <... openat resumed>) = 7 [pid 4421] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4419] <... futex resumed>) = 0 [pid 4419] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4419] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4421] <... futex resumed>) = 1 [pid 4421] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4421] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4419] <... futex resumed>) = 0 [pid 4419] exit_group(0) = ? [pid 4421] <... futex resumed>) = ? [pid 4442] <... prctl resumed>) = 0 [pid 4429] <... futex resumed>) = 0 [pid 4434] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4422] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4429] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4442] setpgid(0, 0) = 0 [pid 4434] <... mount resumed>) = 0 [pid 4422] <... futex resumed>) = 1 [pid 4420] <... futex resumed>) = 0 [pid 4420] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4422] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4420] <... futex resumed>) = 0 [pid 4434] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4442] <... openat resumed>) = 3 [pid 4434] <... futex resumed>) = 1 [pid 4433] <... mount resumed>) = 0 [pid 4429] <... futex resumed>) = 0 [pid 4422] <... open resumed>) = 6 [pid 4421] +++ exited with 0 +++ [pid 4420] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4419] +++ exited with 0 +++ [pid 4442] write(3, "1000", 4 [pid 4434] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4429] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4422] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4442] <... write resumed>) = 4 [pid 4434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4429] <... futex resumed>) = 0 [pid 4422] <... futex resumed>) = 0 [pid 4420] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4442] close(3 [pid 4434] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4429] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4422] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4420] <... futex resumed>) = 0 [pid 4442] <... close resumed>) = 0 [pid 4434] <... open resumed>) = 6 [pid 4420] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4419, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4434] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4442] symlink("/dev/binderfs", "./binderfs" [pid 4434] <... futex resumed>) = 1 [pid 4429] <... futex resumed>) = 0 [pid 4434] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4442] <... symlink resumed>) = 0 [pid 4429] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4442] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4434] <... futex resumed>) = 0 [pid 4429] <... futex resumed>) = 1 [pid 4429] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4434] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4442] <... futex resumed>) = 0 [pid 4442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4442] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 376] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4442] <... mprotect resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4442] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4442] <... clone resumed>, parent_tid=[4444], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4444 [pid 376] fstat(3, [pid 4442] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4442] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 4442] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./128/binderfs") = 0 [pid 376] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4444 attached [pid 4433] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4422] <... write resumed>) = 1048576 [pid 4444] set_robust_list(0x7f64ff0649e0, 24 [pid 4434] <... write resumed>) = 1048576 [pid 4433] <... openat resumed>) = 3 [pid 4433] chdir("./bus" [pid 4444] <... set_robust_list resumed>) = 0 [pid 4434] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4433] <... chdir resumed>) = 0 [pid 4422] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4444] memfd_create("syzkaller", 0 [pid 4433] ioctl(4, LOOP_CLR_FD [pid 4434] <... futex resumed>) = 1 [pid 4429] <... futex resumed>) = 0 [pid 4422] <... futex resumed>) = 1 [pid 4420] <... futex resumed>) = 0 [pid 4444] <... memfd_create resumed>) = 3 [pid 4429] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4422] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4420] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4434] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4429] <... futex resumed>) = 0 [pid 4420] <... futex resumed>) = 0 [pid 4444] <... mmap resumed>) = 0x7f64f6c44000 [pid 4429] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 89.073659][ T4421] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 89.088275][ T4421] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 89.089083][ T4433] ext4 filesystem being mounted at /root/syzkaller.43WzWH/126/bus supports timestamps until 2038 (0x7fffffff) [pid 4420] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4422] <... openat resumed>) = 7 [pid 4422] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4420] <... futex resumed>) = 0 [pid 4420] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4420] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4422] <... futex resumed>) = 1 [pid 4422] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4422] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4420] <... futex resumed>) = 0 [pid 4420] exit_group(0) = ? [pid 4422] <... futex resumed>) = ? [pid 4444] <... write resumed>) = 1048576 [pid 4444] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4444] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4434] <... openat resumed>) = 7 [pid 4434] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4429] <... futex resumed>) = 0 [pid 4429] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4429] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4434] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4434] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4429] <... futex resumed>) = 0 [pid 4429] exit_group(0) = ? [pid 4434] <... futex resumed>) = ? [pid 4433] <... ioctl resumed>) = 0 [pid 4433] close(4 [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./125/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./125/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./125/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./125") = 0 [pid 374] mkdir("./126", 0777) = 0 [ 89.137214][ T4422] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 89.138245][ T4434] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 89.151937][ T4422] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 89.174658][ T4434] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4444] <... openat resumed>) = 4 [pid 4434] +++ exited with 0 +++ [pid 4433] <... close resumed>) = 0 [pid 4429] +++ exited with 0 +++ [pid 4422] +++ exited with 0 +++ [pid 4420] +++ exited with 0 +++ [pid 376] <... umount2 resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 4444] ioctl(4, LOOP_SET_FD, 3 [pid 4433] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4429, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4420, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 4444] <... ioctl resumed>) = 0 [pid 4433] <... futex resumed>) = 1 [pid 4427] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4444] close(3 [pid 4433] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4427] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] lstat("./128/bus", [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4444] <... close resumed>) = 0 [pid 4433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4427] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] close(3 [pid 373] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4444] mkdir("./bus", 0777 [pid 4433] chdir("./file0" [pid 4427] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4444] <... mkdir resumed>) = 0 [pid 4433] <... chdir resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... close resumed>) = 0 [pid 373] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4444] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4433] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "./128/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... openat resumed>) = 3 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... openat resumed>) = 3 [pid 375] fstat(3, [pid 373] fstat(3, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, [pid 373] getdents64(3, [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4433] <... futex resumed>) = 1 [pid 4427] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 375] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4446 [pid 373] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4446 attached [pid 4433] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4427] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(4, [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4427] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] lstat("./126/binderfs", [pid 373] lstat("./126/binderfs", [pid 4433] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4427] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(4, [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4433] <... open resumed>) = 4 [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] unlink("./126/binderfs" [pid 373] unlink("./126/binderfs" [pid 4433] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 375] <... unlink resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 4433] <... futex resumed>) = 1 [pid 4427] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4433] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4427] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(4 [pid 4446] set_robust_list(0x55555713c5e0, 24 [pid 4433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4427] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 4446] <... set_robust_list resumed>) = 0 [pid 4433] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4427] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] rmdir("./128/bus" [pid 4446] chdir("./126" [pid 4433] <... openat resumed>) = 5 [pid 4446] <... chdir resumed>) = 0 [pid 4433] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4446] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4433] <... futex resumed>) = 1 [pid 4427] <... futex resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 4446] <... prctl resumed>) = 0 [pid 4433] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4427] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 4446] setpgid(0, 0 [pid 4433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4427] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4446] <... setpgid resumed>) = 0 [pid 4433] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4427] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4433] <... write resumed>) = 196608 [pid 376] close(3 [pid 4446] <... openat resumed>) = 3 [pid 4433] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4446] write(3, "1000", 4 [pid 4433] <... futex resumed>) = 1 [pid 4427] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 4446] <... write resumed>) = 4 [pid 4433] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4427] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] rmdir("./128" [pid 4446] close(3 [pid 4433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4427] <... futex resumed>) = 0 [pid 4446] <... close resumed>) = 0 [pid 4433] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4427] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4446] symlink("/dev/binderfs", "./binderfs" [pid 4433] <... mount resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 4446] <... symlink resumed>) = 0 [pid 4433] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4446] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4433] <... futex resumed>) = 1 [pid 4427] <... futex resumed>) = 0 [pid 376] mkdir("./129", 0777 [pid 4446] <... futex resumed>) = 0 [pid 4433] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4427] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4427] <... futex resumed>) = 0 [pid 4446] <... mmap resumed>) = 0x7f64ff044000 [pid 4433] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4427] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... mkdir resumed>) = 0 [pid 4446] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4446] <... mprotect resumed>) = 0 [pid 4446] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4449 attached , parent_tid=[4449], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4449 [pid 4446] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4446] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4449] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4449] memfd_create("syzkaller", 0) = 3 [pid 4449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4449] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4449] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4444] <... mount resumed>) = 0 [pid 4444] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4444] chdir("./bus") = 0 [pid 4444] ioctl(4, LOOP_CLR_FD [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./126/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./126/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./126/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./126") = 0 [pid 373] mkdir("./127", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4433] <... open resumed>) = 6 [pid 4433] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 3 [pid 4433] <... futex resumed>) = 1 [pid 4427] <... futex resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 4433] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4427] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4427] <... futex resumed>) = 0 [ 89.275083][ T4444] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/126/bus supports timestamps until 2038 (0x7fffffff) [pid 376] close(3 [pid 4449] <... openat resumed>) = 4 [pid 4433] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4427] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4450 ./strace-static-x86_64: Process 4450 attached [pid 4450] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4450] chdir("./129") = 0 [pid 4450] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4450] setpgid(0, 0) = 0 [pid 4450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4450] write(3, "1000", 4) = 4 [pid 4450] close(3) = 0 [pid 4450] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4450] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4450] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4450] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4451], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4451 [pid 4450] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4450] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4451 attached [pid 4451] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4451] memfd_create("syzkaller", 0) = 3 [pid 4451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 375] <... umount2 resumed>) = 0 [pid 375] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./126/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] <... openat resumed>) = 3 [pid 375] openat(AT_FDCWD, "./126/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] ioctl(3, LOOP_CLR_FD [pid 375] <... openat resumed>) = 4 [pid 375] fstat(4, [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, [pid 373] close(3 [pid 4451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./126/bus" [pid 373] <... close resumed>) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... rmdir resumed>) = 0 [pid 375] getdents64(3, [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4452 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./126") = 0 [pid 375] mkdir("./127", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4449] ioctl(4, LOOP_SET_FD, 3 [pid 4444] <... ioctl resumed>) = 0 [pid 4444] close(4 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4453 [pid 4433] <... write resumed>) = 1048576 [pid 4451] <... write resumed>) = 1048576 [pid 4433] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4451] munmap(0x7f64f6c44000, 1048576./strace-static-x86_64: Process 4452 attached [pid 4433] <... futex resumed>) = 1 [pid 4427] <... futex resumed>) = 0 [pid 4427] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4433] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4427] <... futex resumed>) = 0 [pid 4427] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4451] <... munmap resumed>) = 0 [pid 4451] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 4453 attached [pid 4449] <... ioctl resumed>) = 0 [pid 4449] close(3) = 0 [pid 4449] mkdir("./bus", 0777) = 0 [pid 4444] <... close resumed>) = 0 [pid 4444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4442] <... futex resumed>) = 0 [pid 4442] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4442] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4444] <... futex resumed>) = 1 [pid 4444] chdir("./file0") = 0 [pid 4444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4442] <... futex resumed>) = 0 [pid 4442] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4442] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4444] <... futex resumed>) = 1 [pid 4444] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4449] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4451] <... openat resumed>) = 4 [pid 4453] set_robust_list(0x55555713c5e0, 24 [pid 4452] set_robust_list(0x55555713c5e0, 24 [pid 4444] <... open resumed>) = 4 [pid 4451] ioctl(4, LOOP_SET_FD, 3 [pid 4453] <... set_robust_list resumed>) = 0 [pid 4453] chdir("./127") = 0 [pid 4453] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4453] setpgid(0, 0) = 0 [pid 4453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4453] write(3, "1000", 4) = 4 [pid 4452] <... set_robust_list resumed>) = 0 [pid 4444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4453] close(3) = 0 [pid 4452] chdir("./127" [pid 4451] <... ioctl resumed>) = 0 [pid 4444] <... futex resumed>) = 1 [pid 4442] <... futex resumed>) = 0 [pid 4433] <... openat resumed>) = 7 [pid 4453] symlink("/dev/binderfs", "./binderfs" [pid 4452] <... chdir resumed>) = 0 [pid 4451] close(3 [pid 4444] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4442] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4452] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4433] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4453] <... symlink resumed>) = 0 [pid 4452] <... prctl resumed>) = 0 [pid 4451] <... close resumed>) = 0 [pid 4444] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4442] <... futex resumed>) = 0 [pid 4453] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4452] setpgid(0, 0 [pid 4451] mkdir("./bus", 0777 [pid 4444] <... openat resumed>) = 5 [pid 4433] <... futex resumed>) = 1 [pid 4427] <... futex resumed>) = 0 [pid 4452] <... setpgid resumed>) = 0 [pid 4444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4433] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4427] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4444] <... futex resumed>) = 0 [pid 4442] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4433] <... openat resumed>) = 8 [pid 4451] <... mkdir resumed>) = 0 [pid 4427] <... futex resumed>) = 0 [pid 4453] <... futex resumed>) = 0 [pid 4453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4452] <... openat resumed>) = 3 [pid 4451] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4444] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4433] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4427] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4453] <... mmap resumed>) = 0x7f64ff044000 [pid 4452] write(3, "1000", 4 [pid 4433] <... futex resumed>) = 0 [pid 4427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4453] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4452] <... write resumed>) = 4 [pid 4442] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4433] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4427] exit_group(0 [pid 4453] <... mprotect resumed>) = 0 [pid 4452] close(3 [pid 4444] <... futex resumed>) = 0 [pid 4442] <... futex resumed>) = 1 [pid 4433] <... futex resumed>) = ? [pid 4427] <... exit_group resumed>) = ? [pid 4453] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4452] <... close resumed>) = 0 [pid 4444] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4442] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4433] +++ exited with 0 +++ [pid 4427] +++ exited with 0 +++ [pid 4452] symlink("/dev/binderfs", "./binderfs" [pid 4444] <... write resumed>) = 196608 [pid 4452] <... symlink resumed>) = 0 [pid 4444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4453] <... clone resumed>, parent_tid=[4456], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4456 [pid 4452] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4444] <... futex resumed>) = 1 [pid 4442] <... futex resumed>) = 0 [pid 4453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4452] <... futex resumed>) = 0 [pid 4444] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4442] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4453] <... futex resumed>) = 0 [pid 4452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4442] <... futex resumed>) = 0 [pid 4453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4452] <... mmap resumed>) = 0x7f64ff044000 [pid 4444] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4442] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4452] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4444] <... mount resumed>) = 0 [pid 4452] <... mprotect resumed>) = 0 [pid 4444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4452] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4444] <... futex resumed>) = 1 [pid 4442] <... futex resumed>) = 0 [pid 4444] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4442] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4452] <... clone resumed>, parent_tid=[4457], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4457 [pid 4444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4442] <... futex resumed>) = 0 [pid 4452] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4444] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4442] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4452] <... futex resumed>) = 0 [pid 4444] <... open resumed>) = 6 [pid 4452] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4442] <... futex resumed>) = 0 [pid 4444] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4442] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4442] <... futex resumed>) = 0 [pid 4444] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4442] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4457 attached ./strace-static-x86_64: Process 4456 attached [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4427, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 4457] set_robust_list(0x7f64ff0649e0, 24 [pid 4456] set_robust_list(0x7f64ff0649e0, 24 [pid 4457] <... set_robust_list resumed>) = 0 [pid 4456] <... set_robust_list resumed>) = 0 [pid 4457] memfd_create("syzkaller", 0 [pid 4456] memfd_create("syzkaller", 0 [pid 377] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4457] <... memfd_create resumed>) = 3 [pid 4456] <... memfd_create resumed>) = 3 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 377] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4457] <... mmap resumed>) = 0x7f64f6c44000 [pid 4456] <... mmap resumed>) = 0x7f64f6c44000 [ 89.345042][ T4433] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 89.361036][ T4433] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 377] <... openat resumed>) = 3 [pid 4456] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4444] <... write resumed>) = 1048576 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./126/binderfs") = 0 [pid 377] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4457] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4456] <... write resumed>) = 1048576 [pid 4451] <... mount resumed>) = 0 [pid 4444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4456] munmap(0x7f64f6c44000, 1048576 [pid 4451] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4444] <... futex resumed>) = 1 [pid 4456] <... munmap resumed>) = 0 [pid 4451] <... openat resumed>) = 3 [pid 4444] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4456] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4451] chdir("./bus" [pid 4456] <... openat resumed>) = 4 [pid 4451] <... chdir resumed>) = 0 [pid 4456] ioctl(4, LOOP_SET_FD, 3 [pid 4451] ioctl(4, LOOP_CLR_FD) = 0 [pid 4451] close(4 [pid 4457] <... write resumed>) = 1048576 [pid 4457] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4457] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4442] <... futex resumed>) = 0 [pid 4442] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4444] <... futex resumed>) = 0 [pid 4442] <... futex resumed>) = 1 [pid 4444] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4442] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4449] <... mount resumed>) = 0 [pid 4449] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4449] chdir("./bus") = 0 [pid 4449] ioctl(4, LOOP_CLR_FD [pid 4456] <... ioctl resumed>) = 0 [pid 4456] close(3) = 0 [pid 4456] mkdir("./bus", 0777) = 0 [pid 4456] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4457] <... openat resumed>) = 4 [pid 4451] <... close resumed>) = 0 [pid 4457] ioctl(4, LOOP_SET_FD, 3 [pid 4451] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4451] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4457] <... ioctl resumed>) = 0 [pid 4457] close(3) = 0 [pid 4457] mkdir("./bus", 0777) = 0 [pid 4457] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4450] <... futex resumed>) = 0 [pid 4450] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4451] <... futex resumed>) = 0 [pid 4450] <... futex resumed>) = 1 [pid 4451] chdir("./file0" [pid 4450] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4451] <... chdir resumed>) = 0 [pid 4449] <... ioctl resumed>) = 0 [pid 4451] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4449] close(4) = 0 [pid 4449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4446] <... futex resumed>) = 0 [pid 4446] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4446] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4449] <... futex resumed>) = 1 [pid 4449] chdir("./file0" [pid 4451] <... futex resumed>) = 1 [pid 4450] <... futex resumed>) = 0 [pid 4450] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4451] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4450] <... futex resumed>) = 0 [pid 4450] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4451] <... open resumed>) = 4 [pid 4451] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4450] <... futex resumed>) = 0 [ 89.392713][ T4451] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/129/bus supports timestamps until 2038 (0x7fffffff) [ 89.405758][ T4449] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/126/bus supports timestamps until 2038 (0x7fffffff) [ 89.413791][ T4444] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4451] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4450] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4449] <... chdir resumed>) = 0 [pid 4451] <... openat resumed>) = 5 [pid 4450] <... futex resumed>) = 0 [pid 4449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4451] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4450] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4449] <... futex resumed>) = 1 [pid 4444] <... openat resumed>) = 7 [pid 4451] <... futex resumed>) = 0 [pid 4450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4449] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4451] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4450] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4446] <... futex resumed>) = 0 [pid 4446] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4449] <... futex resumed>) = 0 [pid 4446] <... futex resumed>) = 1 [pid 4449] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4446] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4450] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4449] <... open resumed>) = 4 [pid 4449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4446] <... futex resumed>) = 0 [pid 4449] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4446] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4449] <... openat resumed>) = 5 [pid 4446] <... futex resumed>) = 0 [pid 4449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4446] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4449] <... futex resumed>) = 0 [pid 4446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4449] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4446] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4451] <... write resumed>) = 196608 [pid 4446] <... futex resumed>) = 0 [pid 4444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4451] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4446] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4451] <... futex resumed>) = 1 [pid 4450] <... futex resumed>) = 0 [pid 4451] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4450] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4451] <... mount resumed>) = 0 [pid 4450] <... futex resumed>) = 0 [pid 4451] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4450] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4451] <... futex resumed>) = 0 [pid 4450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4451] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4450] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4449] <... write resumed>) = 196608 [pid 4451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4450] <... futex resumed>) = 0 [pid 4451] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4450] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4444] <... futex resumed>) = 1 [pid 4442] <... futex resumed>) = 0 [pid 4442] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4442] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4449] <... futex resumed>) = 1 [pid 4446] <... futex resumed>) = 0 [pid 4449] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4446] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4446] <... futex resumed>) = 0 [pid 4449] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4446] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4449] <... mount resumed>) = 0 [pid 4449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4446] <... futex resumed>) = 0 [pid 4449] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4446] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4446] <... futex resumed>) = 0 [pid 4449] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4446] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4444] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4444] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4442] <... futex resumed>) = 0 [pid 4444] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4442] exit_group(0 [pid 4444] <... futex resumed>) = ? [pid 4442] <... exit_group resumed>) = ? [pid 4457] <... mount resumed>) = 0 [pid 4457] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4457] chdir("./bus") = 0 [pid 4457] ioctl(4, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = 0 [pid 4456] <... mount resumed>) = 0 [pid 4456] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4456] chdir("./bus") = 0 [pid 4456] ioctl(4, LOOP_CLR_FD) = 0 [pid 4456] close(4) = 0 [pid 4456] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4456] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4457] <... ioctl resumed>) = 0 [pid 4453] <... futex resumed>) = 0 [pid 4451] <... open resumed>) = 6 [pid 4449] <... open resumed>) = 6 [pid 4457] close(4) = 0 [pid 4444] +++ exited with 0 +++ [pid 4442] +++ exited with 0 +++ [pid 4457] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4442, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 4457] <... futex resumed>) = 1 [pid 4452] <... futex resumed>) = 0 [pid 4457] chdir("./file0" [pid 4452] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4457] <... chdir resumed>) = 0 [pid 4452] <... futex resumed>) = 0 [pid 4457] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4452] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4457] <... futex resumed>) = 0 [pid 4452] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4457] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4452] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4452] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./126/bus", [pid 4457] <... open resumed>) = 4 [pid 4453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4451] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4453] <... futex resumed>) = 1 [pid 4451] <... futex resumed>) = 1 [pid 4450] <... futex resumed>) = 0 [pid 4457] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4451] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4450] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4449] <... futex resumed>) = 1 [pid 4446] <... futex resumed>) = 0 [pid 4457] <... futex resumed>) = 1 [pid 4452] <... futex resumed>) = 0 [pid 4450] <... futex resumed>) = 0 [pid 4449] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4446] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4457] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4452] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4457] <... openat resumed>) = 5 [pid 4452] <... futex resumed>) = 0 [pid 377] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4457] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4452] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4457] <... futex resumed>) = 0 [pid 4452] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] openat(AT_FDCWD, "./126/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... openat resumed>) = 3 [pid 4457] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4452] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 4 [pid 372] fstat(3, [pid 4457] <... write resumed>) = 196608 [pid 4452] <... futex resumed>) = 0 [pid 377] fstat(4, [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4452] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, [pid 4457] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4457] <... futex resumed>) = 1 [pid 4452] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4457] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4452] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4457] <... mount resumed>) = 0 [pid 4452] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] lstat("./126/binderfs", [pid 4457] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4452] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4450] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4446] <... futex resumed>) = 0 [pid 377] close(4 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4457] <... futex resumed>) = 0 [pid 4452] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... close resumed>) = 0 [pid 372] unlink("./126/binderfs" [pid 4457] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4452] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] rmdir("./126/bus" [pid 372] <... unlink resumed>) = 0 [pid 4457] <... open resumed>) = 6 [pid 4452] <... futex resumed>) = 0 [pid 4446] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... rmdir resumed>) = 0 [pid 372] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4457] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4452] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(3, [pid 4457] <... futex resumed>) = 0 [pid 4452] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4457] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4452] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4452] <... futex resumed>) = 0 [pid 377] close(3 [pid 4452] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 377] rmdir("./126") = 0 [pid 377] mkdir("./127", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4456] <... futex resumed>) = 0 [pid 4456] chdir("./file0") = 0 [pid 4456] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4453] <... futex resumed>) = 0 [pid 4456] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4456] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4453] <... futex resumed>) = 0 [pid 4456] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4451] <... write resumed>) = 1048576 [pid 4451] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4450] <... futex resumed>) = 0 [pid 4451] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4450] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 89.442154][ T4444] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 89.457488][ T4457] ext4 filesystem being mounted at /root/syzkaller.k3ECep/127/bus supports timestamps until 2038 (0x7fffffff) [ 89.475754][ T4456] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/127/bus supports timestamps until 2038 (0x7fffffff) [pid 4450] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4456] <... open resumed>) = 4 [pid 4457] <... write resumed>) = 1048576 [pid 4456] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4449] <... write resumed>) = 1048576 [pid 4453] <... futex resumed>) = 0 [pid 4453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4456] <... futex resumed>) = 1 [pid 4456] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4456] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4453] <... futex resumed>) = 0 [pid 4453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4456] <... futex resumed>) = 1 [pid 4456] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 4457] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4452] <... futex resumed>) = 0 [pid 4452] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4452] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4457] <... futex resumed>) = 1 [pid 4457] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4456] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4451] <... openat resumed>) = 7 [pid 4449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4456] <... futex resumed>) = 1 [pid 4449] <... futex resumed>) = 1 [pid 4456] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4449] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4451] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4451] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4453] <... futex resumed>) = 0 [pid 4453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4456] <... futex resumed>) = 0 [pid 4453] <... futex resumed>) = 1 [pid 4456] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4456] <... mount resumed>) = 0 [pid 4456] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4453] <... futex resumed>) = 0 [pid 4456] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4446] <... futex resumed>) = 0 [pid 4446] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4449] <... futex resumed>) = 0 [pid 4446] <... futex resumed>) = 1 [ 89.523990][ T4451] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 89.538758][ T4451] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 89.539746][ T4457] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4449] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4446] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4450] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] close(3) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] lstat("./126/bus", [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4468 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./126/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4450] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./126/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./126") = 0 [pid 4456] <... open resumed>) = 6 [pid 4456] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] mkdir("./127", 0777 [pid 4456] <... futex resumed>) = 1 [pid 4453] <... futex resumed>) = 0 [pid 4452] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4451] <... futex resumed>) = 0 [pid 4450] <... futex resumed>) = 1 [pid 372] <... mkdir resumed>) = 0 [pid 4456] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4451] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4456] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4453] <... futex resumed>) = 0 [pid 4452] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4451] <... openat resumed>) = 8 [pid 4450] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... openat resumed>) = 3 ./strace-static-x86_64: Process 4468 attached [pid 4457] <... openat resumed>) = 7 [pid 4456] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4452] <... futex resumed>) = 0 [pid 4451] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4468] set_robust_list(0x55555713c5e0, 24 [pid 4457] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4450] exit_group(0 [pid 4468] <... set_robust_list resumed>) = 0 [pid 4457] <... futex resumed>) = 0 [pid 4452] <... mmap resumed>) = 0x7f64f6d23000 [pid 4450] <... exit_group resumed>) = ? [pid 4468] chdir("./127" [pid 4457] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4452] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4468] <... chdir resumed>) = 0 [pid 4452] <... mprotect resumed>) = 0 [pid 4468] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4452] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4468] <... prctl resumed>) = 0 [pid 4468] setpgid(0, 0 [pid 4452] <... clone resumed>, parent_tid=[4469], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4469 [pid 4468] <... setpgid resumed>) = 0 [pid 4452] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4452] <... futex resumed>) = 0 [pid 4468] <... openat resumed>) = 3 [pid 4452] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4468] write(3, "1000", 4) = 4 [pid 4468] close(3) = 0 [pid 4468] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4468] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4468] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4468] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4470], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4470 [pid 4468] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4468] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4470 attached [pid 4470] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4470] memfd_create("syzkaller", 0) = 3 [pid 4470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4470] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4451] <... futex resumed>) = ? [pid 372] ioctl(3, LOOP_CLR_FD [pid 4470] <... write resumed>) = 1048576 [pid 4470] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4470] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4451] +++ exited with 0 +++ [pid 4450] +++ exited with 0 +++ [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4450, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 372] close(3) = 0 [pid 376] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4471 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 4471 attached ./strace-static-x86_64: Process 4469 attached [pid 4470] <... openat resumed>) = 4 [pid 4471] set_robust_list(0x55555713c5e0, 24 [pid 4469] set_robust_list(0x7f64f6d439e0, 24 [pid 376] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4471] <... set_robust_list resumed>) = 0 [pid 4469] <... set_robust_list resumed>) = 0 [pid 4456] <... write resumed>) = 1048576 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4470] ioctl(4, LOOP_SET_FD, 3 [pid 4449] <... openat resumed>) = 7 [pid 4449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4449] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4446] <... futex resumed>) = 0 [pid 4446] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4456] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4446] <... futex resumed>) = 1 [pid 376] lstat("./129/binderfs", [pid 4471] chdir("./127" [pid 4446] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4471] <... chdir resumed>) = 0 [pid 4456] <... futex resumed>) = 1 [pid 4453] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4471] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4469] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4456] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4449] <... futex resumed>) = 0 [ 89.552452][ T4449] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 89.561884][ T4457] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 89.593192][ T4449] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 376] unlink("./129/binderfs" [pid 4471] <... prctl resumed>) = 0 [pid 4470] <... ioctl resumed>) = 0 [pid 4469] <... openat resumed>) = 8 [pid 4453] <... futex resumed>) = 0 [pid 4449] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 376] <... unlink resumed>) = 0 [pid 4453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4449] <... openat resumed>) = 8 [pid 4449] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4446] <... futex resumed>) = 0 [pid 4446] exit_group(0) = ? [pid 4449] <... futex resumed>) = ? [pid 4449] +++ exited with 0 +++ [pid 4446] +++ exited with 0 +++ [pid 4470] close(3) = 0 [pid 4470] mkdir("./bus", 0777) = 0 [pid 4470] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4446, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 4471] setpgid(0, 0) = 0 [pid 4469] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4469] <... futex resumed>) = 1 [pid 4452] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4452] exit_group(0 [pid 4469] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4471] <... openat resumed>) = 3 [pid 4469] <... futex resumed>) = ? [pid 4457] <... futex resumed>) = ? [pid 4452] <... exit_group resumed>) = ? [pid 374] <... openat resumed>) = 3 [pid 4471] write(3, "1000", 4 [pid 4469] +++ exited with 0 +++ [pid 4457] +++ exited with 0 +++ [pid 4452] +++ exited with 0 +++ [pid 374] fstat(3, [pid 4471] <... write resumed>) = 4 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4471] close(3 [pid 374] getdents64(3, [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4452, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 4471] <... close resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4471] symlink("/dev/binderfs", "./binderfs" [pid 374] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4471] <... symlink resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4471] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] lstat("./126/binderfs", [pid 373] <... openat resumed>) = 3 [pid 4471] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] fstat(3, [pid 4471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] unlink("./126/binderfs" [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4471] <... mmap resumed>) = 0x7f64ff044000 [pid 374] <... unlink resumed>) = 0 [pid 373] getdents64(3, [pid 4471] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 374] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4471] <... mprotect resumed>) = 0 [pid 373] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4471] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./127/binderfs", [pid 4471] <... clone resumed>, parent_tid=[4473], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4473 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4471] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] unlink("./127/binderfs" [pid 4471] <... futex resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 4471] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 373] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4473 attached [pid 4473] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4473] memfd_create("syzkaller", 0) = 3 [pid 4473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4456] <... openat resumed>) = 7 [pid 4456] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4453] <... futex resumed>) = 0 [pid 4456] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4453] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4456] <... openat resumed>) = 8 [pid 4453] <... futex resumed>) = 0 [pid 4456] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4453] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4456] <... futex resumed>) = 0 [pid 4453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4456] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4453] exit_group(0 [pid 4456] <... futex resumed>) = ? [pid 4453] <... exit_group resumed>) = ? [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./129/bus", [pid 4473] <... write resumed>) = 1048576 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4473] munmap(0x7f64f6c44000, 1048576 [pid 376] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4473] <... munmap resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4473] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 376] openat(AT_FDCWD, "./129/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./129/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./129") = 0 [pid 376] mkdir("./130", 0777) = 0 [ 89.618490][ T4456] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 89.640438][ T4456] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4470] <... mount resumed>) = 0 [pid 4470] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4470] chdir("./bus") = 0 [pid 4470] ioctl(4, LOOP_CLR_FD [pid 4473] <... openat resumed>) = 4 [pid 374] <... umount2 resumed>) = 0 [pid 4473] ioctl(4, LOOP_SET_FD, 3 [pid 374] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./126/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./126/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./126/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./126") = 0 [pid 374] mkdir("./127", 0777) = 0 [ 89.666249][ T4470] ext4 filesystem being mounted at /root/syzkaller.43WzWH/127/bus supports timestamps until 2038 (0x7fffffff) [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4456] +++ exited with 0 +++ [pid 4453] +++ exited with 0 +++ [pid 376] <... openat resumed>) = 3 [pid 4470] <... ioctl resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 4470] close(4 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4453, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 4473] <... ioctl resumed>) = 0 [pid 375] <... restart_syscall resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 375] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./127/binderfs") = 0 [pid 375] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4477 ./strace-static-x86_64: Process 4477 attached [pid 4473] close(3 [pid 4470] <... close resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4473] <... close resumed>) = 0 [pid 4470] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 4473] mkdir("./bus", 0777 [pid 4470] <... futex resumed>) = 1 [pid 4468] <... futex resumed>) = 0 [pid 4473] <... mkdir resumed>) = 0 [pid 4470] chdir("./file0" [pid 4468] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4477] set_robust_list(0x55555713c5e0, 24 [pid 4473] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4470] <... chdir resumed>) = 0 [pid 4477] <... set_robust_list resumed>) = 0 [pid 4470] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4468] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 4470] <... futex resumed>) = 0 [pid 4468] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4470] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4477] chdir("./127" [pid 4468] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4468] <... futex resumed>) = 1 [pid 4470] <... futex resumed>) = 0 [pid 4477] <... chdir resumed>) = 0 [pid 4468] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4470] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4477] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 373] lstat("./127/bus", [pid 4470] <... open resumed>) = 4 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4477] setpgid(0, 0 [pid 4470] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4477] <... setpgid resumed>) = 0 [pid 4470] <... futex resumed>) = 1 [pid 4468] <... futex resumed>) = 0 [pid 4470] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4468] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4468] <... futex resumed>) = 0 [pid 4470] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4468] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] openat(AT_FDCWD, "./127/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4470] <... openat resumed>) = 5 [pid 373] <... openat resumed>) = 4 [pid 4470] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4468] <... futex resumed>) = 0 [pid 373] fstat(4, [pid 4470] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4468] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4477] <... openat resumed>) = 3 [pid 4470] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4468] <... futex resumed>) = 0 [pid 4477] write(3, "1000", 4 [pid 373] getdents64(4, [pid 4468] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4477] <... write resumed>) = 4 [pid 4477] close(3) = 0 [pid 4477] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4477] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4477] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4477] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4470] <... write resumed>) = 196608 [pid 4470] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4468] <... futex resumed>) = 0 [pid 4470] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4468] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4470] <... mount resumed>) = 0 [pid 4468] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4470] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4468] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(4, [pid 4470] <... futex resumed>) = 0 [pid 4468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4470] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4468] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(4 [pid 4470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4468] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 4470] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4468] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] rmdir("./127/bus" [pid 4477] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4478], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4478 [pid 373] <... rmdir resumed>) = 0 [pid 4477] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(3, [pid 4477] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4477] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 373] close(3./strace-static-x86_64: Process 4478 attached ) = 0 [pid 4478] set_robust_list(0x7f64ff0649e0, 24 [pid 373] rmdir("./127" [pid 4478] <... set_robust_list resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 373] mkdir("./128", 0777 [pid 4478] memfd_create("syzkaller", 0) = 3 [pid 4478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 373] <... mkdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4478] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4478] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4478] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 376] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4479 [pid 4470] <... open resumed>) = 6 [pid 4470] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4468] <... futex resumed>) = 0 [pid 4468] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4468] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4470] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 375] <... umount2 resumed>) = 0 [pid 375] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./127/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... openat resumed>) = 3 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./127/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] ioctl(3, LOOP_CLR_FD [pid 375] <... openat resumed>) = 4 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] fstat(4, [pid 373] close(3 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... close resumed>) = 0 [pid 375] getdents64(4, [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4480 attached [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4480 [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4 [pid 4480] set_robust_list(0x55555713c5e0, 24 [pid 375] <... close resumed>) = 0 [pid 4480] <... set_robust_list resumed>) = 0 [pid 375] rmdir("./127/bus" [pid 4480] chdir("./128" [pid 375] <... rmdir resumed>) = 0 [pid 375] getdents64(3, [pid 4480] <... chdir resumed>) = 0 [pid 4480] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4480] <... prctl resumed>) = 0 [pid 375] close(3 [pid 4480] setpgid(0, 0 [pid 375] <... close resumed>) = 0 [pid 4480] <... setpgid resumed>) = 0 [pid 375] rmdir("./127") = 0 [pid 375] mkdir("./128", 0777 [pid 4478] <... openat resumed>) = 4 [pid 4478] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... mkdir resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4480] write(3, "1000", 4) = 4 [pid 4480] close(3) = 0 [pid 4480] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4480] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4480] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4480] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4480] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4483 attached [pid 4483] set_robust_list(0x7f64ff0649e0, 24 [pid 4480] <... clone resumed>, parent_tid=[4483], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4483 [pid 4483] <... set_robust_list resumed>) = 0 [pid 4480] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4483] memfd_create("syzkaller", 0 [pid 4480] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4483] <... memfd_create resumed>) = 3 [pid 4483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 4479 attached ) = 0x7f64f6c44000 [pid 4470] <... write resumed>) = 1048576 [pid 4483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4470] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4468] <... futex resumed>) = 0 [pid 4468] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4470] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4468] <... futex resumed>) = 0 [pid 4468] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... openat resumed>) = 3 [pid 4479] set_robust_list(0x55555713c5e0, 24) = 0 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4478] <... ioctl resumed>) = 0 [pid 4473] <... mount resumed>) = 0 [pid 375] close(3 [pid 4478] close(3 [pid 375] <... close resumed>) = 0 [pid 4479] chdir("./130") = 0 [pid 4479] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4478] <... close resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4479] <... prctl resumed>) = 0 [pid 4479] setpgid(0, 0) = 0 [pid 4479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4479] write(3, "1000", 4) = 4 [pid 4479] close(3) = 0 [pid 4479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4479] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4485 attached ) = 0 [pid 4478] mkdir("./bus", 0777 [pid 4473] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4485] set_robust_list(0x55555713c5e0, 24 [pid 4478] <... mkdir resumed>) = 0 [pid 4473] <... openat resumed>) = 3 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4485 [pid 4485] <... set_robust_list resumed>) = 0 [pid 4478] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4473] chdir("./bus" [pid 4485] chdir("./128" [pid 4479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4473] <... chdir resumed>) = 0 [pid 4485] <... chdir resumed>) = 0 [pid 4473] ioctl(4, LOOP_CLR_FD [pid 4485] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4473] <... ioctl resumed>) = 0 [pid 4485] <... prctl resumed>) = 0 [pid 4473] close(4 [pid 4483] <... write resumed>) = 1048576 [pid 4479] <... mmap resumed>) = 0x7f64ff044000 [pid 4470] <... openat resumed>) = 7 [pid 4483] munmap(0x7f64f6c44000, 1048576 [pid 4479] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4473] <... close resumed>) = 0 [pid 4470] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4483] <... munmap resumed>) = 0 [pid 4479] <... mprotect resumed>) = 0 [pid 4473] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4470] <... futex resumed>) = 1 [pid 4468] <... futex resumed>) = 0 [pid 4483] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4479] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4473] <... futex resumed>) = 1 [pid 4471] <... futex resumed>) = 0 [pid 4470] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4468] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4485] setpgid(0, 0 [pid 4483] <... openat resumed>) = 4 [pid 4471] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4468] <... futex resumed>) = 0 [pid 4483] ioctl(4, LOOP_SET_FD, 3 [pid 4479] <... clone resumed>, parent_tid=[4487], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4487 [pid 4473] chdir("./file0" [pid 4471] <... futex resumed>) = 0 [pid 4470] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4468] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4479] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4471] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4470] <... openat resumed>) = 8 [pid 4479] <... futex resumed>) = 0 [pid 4473] <... chdir resumed>) = 0 [pid 4470] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4479] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4470] <... futex resumed>) = 1 [pid 4468] <... futex resumed>) = 0 [pid 4470] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4468] exit_group(0 [pid 4485] <... setpgid resumed>) = 0 [pid 4473] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4470] <... futex resumed>) = ? [pid 4468] <... exit_group resumed>) = ? [pid 4485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4473] <... futex resumed>) = 1 [pid 4471] <... futex resumed>) = 0 [pid 4470] +++ exited with 0 +++ [pid 4483] <... ioctl resumed>) = 0 [pid 4473] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4471] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4468] +++ exited with 0 +++ [pid 4483] close(3 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4468, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 4483] <... close resumed>) = 0 [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 4483] mkdir("./bus", 0777) = 0 [pid 377] <... restart_syscall resumed>) = 0 [pid 4483] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 377] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4471] <... futex resumed>) = 0 [pid 377] unlink("./127/binderfs" [pid 4471] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... unlink resumed>) = 0 [pid 377] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4487 attached [pid 4487] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4487] memfd_create("syzkaller", 0) = 3 [pid 4487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4473] <... open resumed>) = 4 [pid 4485] <... openat resumed>) = 3 [pid 4485] write(3, "1000", 4) = 4 [pid 4485] close(3) = 0 [ 89.788585][ T4473] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/127/bus supports timestamps until 2038 (0x7fffffff) [ 89.806668][ T4470] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 89.820832][ T4470] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 4485] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4485] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4485] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4485] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4490], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4490 [pid 4485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4487] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4487] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4487] ioctl(4, LOOP_SET_FD, 3 [pid 4473] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4473] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4471] <... futex resumed>) = 0 ./strace-static-x86_64: Process 4490 attached [pid 4478] <... mount resumed>) = 0 [pid 4471] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4490] set_robust_list(0x7f64ff0649e0, 24 [pid 4487] <... ioctl resumed>) = 0 [pid 4478] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4473] <... futex resumed>) = 0 [pid 4471] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4473] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4473] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4471] <... futex resumed>) = 0 [pid 4473] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4471] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4490] <... set_robust_list resumed>) = 0 [pid 4473] <... write resumed>) = 196608 [pid 4471] <... futex resumed>) = 0 [pid 4490] memfd_create("syzkaller", 0 [pid 4471] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4490] <... memfd_create resumed>) = 3 [pid 4490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4490] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4473] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4471] <... futex resumed>) = 0 [pid 4471] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4471] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4473] <... futex resumed>) = 1 [pid 4473] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4473] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4471] <... futex resumed>) = 0 [pid 4471] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4471] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4473] <... futex resumed>) = 1 [pid 4473] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4473] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4471] <... futex resumed>) = 0 [pid 4471] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4471] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4483] <... mount resumed>) = 0 [pid 4483] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4483] chdir("./bus") = 0 [pid 4473] <... futex resumed>) = 1 [pid 4473] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4478] <... openat resumed>) = 3 [pid 4490] <... write resumed>) = 1048576 [pid 4487] close(3 [pid 4483] ioctl(4, LOOP_CLR_FD [pid 4473] <... write resumed>) = 1048576 [pid 4490] munmap(0x7f64f6c44000, 1048576 [pid 4473] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4490] <... munmap resumed>) = 0 [pid 4473] <... futex resumed>) = 1 [pid 4471] <... futex resumed>) = 0 [pid 4490] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4473] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4471] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4471] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4478] chdir("./bus") = 0 [pid 4478] ioctl(4, LOOP_CLR_FD [pid 4487] <... close resumed>) = 0 [pid 4487] mkdir("./bus", 0777) = 0 [ 89.845961][ T4478] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/127/bus supports timestamps until 2038 (0x7fffffff) [ 89.859995][ T4483] ext4 filesystem being mounted at /root/syzkaller.k3ECep/128/bus supports timestamps until 2038 (0x7fffffff) [pid 4487] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4473] <... openat resumed>) = 7 [pid 4473] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4473] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4471] <... futex resumed>) = 0 [pid 4471] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4471] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4473] <... futex resumed>) = 0 [pid 4473] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4473] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4471] <... futex resumed>) = 0 [pid 4471] exit_group(0) = ? [pid 4473] <... futex resumed>) = ? [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./127/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./127/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, [pid 4483] <... ioctl resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4490] <... openat resumed>) = 4 [pid 4483] close(4 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./127/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./127") = 0 [pid 377] mkdir("./128", 0777 [pid 4490] ioctl(4, LOOP_SET_FD, 3 [pid 4483] <... close resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4494 [pid 4473] +++ exited with 0 +++ [pid 4471] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4471, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 372] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./127/binderfs") = 0 [pid 372] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4478] <... ioctl resumed>) = 0 [pid 4478] close(4) = 0 [pid 4483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4478] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4483] <... futex resumed>) = 1 [pid 4480] <... futex resumed>) = 0 [pid 4478] <... futex resumed>) = 1 [pid 4477] <... futex resumed>) = 0 [pid 4483] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4480] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4478] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 4494 attached [pid 4494] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4494] chdir("./128") = 0 [pid 4494] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4480] <... futex resumed>) = 0 [pid 4477] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4480] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4490] <... ioctl resumed>) = 0 [pid 4483] chdir("./file0" [pid 4478] <... futex resumed>) = 0 [pid 4477] <... futex resumed>) = 1 [pid 4494] <... prctl resumed>) = 0 [pid 4494] setpgid(0, 0) = 0 [pid 4494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4478] chdir("./file0" [pid 4477] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4490] close(3 [pid 4483] <... chdir resumed>) = 0 [pid 4478] <... chdir resumed>) = 0 [pid 4490] <... close resumed>) = 0 [pid 4483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4478] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4490] mkdir("./bus", 0777 [pid 4483] <... futex resumed>) = 1 [pid 4480] <... futex resumed>) = 0 [pid 4478] <... futex resumed>) = 1 [pid 4477] <... futex resumed>) = 0 [pid 4494] <... openat resumed>) = 3 [pid 4490] <... mkdir resumed>) = 0 [pid 4480] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4477] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4483] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4490] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4480] <... futex resumed>) = 0 [pid 4478] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4477] <... futex resumed>) = 0 [pid 4494] write(3, "1000", 4 [pid 4480] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4477] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4494] <... write resumed>) = 4 [pid 4494] close(3 [pid 4483] <... open resumed>) = 4 [pid 4478] <... open resumed>) = 4 [pid 4483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4478] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4483] <... futex resumed>) = 1 [pid 4480] <... futex resumed>) = 0 [pid 4478] <... futex resumed>) = 1 [pid 4477] <... futex resumed>) = 0 [pid 4483] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4480] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4478] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4477] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4480] <... futex resumed>) = 0 [pid 4478] <... openat resumed>) = 5 [pid 4477] <... futex resumed>) = 0 [pid 4483] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4480] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4478] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4477] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4483] <... openat resumed>) = 5 [pid 4478] <... futex resumed>) = 0 [pid 4477] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4478] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4477] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4483] <... futex resumed>) = 1 [pid 4480] <... futex resumed>) = 0 [pid 4478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4477] <... futex resumed>) = 0 [pid 4494] <... close resumed>) = 0 [pid 4483] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4480] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4478] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4477] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4494] symlink("/dev/binderfs", "./binderfs" [pid 4483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4480] <... futex resumed>) = 0 [pid 4494] <... symlink resumed>) = 0 [pid 4483] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4480] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4494] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4483] <... write resumed>) = 196608 [pid 4478] <... write resumed>) = 196608 [pid 4494] <... futex resumed>) = 0 [pid 4483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4478] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4494] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4483] <... futex resumed>) = 1 [pid 4480] <... futex resumed>) = 0 [pid 4494] <... mmap resumed>) = 0x7f64ff044000 [pid 4483] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4480] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4478] <... futex resumed>) = 1 [pid 4477] <... futex resumed>) = 0 [pid 4494] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4480] <... futex resumed>) = 0 [pid 4478] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4477] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4494] <... mprotect resumed>) = 0 [pid 4483] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4480] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4477] <... futex resumed>) = 0 [pid 4494] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4483] <... mount resumed>) = 0 [pid 4478] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [ 89.888594][ T4473] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 89.902764][ T4473] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 4477] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4498 attached [pid 4483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4478] <... mount resumed>) = 0 [pid 4494] <... clone resumed>, parent_tid=[4498], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4498 [pid 4483] <... futex resumed>) = 1 [pid 4480] <... futex resumed>) = 0 [pid 4494] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4483] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4480] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4494] <... futex resumed>) = 0 [pid 4483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4480] <... futex resumed>) = 0 [pid 4494] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4483] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4480] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4483] <... open resumed>) = 6 [pid 4483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4480] <... futex resumed>) = 0 [pid 4483] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4480] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4480] <... futex resumed>) = 0 [pid 4483] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4480] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4487] <... mount resumed>) = 0 [pid 4478] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = 0 [pid 4478] <... futex resumed>) = 1 [pid 4477] <... futex resumed>) = 0 [pid 372] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4478] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4477] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4477] <... futex resumed>) = 0 [pid 372] lstat("./127/bus", [pid 4478] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4477] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4478] <... open resumed>) = 6 [pid 372] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4478] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4478] <... futex resumed>) = 1 [pid 4477] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "./127/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4478] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4477] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 4 [pid 4478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4477] <... futex resumed>) = 0 [pid 372] fstat(4, [pid 4478] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4477] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4487] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 372] getdents64(4, [pid 4487] <... openat resumed>) = 3 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4487] chdir("./bus" [pid 372] getdents64(4, [pid 4487] <... chdir resumed>) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4487] ioctl(4, LOOP_CLR_FD [pid 372] close(4 [pid 4487] <... ioctl resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 4487] close(4 [pid 372] rmdir("./127/bus" [pid 4487] <... close resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 4487] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 4487] <... futex resumed>) = 1 [pid 4479] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4487] chdir("./file0" [pid 4479] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 4479] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 4479] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] rmdir("./127") = 0 [pid 372] mkdir("./128", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4500 [pid 4498] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4498] memfd_create("syzkaller", 0) = 3 [pid 4498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4487] <... chdir resumed>) = 0 [pid 4487] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4479] <... futex resumed>) = 0 [pid 4479] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4483] <... write resumed>) = 1048576 [pid 4479] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4487] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4487] <... open resumed>) = 4 [pid 4483] <... futex resumed>) = 1 [pid 4480] <... futex resumed>) = 0 [pid 4480] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4480] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4487] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4483] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4478] <... write resumed>) = 1048576 [pid 4498] <... write resumed>) = 1048576 [ 89.943887][ T4487] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/130/bus supports timestamps until 2038 (0x7fffffff) [pid 4498] munmap(0x7f64f6c44000, 1048576 [pid 4487] <... futex resumed>) = 1 [pid 4479] <... futex resumed>) = 0 [pid 4479] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4479] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4498] <... munmap resumed>) = 0 [pid 4498] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 4498] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 4500 attached [pid 4500] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4500] chdir("./128") = 0 [pid 4500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4500] setpgid(0, 0) = 0 [pid 4500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4500] write(3, "1000", 4) = 4 [pid 4500] close(3) = 0 [pid 4500] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4500] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4500] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4500] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4503], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4503 [pid 4500] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4500] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4503 attached [pid 4503] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4503] memfd_create("syzkaller", 0) = 3 [pid 4503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4503] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4503] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4487] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4478] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4487] <... openat resumed>) = 5 [pid 4487] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4477] <... futex resumed>) = 0 [pid 4477] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4477] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4479] <... futex resumed>) = 0 [pid 4487] <... futex resumed>) = 1 [pid 4478] <... futex resumed>) = 1 [pid 4479] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4479] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4478] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4487] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4503] <... openat resumed>) = 4 [pid 4498] <... ioctl resumed>) = 0 [pid 4503] ioctl(4, LOOP_SET_FD, 3 [pid 4498] close(3) = 0 [pid 4498] mkdir("./bus", 0777) = 0 [pid 4498] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4487] <... write resumed>) = 196608 [pid 4487] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4487] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4503] <... ioctl resumed>) = 0 [pid 4503] close(3) = 0 [pid 4503] mkdir("./bus", 0777) = 0 [pid 4503] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4479] <... futex resumed>) = 0 [ 89.997562][ T4483] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 90.016357][ T4478] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 90.031313][ T4483] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 4480] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4479] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4480] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4479] <... futex resumed>) = 1 [pid 4487] <... futex resumed>) = 0 [pid 4480] <... futex resumed>) = 0 [pid 4479] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4480] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4487] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4480] <... mmap resumed>) = 0x7f64f6d23000 [pid 4490] <... mount resumed>) = 0 [pid 4490] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4490] chdir("./bus") = 0 [pid 4490] ioctl(4, LOOP_CLR_FD) = 0 [pid 4490] close(4 [pid 4480] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4477] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4480] <... mprotect resumed>) = 0 [pid 4477] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4480] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4477] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4480] <... clone resumed>, parent_tid=[4506], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4506 [pid 4477] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4480] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4477] <... mprotect resumed>) = 0 [pid 4480] <... futex resumed>) = 0 [pid 4480] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4477] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4507], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4507 [pid 4477] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4477] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4483] <... openat resumed>) = 7 [pid 4483] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4483] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4487] <... mount resumed>) = 0 [pid 4487] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4479] <... futex resumed>) = 0 [pid 4479] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4479] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4487] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4487] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4479] <... futex resumed>) = 0 [pid 4479] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4479] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4487] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4490] <... close resumed>) = 0 ./strace-static-x86_64: Process 4506 attached ./strace-static-x86_64: Process 4507 attached [pid 4490] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4485] <... futex resumed>) = 0 [pid 4507] set_robust_list(0x7f64f6d439e0, 24 [pid 4506] set_robust_list(0x7f64f6d439e0, 24 [pid 4490] <... futex resumed>) = 1 [pid 4485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4507] <... set_robust_list resumed>) = 0 [pid 4506] <... set_robust_list resumed>) = 0 [pid 4490] chdir("./file0" [pid 4485] <... futex resumed>) = 0 [pid 4478] <... openat resumed>) = 7 [pid 4485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4507] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4506] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4490] <... chdir resumed>) = 0 [pid 4507] <... openat resumed>) = 8 [pid 4490] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4507] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4506] <... openat resumed>) = 8 [pid 4490] <... futex resumed>) = 1 [pid 4485] <... futex resumed>) = 0 [pid 4507] <... futex resumed>) = 1 [pid 4506] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4490] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4477] <... futex resumed>) = 0 [pid 4490] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4485] <... futex resumed>) = 0 [pid 4490] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4480] <... futex resumed>) = 0 [pid 4506] <... futex resumed>) = 1 [pid 4507] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4478] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4506] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4480] exit_group(0 [pid 4478] <... futex resumed>) = 0 [pid 4483] <... futex resumed>) = ? [pid 4480] <... exit_group resumed>) = ? [pid 4483] +++ exited with 0 +++ [pid 4506] <... futex resumed>) = ? [pid 4490] <... open resumed>) = 4 [pid 4478] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4477] exit_group(0 [pid 4490] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4477] <... exit_group resumed>) = ? [pid 4507] <... futex resumed>) = ? [pid 4490] <... futex resumed>) = 1 [pid 4485] <... futex resumed>) = 0 [pid 4485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4490] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4490] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4485] <... futex resumed>) = 0 [pid 4485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4490] <... futex resumed>) = 1 [pid 4490] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4507] +++ exited with 0 +++ [pid 4506] +++ exited with 0 +++ [pid 4498] <... mount resumed>) = 0 [pid 4490] <... write resumed>) = 196608 [pid 4480] +++ exited with 0 +++ [pid 4478] <... futex resumed>) = ? [pid 4498] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4498] chdir("./bus") = 0 [pid 4498] ioctl(4, LOOP_CLR_FD) = 0 [pid 4498] close(4) = 0 [pid 4498] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4498] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4478] +++ exited with 0 +++ [pid 4477] +++ exited with 0 +++ [pid 4490] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 90.031466][ T4490] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/128/bus supports timestamps until 2038 (0x7fffffff) [ 90.052171][ T4478] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 90.075541][ T4498] ext4 filesystem being mounted at /root/syzkaller.43WzWH/128/bus supports timestamps until 2038 (0x7fffffff) [pid 4490] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4494] <... futex resumed>) = 0 [pid 4494] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4485] <... futex resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4477, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4480, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 4498] <... futex resumed>) = 0 [pid 4494] <... futex resumed>) = 1 [pid 4485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4498] chdir("./file0" [pid 4494] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4485] <... futex resumed>) = 1 [pid 4485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4498] <... chdir resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4498] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... openat resumed>) = 3 [pid 4498] <... futex resumed>) = 1 [pid 4494] <... futex resumed>) = 0 [pid 374] fstat(3, [pid 373] <... openat resumed>) = 3 [pid 4498] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4494] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] fstat(3, [pid 4494] <... futex resumed>) = 0 [pid 4494] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, [pid 373] getdents64(3, [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./127/binderfs", [pid 373] lstat("./128/binderfs", [pid 4498] <... open resumed>) = 4 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./127/binderfs" [pid 4498] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] unlink("./128/binderfs" [pid 374] <... unlink resumed>) = 0 [pid 4498] <... futex resumed>) = 1 [pid 4494] <... futex resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 4494] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4494] <... futex resumed>) = 0 [pid 4494] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4498] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4498] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4494] <... futex resumed>) = 0 [pid 4498] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4494] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4494] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4487] <... write resumed>) = 1048576 [pid 4498] <... write resumed>) = 196608 [pid 4487] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4479] <... futex resumed>) = 0 [pid 4498] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4479] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4498] <... futex resumed>) = 1 [pid 4494] <... futex resumed>) = 0 [pid 4479] <... futex resumed>) = 0 [pid 4498] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4494] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4479] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4494] <... futex resumed>) = 0 [pid 4494] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4498] <... mount resumed>) = 0 [pid 4487] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4498] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4490] <... futex resumed>) = 0 [pid 4498] <... futex resumed>) = 1 [pid 4494] <... futex resumed>) = 0 [pid 4498] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4494] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4498] <... open resumed>) = 6 [pid 4494] <... futex resumed>) = 0 [pid 4498] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4494] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4498] <... futex resumed>) = 0 [pid 4494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4498] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4494] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4494] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4490] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4490] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4485] <... futex resumed>) = 0 [pid 4490] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4490] <... open resumed>) = 6 [pid 4485] <... futex resumed>) = 0 [pid 4490] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4490] <... futex resumed>) = 0 [pid 4485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4490] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4503] <... mount resumed>) = 0 [pid 4487] <... openat resumed>) = 7 [pid 4503] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4487] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4503] <... openat resumed>) = 3 [pid 4487] <... futex resumed>) = 1 [pid 4479] <... futex resumed>) = 0 [pid 4503] chdir("./bus" [pid 4498] <... write resumed>) = 1048576 [pid 4490] <... write resumed>) = 1048576 [pid 4487] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4479] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4503] <... chdir resumed>) = 0 [pid 4479] <... futex resumed>) = 0 [pid 4479] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4490] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4485] <... futex resumed>) = 0 [pid 4503] ioctl(4, LOOP_CLR_FD [pid 4487] <... openat resumed>) = 8 [pid 4485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4487] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4498] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4490] <... futex resumed>) = 1 [pid 4498] <... futex resumed>) = 1 [pid 4494] <... futex resumed>) = 0 [pid 4490] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4487] <... futex resumed>) = 1 [pid 4479] <... futex resumed>) = 0 [pid 4494] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4479] exit_group(0 [pid 4494] <... futex resumed>) = 0 [pid 4479] <... exit_group resumed>) = ? [pid 4494] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 90.088428][ T4503] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/128/bus supports timestamps until 2038 (0x7fffffff) [ 90.112616][ T4487] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 90.126837][ T4487] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 4498] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4490] <... openat resumed>) = 7 [pid 4490] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4490] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4485] <... futex resumed>) = 0 [pid 4485] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4485] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4490] <... futex resumed>) = 0 [pid 4490] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4490] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4485] <... futex resumed>) = 0 [pid 4485] exit_group(0) = ? [pid 4490] <... futex resumed>) = ? [pid 4498] <... openat resumed>) = 7 [pid 4498] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4494] <... futex resumed>) = 0 [pid 4494] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = 0 [pid 4494] <... futex resumed>) = 0 [pid 4494] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4498] <... futex resumed>) = 1 [pid 4498] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 373] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4498] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4494] <... futex resumed>) = 0 [pid 4494] exit_group(0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4494] <... exit_group resumed>) = ? [pid 373] lstat("./128/bus", [pid 4498] <... futex resumed>) = ? [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./128/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./128/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./128") = 0 [pid 373] mkdir("./129", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4503] <... ioctl resumed>) = 0 [pid 4487] +++ exited with 0 +++ [pid 4479] +++ exited with 0 +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4479, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 4498] +++ exited with 0 +++ [pid 4494] +++ exited with 0 +++ [pid 4490] +++ exited with 0 +++ [pid 4485] +++ exited with 0 +++ [pid 373] <... openat resumed>) = 3 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4494, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4485, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 373] ioctl(3, LOOP_CLR_FD [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 376] <... restart_syscall resumed>) = 0 [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... restart_syscall resumed>) = 0 [pid 373] close(3) = 0 [pid 377] <... restart_syscall resumed>) = 0 [pid 376] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4511 [pid 377] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... openat resumed>) = 3 [pid 375] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] fstat(3, [pid 375] <... openat resumed>) = 3 [pid 377] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] fstat(3, [pid 377] <... openat resumed>) = 3 [pid 376] getdents64(3, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] fstat(3, [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] getdents64(3, [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] getdents64(3, [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] lstat("./130/binderfs", [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] lstat("./128/binderfs", [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] unlink("./130/binderfs" [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] lstat("./128/binderfs", [pid 376] <... unlink resumed>) = 0 [pid 375] unlink("./128/binderfs" [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... unlink resumed>) = 0 [pid 377] unlink("./128/binderfs" [pid 375] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... unlink resumed>) = 0 [pid 377] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4503] close(4) = 0 [pid 4503] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4500] <... futex resumed>) = 0 [pid 4503] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4500] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4500] <... futex resumed>) = 0 [ 90.152564][ T4490] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 90.152644][ T4498] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 90.175204][ T4490] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 90.180845][ T4498] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 4503] chdir("./file0" [pid 4500] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4503] <... chdir resumed>) = 0 [pid 4503] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4500] <... futex resumed>) = 0 [pid 4503] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4500] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4500] <... futex resumed>) = 0 [pid 4503] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4500] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = 0 [pid 4503] <... open resumed>) = 4 [pid 4503] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4500] <... futex resumed>) = 0 [pid 4503] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4500] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4500] <... futex resumed>) = 0 [pid 4503] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4500] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4503] <... openat resumed>) = 5 [pid 4503] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4500] <... futex resumed>) = 0 [pid 4503] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4500] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4500] <... futex resumed>) = 0 [pid 4503] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4500] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4503] <... write resumed>) = 196608 [pid 374] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4503] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4500] <... futex resumed>) = 0 [pid 4503] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4500] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4500] <... futex resumed>) = 0 [pid 4503] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4500] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4503] <... mount resumed>) = 0 [pid 4503] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4500] <... futex resumed>) = 0 [pid 4503] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4500] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4500] <... futex resumed>) = 0 [pid 4503] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4500] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4503] <... open resumed>) = 6 [pid 4503] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4500] <... futex resumed>) = 0 [pid 4503] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4500] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4500] <... futex resumed>) = 0 [pid 4503] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4500] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4511 attached [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4511] set_robust_list(0x55555713c5e0, 24 [pid 374] lstat("./127/bus", [pid 4511] <... set_robust_list resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4503] <... write resumed>) = 1048576 [pid 374] openat(AT_FDCWD, "./127/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4511] chdir("./129" [pid 374] <... openat resumed>) = 4 [pid 4511] <... chdir resumed>) = 0 [pid 374] fstat(4, [pid 4511] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4511] setpgid(0, 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, [pid 4511] <... setpgid resumed>) = 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] close(4 [pid 4503] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4511] <... openat resumed>) = 3 [pid 374] <... close resumed>) = 0 [pid 4511] write(3, "1000", 4 [pid 374] rmdir("./127/bus" [pid 4511] <... write resumed>) = 4 [pid 4511] close(3) = 0 [pid 4511] symlink("/dev/binderfs", "./binderfs") = 0 [pid 374] <... rmdir resumed>) = 0 [pid 4511] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(3, [pid 4511] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3 [pid 4511] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] <... close resumed>) = 0 [pid 4511] <... mmap resumed>) = 0x7f64ff044000 [pid 374] rmdir("./127" [pid 4511] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4511] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... rmdir resumed>) = 0 [pid 4511] <... clone resumed>, parent_tid=[4512], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4512 [pid 374] mkdir("./128", 0777 [pid 4511] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4511] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4512 attached [pid 4512] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4512] memfd_create("syzkaller", 0 [pid 4503] <... futex resumed>) = 1 [pid 4500] <... futex resumed>) = 0 [pid 4500] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4503] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4500] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4512] <... memfd_create resumed>) = 3 [pid 4512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4512] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4512] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4512] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4503] <... openat resumed>) = 7 [pid 4503] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4503] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4500] <... futex resumed>) = 0 [pid 4500] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4500] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4503] <... futex resumed>) = 0 [pid 4503] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 376] <... umount2 resumed>) = 0 [pid 4503] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4503] <... futex resumed>) = 1 [pid 376] lstat("./130/bus", [pid 4500] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4500] exit_group(0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4500] <... exit_group resumed>) = ? [pid 376] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./130/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./130") = 0 [pid 376] mkdir("./131", 0777) = 0 [ 90.259829][ T4503] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 90.273973][ T4503] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4512] <... openat resumed>) = 4 [pid 4512] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4512] close(3) = 0 [pid 4512] mkdir("./bus", 0777) = 0 [pid 4512] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 374] <... openat resumed>) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4503] +++ exited with 0 +++ [pid 4500] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4500, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 377] <... umount2 resumed>) = 0 [pid 374] close(3 [pid 375] <... umount2 resumed>) = 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 372] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... openat resumed>) = 3 [pid 375] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] ioctl(3, LOOP_CLR_FD [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./128/bus", [pid 375] lstat("./128/bus", [pid 372] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4514 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] close(3 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... close resumed>) = 0 [pid 375] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./128/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] openat(AT_FDCWD, "./128/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... openat resumed>) = 3 [pid 377] <... openat resumed>) = 4 [pid 375] <... openat resumed>) = 4 [pid 372] fstat(3, ./strace-static-x86_64: Process 4515 attached ./strace-static-x86_64: Process 4514 attached [pid 377] fstat(4, [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4515 [pid 375] fstat(4, [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4515] set_robust_list(0x55555713c5e0, 24 [pid 4514] set_robust_list(0x55555713c5e0, 24 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, [pid 377] getdents64(4, [pid 375] getdents64(4, [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4515] <... set_robust_list resumed>) = 0 [pid 4514] <... set_robust_list resumed>) = 0 [pid 377] getdents64(4, [pid 375] getdents64(4, [pid 372] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4 [pid 375] close(4 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... close resumed>) = 0 [pid 377] rmdir("./128/bus" [pid 375] <... close resumed>) = 0 [pid 372] lstat("./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./128/binderfs") = 0 [pid 377] <... rmdir resumed>) = 0 [pid 375] rmdir("./128/bus" [pid 372] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 377] close(3 [pid 375] getdents64(3, [pid 377] <... close resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] rmdir("./128" [pid 375] close(3 [pid 377] <... rmdir resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 377] mkdir("./129", 0777 [pid 375] rmdir("./128" [pid 377] <... mkdir resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 375] mkdir("./129", 0777 [pid 377] <... openat resumed>) = 3 [pid 4515] chdir("./131") = 0 [pid 4515] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 375] <... mkdir resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... openat resumed>) = 3 [pid 377] close(3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 377] <... close resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] close(3 [pid 4515] <... prctl resumed>) = 0 [pid 4515] setpgid(0, 0) = 0 [pid 4515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 375] <... close resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4517 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4515] write(3, "1000", 4) = 4 [pid 4515] close(3) = 0 [pid 4515] symlink("/dev/binderfs", "./binderfs") = 0 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4518 [pid 4515] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4515] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4515] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4519], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4519 [pid 4515] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4515] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4517 attached [pid 4517] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4517] chdir("./129") = 0 [pid 4517] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4517] setpgid(0, 0) = 0 [pid 4517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4517] write(3, "1000", 4) = 4 [pid 4517] close(3) = 0 [pid 4517] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4517] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4517] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4517] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4520], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4520 [pid 4517] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4517] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4520 attached [pid 4520] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4520] memfd_create("syzkaller", 0) = 3 [pid 4520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4514] chdir("./128") = 0 [pid 4514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4514] setpgid(0, 0) = 0 [pid 4514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4514] write(3, "1000", 4) = 4 [pid 4514] close(3) = 0 [pid 4514] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4514] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4514] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4514] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4521], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4521 [pid 4514] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4514] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4518 attached [pid 4518] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4518] chdir("./129") = 0 [pid 4518] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4518] setpgid(0, 0) = 0 [pid 4520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4518] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4518] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 4521 attached ./strace-static-x86_64: Process 4519 attached [pid 4520] <... write resumed>) = 1048576 [pid 4512] <... mount resumed>) = 0 [pid 4512] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4512] chdir("./bus") = 0 [pid 4512] ioctl(4, LOOP_CLR_FD [pid 4518] close(3) = 0 [pid 4518] symlink("/dev/binderfs", "./binderfs" [pid 4521] set_robust_list(0x7f64ff0649e0, 24 [pid 4519] set_robust_list(0x7f64ff0649e0, 24 [pid 4520] munmap(0x7f64f6c44000, 1048576 [pid 4518] <... symlink resumed>) = 0 [pid 4518] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4518] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4518] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4518] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4523], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4523 [pid 4518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4523 attached [pid 4523] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4523] memfd_create("syzkaller", 0) = 3 [pid 4523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4519] <... set_robust_list resumed>) = 0 [pid 4521] <... set_robust_list resumed>) = 0 [pid 4519] memfd_create("syzkaller", 0) = 3 [pid 4519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4521] memfd_create("syzkaller", 0) = 3 [pid 4521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4520] <... munmap resumed>) = 0 [pid 4520] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4523] <... write resumed>) = 1048576 [pid 4523] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4523] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4519] <... write resumed>) = 1048576 [pid 4519] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4519] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4520] <... openat resumed>) = 4 [pid 4512] <... ioctl resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 4520] ioctl(4, LOOP_SET_FD, 3 [pid 4512] close(4) = 0 [pid 4512] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4511] <... futex resumed>) = 0 [pid 4512] chdir("./file0" [pid 4511] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4512] <... chdir resumed>) = 0 [pid 4511] <... futex resumed>) = 0 [pid 4512] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4511] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4512] <... futex resumed>) = 0 [pid 4511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4512] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4511] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4512] <... open resumed>) = 4 [pid 4511] <... futex resumed>) = 0 [pid 4512] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4511] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4512] <... futex resumed>) = 0 [pid 4511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4512] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4511] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4512] <... openat resumed>) = 5 [pid 4511] <... futex resumed>) = 0 [pid 4512] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4511] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4512] <... futex resumed>) = 0 [pid 4511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4512] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4511] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4521] <... write resumed>) = 1048576 [pid 4511] <... futex resumed>) = 0 [pid 372] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./128/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4523] <... openat resumed>) = 4 [pid 4520] <... ioctl resumed>) = 0 [pid 4512] <... write resumed>) = 196608 [pid 4511] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./128/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 4523] ioctl(4, LOOP_SET_FD, 3 [pid 4520] close(3 [pid 4519] <... openat resumed>) = 4 [pid 4512] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] rmdir("./128/bus" [pid 4523] <... ioctl resumed>) = 0 [pid 4520] <... close resumed>) = 0 [pid 4519] ioctl(4, LOOP_SET_FD, 3 [pid 4512] <... futex resumed>) = 1 [pid 4511] <... futex resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 4523] close(3 [pid 4521] munmap(0x7f64f6c44000, 1048576 [pid 4520] mkdir("./bus", 0777 [pid 4512] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4511] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 4523] <... close resumed>) = 0 [pid 4521] <... munmap resumed>) = 0 [pid 4520] <... mkdir resumed>) = 0 [pid 4512] <... mount resumed>) = 0 [pid 4511] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4523] mkdir("./bus", 0777 [pid 4521] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4520] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4519] <... ioctl resumed>) = 0 [pid 4511] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] close(3 [pid 4521] <... openat resumed>) = 4 [pid 372] <... close resumed>) = 0 [pid 4521] ioctl(4, LOOP_SET_FD, 3 [pid 372] rmdir("./128") = 0 [pid 4523] <... mkdir resumed>) = 0 [pid 372] mkdir("./129", 0777 [pid 4523] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4519] close(3 [pid 4512] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... mkdir resumed>) = 0 [pid 4519] <... close resumed>) = 0 [pid 4512] <... futex resumed>) = 1 [pid 4511] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4519] mkdir("./bus", 0777 [pid 4512] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4511] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4519] <... mkdir resumed>) = 0 [pid 4511] <... futex resumed>) = 0 [pid 4519] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4511] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4521] <... ioctl resumed>) = 0 [pid 4521] close(3) = 0 [pid 4521] mkdir("./bus", 0777 [pid 372] <... openat resumed>) = 3 [pid 4521] <... mkdir resumed>) = 0 [pid 4512] <... open resumed>) = 6 [pid 372] ioctl(3, LOOP_CLR_FD [pid 4521] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4512] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 4512] <... futex resumed>) = 1 [pid 4511] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4528 [ 90.409976][ T4512] ext4 filesystem being mounted at /root/syzkaller.k3ECep/129/bus supports timestamps until 2038 (0x7fffffff) [pid 4511] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4512] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4511] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4528 attached [pid 4528] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4528] chdir("./129") = 0 [pid 4528] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4528] setpgid(0, 0) = 0 [pid 4528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4528] write(3, "1000", 4) = 4 [pid 4528] close(3) = 0 [pid 4528] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4528] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4528] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4528] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4530], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4530 [pid 4528] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4528] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4521] <... mount resumed>) = 0 [pid 4521] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4521] chdir("./bus") = 0 [pid 4521] ioctl(4, LOOP_CLR_FD) = 0 [pid 4521] close(4) = 0 [pid 4521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4514] <... futex resumed>) = 0 [pid 4514] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4514] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4521] chdir("./file0") = 0 [pid 4521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4514] <... futex resumed>) = 0 [pid 4514] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4514] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4530 attached [pid 4530] set_robust_list(0x7f64ff0649e0, 24 [pid 4521] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4530] <... set_robust_list resumed>) = 0 [pid 4521] <... open resumed>) = 4 [pid 4530] memfd_create("syzkaller", 0) = 3 [pid 4521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4521] <... futex resumed>) = 1 [pid 4530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4521] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4530] <... write resumed>) = 1048576 [pid 4530] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4530] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4530] ioctl(4, LOOP_SET_FD, 3 [pid 4520] <... mount resumed>) = 0 [pid 4514] <... futex resumed>) = 0 [pid 4512] <... write resumed>) = 1048576 [pid 4511] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4514] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4512] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4511] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4514] <... futex resumed>) = 1 [pid 4512] <... futex resumed>) = 0 [pid 4511] <... futex resumed>) = 0 [pid 4530] <... ioctl resumed>) = 0 [pid 4521] <... futex resumed>) = 0 [pid 4520] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4519] <... mount resumed>) = 0 [pid 4514] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4512] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4511] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4530] close(3 [ 90.485655][ T4521] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/128/bus supports timestamps until 2038 (0x7fffffff) [ 90.511545][ T4520] ext4 filesystem being mounted at /root/syzkaller.43WzWH/129/bus supports timestamps until 2038 (0x7fffffff) [ 90.521445][ T4519] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/131/bus supports timestamps until 2038 (0x7fffffff) [pid 4521] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4530] <... close resumed>) = 0 [pid 4521] <... openat resumed>) = 5 [pid 4530] mkdir("./bus", 0777 [pid 4521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4530] <... mkdir resumed>) = 0 [pid 4521] <... futex resumed>) = 0 [pid 4530] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4521] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4514] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4521] <... futex resumed>) = 0 [pid 4514] <... futex resumed>) = 1 [pid 4521] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4514] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4521] <... write resumed>) = 196608 [pid 4521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4514] <... futex resumed>) = 0 [pid 4521] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4514] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4521] <... mount resumed>) = 0 [pid 4514] <... futex resumed>) = 0 [pid 4521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4514] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4521] <... futex resumed>) = 0 [pid 4514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4521] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4514] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4521] <... open resumed>) = 6 [pid 4514] <... futex resumed>) = 0 [pid 4521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4514] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4521] <... futex resumed>) = 0 [pid 4514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4521] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4514] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4520] <... openat resumed>) = 3 [pid 4519] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4514] <... futex resumed>) = 0 [pid 4512] <... openat resumed>) = 7 [pid 4520] chdir("./bus" [pid 4519] <... openat resumed>) = 3 [pid 4520] <... chdir resumed>) = 0 [pid 4519] chdir("./bus" [pid 4520] ioctl(4, LOOP_CLR_FD [pid 4519] <... chdir resumed>) = 0 [pid 4520] <... ioctl resumed>) = 0 [pid 4519] ioctl(4, LOOP_CLR_FD [pid 4520] close(4 [pid 4519] <... ioctl resumed>) = 0 [pid 4520] <... close resumed>) = 0 [pid 4519] close(4 [pid 4520] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4519] <... close resumed>) = 0 [pid 4514] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4520] <... futex resumed>) = 1 [pid 4519] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4517] <... futex resumed>) = 0 [pid 4520] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4519] <... futex resumed>) = 1 [pid 4517] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4515] <... futex resumed>) = 0 [pid 4512] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4519] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4517] <... futex resumed>) = 0 [pid 4515] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4512] <... futex resumed>) = 1 [pid 4511] <... futex resumed>) = 0 [pid 4520] chdir("./file0" [pid 4519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4517] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4515] <... futex resumed>) = 0 [pid 4512] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4511] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4520] <... chdir resumed>) = 0 [pid 4519] chdir("./file0" [pid 4515] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4511] <... futex resumed>) = 0 [pid 4520] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4519] <... chdir resumed>) = 0 [pid 4512] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4511] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4520] <... futex resumed>) = 1 [pid 4519] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4517] <... futex resumed>) = 0 [pid 4512] <... openat resumed>) = 8 [pid 4520] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4519] <... futex resumed>) = 1 [pid 4517] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4515] <... futex resumed>) = 0 [pid 4512] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4519] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4517] <... futex resumed>) = 0 [pid 4515] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4520] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4517] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4512] <... futex resumed>) = 1 [pid 4511] <... futex resumed>) = 0 [pid 4520] <... open resumed>) = 4 [pid 4519] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4515] <... futex resumed>) = 0 [pid 4512] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4511] exit_group(0 [pid 4520] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4515] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4512] <... futex resumed>) = ? [pid 4511] <... exit_group resumed>) = ? [pid 4520] <... futex resumed>) = 1 [pid 4519] <... open resumed>) = 4 [pid 4517] <... futex resumed>) = 0 [pid 4512] +++ exited with 0 +++ [pid 4511] +++ exited with 0 +++ [pid 4520] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4519] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4517] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4511, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4519] <... futex resumed>) = 1 [pid 4517] <... futex resumed>) = 0 [pid 4515] <... futex resumed>) = 0 [pid 4520] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4519] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4517] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4515] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4520] <... openat resumed>) = 5 [pid 4519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4515] <... futex resumed>) = 0 [pid 4520] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4519] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4515] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4520] <... futex resumed>) = 1 [pid 4519] <... openat resumed>) = 5 [pid 4517] <... futex resumed>) = 0 [pid 4520] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4519] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4517] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4519] <... futex resumed>) = 1 [pid 4517] <... futex resumed>) = 0 [pid 4515] <... futex resumed>) = 0 [pid 4520] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4519] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4517] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4515] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./129/binderfs" [pid 4520] <... write resumed>) = 196608 [pid 4519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4515] <... futex resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 4520] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4519] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4515] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4523] <... mount resumed>) = 0 [pid 4523] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4523] chdir("./bus") = 0 [pid 4523] ioctl(4, LOOP_CLR_FD) = 0 [pid 4523] close(4) = 0 [pid 4519] <... write resumed>) = 196608 [pid 4520] <... futex resumed>) = 1 [pid 4519] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4517] <... futex resumed>) = 0 [pid 4520] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4519] <... futex resumed>) = 1 [pid 4517] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4515] <... futex resumed>) = 0 [pid 4523] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4518] <... futex resumed>) = 0 [ 90.538687][ T4512] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 90.558900][ T4512] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 90.558958][ T4523] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/129/bus supports timestamps until 2038 (0x7fffffff) [pid 4518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4523] <... futex resumed>) = 1 [pid 4523] chdir("./file0") = 0 [pid 4523] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4518] <... futex resumed>) = 0 [pid 4518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4523] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4517] <... futex resumed>) = 0 [pid 4515] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4517] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4515] <... futex resumed>) = 0 [pid 4515] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4530] <... mount resumed>) = 0 [pid 4530] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4523] <... open resumed>) = 4 [pid 4519] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4523] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4520] <... mount resumed>) = 0 [pid 4519] <... mount resumed>) = 0 [pid 4530] <... openat resumed>) = 3 [pid 4530] chdir("./bus" [pid 4523] <... futex resumed>) = 1 [pid 4520] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4519] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4518] <... futex resumed>) = 0 [pid 4523] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4519] <... futex resumed>) = 1 [pid 4518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4517] <... futex resumed>) = 0 [pid 4515] <... futex resumed>) = 0 [pid 4520] <... futex resumed>) = 1 [pid 4518] <... futex resumed>) = 0 [pid 4517] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4515] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4517] <... futex resumed>) = 0 [pid 4515] <... futex resumed>) = 0 [pid 4523] <... openat resumed>) = 5 [pid 4521] <... write resumed>) = 1048576 [pid 4520] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4519] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4517] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4515] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4523] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4518] <... futex resumed>) = 0 [pid 4523] <... futex resumed>) = 1 [pid 4514] <... futex resumed>) = 0 [pid 4521] <... futex resumed>) = 1 [pid 4523] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4521] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4518] <... futex resumed>) = 0 [pid 4514] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4514] <... futex resumed>) = 0 [pid 4514] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4530] <... chdir resumed>) = 0 [pid 4530] ioctl(4, LOOP_CLR_FD [pid 4523] <... write resumed>) = 196608 [pid 4523] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4518] <... futex resumed>) = 0 [pid 4518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4523] <... futex resumed>) = 1 [pid 4523] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4523] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4518] <... futex resumed>) = 0 [pid 4518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4523] <... futex resumed>) = 1 [pid 4523] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4530] <... ioctl resumed>) = 0 [pid 4520] <... open resumed>) = 6 [pid 4519] <... open resumed>) = 6 [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4523] <... open resumed>) = 6 [pid 373] lstat("./129/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./129/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 4530] close(4 [pid 4520] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./129/bus" [pid 4530] <... close resumed>) = 0 [pid 4523] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4520] <... futex resumed>) = 1 [pid 4519] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4517] <... futex resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./129") = 0 [pid 373] mkdir("./130", 0777 [pid 4517] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4523] <... futex resumed>) = 1 [pid 373] <... mkdir resumed>) = 0 [pid 4518] <... futex resumed>) = 0 [pid 4530] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4523] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4520] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4519] <... futex resumed>) = 1 [pid 4518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4517] <... futex resumed>) = 0 [pid 4515] <... futex resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4541 [pid 4521] <... openat resumed>) = 7 [pid 4521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4521] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4519] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4518] <... futex resumed>) = 0 [pid 4517] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4515] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4514] <... futex resumed>) = 0 [pid 4530] <... futex resumed>) = 1 [pid 4528] <... futex resumed>) = 0 [pid 4523] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651./strace-static-x86_64: Process 4541 attached [pid 4541] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4541] chdir("./130") = 0 [pid 4541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4541] setpgid(0, 0) = 0 [pid 4541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4541] write(3, "1000", 4) = 4 [pid 4541] close(3) = 0 [pid 4541] symlink("/dev/binderfs", "./binderfs" [pid 4528] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4514] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4515] <... futex resumed>) = 0 [pid 4518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4541] <... symlink resumed>) = 0 [pid 4541] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4541] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4541] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4542], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4542 [pid 4541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4542 attached [pid 4528] <... futex resumed>) = 0 [pid 4515] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4528] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4514] <... futex resumed>) = 1 [pid 4530] chdir("./file0" [pid 4521] <... futex resumed>) = 0 [pid 4514] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4521] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4530] <... chdir resumed>) = 0 [pid 4530] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4521] <... openat resumed>) = 8 [pid 4530] <... futex resumed>) = 1 [pid 4530] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4528] <... futex resumed>) = 0 [pid 4521] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4528] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4530] <... futex resumed>) = 0 [pid 4528] <... futex resumed>) = 1 [pid 4521] <... futex resumed>) = 1 [pid 4514] <... futex resumed>) = 0 [pid 4530] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4528] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4514] exit_group(0) = ? [pid 4530] <... open resumed>) = 4 [pid 4521] +++ exited with 0 +++ [pid 4542] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4542] memfd_create("syzkaller", 0 [pid 4530] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4514] +++ exited with 0 +++ [pid 4530] <... futex resumed>) = 1 [pid 4528] <... futex resumed>) = 0 [pid 4530] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4528] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4528] <... futex resumed>) = 0 [pid 4530] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4528] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4530] <... openat resumed>) = 5 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4514, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 4530] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4528] <... futex resumed>) = 0 [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 4530] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4528] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4528] <... futex resumed>) = 0 [pid 4530] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4528] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... restart_syscall resumed>) = 0 [pid 374] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4530] <... write resumed>) = 196608 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./128/binderfs") = 0 [pid 374] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4530] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4528] <... futex resumed>) = 0 [pid 4530] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4528] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4530] <... mount resumed>) = 0 [pid 4528] <... futex resumed>) = 0 [pid 4530] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4528] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4530] <... futex resumed>) = 0 [pid 4528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4530] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4528] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.603769][ T4530] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/129/bus supports timestamps until 2038 (0x7fffffff) [ 90.627642][ T4521] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 90.642095][ T4521] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 4530] <... open resumed>) = 6 [pid 4528] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4530] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4542] <... memfd_create resumed>) = 3 [pid 4542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4530] <... futex resumed>) = 1 [pid 4528] <... futex resumed>) = 0 [pid 4530] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4528] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4528] <... futex resumed>) = 0 [pid 4530] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4528] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4530] <... write resumed>) = 1048576 [pid 4530] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4528] <... futex resumed>) = 0 [pid 4542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4530] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4528] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4520] <... write resumed>) = 1048576 [pid 4519] <... write resumed>) = 1048576 [pid 374] <... umount2 resumed>) = 0 [pid 4528] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4520] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4517] <... futex resumed>) = 0 [pid 4517] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4517] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4520] <... futex resumed>) = 1 [pid 4520] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4542] <... write resumed>) = 1048576 [pid 4519] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4542] munmap(0x7f64f6c44000, 1048576 [pid 4523] <... write resumed>) = 1048576 [pid 4519] <... futex resumed>) = 0 [pid 4518] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4515] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4542] <... munmap resumed>) = 0 [pid 4523] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4519] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4518] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4515] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] lstat("./128/bus", [pid 4542] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4523] <... futex resumed>) = 0 [pid 4519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4518] <... futex resumed>) = 0 [pid 4515] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4542] <... openat resumed>) = 4 [pid 4523] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4519] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4518] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4515] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4542] ioctl(4, LOOP_SET_FD, 3 [pid 4520] <... openat resumed>) = 7 [pid 4518] <... mmap resumed>) = 0x7f64f6d23000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4518] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 374] openat(AT_FDCWD, "./128/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4518] <... mprotect resumed>) = 0 [pid 374] <... openat resumed>) = 4 [pid 4528] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4518] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] fstat(4, [pid 4528] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4517] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4528] <... futex resumed>) = 0 [pid 4518] <... clone resumed>, parent_tid=[4543], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4543 [pid 4517] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 374] getdents64(4, [pid 4528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4518] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4517] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [ 90.716650][ T4530] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 90.717107][ T4520] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 90.733791][ T4530] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 90.745087][ T4520] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 4528] <... mmap resumed>) = 0x7f64f6d23000 [pid 4518] <... futex resumed>) = 0 [pid 4517] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(4, [pid 4528] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4517] <... futex resumed>) = 0 [pid 4528] <... mprotect resumed>) = 0 [pid 4518] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4528] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4517] <... mmap resumed>) = 0x7f64f6d23000 [pid 374] close(4 [pid 4517] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 374] <... close resumed>) = 0 [pid 4528] <... clone resumed>, parent_tid=[4544], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4544 [pid 4517] <... mprotect resumed>) = 0 [pid 374] rmdir("./128/bus" [pid 4528] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4517] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... rmdir resumed>) = 0 [pid 4528] <... futex resumed>) = 0 [pid 374] getdents64(3, [pid 4528] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4517] <... clone resumed>, parent_tid=[4545], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4545 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4517] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(3 [pid 4517] <... futex resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 4517] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] rmdir("./128") = 0 [pid 374] mkdir("./129", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4530] <... openat resumed>) = 7 [pid 4520] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4530] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4520] <... futex resumed>) = 0 [pid 4530] <... futex resumed>) = 0 [pid 4520] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4530] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 4543 attached ./strace-static-x86_64: Process 4544 attached ./strace-static-x86_64: Process 4545 attached [pid 4545] set_robust_list(0x7f64f6d439e0, 24 [pid 4543] set_robust_list(0x7f64f6d439e0, 24 [pid 4544] set_robust_list(0x7f64f6d439e0, 24 [pid 4543] <... set_robust_list resumed>) = 0 [pid 4545] <... set_robust_list resumed>) = 0 [pid 4544] <... set_robust_list resumed>) = 0 [pid 4543] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4542] <... ioctl resumed>) = 0 [pid 4545] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4544] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 374] <... openat resumed>) = 3 [pid 4545] <... openat resumed>) = 8 [pid 4544] <... openat resumed>) = 8 [pid 4545] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4544] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4545] <... futex resumed>) = 1 [pid 4544] <... futex resumed>) = 1 [pid 4545] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4544] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4528] <... futex resumed>) = 0 [pid 4517] <... futex resumed>) = 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 4542] close(3 [pid 4517] exit_group(0 [pid 4528] exit_group(0 [pid 4542] <... close resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4545] <... futex resumed>) = ? [pid 4544] <... futex resumed>) = ? [pid 4542] mkdir("./bus", 0777 [pid 4530] <... futex resumed>) = ? [pid 4528] <... exit_group resumed>) = ? [pid 4520] <... futex resumed>) = ? [pid 4519] <... openat resumed>) = 7 [pid 4517] <... exit_group resumed>) = ? [pid 374] close(3 [pid 4545] +++ exited with 0 +++ [pid 4544] +++ exited with 0 +++ [pid 4542] <... mkdir resumed>) = 0 [pid 4530] +++ exited with 0 +++ [pid 4528] +++ exited with 0 +++ [pid 4520] +++ exited with 0 +++ [pid 4517] +++ exited with 0 +++ [pid 374] <... close resumed>) = 0 [pid 4542] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4517, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4528, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 377] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4547 [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... restart_syscall resumed>) = 0 [pid 377] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, [pid 372] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] getdents64(3, [pid 372] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... openat resumed>) = 3 [pid 377] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] fstat(3, [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] lstat("./129/binderfs", [pid 372] getdents64(3, [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] unlink("./129/binderfs" [pid 372] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... unlink resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./129/binderfs" [pid 377] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... unlink resumed>) = 0 [pid 372] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4547 attached [pid 4543] <... openat resumed>) = 7 [pid 4519] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4543] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4543] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4519] <... futex resumed>) = 1 [pid 4519] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4547] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4547] chdir("./129") = 0 [pid 4547] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4547] setpgid(0, 0) = 0 [pid 4547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4547] write(3, "1000", 4) = 4 [pid 4547] close(3) = 0 [pid 4547] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4547] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4547] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4547] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4549], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4549 [pid 4547] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4547] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4549 attached [pid 4549] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4549] memfd_create("syzkaller", 0) = 3 [pid 4549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4515] <... futex resumed>) = 0 [pid 4518] <... futex resumed>) = 0 [pid 4515] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4518] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4519] <... futex resumed>) = 0 [pid 4523] <... futex resumed>) = 0 [pid 4518] <... futex resumed>) = 1 [pid 4515] <... futex resumed>) = 1 [pid 4519] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4523] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4518] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4515] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4519] <... openat resumed>) = 8 [pid 4523] <... openat resumed>) = 8 [pid 4519] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4523] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4519] <... futex resumed>) = 1 [pid 4515] <... futex resumed>) = 0 [pid 4515] exit_group(0 [pid 4523] <... futex resumed>) = 1 [pid 4519] ????( [pid 4518] <... futex resumed>) = 0 [pid 4523] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4519] <... ???? resumed>) = ? [pid 4515] <... exit_group resumed>) = ? [pid 4518] exit_group(0 [pid 4519] +++ exited with 0 +++ [pid 4518] <... exit_group resumed>) = ? [pid 4543] <... futex resumed>) = ? [pid 4523] <... futex resumed>) = ? [pid 4515] +++ exited with 0 +++ [pid 4543] +++ exited with 0 +++ [pid 4523] +++ exited with 0 +++ [pid 4518] +++ exited with 0 +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4515, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4518, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- [pid 376] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... openat resumed>) = 3 [pid 376] <... openat resumed>) = 3 [pid 375] fstat(3, [pid 376] fstat(3, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./131/binderfs", [pid 375] lstat("./129/binderfs", [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./131/binderfs" [pid 375] unlink("./129/binderfs") = 0 [pid 376] <... unlink resumed>) = 0 [pid 375] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4549] <... write resumed>) = 1048576 [pid 4549] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4549] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 90.758970][ T4519] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 90.778458][ T4519] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 90.779820][ T4543] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 90.801612][ T4543] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 4549] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4542] <... mount resumed>) = 0 [pid 4549] close(3) = 0 [pid 4549] mkdir("./bus", 0777 [pid 4542] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 376] <... umount2 resumed>) = 0 [pid 4549] <... mkdir resumed>) = 0 [pid 4549] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 376] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./131/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./131/bus" [pid 4542] <... openat resumed>) = 3 [pid 376] <... rmdir resumed>) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./131" [pid 4542] chdir("./bus" [pid 376] <... rmdir resumed>) = 0 [pid 376] mkdir("./132", 0777 [pid 4542] <... chdir resumed>) = 0 [pid 4542] ioctl(4, LOOP_CLR_FD [pid 376] <... mkdir resumed>) = 0 [ 90.833435][ T4542] ext4 filesystem being mounted at /root/syzkaller.k3ECep/130/bus supports timestamps until 2038 (0x7fffffff) [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4542] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 4542] close(4 [pid 376] ioctl(3, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = 0 [pid 4542] <... close resumed>) = 0 [pid 377] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4542] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] close(3 [pid 4542] <... futex resumed>) = 1 [pid 4541] <... futex resumed>) = 0 [pid 377] lstat("./129/bus", [pid 376] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4542] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] lstat("./129/bus", [pid 4542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4541] <... futex resumed>) = 0 [pid 377] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4542] chdir("./file0" [pid 4541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4552 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 4552 attached [pid 4542] <... chdir resumed>) = 0 [pid 4542] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./129/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4552] set_robust_list(0x55555713c5e0, 24 [pid 4542] <... futex resumed>) = 1 [pid 4541] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 4542] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(4, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4541] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4542] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] openat(AT_FDCWD, "./129/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] getdents64(4, [pid 4542] <... open resumed>) = 4 [pid 4552] <... set_robust_list resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] <... openat resumed>) = 4 [pid 4542] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 372] fstat(4, [pid 4542] <... futex resumed>) = 1 [pid 4541] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4542] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(4 [pid 372] getdents64(4, [pid 4542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4541] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 4542] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] rmdir("./129/bus" [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4552] chdir("./132" [pid 4542] <... openat resumed>) = 5 [pid 4542] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4542] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] <... rmdir resumed>) = 0 [pid 4541] <... futex resumed>) = 0 [pid 372] getdents64(4, [pid 4541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(3, [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4542] <... futex resumed>) = 0 [pid 4541] <... futex resumed>) = 1 [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4542] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] close(3 [pid 372] close(4 [pid 4542] <... write resumed>) = 196608 [pid 372] <... close resumed>) = 0 [pid 372] rmdir("./129/bus" [pid 4542] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 4542] <... futex resumed>) = 1 [pid 4541] <... futex resumed>) = 0 [pid 377] rmdir("./129" [pid 372] getdents64(3, [pid 4542] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4552] <... chdir resumed>) = 0 [pid 4552] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4552] setpgid(0, 0) = 0 [pid 4552] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4552] write(3, "1000", 4) = 4 [pid 4552] close(3) = 0 [pid 4552] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4552] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4552] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4552] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4552] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4555], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4555 [pid 4552] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4552] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4555 attached [pid 4555] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4555] memfd_create("syzkaller", 0) = 3 [pid 4555] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4541] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 4541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] mkdir("./130", 0777 [pid 372] close(3 [pid 4542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... mkdir resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 4542] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 372] rmdir("./129" [pid 4542] <... mount resumed>) = 0 [pid 4555] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 372] <... rmdir resumed>) = 0 [pid 372] mkdir("./130", 0777 [pid 4542] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... mkdir resumed>) = 0 [pid 4542] <... futex resumed>) = 1 [pid 4541] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4542] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4549] <... mount resumed>) = 0 [pid 4549] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4549] chdir("./bus") = 0 [pid 4549] ioctl(4, LOOP_CLR_FD [pid 4555] <... write resumed>) = 1048576 [pid 4555] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4555] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4542] <... open resumed>) = 6 [pid 377] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 4542] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] ioctl(3, LOOP_CLR_FD [pid 372] ioctl(3, LOOP_CLR_FD [pid 4542] <... futex resumed>) = 1 [pid 4541] <... futex resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4542] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 372] close(3 [pid 4541] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 4541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4556 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4557 [pid 375] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./129/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./129/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./129/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./129") = 0 [pid 375] mkdir("./130", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4549] <... ioctl resumed>) = 0 [pid 4555] <... openat resumed>) = 4 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4558 [pid 4555] ioctl(4, LOOP_SET_FD, 3 [pid 4549] close(4./strace-static-x86_64: Process 4558 attached ./strace-static-x86_64: Process 4557 attached ./strace-static-x86_64: Process 4556 attached ) = 0 [pid 4549] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4547] <... futex resumed>) = 0 [pid 4549] chdir("./file0" [pid 4547] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4549] <... chdir resumed>) = 0 [pid 4547] <... futex resumed>) = 0 [pid 4549] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4547] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4549] <... futex resumed>) = 0 [pid 4547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4549] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4547] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4547] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4556] set_robust_list(0x55555713c5e0, 24 [pid 4549] <... open resumed>) = 4 [pid 4557] set_robust_list(0x55555713c5e0, 24 [pid 4556] <... set_robust_list resumed>) = 0 [pid 4549] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4547] <... futex resumed>) = 0 [pid 4549] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4547] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4549] <... openat resumed>) = 5 [pid 4547] <... futex resumed>) = 0 [pid 4549] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4547] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4556] chdir("./130" [pid 4549] <... futex resumed>) = 0 [pid 4547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4557] <... set_robust_list resumed>) = 0 [pid 4556] <... chdir resumed>) = 0 [pid 4549] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4547] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4542] <... write resumed>) = 1048576 [pid 4558] set_robust_list(0x55555713c5e0, 24 [pid 4557] chdir("./130" [pid 4556] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4549] <... write resumed>) = 196608 [pid 4547] <... futex resumed>) = 0 [pid 4542] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4547] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4542] <... futex resumed>) = 1 [pid 4541] <... futex resumed>) = 0 [pid 4542] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4558] <... set_robust_list resumed>) = 0 [ 90.967829][ T4549] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/129/bus supports timestamps until 2038 (0x7fffffff) [pid 4557] <... chdir resumed>) = 0 [pid 4556] <... prctl resumed>) = 0 [pid 4549] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4541] <... futex resumed>) = 0 [pid 4558] chdir("./130" [pid 4557] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4556] setpgid(0, 0 [pid 4549] <... futex resumed>) = 1 [pid 4558] <... chdir resumed>) = 0 [pid 4557] <... prctl resumed>) = 0 [pid 4556] <... setpgid resumed>) = 0 [pid 4549] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4558] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4557] setpgid(0, 0 [pid 4556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4558] <... prctl resumed>) = 0 [pid 4557] <... setpgid resumed>) = 0 [pid 4556] <... openat resumed>) = 3 [pid 4558] setpgid(0, 0 [pid 4557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4556] write(3, "1000", 4 [pid 4558] <... setpgid resumed>) = 0 [pid 4557] <... openat resumed>) = 3 [pid 4556] <... write resumed>) = 4 [pid 4558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4557] write(3, "1000", 4 [pid 4556] close(3 [pid 4558] <... openat resumed>) = 3 [pid 4557] <... write resumed>) = 4 [pid 4556] <... close resumed>) = 0 [pid 4558] write(3, "1000", 4 [pid 4557] close(3 [pid 4556] symlink("/dev/binderfs", "./binderfs" [pid 4558] <... write resumed>) = 4 [pid 4557] <... close resumed>) = 0 [pid 4556] <... symlink resumed>) = 0 [pid 4558] close(3 [pid 4557] symlink("/dev/binderfs", "./binderfs" [pid 4556] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4558] <... close resumed>) = 0 [pid 4557] <... symlink resumed>) = 0 [pid 4556] <... futex resumed>) = 0 [pid 4558] symlink("/dev/binderfs", "./binderfs" [pid 4557] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4556] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4558] <... symlink resumed>) = 0 [pid 4557] <... futex resumed>) = 0 [pid 4556] <... mmap resumed>) = 0x7f64ff044000 [pid 4555] <... ioctl resumed>) = 0 [pid 4547] <... futex resumed>) = 0 [pid 4541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4558] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4556] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4555] close(3 [pid 4547] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4542] <... openat resumed>) = 7 [pid 4558] <... futex resumed>) = 0 [pid 4557] <... mmap resumed>) = 0x7f64ff044000 [pid 4556] <... mprotect resumed>) = 0 [pid 4555] <... close resumed>) = 0 [pid 4549] <... futex resumed>) = 0 [pid 4547] <... futex resumed>) = 1 [pid 4542] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4557] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4556] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4555] mkdir("./bus", 0777 [pid 4549] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4547] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4542] <... futex resumed>) = 1 [pid 4541] <... futex resumed>) = 0 [pid 4558] <... mmap resumed>) = 0x7f64ff044000 [pid 4557] <... mprotect resumed>) = 0 [pid 4555] <... mkdir resumed>) = 0 [pid 4549] <... mount resumed>) = 0 [pid 4542] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4541] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4558] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4557] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4556] <... clone resumed>, parent_tid=[4560], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4560 [pid 4555] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4549] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4542] <... openat resumed>) = 8 [pid 4541] <... futex resumed>) = 0 [pid 4558] <... mprotect resumed>) = 0 [pid 4556] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4549] <... futex resumed>) = 1 [pid 4547] <... futex resumed>) = 0 [pid 4542] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4541] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4549] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4547] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4542] <... futex resumed>) = 0 [pid 4541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4558] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4557] <... clone resumed>, parent_tid=[4561], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4561 [pid 4556] <... futex resumed>) = 0 [pid 4549] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4547] <... futex resumed>) = 0 [pid 4542] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4541] exit_group(0 [pid 4557] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4556] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4549] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4547] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4542] <... futex resumed>) = ? [pid 4541] <... exit_group resumed>) = ? [pid 4558] <... clone resumed>, parent_tid=[4563], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4563 [pid 4557] <... futex resumed>) = 0 [pid 4549] <... open resumed>) = 6 [pid 4542] +++ exited with 0 +++ [pid 4541] +++ exited with 0 +++ [pid 4558] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4557] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4549] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4558] <... futex resumed>) = 0 [pid 4549] <... futex resumed>) = 1 [pid 4547] <... futex resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4541, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 4558] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4549] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4547] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 4549] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4547] <... futex resumed>) = 0 [pid 4549] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4547] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 4563 attached ./strace-static-x86_64: Process 4561 attached ./strace-static-x86_64: Process 4560 attached [pid 4563] set_robust_list(0x7f64ff0649e0, 24 [pid 4561] set_robust_list(0x7f64ff0649e0, 24 [pid 4560] set_robust_list(0x7f64ff0649e0, 24 [pid 4563] <... set_robust_list resumed>) = 0 [pid 4561] <... set_robust_list resumed>) = 0 [pid 4560] <... set_robust_list resumed>) = 0 [pid 373] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4563] memfd_create("syzkaller", 0 [pid 4561] memfd_create("syzkaller", 0 [pid 4560] memfd_create("syzkaller", 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4563] <... memfd_create resumed>) = 3 [pid 4561] <... memfd_create resumed>) = 3 [pid 4560] <... memfd_create resumed>) = 3 [pid 373] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4561] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 373] <... openat resumed>) = 3 [pid 4563] <... mmap resumed>) = 0x7f64f6c44000 [pid 4561] <... mmap resumed>) = 0x7f64f6c44000 [pid 4560] <... mmap resumed>) = 0x7f64f6c44000 [ 91.025482][ T4542] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 91.039703][ T4542] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 373] fstat(3, [pid 4563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4561] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4555] <... mount resumed>) = 0 [pid 4549] <... write resumed>) = 1048576 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4549] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(3, [pid 4549] <... futex resumed>) = 1 [pid 4547] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4549] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4547] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4549] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4547] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4549] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4547] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] lstat("./130/binderfs", [pid 4563] <... write resumed>) = 1048576 [pid 4561] <... write resumed>) = 1048576 [pid 4560] <... write resumed>) = 1048576 [pid 4555] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4563] munmap(0x7f64f6c44000, 1048576 [pid 4561] munmap(0x7f64f6c44000, 1048576 [pid 4560] munmap(0x7f64f6c44000, 1048576 [pid 4555] <... openat resumed>) = 3 [pid 4563] <... munmap resumed>) = 0 [pid 4561] <... munmap resumed>) = 0 [pid 4560] <... munmap resumed>) = 0 [pid 4555] chdir("./bus" [pid 4563] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4561] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4560] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4555] <... chdir resumed>) = 0 [pid 4563] <... openat resumed>) = 4 [pid 4561] <... openat resumed>) = 4 [pid 4560] <... openat resumed>) = 4 [pid 4555] ioctl(4, LOOP_CLR_FD [pid 4563] ioctl(4, LOOP_SET_FD, 3 [pid 4561] ioctl(4, LOOP_SET_FD, 3 [pid 4560] ioctl(4, LOOP_SET_FD, 3 [pid 4555] <... ioctl resumed>) = 0 [pid 4555] close(4 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./130/binderfs") = 0 [pid 4563] <... ioctl resumed>) = 0 [pid 373] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4563] close(3) = 0 [pid 4563] mkdir("./bus", 0777) = 0 [pid 4563] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4561] <... ioctl resumed>) = 0 [pid 4561] close(3) = 0 [pid 4561] mkdir("./bus", 0777) = 0 [pid 4561] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4560] <... ioctl resumed>) = 0 [pid 4555] <... close resumed>) = 0 [pid 4560] close(3 [pid 4555] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4560] <... close resumed>) = 0 [pid 4555] <... futex resumed>) = 1 [pid 4552] <... futex resumed>) = 0 [pid 4560] mkdir("./bus", 0777 [pid 4555] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4552] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4560] <... mkdir resumed>) = 0 [pid 4555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4552] <... futex resumed>) = 0 [pid 4560] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4555] chdir("./file0" [pid 4552] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4555] <... chdir resumed>) = 0 [pid 4555] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4555] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4549] <... openat resumed>) = 7 [pid 4549] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4547] <... futex resumed>) = 0 [pid 4547] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4547] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4549] <... futex resumed>) = 1 [pid 4549] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4549] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4552] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4552] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4555] <... futex resumed>) = 0 [pid 4552] <... futex resumed>) = 1 [pid 4555] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4552] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4547] <... futex resumed>) = 0 [pid 4547] exit_group(0 [pid 4555] <... open resumed>) = 4 [pid 4547] <... exit_group resumed>) = ? [pid 4549] <... futex resumed>) = ? [ 91.081289][ T4555] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/132/bus supports timestamps until 2038 (0x7fffffff) [ 91.099498][ T4549] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 91.114242][ T4549] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 4555] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4552] <... futex resumed>) = 0 [pid 4555] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4552] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4555] <... openat resumed>) = 5 [pid 4552] <... futex resumed>) = 0 [pid 4555] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4552] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4555] <... futex resumed>) = 0 [pid 4552] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4555] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4552] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4552] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4555] <... write resumed>) = 196608 [pid 4555] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4552] <... futex resumed>) = 0 [pid 4552] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4552] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4555] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4555] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4552] <... futex resumed>) = 0 [pid 4552] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4552] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4555] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4563] <... mount resumed>) = 0 [pid 4563] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4563] chdir("./bus") = 0 [pid 4563] ioctl(4, LOOP_CLR_FD [pid 4561] <... mount resumed>) = 0 [pid 4561] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4561] chdir("./bus") = 0 [pid 4561] ioctl(4, LOOP_CLR_FD [pid 4560] <... mount resumed>) = 0 [pid 4560] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 4560] chdir("./bus") = 0 [pid 4560] ioctl(4, LOOP_CLR_FD) = 0 [pid 4560] close(4 [pid 4563] <... ioctl resumed>) = 0 [pid 4555] <... open resumed>) = 6 [pid 4549] +++ exited with 0 +++ [pid 4547] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4547, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 374] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4563] close(4 [pid 4555] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] fstat(3, [pid 373] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4563] <... close resumed>) = 0 [pid 4555] <... futex resumed>) = 1 [pid 4552] <... futex resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4555] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4552] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(3, [pid 373] lstat("./130/bus", [pid 4563] <... futex resumed>) = 1 [pid 4558] <... futex resumed>) = 0 [pid 4555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4552] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4563] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4558] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4555] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4552] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4558] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4563] chdir("./file0" [pid 4558] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] lstat("./129/binderfs", [pid 373] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4563] <... chdir resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] <... openat resumed>) = 4 [pid 4563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4561] <... ioctl resumed>) = 0 [pid 374] unlink("./129/binderfs" [pid 373] fstat(4, [pid 4563] <... futex resumed>) = 1 [pid 4561] close(4 [ 91.139111][ T4563] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/130/bus supports timestamps until 2038 (0x7fffffff) [ 91.139156][ T4561] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/130/bus supports timestamps until 2038 (0x7fffffff) [ 91.157551][ T4560] ext4 filesystem being mounted at /root/syzkaller.43WzWH/130/bus supports timestamps until 2038 (0x7fffffff) [pid 4560] <... close resumed>) = 0 [pid 4558] <... futex resumed>) = 0 [pid 4555] <... write resumed>) = 1048576 [pid 374] <... unlink resumed>) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4563] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4558] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4558] <... futex resumed>) = 0 [pid 373] getdents64(4, [pid 4563] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4558] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4555] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] getdents64(4, [pid 4555] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4560] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4556] <... futex resumed>) = 0 [pid 4563] <... open resumed>) = 4 [pid 4560] chdir("./file0" [pid 4556] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4552] <... futex resumed>) = 0 [pid 4563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4560] <... chdir resumed>) = 0 [pid 4556] <... futex resumed>) = 0 [pid 4552] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4563] <... futex resumed>) = 1 [pid 4560] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4558] <... futex resumed>) = 0 [pid 4556] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4555] <... futex resumed>) = 0 [pid 4552] <... futex resumed>) = 1 [pid 373] close(4 [pid 4563] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4560] <... futex resumed>) = 0 [pid 4558] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4555] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4552] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... close resumed>) = 0 [pid 4563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4560] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4558] <... futex resumed>) = 0 [pid 4556] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./130/bus" [pid 4563] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4560] <... open resumed>) = 4 [pid 4558] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4556] <... futex resumed>) = 0 [pid 4560] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4556] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4563] <... openat resumed>) = 5 [pid 4560] <... futex resumed>) = 0 [pid 4556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4560] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4556] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4560] <... openat resumed>) = 5 [pid 4556] <... futex resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 4563] <... futex resumed>) = 1 [pid 4560] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4558] <... futex resumed>) = 0 [pid 4556] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(3, [pid 4563] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4560] <... futex resumed>) = 0 [pid 4558] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4560] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4558] <... futex resumed>) = 0 [pid 4556] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4560] <... write resumed>) = 196608 [pid 4556] <... futex resumed>) = 0 [pid 4556] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4560] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4556] <... futex resumed>) = 0 [pid 4556] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4556] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4560] <... futex resumed>) = 1 [pid 4560] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4560] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4556] <... futex resumed>) = 0 [pid 4556] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4556] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4560] <... futex resumed>) = 1 [pid 4560] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4560] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4556] <... futex resumed>) = 0 [pid 4556] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4556] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4560] <... futex resumed>) = 1 [pid 4560] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4563] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4558] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] close(3 [pid 4563] <... write resumed>) = 196608 [pid 373] <... close resumed>) = 0 [pid 4563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./130" [pid 4563] <... futex resumed>) = 1 [pid 4558] <... futex resumed>) = 0 [pid 4558] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4558] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... rmdir resumed>) = 0 [pid 4563] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4561] <... close resumed>) = 0 [pid 373] mkdir("./131", 0777 [pid 4563] <... mount resumed>) = 0 [pid 4563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4561] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... mkdir resumed>) = 0 [pid 4560] <... write resumed>) = 1048576 [pid 4560] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4556] <... futex resumed>) = 0 [pid 4556] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4556] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4560] <... futex resumed>) = 1 [pid 4560] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4558] <... futex resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 4563] <... futex resumed>) = 1 [pid 4558] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4557] <... futex resumed>) = 0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 4563] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4561] <... futex resumed>) = 1 [pid 4558] <... futex resumed>) = 0 [pid 4557] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4561] chdir("./file0" [pid 4558] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4557] <... futex resumed>) = 0 [pid 373] close(3 [pid 4561] <... chdir resumed>) = 0 [pid 4557] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4561] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4557] <... futex resumed>) = 0 [pid 4561] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4557] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4561] <... open resumed>) = 4 [pid 4557] <... futex resumed>) = 0 [pid 4561] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4557] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4561] <... futex resumed>) = 0 [pid 4557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4561] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4557] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4561] <... openat resumed>) = 5 [pid 4557] <... futex resumed>) = 0 [pid 4561] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4557] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4561] <... futex resumed>) = 0 [pid 4557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4561] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4557] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4561] <... write resumed>) = 196608 [pid 4557] <... futex resumed>) = 0 [pid 4557] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4561] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4557] <... futex resumed>) = 0 [pid 4557] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4557] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4561] <... futex resumed>) = 1 [pid 4561] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4561] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4557] <... futex resumed>) = 0 [pid 4557] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4557] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4561] <... futex resumed>) = 1 [pid 4561] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4555] <... openat resumed>) = 7 [pid 4555] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4552] <... futex resumed>) = 0 [pid 4552] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4552] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4555] <... futex resumed>) = 1 [pid 4555] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4555] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4552] <... futex resumed>) = 0 [pid 4552] exit_group(0) = ? [pid 4555] <... futex resumed>) = ? [ 91.209580][ T4555] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 91.229712][ T4560] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 91.244192][ T4560] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 4560] <... openat resumed>) = 7 [pid 4560] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4556] <... futex resumed>) = 0 [pid 4556] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4556] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4560] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4560] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4556] <... futex resumed>) = 0 [pid 4556] exit_group(0) = ? [pid 4560] <... futex resumed>) = ? [pid 4563] <... open resumed>) = 6 [pid 4561] <... open resumed>) = 6 [pid 373] <... close resumed>) = 0 [pid 4563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4561] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4563] <... futex resumed>) = 1 [pid 4561] <... futex resumed>) = 1 [pid 4558] <... futex resumed>) = 0 [pid 4557] <... futex resumed>) = 0 [pid 4563] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4561] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4558] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4557] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4574 [pid 4563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4561] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4558] <... futex resumed>) = 0 [pid 4557] <... futex resumed>) = 0 [pid 4563] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4561] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4558] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4557] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4574 attached [pid 4563] <... write resumed>) = 1048576 [pid 4555] +++ exited with 0 +++ [pid 4552] +++ exited with 0 +++ [pid 374] <... umount2 resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4552, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 376] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./132/binderfs") = 0 [pid 376] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4574] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4574] chdir("./131") = 0 [pid 4574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4574] setpgid(0, 0) = 0 [pid 4574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4574] write(3, "1000", 4 [pid 4563] <... futex resumed>) = 1 [pid 4558] <... futex resumed>) = 0 [ 91.252957][ T4555] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 374] lstat("./129/bus", [pid 4574] <... write resumed>) = 4 [pid 4563] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4558] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4574] close(3 [pid 4558] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4574] <... close resumed>) = 0 [pid 4558] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4574] symlink("/dev/binderfs", "./binderfs" [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4574] <... symlink resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 374] openat(AT_FDCWD, "./129/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4574] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... openat resumed>) = 4 [pid 4574] <... futex resumed>) = 0 [pid 4574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] fstat(4, [pid 4574] <... mmap resumed>) = 0x7f64ff044000 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4574] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4574] <... mprotect resumed>) = 0 [pid 374] getdents64(4, [pid 4574] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] lstat("./132/bus", [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, [pid 4574] <... clone resumed>, parent_tid=[4575], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4575 [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4574] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(4 [pid 4574] <... futex resumed>) = 0 [pid 4574] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 376] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... close resumed>) = 0 [pid 374] rmdir("./129/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./129") = 0 [pid 374] mkdir("./130", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4576 [pid 376] <... openat resumed>) = 4 [pid 376] fstat(4, [pid 4560] +++ exited with 0 +++ [pid 4556] +++ exited with 0 +++ [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./132/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./132") = 0 [pid 376] mkdir("./133", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = 0 [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4577 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4556, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 377] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4563] <... openat resumed>) = 7 [pid 377] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 377] <... openat resumed>) = 3 [pid 4558] <... futex resumed>) = 0 [pid 4563] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] fstat(3, [pid 4558] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4558] <... futex resumed>) = 0 [pid 4563] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4558] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4563] <... openat resumed>) = 8 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./130/binderfs", [pid 4563] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4563] <... futex resumed>) = 1 [pid 4558] <... futex resumed>) = 0 [pid 377] unlink("./130/binderfs" [pid 4563] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4558] exit_group(0 [pid 377] <... unlink resumed>) = 0 [pid 4563] <... futex resumed>) = ? [pid 4558] <... exit_group resumed>) = ? [pid 377] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4577 attached [pid 4577] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4577] chdir("./133") = 0 [pid 4577] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4577] setpgid(0, 0) = 0 [pid 4577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4577] write(3, "1000", 4) = 4 [pid 4577] close(3) = 0 [pid 4577] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 4576 attached ./strace-static-x86_64: Process 4575 attached [pid 4561] <... write resumed>) = 1048576 [pid 4557] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4557] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4557] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4557] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4578], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4578 [pid 4557] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4557] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4577] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4577] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4577] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4575] set_robust_list(0x7f64ff0649e0, 24) = 0 ./strace-static-x86_64: Process 4578 attached [pid 4576] set_robust_list(0x55555713c5e0, 24 [pid 4561] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4578] set_robust_list(0x7f64f6d439e0, 24 [pid 4575] memfd_create("syzkaller", 0 [pid 4576] <... set_robust_list resumed>) = 0 [pid 4576] chdir("./130" [pid 4578] <... set_robust_list resumed>) = 0 [pid 4577] <... clone resumed>, parent_tid=[4579], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4579 [pid 4561] <... futex resumed>) = 0 [pid 4575] <... memfd_create resumed>) = 3 [pid 4576] <... chdir resumed>) = 0 [pid 4575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4576] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4561] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4578] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4575] <... mmap resumed>) = 0x7f64f6c44000 [pid 4576] setpgid(0, 0 [pid 4577] <... futex resumed>) = 0 [ 91.281301][ T4563] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 91.303221][ T4563] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 4577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4576] <... setpgid resumed>) = 0 [pid 4576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4576] write(3, "1000", 4) = 4 [pid 4576] close(3) = 0 [pid 4576] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4576] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4576] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4576] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4580], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4580 [pid 4576] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4576] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4579 attached [pid 4579] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4579] memfd_create("syzkaller", 0) = 3 [pid 4579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 4580 attached [pid 4580] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4580] memfd_create("syzkaller", 0) = 3 [pid 4580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4579] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4575] <... write resumed>) = 1048576 [pid 4575] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4580] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4575] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4578] <... openat resumed>) = 7 [pid 4578] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4557] <... futex resumed>) = 0 [pid 4557] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4561] <... futex resumed>) = 0 [pid 4557] <... futex resumed>) = 1 [pid 4561] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4557] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4561] <... openat resumed>) = 8 [pid 4561] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4557] <... futex resumed>) = 0 [pid 4561] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4557] exit_group(0 [pid 4561] <... futex resumed>) = ? [pid 4557] <... exit_group resumed>) = ? [pid 4561] +++ exited with 0 +++ [pid 4580] <... write resumed>) = 1048576 [pid 4579] <... write resumed>) = 1048576 [pid 4578] +++ exited with 0 +++ [pid 4563] +++ exited with 0 +++ [pid 4558] +++ exited with 0 +++ [pid 4557] +++ exited with 0 +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4558, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4557, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 375] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 375] fstat(3, [pid 372] fstat(3, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, [pid 372] getdents64(3, [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./130/binderfs", [pid 372] lstat("./130/binderfs", [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./130/binderfs" [pid 372] unlink("./130/binderfs" [pid 375] <... unlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 375] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4579] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4579] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4579] ioctl(4, LOOP_SET_FD, 3 [pid 4580] munmap(0x7f64f6c44000, 1048576) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 4580] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4575] <... openat resumed>) = 4 [pid 377] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4575] ioctl(4, LOOP_SET_FD, 3 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./130/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./130/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./130") = 0 [pid 377] mkdir("./131", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4579] <... ioctl resumed>) = 0 [pid 4579] close(3) = 0 [pid 4579] mkdir("./bus", 0777) = 0 [pid 4579] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4575] <... ioctl resumed>) = 0 [pid 4575] close(3 [pid 377] <... openat resumed>) = 3 [pid 4575] <... close resumed>) = 0 [pid 4575] mkdir("./bus", 0777 [pid 377] ioctl(3, LOOP_CLR_FD [pid 4575] <... mkdir resumed>) = 0 [pid 4575] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4580] <... openat resumed>) = 4 [pid 4580] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 4583 attached [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4583 [pid 4583] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4583] chdir("./131") = 0 [pid 4583] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4583] setpgid(0, 0) = 0 [pid 4583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4583] write(3, "1000", 4) = 4 [pid 4583] close(3) = 0 [pid 4583] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4583] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4580] <... ioctl resumed>) = 0 [pid 4580] close(3) = 0 [pid 4580] mkdir("./bus", 0777 [pid 4583] <... futex resumed>) = 0 [pid 4583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4580] <... mkdir resumed>) = 0 [pid 4583] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4580] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4583] <... mprotect resumed>) = 0 [ 91.338673][ T4578] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 91.353231][ T4578] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 4583] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4587], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4587 [pid 4583] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4583] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4587 attached [pid 4587] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4587] memfd_create("syzkaller", 0) = 3 [pid 4587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4587] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4587] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4575] <... mount resumed>) = 0 [pid 4575] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4575] chdir("./bus") = 0 [pid 4575] ioctl(4, LOOP_CLR_FD [pid 4579] <... mount resumed>) = 0 [pid 4579] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4579] chdir("./bus") = 0 [pid 4579] ioctl(4, LOOP_CLR_FD [pid 375] <... umount2 resumed>) = 0 [pid 4587] <... openat resumed>) = 4 [pid 4579] <... ioctl resumed>) = 0 [pid 4575] <... ioctl resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 4587] ioctl(4, LOOP_SET_FD, 3 [pid 4579] close(4 [pid 372] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4579] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4579] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] lstat("./130/bus", [pid 4579] <... futex resumed>) = 1 [pid 4577] <... futex resumed>) = 0 [pid 4575] close(4 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4579] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4579] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4579] chdir("./file0" [pid 372] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4579] <... chdir resumed>) = 0 [pid 4577] <... futex resumed>) = 0 [pid 372] <... openat resumed>) = 4 [pid 4579] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] fstat(4, [pid 4579] <... futex resumed>) = 0 [pid 4577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4579] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 4577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 4577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(4) = 0 [pid 4577] <... futex resumed>) = 1 [pid 372] rmdir("./130/bus" [pid 4579] <... futex resumed>) = 0 [pid 4577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... rmdir resumed>) = 0 [pid 372] getdents64(3, [pid 4587] <... ioctl resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./130" [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... rmdir resumed>) = 0 [pid 4575] <... close resumed>) = 0 [pid 372] mkdir("./131", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4591 ./strace-static-x86_64: Process 4591 attached [pid 4591] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4591] chdir("./131") = 0 [pid 4591] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4591] setpgid(0, 0) = 0 [pid 4591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4591] write(3, "1000", 4) = 4 [pid 4591] close(3) = 0 [pid 4591] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4591] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4591] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4591] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4592], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4592 [pid 4591] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4591] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4592 attached [pid 4592] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4592] memfd_create("syzkaller", 0) = 3 [pid 4592] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./130/bus", [pid 4587] close(3 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4587] <... close resumed>) = 0 [pid 4575] <... futex resumed>) = 1 [pid 4574] <... futex resumed>) = 0 [pid 4574] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4587] mkdir("./bus", 0777 [pid 4575] chdir("./file0" [pid 375] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4592] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4574] <... futex resumed>) = 0 [pid 4575] <... chdir resumed>) = 0 [pid 4574] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4587] <... mkdir resumed>) = 0 [pid 4575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4587] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] <... openat resumed>) = 4 [pid 4575] <... futex resumed>) = 1 [pid 4574] <... futex resumed>) = 0 [pid 4574] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fstat(4, [pid 4575] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4574] <... futex resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4574] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 4575] <... open resumed>) = 4 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 4575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4579] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 375] close(4) = 0 [pid 4575] <... futex resumed>) = 1 [pid 4574] <... futex resumed>) = 0 [pid 4574] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4575] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 375] rmdir("./130/bus" [pid 4574] <... futex resumed>) = 0 [pid 4574] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4579] <... open resumed>) = 4 [pid 375] <... rmdir resumed>) = 0 [pid 4575] <... openat resumed>) = 5 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4579] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4575] <... futex resumed>) = 1 [pid 375] close(3 [pid 4574] <... futex resumed>) = 0 [pid 4574] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4575] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 375] <... close resumed>) = 0 [pid 4574] <... futex resumed>) = 0 [ 91.395684][ T4575] ext4 filesystem being mounted at /root/syzkaller.k3ECep/131/bus supports timestamps until 2038 (0x7fffffff) [ 91.415816][ T4579] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/133/bus supports timestamps until 2038 (0x7fffffff) [pid 4574] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] rmdir("./130" [pid 4592] <... write resumed>) = 1048576 [pid 4592] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4579] <... futex resumed>) = 1 [pid 4577] <... futex resumed>) = 0 [pid 4575] <... write resumed>) = 196608 [pid 375] <... rmdir resumed>) = 0 [pid 4577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4592] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4592] ioctl(4, LOOP_SET_FD, 3 [pid 4580] <... mount resumed>) = 0 [pid 4580] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4580] chdir("./bus") = 0 [pid 4580] ioctl(4, LOOP_CLR_FD [pid 4592] <... ioctl resumed>) = 0 [pid 4579] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 375] mkdir("./131", 0777 [pid 4592] close(3 [pid 4575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4592] <... close resumed>) = 0 [pid 4592] mkdir("./bus", 0777) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 4592] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4579] <... openat resumed>) = 5 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4579] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4575] <... futex resumed>) = 1 [pid 4574] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 4574] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4577] <... futex resumed>) = 0 [pid 4574] <... futex resumed>) = 0 [pid 4579] <... futex resumed>) = 1 [pid 4577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4575] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4574] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] ioctl(3, LOOP_CLR_FD [pid 4579] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4577] <... futex resumed>) = 0 [pid 4575] <... mount resumed>) = 0 [pid 4577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4580] <... ioctl resumed>) = 0 [pid 4580] close(4) = 0 [pid 4580] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4576] <... futex resumed>) = 0 [pid 4576] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4576] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4580] <... futex resumed>) = 1 [pid 4580] chdir("./file0") = 0 [pid 4580] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4576] <... futex resumed>) = 0 [pid 4576] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4576] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4580] <... futex resumed>) = 1 [pid 4580] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 375] close(3 [pid 4575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 4574] <... futex resumed>) = 0 [pid 4575] <... futex resumed>) = 1 [pid 4574] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4575] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4574] <... futex resumed>) = 0 [pid 4574] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4580] <... open resumed>) = 4 [pid 4580] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4576] <... futex resumed>) = 0 [pid 4576] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4576] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4580] <... futex resumed>) = 1 [pid 4580] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4596 [pid 4580] <... openat resumed>) = 5 [pid 4575] <... open resumed>) = 6 [pid 4580] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4576] <... futex resumed>) = 0 [pid 4576] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4576] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4580] <... futex resumed>) = 1 [pid 4580] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4579] <... write resumed>) = 196608 [pid 4575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4574] <... futex resumed>) = 0 [pid 4574] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4574] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4575] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4579] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4577] <... futex resumed>) = 0 [pid 4577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4580] <... write resumed>) = 196608 [pid 4579] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4592] <... mount resumed>) = 0 [pid 4592] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4579] <... mount resumed>) = 0 [pid 4592] <... openat resumed>) = 3 [pid 4592] chdir("./bus") = 0 [pid 4592] ioctl(4, LOOP_CLR_FD) = 0 [pid 4592] close(4) = 0 [pid 4592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4591] <... futex resumed>) = 0 [pid 4591] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4591] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4592] <... futex resumed>) = 1 [pid 4592] chdir("./file0" [pid 4579] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4580] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4579] <... futex resumed>) = 1 [pid 4577] <... futex resumed>) = 0 [pid 4577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4576] <... futex resumed>) = 0 [pid 4579] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4577] <... futex resumed>) = 0 [pid 4577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4576] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4576] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4592] <... chdir resumed>) = 0 [pid 4592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4591] <... futex resumed>) = 0 [pid 4591] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4591] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4592] <... futex resumed>) = 1 [pid 4592] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4579] <... open resumed>) = 6 [pid 4580] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4579] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4577] <... futex resumed>) = 0 [pid 4579] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 4577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4592] <... open resumed>) = 4 [pid 4592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4591] <... futex resumed>) = 0 [pid 4591] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4591] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4579] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4580] <... mount resumed>) = 0 [pid 4592] <... futex resumed>) = 1 [pid 4592] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4591] <... futex resumed>) = 0 [pid 4591] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4591] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4592] <... futex resumed>) = 1 [pid 4592] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 4592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4591] <... futex resumed>) = 0 [pid 4591] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4591] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4592] <... futex resumed>) = 1 [pid 4592] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4591] <... futex resumed>) = 0 [pid 4591] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4591] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4592] <... futex resumed>) = 1 [pid 4592] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4591] <... futex resumed>) = 0 [pid 4591] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4591] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4592] <... futex resumed>) = 1 [pid 4592] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4580] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 ./strace-static-x86_64: Process 4596 attached [pid 4580] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4576] <... futex resumed>) = 0 [pid 4576] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4576] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4580] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4596] set_robust_list(0x55555713c5e0, 24 [pid 4580] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4596] <... set_robust_list resumed>) = 0 [pid 4580] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4596] chdir("./131" [pid 4580] <... futex resumed>) = 1 [pid 4596] <... chdir resumed>) = 0 [pid 4580] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4576] <... futex resumed>) = 0 [pid 4576] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4576] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4580] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4596] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4580] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4596] <... prctl resumed>) = 0 [pid 4596] setpgid(0, 0) = 0 [pid 4596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4596] write(3, "1000", 4 [pid 4574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4596] <... write resumed>) = 4 [pid 4574] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 4596] close(3 [pid 4574] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 4596] <... close resumed>) = 0 [pid 4574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4574] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 91.475094][ T4580] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/130/bus supports timestamps until 2038 (0x7fffffff) [ 91.506084][ T4592] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/131/bus supports timestamps until 2038 (0x7fffffff) [pid 4574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4596] symlink("/dev/binderfs", "./binderfs" [pid 4574] <... mmap resumed>) = 0x7f64f6d23000 [pid 4574] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4574] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4596] <... symlink resumed>) = 0 [pid 4596] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4574] <... clone resumed>, parent_tid=[4599], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4599 [pid 4596] <... futex resumed>) = 0 [pid 4574] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4574] <... futex resumed>) = 0 [pid 4574] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4596] <... mmap resumed>) = 0x7f64ff044000 [pid 4596] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4596] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4600], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4600 [pid 4596] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4596] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4575] <... write resumed>) = 1048576 [pid 4592] <... write resumed>) = 1048576 [pid 4592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4591] <... futex resumed>) = 0 [pid 4591] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4591] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4592] <... futex resumed>) = 1 [pid 4592] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4600 attached ./strace-static-x86_64: Process 4599 attached ) = 0 [pid 4600] set_robust_list(0x7f64ff0649e0, 24 [pid 4599] set_robust_list(0x7f64f6d439e0, 24 [pid 4587] <... mount resumed>) = 0 [pid 4579] <... write resumed>) = 1048576 [pid 4577] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4575] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4600] <... set_robust_list resumed>) = 0 [pid 4599] <... set_robust_list resumed>) = 0 [pid 4587] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4579] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4576] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4600] memfd_create("syzkaller", 0 [pid 4599] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4579] <... futex resumed>) = 0 [pid 4577] <... futex resumed>) = 0 [ 91.561111][ T4592] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 91.570863][ T4587] ext4 filesystem being mounted at /root/syzkaller.43WzWH/131/bus supports timestamps until 2038 (0x7fffffff) [ 91.577402][ T4592] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 4580] <... write resumed>) = 1048576 [pid 4576] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4579] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4580] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4576] <... futex resumed>) = 0 [pid 4574] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 4580] <... futex resumed>) = 0 [pid 4576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4580] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4576] <... mmap resumed>) = 0x7f64f6d23000 [pid 4574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4576] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4574] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4576] <... mprotect resumed>) = 0 [pid 4574] <... futex resumed>) = 1 [pid 4576] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4574] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4576] <... clone resumed>, parent_tid=[4603], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4603 [pid 4576] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4576] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4603 attached [pid 4603] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4603] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4591] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4575] <... futex resumed>) = 0 [pid 4591] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4591] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4591] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4604], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4604 [pid 4591] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4591] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4592] <... openat resumed>) = 7 [pid 4592] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4592] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 4604 attached [pid 4604] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4604] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4604] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4591] <... futex resumed>) = 0 [pid 4591] exit_group(0) = ? [pid 4592] <... futex resumed>) = ? [pid 4592] +++ exited with 0 +++ [pid 4604] <... futex resumed>) = ? [pid 4604] +++ exited with 0 +++ [pid 4591] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4591, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 4574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 372] <... restart_syscall resumed>) = 0 [pid 4576] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4575] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4600] <... memfd_create resumed>) = 3 [pid 4576] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4580] <... futex resumed>) = 0 [pid 4576] <... futex resumed>) = 1 [pid 372] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4600] <... mmap resumed>) = 0x7f64f6c44000 [pid 4580] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4576] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4603] <... openat resumed>) = 7 [pid 4580] <... openat resumed>) = 8 [pid 4579] <... openat resumed>) = 7 [pid 372] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4580] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 3 [pid 4580] <... futex resumed>) = 1 [pid 4576] <... futex resumed>) = 0 [pid 372] fstat(3, [pid 4580] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./131/binderfs") = 0 [ 91.598764][ T4599] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 91.600370][ T4603] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 91.613479][ T4579] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 91.630275][ T4603] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 91.640710][ T4579] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 372] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4603] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4603] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4576] exit_group(0 [pid 4603] <... futex resumed>) = ? [pid 4580] <... futex resumed>) = ? [pid 4576] <... exit_group resumed>) = ? [pid 4603] +++ exited with 0 +++ [pid 4600] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4599] <... openat resumed>) = 7 [pid 4587] <... openat resumed>) = 3 [pid 4580] +++ exited with 0 +++ [pid 4579] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4577] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4576] +++ exited with 0 +++ [pid 4575] <... openat resumed>) = 8 [pid 4579] <... futex resumed>) = 0 [pid 4577] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4575] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4576, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4579] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4577] <... futex resumed>) = 0 [pid 4575] <... futex resumed>) = 0 [pid 4579] <... openat resumed>) = 8 [pid 4577] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 4579] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4575] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4579] <... futex resumed>) = 0 [pid 4577] exit_group(0) = ? [pid 4579] +++ exited with 0 +++ [pid 4577] +++ exited with 0 +++ [pid 4600] <... write resumed>) = 1048576 [pid 374] <... restart_syscall resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4577, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 4599] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... restart_syscall resumed>) = 0 [pid 374] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4599] <... futex resumed>) = 0 [pid 374] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... openat resumed>) = 3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] fstat(3, [pid 376] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... openat resumed>) = 3 [pid 374] getdents64(3, [pid 376] fstat(3, [pid 4599] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4587] chdir("./bus" [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4587] <... chdir resumed>) = 0 [pid 376] getdents64(3, [pid 374] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4587] ioctl(4, LOOP_CLR_FD [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] lstat("./130/binderfs", [pid 4574] exit_group(0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4575] <... futex resumed>) = ? [pid 4574] <... exit_group resumed>) = ? [pid 376] lstat("./133/binderfs", [pid 374] unlink("./130/binderfs" [pid 4575] +++ exited with 0 +++ [pid 4587] <... ioctl resumed>) = 0 [pid 4587] close(4 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4587] <... close resumed>) = 0 [pid 4587] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4587] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4600] munmap(0x7f64f6c44000, 1048576 [pid 374] <... unlink resumed>) = 0 [pid 4583] <... futex resumed>) = 0 [pid 376] unlink("./133/binderfs" [pid 4583] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4600] <... munmap resumed>) = 0 [pid 4583] <... futex resumed>) = 1 [pid 376] <... unlink resumed>) = 0 [pid 4600] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4583] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4600] <... openat resumed>) = 4 [pid 4600] ioctl(4, LOOP_SET_FD, 3 [pid 4599] <... futex resumed>) = ? [pid 4587] <... futex resumed>) = 0 [pid 4587] chdir("./file0") = 0 [pid 4587] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4587] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4600] <... ioctl resumed>) = 0 [pid 4600] close(3) = 0 [pid 4600] mkdir("./bus", 0777 [pid 4583] <... futex resumed>) = 0 [pid 4583] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4587] <... futex resumed>) = 0 [pid 4583] <... futex resumed>) = 1 [pid 4587] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4583] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4600] <... mkdir resumed>) = 0 [pid 4587] <... open resumed>) = 4 [pid 4587] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4583] <... futex resumed>) = 0 [pid 4587] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4583] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4600] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4587] <... openat resumed>) = 5 [pid 4587] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4587] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 4583] <... futex resumed>) = 1 [pid 4587] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4583] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 4583] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4587] <... futex resumed>) = 0 [pid 4583] <... futex resumed>) = 1 [pid 4587] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4583] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4587] <... write resumed>) = 196608 [pid 4587] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4583] <... futex resumed>) = 0 [pid 4583] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4583] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4587] <... futex resumed>) = 1 [pid 4587] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4587] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4583] <... futex resumed>) = 0 [pid 4587] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4583] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4583] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4599] +++ exited with 0 +++ [pid 4574] +++ exited with 0 +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4574, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 372] <... umount2 resumed>) = 0 [pid 4587] <... open resumed>) = 6 [pid 372] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4587] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./131/binderfs") = 0 [pid 373] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4587] <... futex resumed>) = 1 [pid 4583] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4587] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4583] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] lstat("./131/bus", [pid 4587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4583] <... futex resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4587] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4583] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./131/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./131") = 0 [ 91.658375][ T4599] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 372] mkdir("./132", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4600] <... mount resumed>) = 0 [pid 4600] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4600] chdir("./bus") = 0 [pid 4600] ioctl(4, LOOP_CLR_FD [pid 4587] <... write resumed>) = 1048576 [pid 4587] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4583] <... futex resumed>) = 0 [pid 4587] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4583] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4583] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./130/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./130/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./130") = 0 [pid 374] mkdir("./131", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4587] <... openat resumed>) = 7 [pid 4587] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4583] <... futex resumed>) = 0 [pid 4583] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4583] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4587] <... futex resumed>) = 1 [pid 4587] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4587] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4583] <... futex resumed>) = 0 [pid 4583] exit_group(0) = ? [pid 4587] <... futex resumed>) = ? [pid 4587] +++ exited with 0 +++ [pid 4583] +++ exited with 0 +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4583, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./131/binderfs") = 0 [ 91.709501][ T4600] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/131/bus supports timestamps until 2038 (0x7fffffff) [ 91.725706][ T4587] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 91.740090][ T4587] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 377] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4600] <... ioctl resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 4600] close(4 [pid 376] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] ioctl(3, LOOP_CLR_FD [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./133/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./133/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./133") = 0 [pid 376] mkdir("./134", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4600] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... umount2 resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4600] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] ioctl(3, LOOP_CLR_FD [pid 374] close(3 [pid 373] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] close(3 [pid 4600] <... futex resumed>) = 1 [pid 4596] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... close resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... close resumed>) = 0 [pid 4600] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4596] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./131/bus", [pid 376] close(3 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] lstat("./131/bus", [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4596] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... close resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4600] chdir("./file0" [pid 4596] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4608 [pid 373] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4609 [pid 4600] <... chdir resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4600] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4610 [pid 373] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4600] <... futex resumed>) = 1 [pid 4596] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 373] <... openat resumed>) = 4 [pid 4600] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4596] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(4, [pid 373] fstat(4, [pid 4600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4596] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4600] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4596] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 373] getdents64(4, [pid 4600] <... open resumed>) = 4 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4600] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 373] getdents64(4, [pid 4600] <... futex resumed>) = 1 [pid 4596] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4600] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4596] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(4 [pid 373] close(4 [pid 4600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4596] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 4600] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4596] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] rmdir("./131/bus" [pid 373] rmdir("./131/bus" [pid 4600] <... openat resumed>) = 5 [pid 377] <... rmdir resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 4600] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(3, [pid 373] getdents64(3, [pid 4600] <... futex resumed>) = 1 [pid 4596] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4600] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4596] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 373] close(3./strace-static-x86_64: Process 4609 attached [pid 4600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4596] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 4609] set_robust_list(0x55555713c5e0, 24 [pid 4600] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4596] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] rmdir("./131" [pid 373] rmdir("./131" [pid 4609] <... set_robust_list resumed>) = 0 [pid 4600] <... write resumed>) = 196608 [pid 377] <... rmdir resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 4600] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] mkdir("./132", 0777 [pid 373] mkdir("./132", 0777./strace-static-x86_64: Process 4610 attached [pid 4609] chdir("./132" [pid 4600] <... futex resumed>) = 1 [pid 4596] <... futex resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 4610] set_robust_list(0x55555713c5e0, 24 [pid 4600] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4596] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4610] <... set_robust_list resumed>) = 0 [pid 4600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4596] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 ./strace-static-x86_64: Process 4608 attached [pid 4610] chdir("./134" [pid 4600] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4596] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] ioctl(3, LOOP_CLR_FD [pid 373] ioctl(3, LOOP_CLR_FD [pid 4610] <... chdir resumed>) = 0 [pid 4608] set_robust_list(0x55555713c5e0, 24 [pid 4600] <... mount resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4610] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4608] <... set_robust_list resumed>) = 0 [pid 4600] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 373] close(3 [pid 4610] <... prctl resumed>) = 0 [pid 4609] <... chdir resumed>) = 0 [pid 4608] chdir("./131" [pid 4600] <... futex resumed>) = 1 [pid 4596] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 4610] setpgid(0, 0 [pid 4608] <... chdir resumed>) = 0 [pid 4600] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4596] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4610] <... setpgid resumed>) = 0 [pid 4608] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4596] <... futex resumed>) = 0 [pid 4610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4608] <... prctl resumed>) = 0 [pid 4600] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4596] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4611 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4612 [pid 4610] <... openat resumed>) = 3 [pid 4608] setpgid(0, 0 [pid 4600] <... open resumed>) = 6 [pid 4610] write(3, "1000", 4 [pid 4608] <... setpgid resumed>) = 0 [pid 4600] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4610] <... write resumed>) = 4 [pid 4608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4600] <... futex resumed>) = 1 [pid 4596] <... futex resumed>) = 0 [pid 4610] close(3 [pid 4609] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4608] <... openat resumed>) = 3 [pid 4600] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4596] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4610] <... close resumed>) = 0 [pid 4608] write(3, "1000", 4 [pid 4600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4596] <... futex resumed>) = 0 [pid 4609] <... prctl resumed>) = 0 [pid 4610] symlink("/dev/binderfs", "./binderfs" [pid 4608] <... write resumed>) = 4 [pid 4600] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4596] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4610] <... symlink resumed>) = 0 [pid 4609] setpgid(0, 0 [pid 4608] close(3 [pid 4610] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4608] <... close resumed>) = 0 [pid 4610] <... futex resumed>) = 0 [pid 4608] symlink("/dev/binderfs", "./binderfs" [pid 4610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4608] <... symlink resumed>) = 0 [pid 4610] <... mmap resumed>) = 0x7f64ff044000 [pid 4608] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4610] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4608] <... futex resumed>) = 0 [pid 4610] <... mprotect resumed>) = 0 [pid 4608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4610] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4608] <... mmap resumed>) = 0x7f64ff044000 [pid 4609] <... setpgid resumed>) = 0 [pid 4608] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4610] <... clone resumed>, parent_tid=[4613], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4613 [pid 4608] <... mprotect resumed>) = 0 [pid 4610] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4608] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4610] <... futex resumed>) = 0 [pid 4610] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4608] <... clone resumed>, parent_tid=[4614], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4614 [pid 4608] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4608] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4612 attached [pid 4612] set_robust_list(0x55555713c5e0, 24 [pid 4609] <... openat resumed>) = 3 [pid 4609] write(3, "1000", 4 [pid 4600] <... write resumed>) = 1048576 [pid 4600] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4596] <... futex resumed>) = 0 [pid 4600] <... futex resumed>) = 1 [pid 4596] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4609] <... write resumed>) = 4 [pid 4600] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4596] <... futex resumed>) = 0 [pid 4612] <... set_robust_list resumed>) = 0 [pid 4609] close(3 [pid 4596] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4612] chdir("./132" [pid 4609] <... close resumed>) = 0 [pid 4612] <... chdir resumed>) = 0 [pid 4609] symlink("/dev/binderfs", "./binderfs" [pid 4612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4612] setpgid(0, 0 [pid 4609] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 4611 attached [pid 4612] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 4613 attached [pid 4612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4611] set_robust_list(0x55555713c5e0, 24 [pid 4609] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4614 attached [pid 4613] set_robust_list(0x7f64ff0649e0, 24 [pid 4612] <... openat resumed>) = 3 [pid 4611] <... set_robust_list resumed>) = 0 [pid 4609] <... futex resumed>) = 0 [pid 4614] set_robust_list(0x7f64ff0649e0, 24 [pid 4613] <... set_robust_list resumed>) = 0 [pid 4612] write(3, "1000", 4 [pid 4611] chdir("./132" [pid 4609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4614] <... set_robust_list resumed>) = 0 [pid 4613] memfd_create("syzkaller", 0 [pid 4612] <... write resumed>) = 4 [pid 4611] <... chdir resumed>) = 0 [pid 4609] <... mmap resumed>) = 0x7f64ff044000 [pid 4614] memfd_create("syzkaller", 0 [pid 4613] <... memfd_create resumed>) = 3 [pid 4612] close(3 [pid 4611] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4609] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4614] <... memfd_create resumed>) = 3 [pid 4613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4612] <... close resumed>) = 0 [pid 4611] <... prctl resumed>) = 0 [pid 4609] <... mprotect resumed>) = 0 [pid 4614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4613] <... mmap resumed>) = 0x7f64f6c44000 [pid 4612] symlink("/dev/binderfs", "./binderfs" [pid 4611] setpgid(0, 0 [pid 4609] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4614] <... mmap resumed>) = 0x7f64f6c44000 [pid 4613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4612] <... symlink resumed>) = 0 [pid 4611] <... setpgid resumed>) = 0 [pid 4609] <... clone resumed>, parent_tid=[4615], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4615 [pid 4614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4612] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4612] <... futex resumed>) = 0 [pid 4611] <... openat resumed>) = 3 [pid 4612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4611] write(3, "1000", 4 [pid 4612] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4611] <... write resumed>) = 4 [pid 4612] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4611] close(3 [pid 4612] <... clone resumed>, parent_tid=[4616], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4616 [pid 4612] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4611] <... close resumed>) = 0 [pid 4612] <... futex resumed>) = 0 [pid 4612] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4611] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4611] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4611] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4611] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4617], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4617 [pid 4611] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4611] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4616 attached [pid 4616] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4616] memfd_create("syzkaller", 0) = 3 [pid 4616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4609] <... futex resumed>) = 0 [pid 4609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4615 attached [pid 4600] <... openat resumed>) = 7 [pid 4615] set_robust_list(0x7f64ff0649e0, 24 [pid 4600] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4615] <... set_robust_list resumed>) = 0 [pid 4600] <... futex resumed>) = 1 [pid 4596] <... futex resumed>) = 0 [pid 4596] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4596] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4615] memfd_create("syzkaller", 0 [pid 4600] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4615] <... memfd_create resumed>) = 3 [pid 4600] <... openat resumed>) = 8 ./strace-static-x86_64: Process 4617 attached [pid 4615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4613] <... write resumed>) = 1048576 [pid 4600] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] set_robust_list(0x7f64ff0649e0, 24 [pid 4615] <... mmap resumed>) = 0x7f64f6c44000 [pid 4614] <... write resumed>) = 1048576 [pid 4600] <... futex resumed>) = 1 [pid 4596] <... futex resumed>) = 0 [pid 4617] <... set_robust_list resumed>) = 0 [pid 4616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4614] munmap(0x7f64f6c44000, 1048576 [pid 4613] munmap(0x7f64f6c44000, 1048576 [pid 4600] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4617] memfd_create("syzkaller", 0 [pid 4614] <... munmap resumed>) = 0 [pid 4613] <... munmap resumed>) = 0 [pid 4596] exit_group(0 [pid 4617] <... memfd_create resumed>) = 3 [pid 4614] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4613] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4600] <... futex resumed>) = ? [pid 4596] <... exit_group resumed>) = ? [pid 4617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4616] <... write resumed>) = 1048576 [pid 4615] <... write resumed>) = 1048576 [pid 4614] <... openat resumed>) = 4 [pid 4613] <... openat resumed>) = 4 [pid 4614] ioctl(4, LOOP_SET_FD, 3 [pid 4615] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4615] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4600] +++ exited with 0 +++ [pid 4617] <... mmap resumed>) = 0x7f64f6c44000 [pid 4616] munmap(0x7f64f6c44000, 1048576 [pid 4614] <... ioctl resumed>) = 0 [pid 4613] ioctl(4, LOOP_SET_FD, 3 [pid 4614] close(3) = 0 [pid 4614] mkdir("./bus", 0777) = 0 [pid 4614] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4596] +++ exited with 0 +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4596, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 4615] <... openat resumed>) = 4 [pid 4615] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... restart_syscall resumed>) = 0 [pid 375] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./131/binderfs") = 0 [pid 375] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4616] <... munmap resumed>) = 0 [pid 4616] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4615] <... ioctl resumed>) = 0 [pid 4615] close(3) = 0 [pid 4615] mkdir("./bus", 0777) = 0 [pid 4615] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4613] <... ioctl resumed>) = 0 [pid 4613] close(3 [pid 375] <... umount2 resumed>) = 0 [pid 4613] <... close resumed>) = 0 [pid 4613] mkdir("./bus", 0777 [pid 375] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4613] <... mkdir resumed>) = 0 [pid 4613] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./131/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./131/bus") = 0 [pid 375] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./131") = 0 [pid 375] mkdir("./132", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4617] <... write resumed>) = 1048576 [pid 4617] munmap(0x7f64f6c44000, 1048576) = 0 [ 91.861374][ T4600] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 91.887331][ T4600] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 4617] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4614] <... mount resumed>) = 0 [pid 4614] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4614] chdir("./bus") = 0 [pid 4614] ioctl(4, LOOP_CLR_FD [pid 4616] <... openat resumed>) = 4 [pid 4617] <... openat resumed>) = 4 [pid 4616] ioctl(4, LOOP_SET_FD, 3 [pid 4617] ioctl(4, LOOP_SET_FD, 3 [pid 4616] <... ioctl resumed>) = 0 [pid 4616] close(3) = 0 [pid 4616] mkdir("./bus", 0777) = 0 [pid 375] <... openat resumed>) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4624 [pid 4616] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4617] <... ioctl resumed>) = 0 [pid 4617] close(3) = 0 [pid 4617] mkdir("./bus", 0777) = 0 [ 91.930398][ T4614] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/131/bus supports timestamps until 2038 (0x7fffffff) [pid 4617] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4614] <... ioctl resumed>) = 0 [ 91.976018][ T4613] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/134/bus supports timestamps until 2038 (0x7fffffff) [ 91.988900][ T4616] ext4 filesystem being mounted at /root/syzkaller.k3ECep/132/bus supports timestamps until 2038 (0x7fffffff) [pid 4614] close(4./strace-static-x86_64: Process 4624 attached [pid 4624] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4624] chdir("./132") = 0 [pid 4624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4624] setpgid(0, 0) = 0 [pid 4624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4624] write(3, "1000", 4) = 4 [pid 4624] close(3) = 0 [pid 4624] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4624] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4624] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4624] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4634], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4634 [pid 4624] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4624] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4634 attached [pid 4634] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4634] memfd_create("syzkaller", 0) = 3 [pid 4634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4634] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4614] <... close resumed>) = 0 [pid 4614] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4608] <... futex resumed>) = 0 [pid 4608] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4608] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4614] chdir("./file0" [pid 4634] <... write resumed>) = 1048576 [pid 4634] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4634] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 4634] ioctl(4, LOOP_SET_FD, 3 [pid 4613] <... mount resumed>) = 0 [pid 4613] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4613] chdir("./bus") = 0 [pid 4613] ioctl(4, LOOP_CLR_FD [pid 4616] <... mount resumed>) = 0 [pid 4616] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4616] chdir("./bus") = 0 [pid 4616] ioctl(4, LOOP_CLR_FD [pid 4615] <... mount resumed>) = 0 [pid 4615] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4615] chdir("./bus") = 0 [pid 4615] ioctl(4, LOOP_CLR_FD [pid 4614] <... chdir resumed>) = 0 [pid 4614] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4614] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4634] <... ioctl resumed>) = 0 [pid 4613] <... ioctl resumed>) = 0 [pid 4616] <... ioctl resumed>) = 0 [pid 4613] close(4 [pid 4616] close(4 [pid 4613] <... close resumed>) = 0 [pid 4634] close(3 [pid 4616] <... close resumed>) = 0 [pid 4613] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4634] <... close resumed>) = 0 [pid 4616] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4613] <... futex resumed>) = 1 [pid 4634] mkdir("./bus", 0777 [pid 4616] <... futex resumed>) = 1 [pid 4613] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4634] <... mkdir resumed>) = 0 [pid 4616] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4634] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4615] <... ioctl resumed>) = 0 [pid 4615] close(4) = 0 [pid 4615] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4609] <... futex resumed>) = 0 [pid 4609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4615] chdir("./file0") = 0 [pid 4615] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4609] <... futex resumed>) = 0 [pid 4615] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4615] <... open resumed>) = 4 [pid 4612] <... futex resumed>) = 0 [pid 4610] <... futex resumed>) = 0 [pid 4609] <... futex resumed>) = 0 [pid 4608] <... futex resumed>) = 0 [pid 4615] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4612] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4610] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4608] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4615] <... futex resumed>) = 0 [pid 4609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4616] <... futex resumed>) = 0 [pid 4615] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4614] <... futex resumed>) = 0 [pid 4613] <... futex resumed>) = 0 [pid 4612] <... futex resumed>) = 1 [pid 4610] <... futex resumed>) = 1 [pid 4609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4608] <... futex resumed>) = 1 [pid 4616] chdir("./file0" [pid 4615] <... openat resumed>) = 5 [pid 4614] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4613] chdir("./file0" [pid 4612] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4610] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4609] <... futex resumed>) = 0 [pid 4608] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4616] <... chdir resumed>) = 0 [pid 4615] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4613] <... chdir resumed>) = 0 [pid 4609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4616] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4615] <... futex resumed>) = 0 [pid 4614] <... open resumed>) = 4 [pid 4613] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4616] <... futex resumed>) = 1 [pid 4615] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4614] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4613] <... futex resumed>) = 1 [pid 4612] <... futex resumed>) = 0 [pid 4610] <... futex resumed>) = 0 [pid 4609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4616] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4615] <... write resumed>) = 196608 [pid 4614] <... futex resumed>) = 1 [pid 4613] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4612] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4610] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4609] <... futex resumed>) = 0 [pid 4608] <... futex resumed>) = 0 [pid 4616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4614] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4612] <... futex resumed>) = 0 [pid 4610] <... futex resumed>) = 0 [pid 4609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4608] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4616] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4613] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4612] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4610] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4608] <... futex resumed>) = 0 [pid 4614] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4608] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4615] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4613] <... open resumed>) = 4 [pid 4614] <... openat resumed>) = 5 [pid 4615] <... futex resumed>) = 1 [pid 4609] <... futex resumed>) = 0 [pid 4616] <... open resumed>) = 4 [pid 4615] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4614] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4613] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4616] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4615] <... mount resumed>) = 0 [pid 4614] <... futex resumed>) = 1 [pid 4613] <... futex resumed>) = 1 [pid 4610] <... futex resumed>) = 0 [pid 4609] <... futex resumed>) = 0 [pid 4608] <... futex resumed>) = 0 [pid 4616] <... futex resumed>) = 1 [pid 4615] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4614] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4613] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4612] <... futex resumed>) = 0 [pid 4610] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4608] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] <... mount resumed>) = 0 [pid 4616] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4615] <... futex resumed>) = 0 [pid 4614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4612] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4610] <... futex resumed>) = 0 [pid 4609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4608] <... futex resumed>) = 0 [pid 4617] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4615] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4614] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4613] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4612] <... futex resumed>) = 0 [pid 4610] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4608] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4617] <... openat resumed>) = 3 [pid 4616] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4615] <... open resumed>) = 6 [pid 4609] <... futex resumed>) = 0 [pid 4615] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4615] <... futex resumed>) = 0 [pid 4609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4615] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] chdir("./bus" [pid 4616] <... openat resumed>) = 5 [pid 4614] <... write resumed>) = 196608 [pid 4613] <... openat resumed>) = 5 [pid 4612] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4609] <... futex resumed>) = 0 [pid 4617] <... chdir resumed>) = 0 [pid 4616] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4614] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4613] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4617] ioctl(4, LOOP_CLR_FD [pid 4616] <... futex resumed>) = 0 [pid 4614] <... futex resumed>) = 1 [pid 4613] <... futex resumed>) = 1 [pid 4612] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4610] <... futex resumed>) = 0 [pid 4608] <... futex resumed>) = 0 [pid 4617] <... ioctl resumed>) = 0 [pid 4616] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4614] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4613] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4612] <... futex resumed>) = 0 [pid 4610] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4608] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4616] <... write resumed>) = 196608 [pid 4613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4617] close(4 [pid 4616] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4612] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4610] <... futex resumed>) = 0 [pid 4608] <... futex resumed>) = 0 [pid 4617] <... close resumed>) = 0 [pid 4616] <... futex resumed>) = 0 [pid 4614] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4613] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4610] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4608] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4617] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4616] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4614] <... mount resumed>) = 0 [pid 4613] <... write resumed>) = 196608 [pid 4612] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] <... futex resumed>) = 1 [pid 4616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4614] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4613] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4612] <... futex resumed>) = 0 [pid 4611] <... futex resumed>) = 0 [pid 4617] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4616] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4614] <... futex resumed>) = 1 [pid 4613] <... futex resumed>) = 1 [pid 4612] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4611] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4610] <... futex resumed>) = 0 [pid 4608] <... futex resumed>) = 0 [pid 4617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4616] <... mount resumed>) = 0 [pid 4614] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4613] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4611] <... futex resumed>) = 0 [pid 4610] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4608] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] chdir("./file0" [pid 4616] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4611] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4610] <... futex resumed>) = 0 [pid 4608] <... futex resumed>) = 0 [pid 4617] <... chdir resumed>) = 0 [pid 4616] <... futex resumed>) = 1 [pid 4614] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4613] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4612] <... futex resumed>) = 0 [pid 4610] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4608] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4617] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4616] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4614] <... open resumed>) = 6 [pid 4613] <... mount resumed>) = 0 [pid 4612] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] <... futex resumed>) = 1 [pid 4616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4614] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4613] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4612] <... futex resumed>) = 0 [pid 4611] <... futex resumed>) = 0 [pid 4617] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4616] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4614] <... futex resumed>) = 1 [pid 4613] <... futex resumed>) = 1 [pid 4612] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4611] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4610] <... futex resumed>) = 0 [pid 4608] <... futex resumed>) = 0 [pid 4617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4616] <... open resumed>) = 6 [pid 4614] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4613] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4611] <... futex resumed>) = 0 [pid 4610] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4608] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4616] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4611] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4610] <... futex resumed>) = 0 [pid 4608] <... futex resumed>) = 0 [pid 4616] <... futex resumed>) = 1 [pid 4614] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4613] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4612] <... futex resumed>) = 0 [pid 4617] <... open resumed>) = 4 [pid 4615] <... write resumed>) = 1048576 [pid 4610] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4608] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4616] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4615] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4609] <... futex resumed>) = 0 [pid 4615] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4609] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4609] <... futex resumed>) = 0 [ 92.018584][ T4615] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/132/bus supports timestamps until 2038 (0x7fffffff) [ 92.037028][ T4617] ext4 filesystem being mounted at /root/syzkaller.43WzWH/132/bus supports timestamps until 2038 (0x7fffffff) [pid 4615] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4609] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4617] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4614] <... write resumed>) = 1048576 [pid 4613] <... open resumed>) = 6 [pid 4612] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] <... futex resumed>) = 1 [pid 4616] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4614] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4613] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4612] <... futex resumed>) = 0 [pid 4611] <... futex resumed>) = 0 [pid 4617] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4614] <... futex resumed>) = 1 [pid 4613] <... futex resumed>) = 1 [pid 4612] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4611] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4610] <... futex resumed>) = 0 [pid 4608] <... futex resumed>) = 0 [pid 4617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4614] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4613] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4611] <... futex resumed>) = 0 [pid 4610] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4608] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4611] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4610] <... futex resumed>) = 0 [pid 4608] <... futex resumed>) = 0 [pid 4617] <... openat resumed>) = 5 [pid 4614] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 92.098561][ T4615] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 92.113385][ T4634] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/132/bus supports timestamps until 2038 (0x7fffffff) [ 92.124789][ T4614] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 92.129208][ T4615] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 4613] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4610] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4608] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4634] <... mount resumed>) = 0 [pid 4617] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4611] <... futex resumed>) = 0 [pid 4617] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4611] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4611] <... futex resumed>) = 0 [pid 4617] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4611] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4617] <... write resumed>) = 196608 [pid 4617] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4611] <... futex resumed>) = 0 [pid 4617] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4611] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4611] <... futex resumed>) = 0 [pid 4617] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4611] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4617] <... mount resumed>) = 0 [pid 4617] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4611] <... futex resumed>) = 0 [pid 4617] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4611] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4611] <... futex resumed>) = 0 [pid 4617] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4611] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4617] <... open resumed>) = 6 [pid 4617] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4611] <... futex resumed>) = 0 [pid 4617] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4611] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4611] <... futex resumed>) = 0 [pid 4617] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4611] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4634] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4617] <... write resumed>) = 1048576 [pid 4615] <... openat resumed>) = 7 [pid 4634] <... openat resumed>) = 3 [pid 4634] chdir("./bus") = 0 [pid 4634] ioctl(4, LOOP_CLR_FD) = 0 [pid 4634] close(4) = 0 [pid 4634] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4624] <... futex resumed>) = 0 [pid 4634] chdir("./file0" [pid 4624] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4634] <... chdir resumed>) = 0 [pid 4624] <... futex resumed>) = 0 [pid 4613] <... write resumed>) = 1048576 [pid 4616] <... write resumed>) = 1048576 [pid 4634] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4624] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4634] <... futex resumed>) = 0 [pid 4624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4634] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4624] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4634] <... open resumed>) = 4 [pid 4624] <... futex resumed>) = 0 [pid 4609] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4634] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4624] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4609] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4634] <... futex resumed>) = 0 [pid 4624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4609] <... futex resumed>) = 0 [pid 4634] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4624] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4634] <... openat resumed>) = 5 [pid 4624] <... futex resumed>) = 0 [pid 4609] <... mmap resumed>) = 0x7f64f6d23000 [pid 4634] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4624] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4609] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4634] <... futex resumed>) = 0 [pid 4624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4617] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4609] <... mprotect resumed>) = 0 [pid 4634] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4624] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] <... futex resumed>) = 1 [pid 4609] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4638 attached [pid 4634] <... write resumed>) = 196608 [pid 4624] <... futex resumed>) = 0 [pid 4617] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4616] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4614] <... openat resumed>) = 7 [pid 4613] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4611] <... futex resumed>) = 0 [pid 4638] set_robust_list(0x7f64f6d439e0, 24 [pid 4624] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4616] <... futex resumed>) = 0 [pid 4614] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4613] <... futex resumed>) = 1 [pid 4612] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4611] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4610] <... futex resumed>) = 0 [pid 4609] <... clone resumed>, parent_tid=[4638], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4638 [pid 4617] <... futex resumed>) = 0 [pid 4616] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4613] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4612] <... futex resumed>) = 0 [pid 4611] <... futex resumed>) = 1 [pid 4610] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4609] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4634] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4609] <... futex resumed>) = 0 [pid 4608] <... futex resumed>) = 0 [pid 4634] <... futex resumed>) = 1 [pid 4609] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4634] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4615] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4615] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4638] <... set_robust_list resumed>) = 0 [pid 4638] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4638] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4609] <... futex resumed>) = 0 [pid 4609] exit_group(0) = ? [pid 4615] <... futex resumed>) = ? [pid 4615] +++ exited with 0 +++ [pid 4638] <... futex resumed>) = ? [pid 4638] +++ exited with 0 +++ [pid 4609] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4609, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 4614] <... futex resumed>) = 1 [pid 4614] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... restart_syscall resumed>) = 0 [pid 372] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./132/binderfs") = 0 [pid 372] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4617] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4624] <... futex resumed>) = 0 [pid 4613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4612] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4611] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4610] <... futex resumed>) = 0 [pid 4608] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4624] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4614] <... futex resumed>) = 0 [ 92.152622][ T4614] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 92.169950][ T4616] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 92.176315][ T4617] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4613] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4610] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4608] <... futex resumed>) = 1 [pid 4634] <... futex resumed>) = 0 [pid 4624] <... futex resumed>) = 1 [pid 4614] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4608] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4634] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4624] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4614] <... openat resumed>) = 8 [pid 4634] <... mount resumed>) = 0 [pid 4634] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4614] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4634] <... futex resumed>) = 1 [pid 4624] <... futex resumed>) = 0 [pid 4634] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4624] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4614] <... futex resumed>) = 1 [pid 4608] <... futex resumed>) = 0 [pid 4634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4624] <... futex resumed>) = 0 [pid 4614] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4608] exit_group(0 [pid 4634] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4624] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4614] <... futex resumed>) = ? [pid 4608] <... exit_group resumed>) = ? [pid 4634] <... open resumed>) = 6 [pid 4617] <... openat resumed>) = 7 [pid 4614] +++ exited with 0 +++ [pid 4613] <... openat resumed>) = 7 [pid 4608] +++ exited with 0 +++ [pid 4617] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4613] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4608, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4617] <... futex resumed>) = 1 [pid 4613] <... futex resumed>) = 1 [pid 4617] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4613] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4634] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4634] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./131/binderfs") = 0 [pid 374] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4611] <... futex resumed>) = 0 [pid 4611] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4617] <... futex resumed>) = 0 [pid 4611] <... futex resumed>) = 1 [pid 4617] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4611] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4617] <... openat resumed>) = 8 [pid 4617] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4611] <... futex resumed>) = 0 [pid 4617] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4611] exit_group(0 [pid 4617] <... futex resumed>) = ? [pid 4611] <... exit_group resumed>) = ? [pid 4624] <... futex resumed>) = 0 [pid 4617] +++ exited with 0 +++ [pid 4611] +++ exited with 0 +++ [pid 4610] <... futex resumed>) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4611, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 4624] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4610] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./132/binderfs") = 0 [pid 377] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4634] <... futex resumed>) = 0 [pid 4624] <... futex resumed>) = 1 [pid 4613] <... futex resumed>) = 0 [pid 4610] <... futex resumed>) = 1 [pid 4634] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4624] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4613] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4610] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4616] <... openat resumed>) = 7 [pid 4616] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4616] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4613] <... openat resumed>) = 8 [pid 4612] <... futex resumed>) = 0 [pid 4613] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4612] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4613] <... futex resumed>) = 1 [pid 4612] <... futex resumed>) = 1 [pid 4610] <... futex resumed>) = 0 [pid 4613] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4612] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4610] exit_group(0 [pid 4613] <... futex resumed>) = ? [pid 4610] <... exit_group resumed>) = ? [pid 4613] +++ exited with 0 +++ [pid 4634] <... write resumed>) = 1048576 [pid 4616] <... futex resumed>) = 0 [pid 4634] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4616] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4634] <... futex resumed>) = 1 [pid 4624] <... futex resumed>) = 0 [pid 4616] <... openat resumed>) = 8 [pid 4624] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4624] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4634] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4616] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4612] <... futex resumed>) = 0 [pid 4612] exit_group(0) = ? [ 92.195725][ T4613] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 92.198483][ T4617] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 92.221063][ T4613] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 92.225354][ T4616] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [pid 4610] +++ exited with 0 +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4610, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 376] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 4634] <... openat resumed>) = 7 [pid 376] fstat(3, [pid 372] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4634] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./132/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 4634] <... futex resumed>) = 1 [pid 4624] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 372] getdents64(4, [pid 4624] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4624] <... futex resumed>) = 0 [pid 372] close(4 [pid 4624] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... close resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] rmdir("./132/bus" [pid 4634] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 376] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... rmdir resumed>) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./132" [pid 4634] <... openat resumed>) = 8 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... rmdir resumed>) = 0 [pid 376] lstat("./134/binderfs", [pid 372] mkdir("./133", 0777 [pid 4634] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4634] <... futex resumed>) = 1 [pid 4624] <... futex resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 4624] exit_group(0 [pid 376] unlink("./134/binderfs" [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4624] <... exit_group resumed>) = ? [pid 376] <... unlink resumed>) = 0 [pid 376] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4616] +++ exited with 0 +++ [pid 4612] +++ exited with 0 +++ [pid 377] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 377] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4612, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./132/bus", [pid 372] ioctl(3, LOOP_CLR_FD [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] fstat(4, [pid 373] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, [pid 373] <... openat resumed>) = 3 [pid 377] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, [pid 373] fstat(3, [pid 377] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] close(4) = 0 [pid 373] getdents64(3, [pid 377] rmdir("./132/bus") = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] close(3) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] rmdir("./132" [pid 373] lstat("./132/binderfs", [pid 377] <... rmdir resumed>) = 0 [pid 377] mkdir("./133", 0777 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 373] unlink("./132/binderfs" [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 373] <... unlink resumed>) = 0 [pid 373] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4634] +++ exited with 0 +++ [pid 4624] +++ exited with 0 +++ [pid 374] <... umount2 resumed>) = 0 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4624, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 375] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... openat resumed>) = 3 [pid 375] fstat(3, [pid 374] lstat("./131/bus", [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, [pid 374] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, [pid 375] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] getdents64(4, [pid 375] lstat("./132/binderfs", [pid 374] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] getdents64(4, [pid 375] unlink("./132/binderfs" [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./131/bus" [pid 375] <... unlink resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 375] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [ 92.260078][ T4634] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 92.274384][ T4634] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 374] rmdir("./131") = 0 [pid 374] mkdir("./132", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 377] <... openat resumed>) = 3 [pid 376] <... umount2 resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] close(3 [pid 374] close(3 [pid 373] lstat("./132/bus", [pid 377] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4639 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4640 [pid 373] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./132/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 376] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] rmdir("./132" [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... rmdir resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4641 ./strace-static-x86_64: Process 4641 attached ./strace-static-x86_64: Process 4640 attached ./strace-static-x86_64: Process 4639 attached [pid 376] lstat("./134/bus", [pid 373] mkdir("./133", 0777 [pid 4641] set_robust_list(0x55555713c5e0, 24 [pid 4639] set_robust_list(0x55555713c5e0, 24 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4641] <... set_robust_list resumed>) = 0 [pid 4639] <... set_robust_list resumed>) = 0 [pid 376] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4641] chdir("./133" [pid 4639] chdir("./133" [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... mkdir resumed>) = 0 [pid 4640] set_robust_list(0x55555713c5e0, 24 [pid 4641] <... chdir resumed>) = 0 [pid 4639] <... chdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4641] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4640] <... set_robust_list resumed>) = 0 [pid 4639] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 376] <... openat resumed>) = 4 [pid 4641] <... prctl resumed>) = 0 [pid 4639] <... prctl resumed>) = 0 [pid 376] fstat(4, [pid 4641] setpgid(0, 0 [pid 4640] chdir("./132" [pid 4639] setpgid(0, 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4641] <... setpgid resumed>) = 0 [pid 4639] <... setpgid resumed>) = 0 [pid 376] getdents64(4, [pid 4641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4640] <... chdir resumed>) = 0 [pid 4639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4641] <... openat resumed>) = 3 [pid 4640] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4639] <... openat resumed>) = 3 [pid 376] getdents64(4, [pid 4641] write(3, "1000", 4 [pid 4640] <... prctl resumed>) = 0 [pid 4639] write(3, "1000", 4 [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4641] <... write resumed>) = 4 [pid 4640] setpgid(0, 0 [pid 4639] <... write resumed>) = 4 [pid 376] close(4 [pid 4641] close(3 [pid 4640] <... setpgid resumed>) = 0 [pid 4639] close(3 [pid 376] <... close resumed>) = 0 [pid 4641] <... close resumed>) = 0 [pid 4639] <... close resumed>) = 0 [pid 376] rmdir("./134/bus" [pid 4641] symlink("/dev/binderfs", "./binderfs" [pid 4640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4639] symlink("/dev/binderfs", "./binderfs" [pid 376] <... rmdir resumed>) = 0 [pid 4641] <... symlink resumed>) = 0 [pid 4639] <... symlink resumed>) = 0 [pid 376] getdents64(3, [pid 4641] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4639] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4641] <... futex resumed>) = 0 [pid 4640] <... openat resumed>) = 3 [pid 4639] <... futex resumed>) = 0 [pid 376] close(3 [pid 4641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4640] write(3, "1000", 4 [pid 4639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] <... close resumed>) = 0 [pid 4641] <... mmap resumed>) = 0x7f64ff044000 [pid 4640] <... write resumed>) = 4 [pid 4639] <... mmap resumed>) = 0x7f64ff044000 [pid 376] rmdir("./134" [pid 4641] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4640] close(3 [pid 4639] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4641] <... mprotect resumed>) = 0 [pid 4640] <... close resumed>) = 0 [pid 4639] <... mprotect resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 4640] symlink("/dev/binderfs", "./binderfs" [pid 4641] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4640] <... symlink resumed>) = 0 [pid 4639] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] mkdir("./135", 0777 [pid 4640] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4640] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 376] <... mkdir resumed>) = 0 [pid 4641] <... clone resumed>, parent_tid=[4642], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4642 [pid 4640] <... mprotect resumed>) = 0 [pid 4641] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4640] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 4644 attached [pid 4641] <... futex resumed>) = 0 [pid 4639] <... clone resumed>, parent_tid=[4643], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4643 [pid 4641] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4640] <... clone resumed>, parent_tid=[4644], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4644 [pid 4639] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4639] <... futex resumed>) = 0 [pid 4640] <... futex resumed>) = 0 [pid 4639] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4643 attached ./strace-static-x86_64: Process 4642 attached [pid 4644] set_robust_list(0x7f64ff0649e0, 24 [pid 4640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4644] <... set_robust_list resumed>) = 0 [pid 4642] set_robust_list(0x7f64ff0649e0, 24 [pid 4643] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4643] memfd_create("syzkaller", 0 [pid 4644] memfd_create("syzkaller", 0 [pid 4643] <... memfd_create resumed>) = 3 [pid 4643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4644] <... memfd_create resumed>) = 3 [pid 4642] <... set_robust_list resumed>) = 0 [pid 4644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4642] memfd_create("syzkaller", 0 [pid 4644] <... mmap resumed>) = 0x7f64f6c44000 [pid 4642] <... memfd_create resumed>) = 3 [pid 4643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4643] <... write resumed>) = 1048576 [pid 4643] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4642] <... mmap resumed>) = 0x7f64f6c44000 [pid 4643] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4644] <... write resumed>) = 1048576 [pid 4644] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4644] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4642] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4642] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4644] <... openat resumed>) = 4 [pid 4643] <... openat resumed>) = 4 [pid 4642] <... openat resumed>) = 4 [pid 376] <... openat resumed>) = 3 [pid 375] <... umount2 resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 375] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] close(3 [pid 375] lstat("./132/bus", [pid 4644] ioctl(4, LOOP_SET_FD, 3 [pid 4643] ioctl(4, LOOP_SET_FD, 3 [pid 4642] ioctl(4, LOOP_SET_FD, 3 [pid 376] <... close resumed>) = 0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4646 ./strace-static-x86_64: Process 4646 attached [pid 4644] <... ioctl resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4646] set_robust_list(0x55555713c5e0, 24 [pid 4644] close(3 [pid 4643] <... ioctl resumed>) = 0 [pid 375] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4646] <... set_robust_list resumed>) = 0 [pid 4644] <... close resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 4646] chdir("./135" [pid 4644] mkdir("./bus", 0777 [pid 375] fstat(4, [pid 4646] <... chdir resumed>) = 0 [pid 4644] <... mkdir resumed>) = 0 [pid 4643] close(3 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4646] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4644] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] getdents64(4, [pid 4646] <... prctl resumed>) = 0 [pid 4643] <... close resumed>) = 0 [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4646] setpgid(0, 0 [pid 375] getdents64(4, [pid 4646] <... setpgid resumed>) = 0 [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4643] mkdir("./bus", 0777 [pid 375] close(4 [pid 4646] <... openat resumed>) = 3 [pid 375] <... close resumed>) = 0 [pid 4646] write(3, "1000", 4 [pid 375] rmdir("./132/bus" [pid 4646] <... write resumed>) = 4 [pid 4643] <... mkdir resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 4646] close(3 [pid 375] getdents64(3, [pid 4646] <... close resumed>) = 0 [pid 4643] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4646] symlink("/dev/binderfs", "./binderfs" [pid 375] close(3 [pid 4646] <... symlink resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 4646] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./132" [pid 4646] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 4646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] mkdir("./133", 0777 [pid 4646] <... mmap resumed>) = 0x7f64ff044000 [pid 4642] <... ioctl resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4646] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4649 [pid 4646] <... mprotect resumed>) = 0 [pid 373] close(3 [pid 4646] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 373] <... close resumed>) = 0 [pid 4646] <... clone resumed>, parent_tid=[4650], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4650 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4646] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4650 attached [pid 4650] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4650] memfd_create("syzkaller", 0 [pid 4646] <... futex resumed>) = 0 [pid 4646] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4651 [pid 4650] <... memfd_create resumed>) = 3 [pid 4650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4642] close(3) = 0 [pid 4642] mkdir("./bus", 0777) = 0 [pid 4642] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue"./strace-static-x86_64: Process 4651 attached [pid 4651] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4651] chdir("./133") = 0 [pid 4651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 4649 attached [pid 4651] setpgid(0, 0) = 0 [pid 4651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4651] write(3, "1000", 4) = 4 [pid 4651] close(3) = 0 [pid 4651] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4651] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4651] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4651] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4656], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4656 [pid 4651] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4651] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4650] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4650] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4650] ioctl(4, LOOP_SET_FD, 3 [pid 4649] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4649] chdir("./133") = 0 [pid 4649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4649] setpgid(0, 0) = 0 [pid 4649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 4656 attached [pid 4649] write(3, "1000", 4) = 4 [pid 4649] close(3) = 0 [pid 4649] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4649] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4649] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4649] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4658], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4658 [pid 4649] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4649] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4656] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4656] memfd_create("syzkaller", 0) = 3 [pid 4656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4650] <... ioctl resumed>) = 0 [pid 4650] close(3) = 0 [pid 4643] <... mount resumed>) = 0 [ 92.523132][ T4643] EXT4-fs mount: 282 callbacks suppressed [ 92.523145][ T4643] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 92.538669][ T4643] ext4 filesystem being mounted at /root/syzkaller.43WzWH/133/bus supports timestamps until 2038 (0x7fffffff) [ 92.553079][ T4644] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 92.553323][ T4642] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 4650] mkdir("./bus", 0777 [pid 4643] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 4658 attached [pid 4658] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4658] memfd_create("syzkaller", 0) = 3 [pid 4656] <... write resumed>) = 1048576 [pid 4650] <... mkdir resumed>) = 0 [pid 4643] <... openat resumed>) = 3 [pid 4642] <... mount resumed>) = 0 [pid 4650] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4643] chdir("./bus" [pid 4658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4656] munmap(0x7f64f6c44000, 1048576 [pid 4644] <... mount resumed>) = 0 [pid 4643] <... chdir resumed>) = 0 [pid 4642] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4643] ioctl(4, LOOP_CLR_FD [pid 4658] <... mmap resumed>) = 0x7f64f6c44000 [pid 4643] <... ioctl resumed>) = 0 [pid 4643] close(4) = 0 [pid 4642] <... openat resumed>) = 3 [pid 4658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4656] <... munmap resumed>) = 0 [pid 4644] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4643] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4639] <... futex resumed>) = 0 [pid 4643] chdir("./file0" [pid 4639] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4643] <... chdir resumed>) = 0 [pid 4639] <... futex resumed>) = 0 [pid 4643] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4639] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4643] <... futex resumed>) = 0 [pid 4639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4643] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4642] chdir("./bus" [pid 4639] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4643] <... open resumed>) = 4 [pid 4642] <... chdir resumed>) = 0 [pid 4639] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4643] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4642] ioctl(4, LOOP_CLR_FD [pid 4639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4643] <... futex resumed>) = 0 [pid 4642] <... ioctl resumed>) = 0 [pid 4639] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4656] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4644] <... openat resumed>) = 3 [pid 4643] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4656] <... openat resumed>) = 4 [pid 4644] chdir("./bus" [pid 4643] <... openat resumed>) = 5 [pid 4642] close(4 [pid 4639] <... futex resumed>) = 0 [pid 4643] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4656] ioctl(4, LOOP_SET_FD, 3 [pid 4644] <... chdir resumed>) = 0 [pid 4643] <... futex resumed>) = 0 [pid 4642] <... close resumed>) = 0 [pid 4639] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4644] ioctl(4, LOOP_CLR_FD [pid 4643] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4642] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4641] <... futex resumed>) = 0 [pid 4658] <... write resumed>) = 1048576 [pid 4642] chdir("./file0" [pid 4641] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4656] <... ioctl resumed>) = 0 [pid 4644] <... ioctl resumed>) = 0 [pid 4641] <... futex resumed>) = 0 [pid 4639] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4658] munmap(0x7f64f6c44000, 1048576 [pid 4656] close(3 [pid 4644] close(4 [pid 4642] <... chdir resumed>) = 0 [pid 4641] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4639] <... futex resumed>) = 1 [pid 4658] <... munmap resumed>) = 0 [pid 4656] <... close resumed>) = 0 [pid 4644] <... close resumed>) = 0 [pid 4643] <... futex resumed>) = 0 [pid 4642] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4639] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4658] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4656] mkdir("./bus", 0777 [pid 4644] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4658] <... openat resumed>) = 4 [pid 4656] <... mkdir resumed>) = 0 [pid 4644] <... futex resumed>) = 1 [pid 4658] ioctl(4, LOOP_SET_FD, 3 [pid 4656] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4644] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4641] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4641] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4643] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 196608 [pid 4642] <... futex resumed>) = 1 [pid 4641] <... futex resumed>) = 0 [pid 4640] <... futex resumed>) = 0 [pid 4643] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4639] <... futex resumed>) = 0 [ 92.571667][ T4642] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/133/bus supports timestamps until 2038 (0x7fffffff) [ 92.580418][ T4644] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/132/bus supports timestamps until 2038 (0x7fffffff) [ 92.612628][ T4650] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 4643] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4639] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4639] <... futex resumed>) = 0 [pid 4643] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4639] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4643] <... mount resumed>) = 0 [pid 4643] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4639] <... futex resumed>) = 0 [pid 4643] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4639] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4639] <... futex resumed>) = 0 [pid 4643] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4639] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4658] <... ioctl resumed>) = 0 [pid 4650] <... mount resumed>) = 0 [pid 4643] <... open resumed>) = 6 [pid 4642] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4641] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=37000000} [pid 4640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4658] close(3 [pid 4650] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4644] <... futex resumed>) = 0 [pid 4643] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4642] <... open resumed>) = 4 [pid 4640] <... futex resumed>) = 1 [pid 4658] <... close resumed>) = 0 [pid 4650] <... openat resumed>) = 3 [pid 4644] chdir("./file0" [pid 4643] <... futex resumed>) = 1 [pid 4642] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4639] <... futex resumed>) = 0 [pid 4658] mkdir("./bus", 0777 [pid 4644] <... chdir resumed>) = 0 [pid 4643] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4642] <... futex resumed>) = 1 [pid 4641] <... futex resumed>) = 0 [pid 4639] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4658] <... mkdir resumed>) = 0 [pid 4644] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4642] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4641] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4639] <... futex resumed>) = 0 [pid 4658] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4644] <... futex resumed>) = 1 [pid 4643] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4641] <... futex resumed>) = 0 [pid 4640] <... futex resumed>) = 0 [pid 4639] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4650] chdir("./bus" [pid 4644] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4642] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4641] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4650] <... chdir resumed>) = 0 [pid 4650] ioctl(4, LOOP_CLR_FD [pid 4644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4640] <... futex resumed>) = 0 [pid 4642] <... openat resumed>) = 5 [pid 4644] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4642] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4650] <... ioctl resumed>) = 0 [pid 4644] <... open resumed>) = 4 [pid 4642] <... futex resumed>) = 1 [pid 4644] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4641] <... futex resumed>) = 0 [pid 4644] <... futex resumed>) = 1 [pid 4642] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4641] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4640] <... futex resumed>) = 0 [pid 4644] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4641] <... futex resumed>) = 0 [pid 4640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4642] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4641] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4640] <... futex resumed>) = 0 [pid 4650] close(4) = 0 [pid 4650] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4650] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4644] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 4644] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4644] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4642] <... write resumed>) = 196608 [pid 4642] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4642] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4641] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4641] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4642] <... futex resumed>) = 0 [pid 4642] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4642] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4641] <... futex resumed>) = 0 [pid 4641] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4641] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4642] <... futex resumed>) = 1 [pid 4642] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4642] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4641] <... futex resumed>) = 0 [pid 4642] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4641] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4646] <... futex resumed>) = 0 [pid 4641] <... futex resumed>) = 0 [pid 4640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4646] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4650] <... futex resumed>) = 0 [pid 4646] <... futex resumed>) = 1 [pid 4641] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4650] chdir("./file0" [pid 4646] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4644] <... futex resumed>) = 0 [pid 4640] <... futex resumed>) = 1 [pid 4650] <... chdir resumed>) = 0 [pid 4644] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4650] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4644] <... write resumed>) = 196608 [pid 4650] <... futex resumed>) = 1 [pid 4646] <... futex resumed>) = 0 [pid 4644] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4650] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4646] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4646] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4650] <... open resumed>) = 4 [pid 4644] <... futex resumed>) = 1 [pid 4643] <... write resumed>) = 1048576 [pid 4640] <... futex resumed>) = 0 [pid 4640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4650] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4644] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4643] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4650] <... futex resumed>) = 1 [pid 4646] <... futex resumed>) = 0 [pid 4644] <... mount resumed>) = 0 [pid 4643] <... futex resumed>) = 1 [pid 4639] <... futex resumed>) = 0 [pid 4650] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4646] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4644] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4643] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 92.622000][ T4650] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/135/bus supports timestamps until 2038 (0x7fffffff) [ 92.655450][ T4656] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 4639] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4650] <... openat resumed>) = 5 [pid 4646] <... futex resumed>) = 0 [pid 4644] <... futex resumed>) = 1 [pid 4642] <... write resumed>) = 1048576 [pid 4640] <... futex resumed>) = 0 [pid 4639] <... futex resumed>) = 0 [pid 4650] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4646] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4644] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4639] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4650] <... futex resumed>) = 0 [pid 4646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4642] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4640] <... futex resumed>) = 0 [pid 4650] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4646] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4644] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4642] <... futex resumed>) = 1 [pid 4641] <... futex resumed>) = 0 [pid 4640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4650] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4646] <... futex resumed>) = 0 [pid 4644] <... open resumed>) = 6 [pid 4642] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4641] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4650] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4646] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4644] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4641] <... futex resumed>) = 0 [pid 4650] <... write resumed>) = 196608 [pid 4644] <... futex resumed>) = 1 [pid 4642] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4641] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4640] <... futex resumed>) = 0 [pid 4658] <... mount resumed>) = 0 [pid 4650] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4644] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4650] <... futex resumed>) = 1 [ 92.677501][ T4643] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 92.682312][ T4658] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 92.700280][ T4658] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/133/bus supports timestamps until 2038 (0x7fffffff) [ 92.704332][ T4642] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4646] <... futex resumed>) = 0 [pid 4644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4640] <... futex resumed>) = 0 [pid 4650] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4646] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4644] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4650] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4646] <... futex resumed>) = 0 [pid 4658] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4650] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4646] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4658] <... openat resumed>) = 3 [pid 4658] chdir("./bus" [pid 4650] <... mount resumed>) = 0 [pid 4658] <... chdir resumed>) = 0 [pid 4658] ioctl(4, LOOP_CLR_FD [pid 4650] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4658] <... ioctl resumed>) = 0 [pid 4658] close(4) = 0 [pid 4658] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4649] <... futex resumed>) = 0 [pid 4658] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4649] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4649] <... futex resumed>) = 0 [pid 4658] chdir("./file0" [pid 4649] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4658] <... chdir resumed>) = 0 [pid 4658] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4649] <... futex resumed>) = 0 [pid 4658] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4649] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4649] <... futex resumed>) = 0 [pid 4658] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4649] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4658] <... open resumed>) = 4 [pid 4650] <... futex resumed>) = 1 [pid 4646] <... futex resumed>) = 0 [pid 4658] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4646] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4658] <... futex resumed>) = 1 [pid 4650] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4649] <... futex resumed>) = 0 [pid 4639] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4649] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4649] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4646] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4639] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4658] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4639] <... futex resumed>) = 0 [pid 4639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4656] <... mount resumed>) = 0 [pid 4658] <... openat resumed>) = 5 [pid 4656] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4658] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4639] <... mmap resumed>) = 0x7f64f6d23000 [pid 4658] <... futex resumed>) = 1 [pid 4639] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4658] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4639] <... mprotect resumed>) = 0 [pid 4650] <... open resumed>) = 6 [pid 4639] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4650] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4649] <... futex resumed>) = 0 [pid 4644] <... write resumed>) = 1048576 [pid 4649] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4644] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4646] <... futex resumed>) = 0 [pid 4650] <... futex resumed>) = 1 [pid 4639] <... clone resumed>, parent_tid=[4669], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4669 [pid 4646] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4639] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4650] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4646] <... futex resumed>) = 0 [pid 4639] <... futex resumed>) = 0 [pid 4646] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4639] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4658] <... futex resumed>) = 0 [pid 4649] <... futex resumed>) = 1 [pid 4644] <... futex resumed>) = 1 [pid 4640] <... futex resumed>) = 0 [pid 4658] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4649] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4644] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4658] <... write resumed>) = 196608 [pid 4640] <... futex resumed>) = 0 [pid 4640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4658] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4649] <... futex resumed>) = 0 [pid 4649] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4649] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4658] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4658] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4649] <... futex resumed>) = 0 [pid 4649] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4649] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4658] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4658] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4649] <... futex resumed>) = 0 [pid 4649] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4649] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 92.712561][ T4656] ext4 filesystem being mounted at /root/syzkaller.k3ECep/133/bus supports timestamps until 2038 (0x7fffffff) [ 92.750935][ T4644] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 92.769243][ T4643] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 4658] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4656] <... openat resumed>) = 3 ./strace-static-x86_64: Process 4669 attached [pid 4656] chdir("./bus" [pid 4643] <... openat resumed>) = 7 [pid 4641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4642] <... openat resumed>) = 7 [pid 4642] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4642] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4669] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4669] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4669] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4639] <... futex resumed>) = 0 [pid 4669] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4656] <... chdir resumed>) = 0 [pid 4656] ioctl(4, LOOP_CLR_FD) = 0 [pid 4656] close(4) = 0 [pid 4656] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4651] <... futex resumed>) = 0 [pid 4650] <... write resumed>) = 1048576 [pid 4644] <... openat resumed>) = 7 [pid 4643] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4641] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4658] <... write resumed>) = 1048576 [pid 4656] chdir("./file0" [pid 4651] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4650] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4643] <... futex resumed>) = 0 [pid 4641] <... futex resumed>) = 1 [pid 4639] exit_group(0 [pid 4643] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4641] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4644] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4651] <... futex resumed>) = 0 [pid 4650] <... futex resumed>) = 1 [pid 4646] <... futex resumed>) = 0 [pid 4643] <... futex resumed>) = ? [pid 4640] <... futex resumed>) = 0 [pid 4639] <... exit_group resumed>) = ? [pid 4669] <... futex resumed>) = ? [pid 4658] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4656] <... chdir resumed>) = 0 [pid 4651] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4644] <... futex resumed>) = 1 [pid 4644] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4650] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4646] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4643] +++ exited with 0 +++ [pid 4640] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4669] +++ exited with 0 +++ [pid 4646] <... futex resumed>) = 0 [pid 4640] <... futex resumed>) = 1 [pid 4639] +++ exited with 0 +++ [pid 4642] <... futex resumed>) = 0 [pid 4642] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4642] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4641] <... futex resumed>) = 0 [pid 4641] exit_group(0) = ? [pid 4642] <... futex resumed>) = ? [pid 4642] +++ exited with 0 +++ [pid 4641] +++ exited with 0 +++ [pid 4658] <... futex resumed>) = 1 [pid 4658] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4656] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4656] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4644] <... futex resumed>) = 0 [pid 4649] <... futex resumed>) = 0 [pid 4644] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4651] <... futex resumed>) = 0 [pid 4649] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4646] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4640] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4651] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4649] <... futex resumed>) = 1 [ 92.774783][ T4642] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 92.780114][ T4644] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 92.801863][ T4650] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4658] <... futex resumed>) = 0 [pid 4656] <... futex resumed>) = 0 [pid 4658] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4651] <... futex resumed>) = 1 [pid 4649] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4639, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4641, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 4656] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4651] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 377] fstat(3, [pid 372] fstat(3, [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, [pid 372] getdents64(3, [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./133/binderfs", [pid 372] lstat("./133/binderfs", [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./133/binderfs" [pid 372] unlink("./133/binderfs" [pid 377] <... unlink resumed>) = 0 [pid 377] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... unlink resumed>) = 0 [pid 372] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4644] <... openat resumed>) = 8 [pid 4644] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4640] <... futex resumed>) = 0 [pid 4644] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4640] exit_group(0 [pid 4644] <... futex resumed>) = ? [pid 4640] <... exit_group resumed>) = ? [pid 4644] +++ exited with 0 +++ [pid 4640] +++ exited with 0 +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4640, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 374] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./132/binderfs") = 0 [pid 374] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4656] <... open resumed>) = 4 [pid 4656] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4651] <... futex resumed>) = 0 [pid 4656] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4651] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4656] <... openat resumed>) = 5 [pid 4651] <... futex resumed>) = 0 [pid 4656] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4651] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4656] <... futex resumed>) = 0 [pid 4651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4656] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4651] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4656] <... write resumed>) = 196608 [pid 4651] <... futex resumed>) = 0 [pid 4651] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4650] <... openat resumed>) = 7 [pid 4650] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4650] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4658] <... openat resumed>) = 7 [pid 4658] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4649] <... futex resumed>) = 0 [pid 4646] <... futex resumed>) = 0 [pid 4658] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4646] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4649] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4650] <... futex resumed>) = 0 [pid 4649] <... futex resumed>) = 0 [pid 4646] <... futex resumed>) = 1 [pid 4649] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4646] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4650] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4650] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4646] <... futex resumed>) = 0 [pid 4650] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4646] exit_group(0 [pid 4650] <... futex resumed>) = ? [pid 4646] <... exit_group resumed>) = ? [pid 4650] +++ exited with 0 +++ [pid 4658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4658] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4658] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4658] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4656] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4656] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4651] <... futex resumed>) = 0 [pid 4649] <... futex resumed>) = 0 [pid 4651] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4649] exit_group(0 [pid 4651] <... futex resumed>) = 1 [pid 4649] <... exit_group resumed>) = ? [pid 4651] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4658] <... futex resumed>) = ? [pid 4656] <... futex resumed>) = 0 [pid 4656] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4656] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4651] <... futex resumed>) = 0 [pid 4656] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4651] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4651] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4646] +++ exited with 0 +++ [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4646, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] lstat("./133/bus", [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] fstat(3, [pid 372] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... openat resumed>) = 4 [pid 376] getdents64(3, [pid 372] fstat(4, [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] getdents64(4, [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] lstat("./135/binderfs", [pid 372] getdents64(4, [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] unlink("./135/binderfs" [pid 372] close(4 [pid 376] <... unlink resumed>) = 0 [ 92.817378][ T4658] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 92.819617][ T4650] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [ 92.832144][ T4658] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [pid 372] <... close resumed>) = 0 [pid 376] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] rmdir("./133/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./133") = 0 [pid 372] mkdir("./134", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4651] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4651] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4651] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4651] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4670 attached , parent_tid=[4670], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4670 [pid 4651] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4651] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4670] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4670] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 4670] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4651] <... futex resumed>) = 0 [pid 4670] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4651] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4658] +++ exited with 0 +++ [pid 4651] <... futex resumed>) = 0 [pid 4649] +++ exited with 0 +++ [pid 4651] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4649, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 4670] <... openat resumed>) = 7 [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 4670] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... restart_syscall resumed>) = 0 [pid 4670] <... futex resumed>) = 1 [pid 4651] <... futex resumed>) = 0 [pid 4670] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4651] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4670] <... openat resumed>) = 8 [pid 4651] <... futex resumed>) = 0 [pid 375] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4670] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4651] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4670] <... futex resumed>) = 0 [pid 4651] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4670] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./133/binderfs") = 0 [pid 375] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4656] <... open resumed>) = 6 [pid 4656] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 4656] <... futex resumed>) = 0 [pid 4651] exit_group(0 [pid 377] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4670] <... futex resumed>) = ? [pid 4651] <... exit_group resumed>) = ? [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] ioctl(3, LOOP_CLR_FD [pid 4656] +++ exited with 0 +++ [pid 377] lstat("./133/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./133/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./133") = 0 [pid 377] mkdir("./134", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 374] <... umount2 resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4670] +++ exited with 0 +++ [pid 4651] +++ exited with 0 +++ [pid 377] <... openat resumed>) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4671 ./strace-static-x86_64: Process 4671 attached [pid 4671] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4671] chdir("./134") = 0 [pid 4671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4671] setpgid(0, 0) = 0 [pid 4671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4671] write(3, "1000", 4) = 4 [pid 4671] close(3) = 0 [pid 4671] symlink("/dev/binderfs", "./binderfs" [pid 376] <... umount2 resumed>) = 0 [pid 372] close(3 [pid 4671] <... symlink resumed>) = 0 [pid 4671] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4671] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4671] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4672], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4672 [pid 4671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4672 attached [pid 4672] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4672] memfd_create("syzkaller", 0) = 3 [pid 4672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 375] <... umount2 resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 374] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4673 [pid 374] lstat("./132/bus", [pid 376] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] lstat("./135/bus", [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] lstat("./133/bus", [pid 374] <... openat resumed>) = 4 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... openat resumed>) = 4 [pid 375] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] fstat(4, [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] getdents64(4, [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4 [pid 376] getdents64(4, [pid 375] <... openat resumed>) = 4 [pid 374] <... close resumed>) = 0 ./strace-static-x86_64: Process 4673 attached [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 375] fstat(4, [pid 374] rmdir("./132/bus" [pid 4673] set_robust_list(0x55555713c5e0, 24) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 376] getdents64(4, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] getdents64(4, [pid 376] close(4 [pid 374] close(3 [pid 376] <... close resumed>) = 0 [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] rmdir("./135/bus" [pid 375] getdents64(4, [pid 374] <... close resumed>) = 0 [pid 4673] chdir("./134" [pid 374] rmdir("./132" [pid 4673] <... chdir resumed>) = 0 [pid 4673] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 4673] setpgid(0, 0) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] getdents64(3, [pid 374] mkdir("./133", 0777 [pid 375] close(4 [pid 4673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4673] write(3, "1000", 4) = 4 [pid 374] <... mkdir resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 375] <... close resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4673] close(3) = 0 [pid 4673] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4673] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 375] rmdir("./133/bus" [pid 374] <... openat resumed>) = 3 [pid 376] <... close resumed>) = 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 4673] <... futex resumed>) = 0 [pid 4673] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] <... rmdir resumed>) = 0 [pid 376] rmdir("./135" [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] getdents64(3, [pid 4673] <... mmap resumed>) = 0x7f64ff044000 [pid 4673] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4673] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4674], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4674 [pid 4673] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4673] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4672] <... write resumed>) = 1048576 [pid 4672] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4672] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 4672] ioctl(4, LOOP_SET_FD, 3 [pid 374] close(3 [pid 376] <... rmdir resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] mkdir("./136", 0777 [pid 4672] <... ioctl resumed>) = 0 [pid 4672] close(3) = 0 [pid 4672] mkdir("./bus", 0777 [pid 375] close(3 [pid 4672] <... mkdir resumed>) = 0 [pid 4672] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 376] <... mkdir resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 375] rmdir("./133" [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4676 [pid 375] <... rmdir resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 375] mkdir("./134", 0777 [pid 376] ioctl(3, LOOP_CLR_FD [pid 375] <... mkdir resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 376] close(3 [pid 375] <... openat resumed>) = 3 [pid 376] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 4677 attached [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4677 [pid 375] close(3 [pid 4677] set_robust_list(0x55555713c5e0, 24) = 0 [pid 375] <... close resumed>) = 0 [pid 4677] chdir("./136") = 0 [pid 4677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4677] setpgid(0, 0) = 0 [pid 4677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4677] write(3, "1000", 4) = 4 [pid 4677] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4677] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4677] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4677] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4677] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4678 [pid 4677] <... clone resumed>, parent_tid=[4679], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4679 [pid 4677] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4677] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4678 attached [pid 4678] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4678] chdir("./134") = 0 [pid 4678] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4678] setpgid(0, 0) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4651, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4678] write(3, "1000", 4) = 4 [pid 4678] close(3) = 0 [pid 4678] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4678] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4678] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4678] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4681], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4681 [pid 4678] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4678] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4681 attached [pid 4681] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4681] memfd_create("syzkaller", 0) = 3 [pid 4681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 373] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 4676 attached [pid 373] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4676] set_robust_list(0x55555713c5e0, 24 [pid 373] lstat("./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4676] <... set_robust_list resumed>) = 0 [pid 373] unlink("./133/binderfs") = 0 [pid 4681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4676] chdir("./133" [pid 373] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4676] <... chdir resumed>) = 0 [pid 4676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4681] <... write resumed>) = 1048576 [pid 4681] munmap(0x7f64f6c44000, 1048576 [pid 4676] setpgid(0, 0 [pid 4681] <... munmap resumed>) = 0 [pid 4676] <... setpgid resumed>) = 0 [pid 4676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4681] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 4681] ioctl(4, LOOP_SET_FD, 3 [pid 4676] <... openat resumed>) = 3 [pid 4676] write(3, "1000", 4./strace-static-x86_64: Process 4679 attached ./strace-static-x86_64: Process 4674 attached ) = 4 [pid 4676] close(3 [pid 4674] set_robust_list(0x7f64ff0649e0, 24 [pid 4679] set_robust_list(0x7f64ff0649e0, 24 [pid 4676] <... close resumed>) = 0 [pid 4674] <... set_robust_list resumed>) = 0 [pid 4676] symlink("/dev/binderfs", "./binderfs" [pid 4679] <... set_robust_list resumed>) = 0 [pid 4676] <... symlink resumed>) = 0 [pid 4674] memfd_create("syzkaller", 0 [pid 4676] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4679] memfd_create("syzkaller", 0 [pid 4676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4676] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4676] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4679] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 4684 attached [pid 4684] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4684] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4676] <... clone resumed>, parent_tid=[4684], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4684 [pid 4674] <... memfd_create resumed>) = 3 [pid 4679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4676] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4684] <... futex resumed>) = 0 [pid 4676] <... futex resumed>) = 1 [pid 4676] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4679] <... mmap resumed>) = 0x7f64f6c44000 [pid 4674] <... mmap resumed>) = 0x7f64f6c44000 [pid 4684] memfd_create("syzkaller", 0) = 3 [pid 4684] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4684] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4681] <... ioctl resumed>) = 0 [pid 4681] close(3) = 0 [pid 4681] mkdir("./bus", 0777) = 0 [pid 4681] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4684] <... write resumed>) = 1048576 [pid 4679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4674] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4684] munmap(0x7f64f6c44000, 1048576 [pid 4679] <... write resumed>) = 1048576 [pid 4674] <... write resumed>) = 1048576 [pid 4684] <... munmap resumed>) = 0 [pid 4684] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4674] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4679] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4674] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4679] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4672] <... mount resumed>) = 0 [pid 4672] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4672] chdir("./bus") = 0 [ 93.119807][ T4672] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 93.129088][ T4672] ext4 filesystem being mounted at /root/syzkaller.43WzWH/134/bus supports timestamps until 2038 (0x7fffffff) [pid 4672] ioctl(4, LOOP_CLR_FD [pid 4684] <... openat resumed>) = 4 [pid 4679] <... openat resumed>) = 4 [pid 4674] <... openat resumed>) = 4 [pid 4672] <... ioctl resumed>) = 0 [pid 4684] ioctl(4, LOOP_SET_FD, 3 [pid 4674] ioctl(4, LOOP_SET_FD, 3 [pid 4679] ioctl(4, LOOP_SET_FD, 3 [pid 4672] close(4 [pid 4684] <... ioctl resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 4684] close(3 [pid 373] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4684] <... close resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4684] mkdir("./bus", 0777 [pid 373] lstat("./133/bus", [pid 4684] <... mkdir resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4684] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 4681] <... mount resumed>) = 0 [pid 4679] <... ioctl resumed>) = 0 [pid 4674] <... ioctl resumed>) = 0 [pid 4672] <... close resumed>) = 0 [pid 373] rmdir("./133/bus" [pid 4681] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4681] chdir("./bus") = 0 [pid 4681] ioctl(4, LOOP_CLR_FD) = 0 [pid 4681] close(4) = 0 [pid 4681] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... rmdir resumed>) = 0 [pid 4681] <... futex resumed>) = 1 [pid 4678] <... futex resumed>) = 0 [pid 4681] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4678] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4678] <... futex resumed>) = 0 [pid 4681] chdir("./file0" [pid 4678] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4681] <... chdir resumed>) = 0 [pid 4681] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4678] <... futex resumed>) = 0 [pid 4681] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4678] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4678] <... futex resumed>) = 0 [pid 4681] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4678] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(3, [pid 4681] <... open resumed>) = 4 [pid 4681] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4678] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4681] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4678] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 4681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4678] <... futex resumed>) = 0 [pid 4681] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4678] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... close resumed>) = 0 [pid 4681] <... openat resumed>) = 5 [pid 4681] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./133" [pid 4681] <... futex resumed>) = 1 [pid 4678] <... futex resumed>) = 0 [pid 4681] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4678] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4678] <... futex resumed>) = 0 [pid 4681] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4678] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4681] <... write resumed>) = 196608 [pid 373] <... rmdir resumed>) = 0 [pid 373] mkdir("./134", 0777 [pid 4681] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4678] <... futex resumed>) = 0 [pid 4681] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4678] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4678] <... futex resumed>) = 0 [pid 4681] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4678] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... mkdir resumed>) = 0 [pid 4681] <... mount resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4681] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4678] <... futex resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 4681] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4678] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] ioctl(3, LOOP_CLR_FD [pid 4681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4678] <... futex resumed>) = 0 [pid 4681] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4678] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4681] <... open resumed>) = 6 [pid 4681] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4678] <... futex resumed>) = 0 [pid 4681] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4678] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 4681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4678] <... futex resumed>) = 0 [pid 4681] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4678] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... close resumed>) = 0 [pid 4679] close(3 [pid 4674] close(3 [pid 4672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4679] <... close resumed>) = 0 ./strace-static-x86_64: Process 4691 attached [pid 4691] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4691] chdir("./134") = 0 [pid 4691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4691] setpgid(0, 0) = 0 [pid 4691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4691] write(3, "1000", 4) = 4 [pid 4691] close(3) = 0 [pid 4691] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4691] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4691 [pid 4679] mkdir("./bus", 0777 [pid 4672] <... futex resumed>) = 1 [pid 4671] <... futex resumed>) = 0 [pid 4671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4691] <... futex resumed>) = 0 [pid 4674] <... close resumed>) = 0 [pid 4672] chdir("./file0" [pid 4679] <... mkdir resumed>) = 0 [pid 4674] mkdir("./bus", 0777 [pid 4681] <... write resumed>) = 1048576 [pid 4672] <... chdir resumed>) = 0 [pid 4681] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4678] <... futex resumed>) = 0 [pid 4678] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4678] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4679] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4674] <... mkdir resumed>) = 0 [pid 4672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4681] <... futex resumed>) = 1 [pid 4681] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4672] <... futex resumed>) = 1 [pid 4671] <... futex resumed>) = 0 [pid 4671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4672] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4671] <... futex resumed>) = 0 [ 93.165412][ T4681] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 93.174323][ T4681] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/134/bus supports timestamps until 2038 (0x7fffffff) [pid 4671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4674] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4672] <... open resumed>) = 4 [pid 4672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4671] <... futex resumed>) = 0 [pid 4672] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4672] <... openat resumed>) = 5 [pid 4671] <... futex resumed>) = 0 [pid 4672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4672] <... futex resumed>) = 0 [pid 4671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4672] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4672] <... write resumed>) = 196608 [pid 4671] <... futex resumed>) = 0 [pid 4671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4671] <... futex resumed>) = 0 [pid 4671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4672] <... futex resumed>) = 1 [pid 4672] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4671] <... futex resumed>) = 0 [pid 4671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4672] <... futex resumed>) = 1 [pid 4672] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 4672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4671] <... futex resumed>) = 0 [pid 4671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4672] <... futex resumed>) = 1 [pid 4672] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4691] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4691] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4693], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4693 [pid 4691] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4691] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4693 attached [pid 4693] set_robust_list(0x7f64ff0649e0, 24) = 0 [ 93.222013][ T4684] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 93.230439][ T4681] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 93.247170][ T4681] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 93.247272][ T4679] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 4693] memfd_create("syzkaller", 0 [pid 4681] <... openat resumed>) = 7 [pid 4678] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4671] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4684] <... mount resumed>) = 0 [pid 4678] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4671] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4678] <... futex resumed>) = 0 [pid 4671] <... futex resumed>) = 0 [pid 4678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4678] <... mmap resumed>) = 0x7f64f6d23000 [pid 4671] <... mmap resumed>) = 0x7f64f6d23000 [pid 4678] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4671] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4678] <... mprotect resumed>) = 0 [pid 4671] <... mprotect resumed>) = 0 [pid 4678] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4671] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4693] <... memfd_create resumed>) = 3 [pid 4684] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4681] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4678] <... clone resumed>, parent_tid=[4697], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4697 [pid 4671] <... clone resumed>, parent_tid=[4696], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4696 [pid 4678] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4671] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4678] <... futex resumed>) = 0 [pid 4671] <... futex resumed>) = 0 [pid 4678] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4671] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4696 attached ./strace-static-x86_64: Process 4697 attached [pid 4697] set_robust_list(0x7f64f6d439e0, 24 [pid 4696] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4697] <... set_robust_list resumed>) = 0 [pid 4696] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4697] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4693] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4681] <... futex resumed>) = 0 [pid 4693] <... mmap resumed>) = 0x7f64f6c44000 [pid 4697] <... openat resumed>) = 8 [pid 4697] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4678] <... futex resumed>) = 0 [pid 4681] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4678] exit_group(0) = ? [pid 4697] <... futex resumed>) = ? [pid 4697] +++ exited with 0 +++ [pid 4693] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4684] <... openat resumed>) = 3 [pid 4681] <... futex resumed>) = ? [pid 4672] <... write resumed>) = 1048576 [pid 4672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4672] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4693] <... write resumed>) = 1048576 [pid 4684] chdir("./bus" [pid 4681] +++ exited with 0 +++ [pid 4679] <... mount resumed>) = 0 [pid 4678] +++ exited with 0 +++ [pid 4693] munmap(0x7f64f6c44000, 1048576 [pid 4684] <... chdir resumed>) = 0 [pid 4693] <... munmap resumed>) = 0 [pid 4684] ioctl(4, LOOP_CLR_FD [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4678, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4693] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4684] <... ioctl resumed>) = 0 [pid 375] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4693] <... openat resumed>) = 4 [pid 4684] close(4 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4693] ioctl(4, LOOP_SET_FD, 3 [pid 4684] <... close resumed>) = 0 [pid 375] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4684] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 3 [pid 4684] <... futex resumed>) = 1 [pid 4676] <... futex resumed>) = 0 [pid 375] fstat(3, [pid 4684] chdir("./file0" [pid 4676] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4684] <... chdir resumed>) = 0 [pid 4676] <... futex resumed>) = 0 [pid 375] getdents64(3, [pid 4684] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4676] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4684] <... futex resumed>) = 0 [pid 4676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4684] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4676] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4696] <... openat resumed>) = 7 [pid 4684] <... open resumed>) = 4 [pid 4679] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4676] <... futex resumed>) = 0 [pid 375] lstat("./134/binderfs", [pid 4693] <... ioctl resumed>) = 0 [ 93.256420][ T4684] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/133/bus supports timestamps until 2038 (0x7fffffff) [ 93.280282][ T4696] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 93.286214][ T4679] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/136/bus supports timestamps until 2038 (0x7fffffff) [ 93.299904][ T4696] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [pid 4676] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4696] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4693] close(3 [pid 4684] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4679] <... openat resumed>) = 3 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4693] <... close resumed>) = 0 [pid 4684] <... futex resumed>) = 1 [pid 4676] <... futex resumed>) = 0 [pid 375] unlink("./134/binderfs" [pid 4693] mkdir("./bus", 0777 [pid 4684] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4676] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... unlink resumed>) = 0 [pid 4693] <... mkdir resumed>) = 0 [pid 4684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4676] <... futex resumed>) = 0 [pid 375] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4693] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4684] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4676] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4696] <... futex resumed>) = 0 [pid 4684] <... openat resumed>) = 5 [pid 4671] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4696] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4684] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4679] chdir("./bus" [pid 4671] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4684] <... futex resumed>) = 1 [pid 4679] <... chdir resumed>) = 0 [pid 4676] <... futex resumed>) = 0 [pid 4671] <... futex resumed>) = 1 [pid 4672] <... futex resumed>) = 0 [pid 4684] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4679] ioctl(4, LOOP_CLR_FD [pid 4676] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4679] <... ioctl resumed>) = 0 [pid 4676] <... futex resumed>) = 0 [pid 4684] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4679] close(4 [pid 4676] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4684] <... write resumed>) = 196608 [pid 4679] <... close resumed>) = 0 [pid 4684] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4679] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4684] <... futex resumed>) = 1 [pid 4679] <... futex resumed>) = 1 [pid 4677] <... futex resumed>) = 0 [pid 4676] <... futex resumed>) = 0 [pid 4684] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4679] chdir("./file0" [pid 4677] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4676] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4679] <... chdir resumed>) = 0 [pid 4677] <... futex resumed>) = 0 [pid 4676] <... futex resumed>) = 0 [pid 4684] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4679] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4677] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4676] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4684] <... mount resumed>) = 0 [pid 4679] <... futex resumed>) = 0 [pid 4677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4684] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4679] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4677] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4684] <... futex resumed>) = 1 [pid 4679] <... open resumed>) = 4 [pid 4677] <... futex resumed>) = 0 [pid 4676] <... futex resumed>) = 0 [pid 4684] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4679] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4677] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4676] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4679] <... futex resumed>) = 0 [pid 4677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4676] <... futex resumed>) = 0 [pid 4684] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4679] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4677] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4676] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4679] <... openat resumed>) = 5 [pid 4677] <... futex resumed>) = 0 [pid 4679] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4677] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4679] <... futex resumed>) = 0 [pid 4677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4679] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4677] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4679] <... write resumed>) = 196608 [pid 4677] <... futex resumed>) = 0 [pid 4679] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4677] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4679] <... futex resumed>) = 0 [pid 4677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4679] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4677] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4679] <... mount resumed>) = 0 [pid 4677] <... futex resumed>) = 0 [pid 4679] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4677] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4679] <... futex resumed>) = 0 [pid 4677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4679] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4677] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4677] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4671] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4672] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4674] <... mount resumed>) = 0 [pid 4674] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4672] <... openat resumed>) = 8 [pid 4674] <... openat resumed>) = 3 [pid 4674] chdir("./bus") = 0 [pid 4674] ioctl(4, LOOP_CLR_FD [pid 4672] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4671] <... futex resumed>) = 0 [pid 4672] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4671] exit_group(0 [pid 4672] <... futex resumed>) = ? [pid 4671] <... exit_group resumed>) = ? [pid 4696] <... futex resumed>) = ? [pid 4672] +++ exited with 0 +++ [pid 4693] <... mount resumed>) = 0 [pid 4693] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4693] chdir("./bus") = 0 [pid 4693] ioctl(4, LOOP_CLR_FD [pid 4696] +++ exited with 0 +++ [pid 4693] <... ioctl resumed>) = 0 [pid 4684] <... open resumed>) = 6 [pid 4674] <... ioctl resumed>) = 0 [pid 4671] +++ exited with 0 +++ [pid 375] <... umount2 resumed>) = 0 [pid 4693] close(4 [pid 4674] close(4 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4671, si_uid=0, si_status=0, si_utime=1, si_stime=4} --- [pid 375] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4693] <... close resumed>) = 0 [pid 4674] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4693] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4674] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./134/bus", [pid 4693] <... futex resumed>) = 1 [pid 4691] <... futex resumed>) = 0 [pid 4674] <... futex resumed>) = 1 [pid 4673] <... futex resumed>) = 0 [pid 377] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4693] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4691] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4674] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4673] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4691] <... futex resumed>) = 0 [pid 4674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4673] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4693] chdir("./file0" [pid 4691] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4674] chdir("./file0" [pid 4673] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 3 [pid 4693] <... chdir resumed>) = 0 [pid 4684] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4679] <... open resumed>) = 6 [pid 4676] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4674] <... chdir resumed>) = 0 [pid 377] fstat(3, [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4693] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4674] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4693] <... futex resumed>) = 1 [pid 4691] <... futex resumed>) = 0 [pid 4684] <... futex resumed>) = 0 [pid 4676] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4674] <... futex resumed>) = 1 [pid 4673] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 4679] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 4 [pid 4693] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4691] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4684] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4679] <... futex resumed>) = 0 [pid 4677] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4676] <... futex resumed>) = 0 [pid 4674] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4673] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] fstat(4, [pid 4693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4691] <... futex resumed>) = 0 [pid 4674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4673] <... futex resumed>) = 0 [pid 377] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4693] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4691] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4674] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4673] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] getdents64(4, [pid 4693] <... open resumed>) = 4 [pid 4674] <... open resumed>) = 4 [pid 377] lstat("./134/binderfs", [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4693] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4674] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] getdents64(4, [pid 4693] <... futex resumed>) = 1 [pid 4691] <... futex resumed>) = 0 [pid 4674] <... futex resumed>) = 1 [pid 4673] <... futex resumed>) = 0 [pid 377] unlink("./134/binderfs" [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4693] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4691] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4674] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4673] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... unlink resumed>) = 0 [pid 375] close(4 [pid 4693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4691] <... futex resumed>) = 0 [pid 4674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4673] <... futex resumed>) = 0 [pid 377] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... close resumed>) = 0 [ 93.316656][ T4674] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 93.332355][ T4674] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/134/bus supports timestamps until 2038 (0x7fffffff) [ 93.345977][ T4693] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 93.354893][ T4693] ext4 filesystem being mounted at /root/syzkaller.k3ECep/134/bus supports timestamps until 2038 (0x7fffffff) [pid 4693] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4691] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4679] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4677] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4676] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4674] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4673] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] rmdir("./134/bus" [pid 4693] <... openat resumed>) = 5 [pid 4679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4677] <... futex resumed>) = 0 [pid 4674] <... openat resumed>) = 5 [pid 375] <... rmdir resumed>) = 0 [pid 4693] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4674] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(3, [pid 4693] <... futex resumed>) = 1 [pid 4691] <... futex resumed>) = 0 [pid 4674] <... futex resumed>) = 1 [pid 4673] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4693] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4691] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4674] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4673] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 4693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4691] <... futex resumed>) = 0 [pid 4674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4673] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 4693] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4691] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4674] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4673] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] rmdir("./134" [pid 4693] <... write resumed>) = 196608 [pid 4679] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4677] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4674] <... write resumed>) = 196608 [pid 375] <... rmdir resumed>) = 0 [pid 4693] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4674] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] mkdir("./135", 0777 [pid 4693] <... futex resumed>) = 1 [pid 4691] <... futex resumed>) = 0 [pid 4674] <... futex resumed>) = 1 [pid 4673] <... futex resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 4693] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4691] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4674] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4673] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4691] <... futex resumed>) = 0 [pid 4674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4673] <... futex resumed>) = 0 [pid 4693] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4691] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4674] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4673] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4693] <... mount resumed>) = 0 [pid 4674] <... mount resumed>) = 0 [pid 4693] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4674] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4693] <... futex resumed>) = 1 [pid 4691] <... futex resumed>) = 0 [pid 4674] <... futex resumed>) = 1 [pid 4673] <... futex resumed>) = 0 [pid 4693] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4691] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4674] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4673] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4691] <... futex resumed>) = 0 [pid 4674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4673] <... futex resumed>) = 0 [pid 4693] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4691] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4674] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4673] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4684] <... write resumed>) = 1048576 [pid 4684] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4676] <... futex resumed>) = 0 [pid 4676] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4676] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4684] <... futex resumed>) = 1 [pid 4684] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4679] <... write resumed>) = 1048576 [pid 4679] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4677] <... futex resumed>) = 0 [pid 4677] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4677] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4679] <... futex resumed>) = 1 [pid 4679] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 377] <... umount2 resumed>) = 0 [pid 4693] <... open resumed>) = 6 [pid 4691] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4674] <... open resumed>) = 6 [pid 4673] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 375] <... openat resumed>) = 3 [pid 4693] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4691] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4674] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4673] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] ioctl(3, LOOP_CLR_FD [pid 4693] <... futex resumed>) = 0 [pid 4691] <... futex resumed>) = 0 [pid 4674] <... futex resumed>) = 0 [pid 4673] <... futex resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4693] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4674] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4673] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] close(3 [pid 4691] <... mmap resumed>) = 0x7f64f6d23000 [pid 4684] <... openat resumed>) = 7 [pid 4679] <... openat resumed>) = 7 [pid 4673] <... mmap resumed>) = 0x7f64f6d23000 [pid 377] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... close resumed>) = 0 [pid 4691] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4673] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4691] <... mprotect resumed>) = 0 [pid 4673] <... mprotect resumed>) = 0 [pid 4691] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4676] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4673] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4703 [pid 4676] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4691] <... clone resumed>, parent_tid=[4704], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4704 [pid 4676] <... futex resumed>) = 0 [pid 4673] <... clone resumed>, parent_tid=[4705], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4705 [pid 4691] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4673] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4691] <... futex resumed>) = 0 [pid 4676] <... mmap resumed>) = 0x7f64f6d23000 [pid 4673] <... futex resumed>) = 0 [pid 4691] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4676] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4673] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4676] <... mprotect resumed>) = 0 [pid 4676] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4706], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4706 [pid 4676] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4676] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./134/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./134/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./134") = 0 [pid 377] mkdir("./135", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4707 [pid 4679] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4677] <... futex resumed>) = 0 [pid 4684] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4677] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4679] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4677] <... futex resumed>) = 0 [pid 4677] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4684] <... futex resumed>) = 0 [pid 4679] <... openat resumed>) = 8 [pid 4684] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4679] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4677] <... futex resumed>) = 0 [pid 4679] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4677] exit_group(0) = ? [pid 4679] <... futex resumed>) = ? ./strace-static-x86_64: Process 4707 attached ./strace-static-x86_64: Process 4706 attached ./strace-static-x86_64: Process 4705 attached ./strace-static-x86_64: Process 4704 attached ./strace-static-x86_64: Process 4703 attached [pid 4679] +++ exited with 0 +++ [pid 4677] +++ exited with 0 +++ [pid 4707] set_robust_list(0x55555713c5e0, 24 [pid 4704] set_robust_list(0x7f64f6d439e0, 24 [pid 4703] set_robust_list(0x55555713c5e0, 24 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4677, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 4707] <... set_robust_list resumed>) = 0 [pid 4705] set_robust_list(0x7f64f6d439e0, 24 [pid 4704] <... set_robust_list resumed>) = 0 [pid 4703] <... set_robust_list resumed>) = 0 [pid 4707] chdir("./135" [pid 4705] <... set_robust_list resumed>) = 0 [pid 4704] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4703] chdir("./135" [pid 4707] <... chdir resumed>) = 0 [pid 4706] set_robust_list(0x7f64f6d439e0, 24 [pid 4705] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4703] <... chdir resumed>) = 0 [pid 376] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4707] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4703] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4707] <... prctl resumed>) = 0 [pid 4703] <... prctl resumed>) = 0 [pid 376] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4707] setpgid(0, 0 [pid 4703] setpgid(0, 0 [pid 376] <... openat resumed>) = 3 [pid 4707] <... setpgid resumed>) = 0 [pid 4703] <... setpgid resumed>) = 0 [pid 376] fstat(3, [pid 4707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4707] <... openat resumed>) = 3 [pid 4703] <... openat resumed>) = 3 [pid 376] getdents64(3, [pid 4707] write(3, "1000", 4 [pid 4703] write(3, "1000", 4 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4707] <... write resumed>) = 4 [pid 4703] <... write resumed>) = 4 [pid 376] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4707] close(3 [pid 4703] close(3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4707] <... close resumed>) = 0 [pid 4703] <... close resumed>) = 0 [pid 376] lstat("./136/binderfs", [pid 4707] symlink("/dev/binderfs", "./binderfs" [pid 4703] symlink("/dev/binderfs", "./binderfs" [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4707] <... symlink resumed>) = 0 [pid 4703] <... symlink resumed>) = 0 [pid 376] unlink("./136/binderfs" [pid 4707] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4706] <... set_robust_list resumed>) = 0 [pid 4703] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... unlink resumed>) = 0 [pid 4707] <... futex resumed>) = 0 [pid 4703] <... futex resumed>) = 0 [pid 376] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4706] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4707] <... mmap resumed>) = 0x7f64ff044000 [pid 4703] <... mmap resumed>) = 0x7f64ff044000 [pid 4707] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4703] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4707] <... mprotect resumed>) = 0 [pid 4703] <... mprotect resumed>) = 0 [pid 4707] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4706] <... openat resumed>) = 8 [pid 4703] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4707] <... clone resumed>, parent_tid=[4708], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4708 [pid 4703] <... clone resumed>, parent_tid=[4709], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4709 [pid 4707] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4703] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4707] <... futex resumed>) = 0 [pid 4706] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4703] <... futex resumed>) = 0 [pid 4707] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4706] <... futex resumed>) = 1 [pid 4703] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4676] <... futex resumed>) = 0 [pid 4676] exit_group(0) = ? [pid 4684] <... futex resumed>) = ? [pid 4684] +++ exited with 0 +++ [ 93.424366][ T4684] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 93.437985][ T4679] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 93.438650][ T4684] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [ 93.452434][ T4679] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem ./strace-static-x86_64: Process 4709 attached ./strace-static-x86_64: Process 4708 attached [pid 4709] set_robust_list(0x7f64ff0649e0, 24 [pid 4708] set_robust_list(0x7f64ff0649e0, 24 [pid 4709] <... set_robust_list resumed>) = 0 [pid 4708] <... set_robust_list resumed>) = 0 [pid 4709] memfd_create("syzkaller", 0 [pid 4708] memfd_create("syzkaller", 0 [pid 4709] <... memfd_create resumed>) = 3 [pid 4708] <... memfd_create resumed>) = 3 [pid 4709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4709] <... mmap resumed>) = 0x7f64f6c44000 [pid 4708] <... mmap resumed>) = 0x7f64f6c44000 [pid 4705] <... write resumed>) = 1048576 [pid 4704] <... write resumed>) = 1048576 [pid 4704] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4691] <... futex resumed>) = 0 [pid 4704] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4691] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4693] <... futex resumed>) = 0 [pid 4691] <... futex resumed>) = 1 [pid 4693] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4691] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4708] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4705] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4709] <... write resumed>) = 1048576 [pid 4708] <... write resumed>) = 1048576 [pid 4705] <... futex resumed>) = 1 [pid 4673] <... futex resumed>) = 0 [pid 4705] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4673] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4673] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4708] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4708] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4709] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4709] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4674] <... futex resumed>) = 0 [pid 4674] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4693] <... openat resumed>) = 7 [pid 4693] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4691] <... futex resumed>) = 0 [pid 4691] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4691] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4693] <... futex resumed>) = 1 [pid 4693] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4693] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4691] <... futex resumed>) = 0 [pid 4691] exit_group(0 [pid 4704] <... futex resumed>) = ? [pid 4691] <... exit_group resumed>) = ? [pid 4704] +++ exited with 0 +++ [pid 4693] <... futex resumed>) = ? [pid 4674] <... openat resumed>) = 7 [pid 4674] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4674] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4708] <... openat resumed>) = 4 [pid 4708] ioctl(4, LOOP_SET_FD, 3 [pid 4673] <... futex resumed>) = 0 [pid 4673] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 376] <... umount2 resumed>) = 0 [pid 4674] <... futex resumed>) = 0 [pid 4673] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4709] <... openat resumed>) = 4 [pid 4708] <... ioctl resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./136/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./136/bus") = 0 [pid 376] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./136") = 0 [pid 376] mkdir("./137", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4711 [pid 4674] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 4674] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4674] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4709] ioctl(4, LOOP_SET_FD, 3 [pid 4706] +++ exited with 0 +++ [pid 4676] +++ exited with 0 +++ [pid 4673] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 4711 attached [pid 4708] close(3 [pid 4693] +++ exited with 0 +++ [pid 4691] +++ exited with 0 +++ [pid 4673] exit_group(0 [pid 4708] <... close resumed>) = 0 [pid 4705] <... futex resumed>) = ? [pid 4673] <... exit_group resumed>) = ? [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4676, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 4708] mkdir("./bus", 0777 [pid 4705] +++ exited with 0 +++ [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4691, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4708] <... mkdir resumed>) = 0 [pid 4674] <... futex resumed>) = ? [pid 374] <... restart_syscall resumed>) = 0 [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 4708] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 373] <... restart_syscall resumed>) = 0 [pid 374] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... openat resumed>) = 3 [pid 373] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] fstat(3, [pid 373] <... openat resumed>) = 3 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] fstat(3, [pid 374] getdents64(3, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] getdents64(3, [pid 374] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] lstat("./133/binderfs", [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] lstat("./134/binderfs", [pid 374] unlink("./133/binderfs" [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] <... unlink resumed>) = 0 [pid 373] unlink("./134/binderfs" [pid 374] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... unlink resumed>) = 0 [pid 373] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4711] set_robust_list(0x55555713c5e0, 24 [pid 4709] <... ioctl resumed>) = 0 [pid 4711] <... set_robust_list resumed>) = 0 [pid 4711] chdir("./137") = 0 [pid 4711] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4709] close(3 [pid 4711] setpgid(0, 0) = 0 [pid 4709] <... close resumed>) = 0 [pid 4711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4709] mkdir("./bus", 0777 [pid 4711] <... openat resumed>) = 3 [pid 4711] write(3, "1000", 4 [pid 4709] <... mkdir resumed>) = 0 [pid 4711] <... write resumed>) = 4 [pid 4711] close(3) = 0 [pid 4711] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4711] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4709] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4711] <... futex resumed>) = 0 [pid 4711] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4711] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4711] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4714], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4714 [pid 4711] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4711] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4674] +++ exited with 0 +++ [pid 4673] +++ exited with 0 +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4673, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- ./strace-static-x86_64: Process 4714 attached [pid 4714] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4714] memfd_create("syzkaller", 0 [pid 372] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./134/binderfs") = 0 [pid 372] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4714] <... memfd_create resumed>) = 3 [pid 4714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [ 93.518591][ T4693] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 93.532003][ T4674] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 93.532937][ T4693] EXT4-fs error (device loop1) in ext4_free_blocks:5569: Corrupt filesystem [ 93.547670][ T4674] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [pid 4714] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4714] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4714] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4708] <... mount resumed>) = 0 [pid 4708] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4708] chdir("./bus") = 0 [pid 4708] ioctl(4, LOOP_CLR_FD [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./134/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./134/bus") = 0 [pid 373] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./134") = 0 [pid 373] mkdir("./135", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4709] <... mount resumed>) = 0 [pid 4709] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4709] chdir("./bus") = 0 [pid 4709] ioctl(4, LOOP_CLR_FD [pid 4714] <... openat resumed>) = 4 [pid 4708] <... ioctl resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 4714] ioctl(4, LOOP_SET_FD, 3 [pid 372] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./134/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./134/bus") = 0 [pid 372] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./134") = 0 [pid 372] mkdir("./135", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 93.603776][ T4708] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 93.609590][ T4709] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 93.613246][ T4708] ext4 filesystem being mounted at /root/syzkaller.43WzWH/135/bus supports timestamps until 2038 (0x7fffffff) [ 93.621835][ T4709] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/135/bus supports timestamps until 2038 (0x7fffffff) [pid 4708] close(4 [pid 4709] <... ioctl resumed>) = 0 [pid 4709] close(4 [pid 374] <... umount2 resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 374] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] ioctl(3, LOOP_CLR_FD [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4714] <... ioctl resumed>) = 0 [pid 374] lstat("./133/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./133/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./133") = 0 [pid 374] mkdir("./134", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4714] close(3) = 0 [pid 4714] mkdir("./bus", 0777) = 0 [pid 4714] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4709] <... close resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] close(3 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... close resumed>) = 0 [pid 374] close(3 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4719 [pid 4709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 3 [pid 4709] <... futex resumed>) = 1 [pid 4703] <... futex resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4720 [pid 4709] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4703] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] ioctl(3, LOOP_CLR_FD [pid 4709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4703] <... futex resumed>) = 0 [pid 4709] chdir("./file0" [pid 4703] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4709] <... chdir resumed>) = 0 [pid 372] close(3 [pid 4709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4708] <... close resumed>) = 0 [pid 4703] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 4709] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4703] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4708] <... futex resumed>) = 1 [pid 4707] <... futex resumed>) = 0 [pid 4703] <... futex resumed>) = 0 [pid 4709] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4708] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 4719 attached [pid 4707] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4703] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4707] <... futex resumed>) = 1 [pid 4719] set_robust_list(0x55555713c5e0, 24 [pid 4707] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4719] <... set_robust_list resumed>) = 0 [pid 4709] <... open resumed>) = 4 [pid 4709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4708] <... futex resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4722 [pid 4709] <... futex resumed>) = 1 [pid 4703] <... futex resumed>) = 0 [pid 4709] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4708] chdir("./file0" [pid 4703] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4709] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4708] <... chdir resumed>) = 0 [pid 4703] <... futex resumed>) = 0 [pid 4709] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4703] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4709] <... openat resumed>) = 5 [pid 4708] <... futex resumed>) = 1 [pid 4707] <... futex resumed>) = 0 [pid 4709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4708] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4707] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4703] <... futex resumed>) = 0 [pid 4709] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 4707] <... futex resumed>) = 0 [pid 4703] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4707] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4703] <... futex resumed>) = 0 [pid 4709] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4703] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4719] chdir("./135") = 0 [pid 4719] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4719] setpgid(0, 0) = 0 [pid 4719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4719] write(3, "1000", 4) = 4 [pid 4719] close(3) = 0 [pid 4709] <... write resumed>) = 196608 [pid 4719] symlink("/dev/binderfs", "./binderfs" [pid 4709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4719] <... symlink resumed>) = 0 [pid 4709] <... futex resumed>) = 1 [pid 4708] <... open resumed>) = 4 [pid 4703] <... futex resumed>) = 0 [pid 4719] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4703] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4719] <... futex resumed>) = 0 [pid 4703] <... futex resumed>) = 0 [pid 4719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4703] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4722 attached [pid 4719] <... mmap resumed>) = 0x7f64ff044000 [pid 4722] set_robust_list(0x55555713c5e0, 24 [pid 4719] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE [pid 4722] <... set_robust_list resumed>) = 0 [pid 4719] <... mprotect resumed>) = 0 [pid 4722] chdir("./135" [pid 4719] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4722] <... chdir resumed>) = 0 [pid 4709] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4722] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4719] <... clone resumed>, parent_tid=[4723], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4723 [pid 4722] setpgid(0, 0 [pid 4719] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4709] <... mount resumed>) = 0 [pid 4708] <... futex resumed>) = 1 [pid 4707] <... futex resumed>) = 0 [pid 4722] <... setpgid resumed>) = 0 [pid 4719] <... futex resumed>) = 0 [pid 4709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4708] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4707] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4709] <... futex resumed>) = 1 [pid 4703] <... futex resumed>) = 0 [pid 4707] <... futex resumed>) = 0 [pid 4703] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4707] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4703] <... futex resumed>) = 0 [pid 4703] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4719] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4709] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4708] <... openat resumed>) = 5 [pid 4722] <... openat resumed>) = 3 [pid 4709] <... open resumed>) = 6 [pid 4708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4722] write(3, "1000", 4 [pid 4709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4707] <... futex resumed>) = 0 [pid 4708] <... futex resumed>) = 1 [pid 4722] <... write resumed>) = 4 [pid 4709] <... futex resumed>) = 1 [pid 4708] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4707] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4703] <... futex resumed>) = 0 [pid 4722] close(3 [pid 4709] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4707] <... futex resumed>) = 0 [pid 4703] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4722] <... close resumed>) = 0 [pid 4707] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4703] <... futex resumed>) = 0 [pid 4722] symlink("/dev/binderfs", "./binderfs" [pid 4703] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4722] <... symlink resumed>) = 0 [pid 4722] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4722] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4722] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4725], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4725 [pid 4722] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4722] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4720 attached [pid 4720] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4720] chdir("./134") = 0 [pid 4720] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4720] setpgid(0, 0) = 0 [pid 4720] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4720] write(3, "1000", 4) = 4 [pid 4720] close(3) = 0 [pid 4720] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4720] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4708] <... write resumed>) = 196608 [pid 4720] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4720] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4720] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4726], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4726 [pid 4720] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4720] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4723 attached [pid 4723] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4723] memfd_create("syzkaller", 0) = 3 [pid 4708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4707] <... futex resumed>) = 0 [pid 4707] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4708] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4707] <... futex resumed>) = 0 [pid 4707] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4708] <... mount resumed>) = 0 [pid 4708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4707] <... futex resumed>) = 0 [pid 4708] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4707] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4708] <... open resumed>) = 6 [pid 4707] <... futex resumed>) = 0 [pid 4708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4707] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4708] <... futex resumed>) = 0 [pid 4708] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4707] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4708] <... futex resumed>) = 0 [pid 4707] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4708] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 ./strace-static-x86_64: Process 4726 attached ./strace-static-x86_64: Process 4725 attached [pid 4709] <... write resumed>) = 1048576 [pid 4726] set_robust_list(0x7f64ff0649e0, 24 [pid 4725] set_robust_list(0x7f64ff0649e0, 24 [pid 4709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4726] <... set_robust_list resumed>) = 0 [pid 4725] <... set_robust_list resumed>) = 0 [pid 4709] <... futex resumed>) = 1 [pid 4703] <... futex resumed>) = 0 [ 93.755510][ T4714] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 93.764464][ T4714] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/137/bus supports timestamps until 2038 (0x7fffffff) [ 93.785666][ T4708] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [pid 4703] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4726] memfd_create("syzkaller", 0 [pid 4725] memfd_create("syzkaller", 0 [pid 4709] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4703] <... futex resumed>) = 0 [pid 4703] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4726] <... memfd_create resumed>) = 3 [pid 4725] <... memfd_create resumed>) = 3 [pid 4726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4726] <... mmap resumed>) = 0x7f64f6c44000 [pid 4725] <... mmap resumed>) = 0x7f64f6c44000 [pid 4723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4726] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4708] <... write resumed>) = 1048576 [pid 4708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4707] <... futex resumed>) = 0 [pid 4707] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4707] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4708] <... futex resumed>) = 1 [pid 4708] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4723] <... write resumed>) = 1048576 [pid 4723] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4723] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 4723] ioctl(4, LOOP_SET_FD, 3 [pid 4714] <... mount resumed>) = 0 [pid 4714] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4714] chdir("./bus") = 0 [pid 4714] ioctl(4, LOOP_CLR_FD [pid 4726] <... write resumed>) = 1048576 [pid 4726] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4726] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4725] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4725] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4723] <... ioctl resumed>) = 0 [pid 4714] <... ioctl resumed>) = 0 [pid 4714] close(4 [pid 4723] close(3 [pid 4714] <... close resumed>) = 0 [pid 4723] <... close resumed>) = 0 [pid 4714] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4723] mkdir("./bus", 0777 [pid 4714] <... futex resumed>) = 1 [pid 4723] <... mkdir resumed>) = 0 [pid 4714] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4723] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4726] <... openat resumed>) = 4 [pid 4726] ioctl(4, LOOP_SET_FD, 3 [pid 4711] <... futex resumed>) = 0 [pid 4703] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4711] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4703] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 4708] <... openat resumed>) = 7 [pid 4714] <... futex resumed>) = 0 [pid 4711] <... futex resumed>) = 1 [pid 4709] <... openat resumed>) = 7 [pid 4703] <... futex resumed>) = 0 [pid 4714] chdir("./file0" [pid 4711] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4709] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4714] <... chdir resumed>) = 0 [pid 4703] <... mmap resumed>) = 0x7f64f6d23000 [pid 4714] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4709] <... futex resumed>) = 0 [pid 4707] <... futex resumed>) = 0 [pid 4714] <... futex resumed>) = 1 [pid 4703] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE [pid 4711] <... futex resumed>) = 0 [pid 4708] <... futex resumed>) = 1 [pid 4714] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4711] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4709] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4708] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4707] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4703] <... mprotect resumed>) = 0 [pid 4714] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4711] <... futex resumed>) = 0 [pid 4707] <... futex resumed>) = 0 [pid 4714] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4711] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4707] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4703] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4708] <... openat resumed>) = 8 [pid 4726] <... ioctl resumed>) = 0 [pid 4725] <... openat resumed>) = 4 [pid 4714] <... open resumed>) = 4 [pid 4708] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4726] close(3 [pid 4714] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4726] <... close resumed>) = 0 [pid 4725] ioctl(4, LOOP_SET_FD, 3 [pid 4714] <... futex resumed>) = 1 [pid 4711] <... futex resumed>) = 0 [pid 4708] <... futex resumed>) = 1 [pid 4707] <... futex resumed>) = 0 [pid 4703] <... clone resumed>, parent_tid=[4729], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4729 [pid 4726] mkdir("./bus", 0777 [pid 4714] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4711] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4707] exit_group(0 [pid 4726] <... mkdir resumed>) = 0 [pid 4714] <... openat resumed>) = 5 [pid 4711] <... futex resumed>) = 0 [pid 4707] <... exit_group resumed>) = ? [pid 4703] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4726] mount("/dev/loop2", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4714] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4711] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4714] <... futex resumed>) = 0 [pid 4711] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4714] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4711] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4714] <... write resumed>) = 196608 [pid 4711] <... futex resumed>) = 0 [pid 4703] <... futex resumed>) = 0 [pid 4711] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4703] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4714] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4711] <... futex resumed>) = 0 [pid 4714] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4711] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4714] <... mount resumed>) = 0 [pid 4711] <... futex resumed>) = 0 [pid 4714] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4711] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4714] <... futex resumed>) = 0 [pid 4711] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4714] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4711] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4711] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4729 attached [pid 4729] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4729] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4725] <... ioctl resumed>) = 0 [pid 4729] <... openat resumed>) = 8 [pid 4729] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 93.787013][ T4709] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 93.813952][ T4708] EXT4-fs error (device loop5) in ext4_free_blocks:5569: Corrupt filesystem [ 93.814078][ T4709] EXT4-fs error (device loop3) in ext4_free_blocks:5569: Corrupt filesystem [ 93.846982][ T4723] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 4729] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4725] close(3 [pid 4714] <... open resumed>) = 6 [pid 4708] +++ exited with 0 +++ [pid 4707] +++ exited with 0 +++ [pid 4703] <... futex resumed>) = 0 [pid 4714] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4725] <... close resumed>) = 0 [pid 4714] <... futex resumed>) = 1 [pid 4711] <... futex resumed>) = 0 [pid 4703] exit_group(0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4707, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 4729] <... futex resumed>) = ? [pid 4725] mkdir("./bus", 0777 [pid 4714] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4711] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4703] <... exit_group resumed>) = ? [pid 4729] +++ exited with 0 +++ [pid 4725] <... mkdir resumed>) = 0 [pid 4711] <... futex resumed>) = 0 [pid 4725] mount("/dev/loop0", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4711] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 377] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./135/binderfs") = 0 [pid 377] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4723] <... mount resumed>) = 0 [pid 4709] <... futex resumed>) = ? [pid 4709] +++ exited with 0 +++ [pid 4723] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4703] +++ exited with 0 +++ [pid 4723] <... openat resumed>) = 3 [pid 4723] chdir("./bus" [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4703, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 375] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4723] <... chdir resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4723] ioctl(4, LOOP_CLR_FD [pid 375] getdents64(3, [pid 4723] <... ioctl resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 4723] close(4 [pid 375] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4723] <... close resumed>) = 0 [pid 375] lstat("./135/binderfs", [pid 4723] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./135/binderfs" [pid 4723] <... futex resumed>) = 1 [pid 4719] <... futex resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 4723] chdir("./file0" [pid 4719] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4723] <... chdir resumed>) = 0 [pid 4719] <... futex resumed>) = 0 [pid 4714] <... write resumed>) = 1048576 [ 93.855952][ T4723] ext4 filesystem being mounted at /root/syzkaller.k3ECep/135/bus supports timestamps until 2038 (0x7fffffff) [ 93.886672][ T4726] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 4726] <... mount resumed>) = 0 [pid 4723] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4719] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4714] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4723] <... futex resumed>) = 0 [pid 4719] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4714] <... futex resumed>) = 1 [pid 4723] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4719] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4714] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4723] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4719] <... futex resumed>) = 0 [pid 4723] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4719] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4723] <... open resumed>) = 4 [pid 4723] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4719] <... futex resumed>) = 0 [pid 4723] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4719] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4723] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4719] <... futex resumed>) = 0 [pid 4723] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4719] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4723] <... openat resumed>) = 5 [pid 4723] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4719] <... futex resumed>) = 0 [pid 4723] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4719] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4723] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4719] <... futex resumed>) = 0 [pid 4723] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4719] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4723] <... write resumed>) = 196608 [pid 4723] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4719] <... futex resumed>) = 0 [pid 4723] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4719] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4723] <... mount resumed>) = 0 [pid 4719] <... futex resumed>) = 0 [pid 4723] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4719] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4723] <... futex resumed>) = 0 [pid 4719] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4723] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4719] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4723] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4719] <... futex resumed>) = 0 [pid 4711] <... futex resumed>) = 0 [pid 4723] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4719] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4711] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4726] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4726] chdir("./bus") = 0 [pid 4726] ioctl(4, LOOP_CLR_FD [pid 4714] <... futex resumed>) = 0 [pid 4711] <... futex resumed>) = 1 [pid 4714] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4711] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4725] <... mount resumed>) = 0 [pid 4725] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4725] chdir("./bus") = 0 [pid 4725] ioctl(4, LOOP_CLR_FD [pid 4714] <... openat resumed>) = 7 [pid 4714] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4714] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4711] <... futex resumed>) = 0 [pid 4711] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4714] <... futex resumed>) = 0 [pid 4711] <... futex resumed>) = 1 [pid 4714] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4711] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4714] <... openat resumed>) = 8 [pid 4714] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4711] <... futex resumed>) = 0 [pid 4714] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4711] exit_group(0 [pid 4714] <... futex resumed>) = ? [pid 4711] <... exit_group resumed>) = ? [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./135/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./135/bus") = 0 [pid 377] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./135") = 0 [pid 377] mkdir("./136", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4719] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4719] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 4719] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 4719] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 4719] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64f6d23000 [pid 4719] mprotect(0x7f64f6d24000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4719] clone(child_stack=0x7f64f6d433f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4737], tls=0x7f64f6d43700, child_tidptr=0x7f64f6d439d0) = 4737 [pid 4719] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4719] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4737 attached [pid 4737] set_robust_list(0x7f64f6d439e0, 24) = 0 [pid 4737] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 4737] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4719] <... futex resumed>) = 0 [pid 4719] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4737] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4719] <... futex resumed>) = 0 [pid 4719] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4737] <... openat resumed>) = 7 [pid 4737] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4719] <... futex resumed>) = 0 [pid 4737] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4719] futex(0x7f64ff13d7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4719] futex(0x7f64ff13d7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4737] <... openat resumed>) = 8 [pid 4737] futex(0x7f64ff13d7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4719] <... futex resumed>) = 0 [ 93.895955][ T4726] ext4 filesystem being mounted at /root/syzkaller.zJEYGu/134/bus supports timestamps until 2038 (0x7fffffff) [ 93.899243][ T4725] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 93.917397][ T4725] ext4 filesystem being mounted at /root/syzkaller.7sfvEk/135/bus supports timestamps until 2038 (0x7fffffff) [ 93.919825][ T4714] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 93.943511][ T4714] EXT4-fs error (device loop4) in ext4_free_blocks:5569: Corrupt filesystem [pid 4737] futex(0x7f64ff13d7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4726] <... ioctl resumed>) = 0 [pid 4725] <... ioctl resumed>) = 0 [pid 4723] <... open resumed>) = 6 [pid 4714] +++ exited with 0 +++ [pid 4711] +++ exited with 0 +++ [pid 377] <... openat resumed>) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555713c5d0) = 4738 [pid 4726] close(4 [pid 4725] close(4 [pid 4723] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4726] <... close resumed>) = 0 [pid 4725] <... close resumed>) = 0 [pid 4723] <... futex resumed>) = 0 [pid 4719] exit_group(0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4711, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 375] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4719] <... exit_group resumed>) = ? [pid 376] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, [pid 4726] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4725] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4726] <... futex resumed>) = 1 [pid 4725] <... futex resumed>) = 1 [pid 4723] +++ exited with 0 +++ [pid 4722] <... futex resumed>) = 0 [pid 4720] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 4726] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4725] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4722] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4720] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4722] <... futex resumed>) = 0 [pid 4720] <... futex resumed>) = 0 [pid 376] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4726] chdir("./file0" [pid 4725] chdir("./file0" [pid 4722] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4720] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./135/bus", [pid 4726] <... chdir resumed>) = 0 [pid 4725] <... chdir resumed>) = 0 [pid 376] lstat("./137/binderfs", [pid 4726] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4725] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4726] <... futex resumed>) = 1 [pid 4725] <... futex resumed>) = 1 [pid 4722] <... futex resumed>) = 0 [pid 4720] <... futex resumed>) = 0 [pid 376] unlink("./137/binderfs" [pid 375] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4726] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4725] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4722] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4720] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... unlink resumed>) = 0 [pid 4726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4722] <... futex resumed>) = 0 [pid 4720] <... futex resumed>) = 0 [pid 376] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4726] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4725] <... open resumed>) = 4 [pid 4722] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4720] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4725] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4726] <... open resumed>) = 4 [pid 4726] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4725] <... futex resumed>) = 1 [pid 4722] <... futex resumed>) = 0 [pid 4726] <... futex resumed>) = 1 [pid 4725] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4722] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4720] <... futex resumed>) = 0 [pid 4726] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4722] <... futex resumed>) = 0 [pid 4720] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4725] <... openat resumed>) = 5 [pid 4726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4722] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4720] <... futex resumed>) = 0 [pid 4720] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4726] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4725] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 4 [pid 4726] <... openat resumed>) = 5 [pid 4725] <... futex resumed>) = 1 [pid 4722] <... futex resumed>) = 0 [pid 375] fstat(4, [pid 4726] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4725] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4722] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4726] <... futex resumed>) = 1 [pid 4725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4722] <... futex resumed>) = 0 [pid 4720] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 4726] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4725] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4722] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4720] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4725] <... write resumed>) = 196608 [pid 4720] <... futex resumed>) = 0 [pid 4737] <... futex resumed>) = ? [pid 4726] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4725] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4720] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(4, [pid 4726] <... write resumed>) = 196608 [pid 4725] <... futex resumed>) = 1 [pid 4722] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4726] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4725] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4722] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(4 [pid 4726] <... futex resumed>) = 1 [pid 4720] <... futex resumed>) = 0 ./strace-static-x86_64: Process 4738 attached [pid 4726] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4722] <... futex resumed>) = 0 [pid 4720] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 4738] set_robust_list(0x55555713c5e0, 24 [pid 4726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4725] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4722] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4720] <... futex resumed>) = 0 [pid 375] rmdir("./135/bus" [pid 4726] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4725] <... mount resumed>) = 0 [pid 4720] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... rmdir resumed>) = 0 [pid 4726] <... mount resumed>) = 0 [pid 4725] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4726] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(3, [pid 4726] <... futex resumed>) = 1 [pid 4725] <... futex resumed>) = 1 [pid 4722] <... futex resumed>) = 0 [pid 4720] <... futex resumed>) = 0 [pid 4726] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4725] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4722] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4720] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4722] <... futex resumed>) = 0 [pid 4720] <... futex resumed>) = 0 [pid 375] close(3 [pid 4726] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4725] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4722] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4720] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 375] rmdir("./135") = 0 [pid 375] mkdir("./136", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4738] <... set_robust_list resumed>) = 0 [pid 4738] chdir("./136") = 0 [pid 4738] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4738] setpgid(0, 0) = 0 [pid 4738] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4738] write(3, "1000", 4) = 4 [pid 4738] close(3) = 0 [pid 4738] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4738] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4738] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4738] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4738] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4739 attached [pid 4739] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4739] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4738] <... clone resumed>, parent_tid=[4739], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4739 [pid 4738] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4739] <... futex resumed>) = 0 [pid 4738] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4739] memfd_create("syzkaller", 0) = 3 [pid 4739] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4739] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4739] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4739] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 376] <... umount2 resumed>) = 0 [pid 4737] +++ exited with 0 +++ [pid 4725] <... open resumed>) = 6 [pid 4719] +++ exited with 0 +++ [pid 4726] <... open resumed>) = 6 [pid 4725] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... openat resumed>) = 3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 4726] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4725] <... futex resumed>) = 1 [pid 4722] <... futex resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4726] <... futex resumed>) = 1 [pid 4725] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4722] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4720] <... futex resumed>) = 0 [pid 375] close(3 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4719, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4726] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4722] <... futex resumed>) = 0 [pid 4720] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 4722] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4720] <... futex resumed>) = 0 [pid 4739] <... openat resumed>) = 4 [pid 4726] <... write resumed>) = 1048576 [pid 4725] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4720] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./137/bus", [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4739] ioctl(4, LOOP_SET_FD, 3 [pid 4726] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... openat resumed>) = 4 [pid 373] <... openat resumed>) = 3 [pid 376] fstat(4, [pid 373] fstat(3, [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, [pid 373] getdents64(3, [pid 376] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 376] getdents64(4, [pid 373] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] close(4 [pid 373] lstat("./135/binderfs", [pid 376] <... close resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] rmdir("./137/bus" [pid 373] unlink("./135/binderfs" [pid 376] <... rmdir resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 376] getdents64(3, [pid 373] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 4740 attached [pid 4739] <... ioctl resumed>) = 0 [pid 4726] <... futex resumed>) = 0 [pid 4725] <... write resumed>) = 1048576 [pid 4720] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 375] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4740 [pid 4739] close(3 [pid 4726] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4720] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 4740] set_robust_list(0x55555713c5e0, 24 [pid 4739] <... close resumed>) = 0 [pid 4720] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] rmdir("./137" [pid 4739] mkdir("./bus", 0777 [pid 376] <... rmdir resumed>) = 0 [pid 4739] <... mkdir resumed>) = 0 [pid 376] mkdir("./138", 0777 [pid 4739] mount("/dev/loop5", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 376] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4725] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4722] <... futex resumed>) = 0 [pid 4725] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4722] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4740] <... set_robust_list resumed>) = 0 [pid 4740] chdir("./136") = 0 [pid 4740] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4740] setpgid(0, 0) = 0 [pid 4740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4740] write(3, "1000", 4) = 4 [pid 4740] close(3) = 0 [pid 4740] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4740] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4740] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4740] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4742], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4742 [pid 4740] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4740] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4742 attached [pid 4742] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4742] memfd_create("syzkaller", 0) = 3 [pid 4742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4722] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4742] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4742] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4742] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 4742] ioctl(4, LOOP_SET_FD, 3 [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4726] <... openat resumed>) = 7 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4726] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] lstat("./135/bus", [pid 4726] <... futex resumed>) = 1 [pid 4720] <... futex resumed>) = 0 [pid 4726] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4720] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4720] <... futex resumed>) = 0 [pid 373] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4726] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4720] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4726] <... openat resumed>) = 8 [pid 373] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4726] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4742] <... ioctl resumed>) = 0 [pid 4726] <... futex resumed>) = 1 [pid 4720] <... futex resumed>) = 0 [pid 373] <... openat resumed>) = 4 [pid 4742] close(3) = 0 [ 94.081254][ T4726] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 94.082910][ T4725] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:437: comm syz-executor399: Invalid block bitmap block 0 in block_group 0 [ 94.109592][ T4726] EXT4-fs error (device loop2) in ext4_free_blocks:5569: Corrupt filesystem [pid 4742] mkdir("./bus", 0777) = 0 [pid 4726] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4720] exit_group(0 [pid 376] <... openat resumed>) = 3 [pid 373] fstat(4, [pid 4742] mount("/dev/loop3", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4726] <... futex resumed>) = ? [pid 4725] <... openat resumed>) = 7 [pid 4720] <... exit_group resumed>) = ? [pid 376] ioctl(3, LOOP_CLR_FD [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4726] +++ exited with 0 +++ [pid 4720] +++ exited with 0 +++ [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] getdents64(4, [pid 376] close(3 [pid 373] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 376] <... close resumed>) = 0 [pid 373] getdents64(4, [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4720, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 376] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4744 [pid 373] close(4 [pid 374] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 4725] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] rmdir("./135/bus"./strace-static-x86_64: Process 4744 attached [pid 4725] <... futex resumed>) = 1 [pid 4722] <... futex resumed>) = 0 [pid 374] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... rmdir resumed>) = 0 [pid 4744] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4744] chdir("./138") = 0 [pid 4744] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4744] setpgid(0, 0) = 0 [pid 4744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4744] write(3, "1000", 4) = 4 [pid 4744] close(3) = 0 [pid 4744] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4744] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4744] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4744] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4749], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4749 [pid 4744] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4744] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4749 attached [pid 4749] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4749] memfd_create("syzkaller", 0) = 3 [pid 4749] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4722] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... openat resumed>) = 3 [pid 373] getdents64(3, [pid 4749] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 373] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4722] <... futex resumed>) = 0 [pid 374] fstat(3, [pid 373] close(3 [pid 4725] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4722] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... close resumed>) = 0 [pid 4749] <... write resumed>) = 1048576 [pid 4749] munmap(0x7f64f6c44000, 1048576) = 0 [pid 4749] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4749] ioctl(4, LOOP_SET_FD, 3 [pid 4725] <... openat resumed>) = 8 [pid 374] getdents64(3, [pid 373] rmdir("./135" [pid 4725] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x55555713d620 /* 4 entries */, 32768) = 104 [pid 373] <... rmdir resumed>) = 0 [pid 4725] <... futex resumed>) = 1 [pid 4722] <... futex resumed>) = 0 [pid 374] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] mkdir("./136", 0777 [pid 4725] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4722] exit_group(0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... mkdir resumed>) = 0 [pid 4725] <... futex resumed>) = ? [pid 4722] <... exit_group resumed>) = ? [pid 374] lstat("./134/binderfs", [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./134/binderfs") = 0 [pid 374] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4739] <... mount resumed>) = 0 [pid 4739] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4739] chdir("./bus") = 0 [pid 4739] ioctl(4, LOOP_CLR_FD [pid 4725] +++ exited with 0 +++ [pid 4722] +++ exited with 0 +++ [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4722, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4751 [pid 372] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555713d620 /* 4 entries */, 32768) = 104 [pid 372] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./135/binderfs") = 0 [ 94.123339][ T4725] EXT4-fs error (device loop0) in ext4_free_blocks:5569: Corrupt filesystem [ 94.137576][ T4739] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 94.152434][ T4739] ext4 filesystem being mounted at /root/syzkaller.43WzWH/136/bus supports timestamps until 2038 (0x7fffffff) [ 94.156946][ T4742] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 372] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4749] <... ioctl resumed>) = 0 [pid 4749] close(3) = 0 [pid 4749] mkdir("./bus", 0777./strace-static-x86_64: Process 4751 attached ) = 0 [pid 4742] <... mount resumed>) = 0 [pid 4739] <... ioctl resumed>) = 0 [pid 4751] set_robust_list(0x55555713c5e0, 24) = 0 [pid 4751] chdir("./136") = 0 [pid 4751] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4751] setpgid(0, 0) = 0 [pid 4751] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4751] write(3, "1000", 4) = 4 [pid 4751] close(3) = 0 [pid 4751] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4751] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4751] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f64ff044000 [pid 4751] mprotect(0x7f64ff045000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4751] clone(child_stack=0x7f64ff0643f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4752], tls=0x7f64ff064700, child_tidptr=0x7f64ff0649d0) = 4752 [pid 4751] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4751] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4749] mount("/dev/loop4", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4739] close(4) = 0 [pid 4739] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4738] <... futex resumed>) = 0 [pid 4739] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4738] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4738] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4742] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4742] chdir("./bus") = 0 [pid 4742] ioctl(4, LOOP_CLR_FD) = 0 [pid 4742] close(4) = 0 [pid 4742] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4740] <... futex resumed>) = 0 [pid 4742] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4740] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4740] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4742] <... futex resumed>) = 0 [pid 4742] chdir("./file0") = 0 [pid 4739] <... futex resumed>) = 0 ./strace-static-x86_64: Process 4752 attached [pid 4742] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 94.173136][ T4742] ext4 filesystem being mounted at /root/syzkaller.Zsr6iz/136/bus supports timestamps until 2038 (0x7fffffff) [pid 4739] chdir("./file0" [pid 4742] <... futex resumed>) = 1 [pid 4742] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4739] <... chdir resumed>) = 0 [pid 4739] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4739] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4752] set_robust_list(0x7f64ff0649e0, 24) = 0 [pid 4752] memfd_create("syzkaller", 0) = 3 [pid 4752] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f64f6c44000 [pid 4752] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4740] <... futex resumed>) = 0 [pid 4738] <... futex resumed>) = 0 [pid 4740] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4738] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4740] <... futex resumed>) = 1 [pid 4742] <... futex resumed>) = 0 [pid 4739] <... futex resumed>) = 0 [pid 4738] <... futex resumed>) = 1 [pid 4739] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4742] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4740] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4738] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4752] <... write resumed>) = 1048576 [pid 4752] munmap(0x7f64f6c44000, 1048576 [pid 4742] <... open resumed>) = 4 [pid 4752] <... munmap resumed>) = 0 [pid 4752] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4742] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4739] <... open resumed>) = 4 [pid 4739] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4742] <... futex resumed>) = 1 [pid 4740] <... futex resumed>) = 0 [pid 4740] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4739] <... futex resumed>) = 1 [pid 4738] <... futex resumed>) = 0 [pid 4740] <... futex resumed>) = 0 [pid 4742] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4740] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4738] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4739] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4738] <... futex resumed>) = 0 [pid 4742] <... openat resumed>) = 5 [pid 4738] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4739] <... openat resumed>) = 5 [pid 4742] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4739] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4742] <... futex resumed>) = 1 [pid 4740] <... futex resumed>) = 0 [pid 4739] <... futex resumed>) = 1 [pid 4739] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4742] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4740] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4742] <... futex resumed>) = 0 [pid 4740] <... futex resumed>) = 1 [pid 4742] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4740] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4742] <... write resumed>) = 196608 [pid 4742] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4740] <... futex resumed>) = 0 [pid 4740] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4740] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4742] <... futex resumed>) = 1 [pid 4742] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4742] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4740] <... futex resumed>) = 0 [pid 4740] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4740] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4742] <... futex resumed>) = 1 [pid 4742] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4738] <... futex resumed>) = 0 [pid 4738] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4739] <... futex resumed>) = 0 [pid 4738] <... futex resumed>) = 1 [pid 4739] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4738] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4739] <... write resumed>) = 196608 [pid 4749] <... mount resumed>) = 0 [pid 4739] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4738] <... futex resumed>) = 0 [pid 4739] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4738] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4738] <... futex resumed>) = 0 [pid 4739] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4738] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4749] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4739] <... mount resumed>) = 0 [pid 4739] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4738] <... futex resumed>) = 0 [pid 4739] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4738] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4738] <... futex resumed>) = 0 [pid 4749] chdir("./bus" [pid 4739] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4738] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4749] <... chdir resumed>) = 0 [pid 4749] ioctl(4, LOOP_CLR_FD [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./134/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555557145660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555557145660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./134/bus") = 0 [pid 374] getdents64(3, 0x55555713d620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./134") = 0 [pid 374] mkdir("./135", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4752] <... openat resumed>) = 4 [pid 4749] <... ioctl resumed>) = 0 [pid 4742] <... open resumed>) = 6 [pid 4739] <... open resumed>) = 6 [pid 374] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 4752] ioctl(4, LOOP_SET_FD, 3 [pid 4749] close(4 [pid 4742] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4739] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4752] <... ioctl resumed>) = 0 [pid 4749] <... close resumed>) = 0 [pid 4742] <... futex resumed>) = 1 [pid 4740] <... futex resumed>) = 0 [pid 4742] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4740] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4752] close(3 [pid 4742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4740] <... futex resumed>) = 0 [pid 4739] <... futex resumed>) = 1 [pid 4738] <... futex resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4752] <... close resumed>) = 0 [pid 4749] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4742] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4740] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4739] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4738] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(3 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4752] mkdir("./bus", 0777 [pid 4749] <... futex resumed>) = 1 [pid 4744] <... futex resumed>) = 0 [pid 4739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4738] <... futex resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 372] lstat("./135/bus", [pid 4752] <... mkdir resumed>) = 0 [pid 4749] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4744] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 94.203429][ T4749] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 94.215765][ T4749] ext4 filesystem being mounted at /root/syzkaller.SjS9BB/138/bus supports timestamps until 2038 (0x7fffffff) [pid 4739] write(6, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4738] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4752] mount("/dev/loop1", "./bus", "ext4", MS_NODIRATIME|MS_REC|MS_I_VERSION, ",errors=continue" [pid 4749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4744] <... futex resumed>) = 0 ./strace-static-x86_64: Process 4756 attached [pid 4749] chdir("./file0" [pid 4744] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4756] set_robust_list(0x55555713c5e0, 24 [pid 4749] <... chdir resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x55555713c5d0) = 4756 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4756] <... set_robust_list resumed>) = 0 [pid 4749] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4756] chdir("./135" [pid 4749] <... futex resumed>) = 1 [pid 4744] <... futex resumed>) = 0 [pid 372] <... openat resumed>) = 4 [pid 4756] <... chdir resumed>) = 0 [pid 4749] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4744] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] fstat(4, [pid 4756] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4744] <... futex resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4756] <... prctl resumed>) = 0 [pid 4749] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4744] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] getdents64(4, [pid 4756] setpgid(0, 0 [pid 372] <... getdents64 resumed>0x555557145660 /* 2 entries */, 32768) = 48 [pid 4756] <... setpgid resumed>) = 0 [pid 372] getdents64(4, [pid 4749] <... open resumed>) = 4 [pid 4756] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4749] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x555557145660 /* 0 entries */, 32768) = 0 [pid 4756] <... openat resumed>) = 3 [pid 4749] <... futex resumed>) = 1 [pid 4744] <... futex resumed>) = 0 [pid 372] close(4 [pid 4756] write(3, "1000", 4 [pid 4749] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4744] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 4749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4744] <... futex resumed>) = 0 [pid 4742] <... write resumed>) = 1048576 [pid 4749] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4744] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4742] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] rmdir("./135/bus" [pid 4756] <... write resumed>) = 4 [pid 4749] <... openat resumed>) = 5 [pid 4742] <... futex resumed>) = 1 [pid 4740] <... futex resumed>) = 0 [pid 4739] <... write resumed>) = 1048576 [pid 372] <... rmdir resumed>) = 0 [pid 4756] close(3 [pid 4749] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4740] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4739] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 4756] <... close resumed>) = 0 [pid 4749] <... futex resumed>) = 1 [pid 4744] <... futex resumed>) = 0 [pid 4742] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4740] <... futex resumed>) = 0 [pid 4739] <... futex resumed>) = 1 [pid 4738] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555713d620 /* 0 entries */, 32768) = 0 [pid 4756] symlink("/dev/binderfs", "./binderfs" [pid 4749] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4744] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4740] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4739] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4738] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 4756] <... symlink resumed>) = 0 [pid 4749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4744] <... futex resumed>) = 0 [pid 4738] <... futex resumed>) = 0 [pid 4749] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4744] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4749] <... write resumed>) = 196608 [pid 4749] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4744] <... futex resumed>) = 0 [pid 4749] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4744] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4744] <... futex resumed>) = 0 [pid 4749] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4744] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4749] <... mount resumed>) = 0 [pid 4749] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4744] <... futex resumed>) = 0 [pid 4749] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4744] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4744] <... futex resumed>) = 0 [pid 4749] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4744] futex(0x7f64ff13d7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4749] <... open resumed>) = 6 [pid 4749] futex(0x7f64ff13d7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4744] <... futex resumed>) = 0 [pid 4749] futex(0x7f64ff13d7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4744] futex(0x7f64ff13d7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4744] <... futex resumed>) = 0